last executing test programs: 19.771383891s ago: executing program 2 (id=791): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], 0x0, 0x2, r5, 0xcccccccc}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 18.237031421s ago: executing program 2 (id=792): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) 16.292510896s ago: executing program 1 (id=796): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) close_range(r1, 0xffffffffffffffff, 0x0) 14.630502222s ago: executing program 1 (id=798): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x115) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x100000000003ff, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) 12.691929268s ago: executing program 1 (id=799): socket$netlink(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='ntfs3\x00', 0x200000, 0x0) r1 = dup(0xffffffffffffffff) read$eventfd(r1, 0x0, 0x0) socket(0x840000000002, 0x3, 0xff) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 12.544571331s ago: executing program 0 (id=800): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f00000001c0)) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) close(r2) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r4 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000900)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8d", 0xc0}, {&(0x7f0000000580)="1eba162ae4d66b52c84118b56f98df27687325686ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca760207dd2aa3f7ba5263248f4445763b32cd953b26704db7f77b26641f49fbf4aafb757f280db63b6a9d39ca6fa440ae3074c7c8355b41b805217a761abf7389cba28e10ac73d3339573f7804b75d0e0a2ecee4decf162f6aeefd5ab1d6ed1191263e6d8fc", 0xa3}, {&(0x7f0000000100)="2ed16bcb5f550dd798641dcaf6685880d986c568d565d067c837d26964f5eec0561499866d836d7c944762dfa163589f08fc8a8e", 0x34}, {&(0x7f0000000640)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d104c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae4067049550b", 0x4c}, {&(0x7f0000000740)="2d80c5edeb1fe3595e249e145cfccf4b926a380258201de40be61ede57f76bf59ba1759c85f0c8841e93849133261fe1b89e1c051f4748b982f2c892df7bdb273f8104", 0x43}, {&(0x7f0000000480)="0ac5cb5b410458f4eef9408ad1ccf5f5bdd5b95f3381d31f8eb49e5bcbc635e6", 0x20}], 0x6) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xef, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) socket$nl_route(0x10, 0x3, 0x0) 9.392280685s ago: executing program 2 (id=803): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x61) 9.124439587s ago: executing program 3 (id=804): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], 0x0, 0x2, r5, 0xcccccccc}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 9.074328727s ago: executing program 0 (id=805): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) 7.515351783s ago: executing program 3 (id=806): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) close_range(r1, 0xffffffffffffffff, 0x0) 7.353780073s ago: executing program 0 (id=807): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 6.633611991s ago: executing program 2 (id=808): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4c21, @empty}, 0x10) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x200, 0x9, 0x8602, 0x7, 0x0, 0x5, 0x2}, &(0x7f0000000280)=0x20) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x180) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000100)) syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES16=r5, @ANYRES8, @ANYBLOB="05000000010000000300"/25, @ANYRESHEX=0x0, @ANYRES8=r1, @ANYRESDEC], 0x50) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="05"], 0x10) 6.398667429s ago: executing program 1 (id=809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000100000011000300686173683a6e65742c6e6574000000000c0007800800124000000002050005000a00000005000100060000008a7df18ee897e5f9647defadfc0774e16f8fd1fe46bbef34ac65d50913ae730e6fadb47420b4da11db5478cbcc47ae43280a4a66c522855b6778449d187cb2d55e2404e0f56997"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601020000000000000000020003020500010007000000dab95003d4906c87679c196f47f18629f188d21afd9f82ad58bc338ea0da5c98eff4a6e04dbfae7041f1aeb3ff2142597f93180c1796b397b6d4aa6f9a49a18924a5b53066bb7d06da66f59d5bb4f8b94ca91b8d8479901bed"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 6.344775769s ago: executing program 0 (id=810): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) dup(r1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) 4.174130523s ago: executing program 3 (id=811): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x16) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 4.061583322s ago: executing program 1 (id=812): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_io_uring_setup(0x496, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c000000100003042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c616e30000000000000000000000008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r8) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r10 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x10000, 0x800000, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffe, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x241000}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000100)) 4.059748002s ago: executing program 2 (id=813): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f00000001c0)) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) close(r2) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r4 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000900)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8d", 0xc0}, {&(0x7f0000000580)="1eba162ae4d66b52c84118b56f98df27687325686ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca760207dd2aa3f7ba5263248f4445763b32cd953b26704db7f77b26641f49fbf4aafb757f280db63b6a9d39ca6fa440ae3074c7c8355b41b805217a761abf7389cba28e10ac73d3339573f7804b75d0e0a2ecee4decf162f6aeefd5ab1d6ed1191263e6d8fc", 0xa3}, {&(0x7f0000000100)="2ed16bcb5f550dd798641dcaf6685880d986c568d565d067c837d26964f5eec0561499866d836d7c944762dfa163589f08fc8a8e", 0x34}, {&(0x7f0000000640)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d104c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae4067049550b", 0x4c}, {&(0x7f0000000740)="2d80c5edeb1fe3595e249e145cfccf4b926a380258201de40be61ede57f76bf59ba1759c85f0c8841e93849133261fe1b89e1c051f4748b982f2c892df7bdb273f8104", 0x43}, {&(0x7f0000000480)="0ac5cb5b410458f4eef9408ad1ccf5f5bdd5b95f3381d31f8eb49e5bcbc635e6", 0x20}], 0x6) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xef, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) socket$nl_route(0x10, 0x3, 0x0) 2.717949517s ago: executing program 0 (id=814): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], 0x0, 0x2, r4, 0xcccccccc}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.692851972s ago: executing program 3 (id=815): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/200, 0xc8}], 0x1, 0x91, 0x2) 1.362770469s ago: executing program 0 (id=816): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x61) 314.576508ms ago: executing program 3 (id=817): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) 257.211067ms ago: executing program 1 (id=818): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 108.00865ms ago: executing program 3 (id=819): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x16) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 0s ago: executing program 2 (id=820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000100000011000300686173683a6e65742c6e6574000000000c0007800800124000000002050005000a00000005000100060000008a7df18ee897e5f9647defadfc0774e16f8fd1fe46bbef34ac65d50913ae730e6fadb47420b4da11db5478cbcc47ae43280a4a66c522855b6778449d187cb2d55e2404e0f56997"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000040601020000000000000000020003020500010007000000dab95003d4906c87679c196f47f18629f188d21afd9f82ad58bc338ea0da5c98eff4a6e04dbfae7041f1aeb3ff2142597f93180c1796b397b6d4aa6f9a49a18924a5b53066bb7d06da66f59d5bb4f8b94ca91b8d8479901bed"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 69.090552][ T5757] cgroup: Unknown subsys name 'net' [ 69.258564][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.976327][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.808100][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.814772][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.460168][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.472406][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.486466][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.495652][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.504034][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.511970][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.522215][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.535712][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.545724][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.599197][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.613119][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.613265][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.629432][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.629553][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.645259][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.661912][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.670261][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.678039][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.751909][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.760597][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.769394][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.778179][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.791279][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.799240][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.130717][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 73.229189][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 73.239690][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 73.346991][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 73.397765][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.405900][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.413455][ T5769] bridge_slave_0: entered allmulticast mode [ 73.420407][ T5769] bridge_slave_0: entered promiscuous mode [ 73.465663][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.475644][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.482904][ T5769] bridge_slave_1: entered allmulticast mode [ 73.489794][ T5769] bridge_slave_1: entered promiscuous mode [ 73.512715][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.519964][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.527506][ T5772] bridge_slave_0: entered allmulticast mode [ 73.535344][ T5772] bridge_slave_0: entered promiscuous mode [ 73.585983][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.593175][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.600316][ T5772] bridge_slave_1: entered allmulticast mode [ 73.607545][ T5772] bridge_slave_1: entered promiscuous mode [ 73.648488][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.680342][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.688334][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.695749][ T5776] bridge_slave_0: entered allmulticast mode [ 73.704308][ T5776] bridge_slave_0: entered promiscuous mode [ 73.712947][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.720345][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.728038][ T5776] bridge_slave_1: entered allmulticast mode [ 73.735208][ T5776] bridge_slave_1: entered promiscuous mode [ 73.744441][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.765253][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.773311][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.780464][ T5780] bridge_slave_0: entered allmulticast mode [ 73.787664][ T5780] bridge_slave_0: entered promiscuous mode [ 73.798195][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.826405][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.834041][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.841311][ T5780] bridge_slave_1: entered allmulticast mode [ 73.848119][ T5780] bridge_slave_1: entered promiscuous mode [ 73.857871][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.900066][ T5769] team0: Port device team_slave_0 added [ 73.919257][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.934654][ T5772] team0: Port device team_slave_0 added [ 73.943613][ T5769] team0: Port device team_slave_1 added [ 73.960285][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.987930][ T5772] team0: Port device team_slave_1 added [ 74.020255][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.033039][ T5776] team0: Port device team_slave_0 added [ 74.057359][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.074615][ T5776] team0: Port device team_slave_1 added [ 74.081708][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.088830][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.115022][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.130889][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.138397][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.165267][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.208477][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.215574][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.242346][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.271187][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.278176][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.305104][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.329383][ T5780] team0: Port device team_slave_0 added [ 74.359122][ T5769] hsr_slave_0: entered promiscuous mode [ 74.366471][ T5769] hsr_slave_1: entered promiscuous mode [ 74.375074][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.382208][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.408501][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.422218][ T5780] team0: Port device team_slave_1 added [ 74.452306][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.459300][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.485734][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.505502][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.512562][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.538829][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.582558][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.589607][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.618614][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.622060][ T5778] Bluetooth: hci0: command tx timeout [ 74.698473][ T5776] hsr_slave_0: entered promiscuous mode [ 74.705439][ T5776] hsr_slave_1: entered promiscuous mode [ 74.714871][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.722858][ T5776] Cannot create hsr debugfs directory [ 74.733166][ T5772] hsr_slave_0: entered promiscuous mode [ 74.742546][ T5772] hsr_slave_1: entered promiscuous mode [ 74.748635][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.756364][ T5772] Cannot create hsr debugfs directory [ 74.762304][ T5778] Bluetooth: hci2: command tx timeout [ 74.767949][ T5778] Bluetooth: hci1: command tx timeout [ 74.806352][ T5780] hsr_slave_0: entered promiscuous mode [ 74.813517][ T5780] hsr_slave_1: entered promiscuous mode [ 74.820039][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.827789][ T5780] Cannot create hsr debugfs directory [ 74.841210][ T5778] Bluetooth: hci3: command tx timeout [ 75.249991][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.264220][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.276525][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.287735][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.363333][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.374015][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.386272][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.396799][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.494986][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.508817][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.526466][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.541792][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.628110][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.640489][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.652737][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.669466][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.700537][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.760680][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.798669][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.806134][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.835677][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.842885][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.873437][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.936239][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.949669][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.956950][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.002641][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.009800][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.054055][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.100121][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.113752][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.158192][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.165437][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.190000][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.197204][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.270835][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.285132][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.327315][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.334557][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.346634][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.353967][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.509294][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.645407][ T5769] veth0_vlan: entered promiscuous mode [ 76.681978][ T5778] Bluetooth: hci0: command tx timeout [ 76.696941][ T5769] veth1_vlan: entered promiscuous mode [ 76.824893][ T5769] veth0_macvtap: entered promiscuous mode [ 76.842124][ T5778] Bluetooth: hci1: command tx timeout [ 76.847707][ T5778] Bluetooth: hci2: command tx timeout [ 76.858339][ T5769] veth1_macvtap: entered promiscuous mode [ 76.923126][ T5778] Bluetooth: hci3: command tx timeout [ 76.936457][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.957141][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.969631][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.995618][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.006129][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.016005][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.025316][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.038557][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.057604][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.225068][ T5776] veth0_vlan: entered promiscuous mode [ 77.234144][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.247907][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.284849][ T5772] veth0_vlan: entered promiscuous mode [ 77.308910][ T5780] veth0_vlan: entered promiscuous mode [ 77.324582][ T2878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.329134][ T5780] veth1_vlan: entered promiscuous mode [ 77.338536][ T2878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.355498][ T5776] veth1_vlan: entered promiscuous mode [ 77.390475][ T5772] veth1_vlan: entered promiscuous mode [ 77.463769][ T5780] veth0_macvtap: entered promiscuous mode [ 77.515984][ T5780] veth1_macvtap: entered promiscuous mode [ 77.559884][ T5772] veth0_macvtap: entered promiscuous mode [ 77.596750][ T5776] veth0_macvtap: entered promiscuous mode [ 77.606857][ T5772] veth1_macvtap: entered promiscuous mode [ 77.627315][ T5776] veth1_macvtap: entered promiscuous mode [ 77.638728][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.639372][ T5828] 9pnet_fd: Insufficient options for proto=fd [ 77.651700][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.674816][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.735355][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.760220][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.774989][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.786458][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.798247][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.815296][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.826398][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.836846][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.848709][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.859019][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.869835][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.880911][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.895006][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.910667][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.929325][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.940722][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.958505][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.968639][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.985075][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.998219][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.015598][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.028803][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.038845][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.052184][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.062159][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.077609][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.089957][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.110710][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.120122][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.136765][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.147322][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.170087][ T5780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.197005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.199536][ T5780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.222829][ T5780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.232324][ T5780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.479381][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.515414][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.653214][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.709195][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.775969][ T5778] Bluetooth: hci0: command tx timeout [ 78.921488][ T5771] Bluetooth: hci1: command tx timeout [ 78.926957][ T5778] Bluetooth: hci2: command tx timeout [ 79.002323][ T5778] Bluetooth: hci3: command tx timeout [ 79.024065][ T2878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.033372][ T2878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.210228][ T2878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.225731][ T2878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.348487][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.382574][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.880394][ T2878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.911276][ T2878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.952622][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.960594][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.037609][ T2878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.072141][ T2878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.449693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.774893][ T5863] input: syz1 as /devices/virtual/input/input6 [ 80.882139][ T5778] Bluetooth: hci0: command tx timeout [ 81.001148][ T5778] Bluetooth: hci2: command tx timeout [ 81.006969][ T5778] Bluetooth: hci1: command tx timeout [ 81.082314][ T5771] Bluetooth: hci3: command tx timeout [ 81.371276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 81.379536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 81.574940][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.771794][ T5872] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 81.981617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 81.991604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.000709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.009804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.831589][ T5882] ptrace attach of "./syz-executor exec"[5772] was attempted by "./syz-executor exec"[5882] [ 83.364315][ T5889] process 'syz.3.15' launched './file0' with NULL argv: empty string added [ 83.641678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.484617][ T5826] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.642470][ T5900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19'. [ 85.827120][ T5826] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 85.836901][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.248282][ T5826] usb 3-1: config 0 descriptor?? [ 86.424515][ T5826] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 86.667142][ T5899] orangefs_mount: mount request failed with -4 [ 87.318394][ T787] cfg80211: failed to load regulatory.db [ 87.419736][ T5826] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 88.380555][ T5826] STV06xx: probe of 3-1:0.0 failed with error -71 [ 88.632386][ T5826] usb 3-1: USB disconnect, device number 2 [ 94.111415][ T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.515768][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 94.768723][ T787] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 95.206360][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 95.218332][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 95.241470][ T787] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 95.251056][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.259082][ T787] usb 4-1: Product: syz [ 95.263519][ T787] usb 4-1: Manufacturer: syz [ 95.268148][ T787] usb 4-1: SerialNumber: syz [ 95.278620][ T787] usb 4-1: config 0 descriptor?? [ 95.921197][ T787] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 96.071196][ T787] usb 2-1: device descriptor read/64, error -71 [ 96.351046][ T787] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 96.531067][ T787] usb 2-1: device descriptor read/64, error -71 [ 96.680068][ T5759] usb 4-1: USB disconnect, device number 2 [ 96.691678][ T787] usb usb2-port1: attempt power cycle [ 98.501055][ T787] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 98.533303][ T787] usb 2-1: device descriptor read/8, error -71 [ 98.541137][ T5806] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.439939][ T5806] usb 3-1: Using ep0 maxpacket: 32 [ 100.469970][ T5806] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 100.491104][ T5806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.514129][ T5806] usb 3-1: config 0 descriptor?? [ 100.588397][ T5806] usb 3-1: can't set config #0, error -71 [ 100.607666][ T5806] usb 3-1: USB disconnect, device number 3 [ 102.701229][ T23] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 102.898437][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.908827][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.918280][ T23] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 102.987489][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.071693][ T23] usb 3-1: config 0 descriptor?? [ 103.258957][ T5987] nfs: Unknown parameter 'ÿÿÿÿ' [ 103.611109][ T787] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.850875][ T787] usb 4-1: device descriptor read/64, error -71 [ 104.791234][ T787] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.951416][ T787] usb 4-1: device descriptor read/64, error -71 [ 105.092705][ T787] usb usb4-port1: attempt power cycle [ 105.447777][ T5807] usb 3-1: USB disconnect, device number 4 [ 105.512058][ T787] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.569528][ T787] usb 4-1: device descriptor read/8, error -71 [ 106.621726][ T787] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.211064][ T787] usb 4-1: device descriptor read/8, error -71 [ 107.361309][ T787] usb usb4-port1: unable to enumerate USB device [ 113.040802][ T6052] binder: 6051:6052 ioctl c0306201 2000000002c0 returned -14 [ 120.965565][ T6085] orangefs_mount: mount request failed with -4 [ 122.081119][ T28] audit: type=1800 audit(1772701606.031:2): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.72" name="bus" dev="ramfs" ino=8285 res=0 errno=0 [ 123.548219][ T6115] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 124.653772][ T6113] netlink: 'syz.1.77': attribute type 10 has an invalid length. [ 124.669276][ T6113] team0: Port device dummy0 added [ 127.717442][ T28] audit: type=1800 audit(1772701611.671:3): pid=6133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.84" name="bus" dev="ramfs" ino=8342 res=0 errno=0 [ 129.858554][ T6160] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.271083][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.281048][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.071011][ T6177] orangefs_mount: mount request failed with -4 [ 135.981095][ T5807] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 136.654753][ T5807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.673514][ T5807] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 136.686439][ T5807] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 136.702641][ T5807] usb 3-1: config 0 interface 0 has no altsetting 0 [ 136.709550][ T5807] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 136.739294][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.769012][ T5807] usb 3-1: config 0 descriptor?? [ 136.863223][ T5807] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 137.087805][ T28] audit: type=1800 audit(1772701621.041:4): pid=6199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.105" name="bus" dev="ramfs" ino=8426 res=0 errno=0 [ 137.622862][ T6210] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 139.189993][ T5883] usb 3-1: USB disconnect, device number 5 [ 140.013055][ T6220] orangefs_mount: mount request failed with -4 [ 143.451179][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 143.652221][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.718661][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 143.781934][ T23] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 143.841489][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.875788][ T23] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 143.908901][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.001758][ T23] usb 2-1: config 0 descriptor?? [ 144.036058][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 146.951487][ T5883] usb 2-1: USB disconnect, device number 6 [ 149.243892][ T28] audit: type=1800 audit(1772701633.161:5): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.130" name="bus" dev="ramfs" ino=8593 res=0 errno=0 [ 152.171674][ T6313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 152.868318][ T6314] orangefs_mount: mount request failed with -4 [ 153.120262][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz.0.140'. [ 156.073009][ T28] audit: type=1800 audit(1772701640.031:6): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.143" name="bus" dev="ramfs" ino=8648 res=0 errno=0 [ 157.436654][ T6344] syz.3.147[6344]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 157.453684][ T6344] loop7: detected capacity change from 0 to 1 [ 158.792060][ T6344] loop7: detected capacity change from 1 to 0 [ 159.002542][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.148'. [ 159.624890][ T6354] orangefs_mount: mount request failed with -4 [ 160.098743][ T6365] nfs: Unknown parameter 'ÿÿÿÿ' [ 161.091209][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 161.327665][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.341467][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.360027][ T27] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 161.371432][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.401860][ T27] usb 1-1: config 0 descriptor?? [ 161.779486][ T28] audit: type=1800 audit(1772701645.731:7): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.155" name="bus" dev="ramfs" ino=8760 res=0 errno=0 [ 163.125737][ T27] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 163.212688][ T27] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 163.910448][ T6401] loop7: detected capacity change from 0 to 1 [ 164.665484][ T6401] loop7: detected capacity change from 1 to 0 [ 164.807743][ T5883] usb 1-1: USB disconnect, device number 2 [ 165.072764][ T6408] 9pnet_fd: Insufficient options for proto=fd [ 166.416267][ T6414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.163'. [ 167.214261][ T6414] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 167.464663][ T6414] syz.0.163 (6414) used greatest stack depth: 20776 bytes left [ 169.556005][ T6432] ERROR: device name not specified. [ 169.584630][ T6432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.168'. [ 170.102530][ T28] audit: type=1800 audit(1772701654.061:8): pid=6422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.165" name="bus" dev="ramfs" ino=8880 res=0 errno=0 [ 172.458329][ T6445] overlayfs: missing 'lowerdir' [ 177.191048][ T28] audit: type=1800 audit(1772701661.141:9): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.178" name="bus" dev="ramfs" ino=8923 res=0 errno=0 [ 177.332325][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.179'. [ 177.885543][ T6468] orangefs_mount: mount request failed with -4 [ 179.614474][ T6494] overlayfs: missing 'lowerdir' [ 180.586614][ T5826] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 180.777539][ T5826] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 180.801586][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.822660][ T5826] usb 1-1: config 0 descriptor?? [ 180.882385][ T5826] cp210x 1-1:0.0: cp210x converter detected [ 181.238765][ T5826] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 181.271649][ T5826] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 181.303426][ T5826] usb 1-1: cp210x converter now attached to ttyUSB0 [ 181.381563][ T5826] usb 1-1: USB disconnect, device number 3 [ 181.423952][ T5826] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 181.496761][ T5826] cp210x 1-1:0.0: device disconnected [ 182.667060][ T6515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.190'. [ 182.931084][ T6510] nfs: Unknown parameter 'ÿÿÿÿ' [ 183.763324][ T6514] orangefs_mount: mount request failed with -4 [ 183.829540][ T28] audit: type=1800 audit(1772701667.711:10): pid=6508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.188" name="bus" dev="ramfs" ino=8990 res=0 errno=0 [ 184.734627][ T6525] overlayfs: missing 'lowerdir' [ 188.313040][ T6543] nfs: Unknown parameter 'ÿÿÿÿ' [ 189.405357][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 189.669142][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.695038][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.761157][ T5883] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 189.771738][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.786012][ T5883] usb 1-1: config 0 descriptor?? [ 190.143327][ T6557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.202'. [ 190.267483][ T28] audit: type=1800 audit(1772701674.221:11): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.201" name="bus" dev="ramfs" ino=9046 res=0 errno=0 [ 190.743748][ T6556] orangefs_mount: mount request failed with -4 [ 190.855248][ T5883] hid-led 0003:27B8:01ED.0002: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 190.947138][ T5883] hid-led 0003:27B8:01ED.0002: ThingM blink(1) initialized [ 191.815224][ T6565] overlayfs: missing 'lowerdir' [ 192.912908][ T6571] rtc_cmos 00:00: Alarms can be up to one day in the future [ 192.975581][ T5806] usb 1-1: USB disconnect, device number 4 [ 194.561753][ T6579] binder_alloc: 6578: binder_alloc_buf, no vma [ 194.690763][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.697969][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.028069][ T6585] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 196.236410][ T6587] nfs: Unknown parameter 'ÿÿÿÿ' [ 196.762912][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 196.769092][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 196.775292][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 196.776567][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 197.754530][ T6596] overlayfs: missing 'lowerdir' [ 201.277456][ T5806] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 201.550335][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.572564][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.631026][ T5806] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 201.640182][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.722263][ T5806] usb 1-1: config 0 descriptor?? [ 202.563036][ T5806] hid-led 0003:27B8:01ED.0003: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 202.652883][ T5806] hid-led 0003:27B8:01ED.0003: ThingM blink(1) initialized [ 206.096820][ T5808] usb 1-1: USB disconnect, device number 5 [ 206.274515][ T6632] 9pnet_fd: Insufficient options for proto=fd [ 206.961253][ T5806] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 206.962083][ T6637] overlayfs: missing 'lowerdir' [ 207.151104][ T5806] usb 2-1: Using ep0 maxpacket: 16 [ 207.926553][ T5806] usb 2-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 208.107897][ T5806] usb 2-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 208.603267][ T5806] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 208.622140][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.641017][ T5806] usb 2-1: Product: syz [ 208.645467][ T5806] usb 2-1: Manufacturer: syz [ 208.662125][ T5806] usb 2-1: SerialNumber: syz [ 209.255305][ T8] usb 2-1: USB disconnect, device number 7 [ 209.602161][ T5775] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 210.577936][ T6655] block device autoloading is deprecated and will be removed. [ 210.841244][ T5759] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.761468][ T5759] usb 2-1: Using ep0 maxpacket: 16 [ 212.101009][ T5759] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.131078][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.174271][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 212.186229][ T6668] 9pnet_fd: Insufficient options for proto=fd [ 212.203300][ T5759] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 212.230977][ T5759] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.292251][ T5759] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 212.320451][ T5759] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 212.322497][ T6668] Process accounting resumed [ 212.345039][ T5759] usb 2-1: Manufacturer: syz [ 212.392698][ T5759] usb 2-1: config 0 descriptor?? [ 214.796552][ T5759] rc_core: IR keymap rc-hauppauge not found [ 214.811126][ T5759] Registered IR keymap rc-empty [ 214.823758][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.881105][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 214.953959][ T5759] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 215.012969][ T5759] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 215.079496][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 215.141167][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 215.171280][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 215.208554][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 215.257319][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 215.311194][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 215.351887][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 215.391474][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 215.431097][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 215.944645][ T6684] overlayfs: missing 'lowerdir' [ 216.879318][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 216.913788][ T5759] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 216.949419][ T5759] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 216.963884][ T5759] usb 2-1: USB disconnect, device number 8 [ 217.322394][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 217.571160][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 217.660239][ T8] usb 1-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 217.828872][ T8] usb 1-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 217.998207][ T8] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 218.031004][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.039154][ T8] usb 1-1: Product: syz [ 218.070528][ T8] usb 1-1: Manufacturer: syz [ 218.098640][ T8] usb 1-1: SerialNumber: syz [ 219.373536][ T5759] usb 1-1: USB disconnect, device number 6 [ 220.015367][ T6708] overlayfs: missing 'lowerdir' [ 222.273865][ T5775] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 223.526345][ T5807] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 223.801121][ T5807] usb 1-1: Using ep0 maxpacket: 8 [ 223.830766][ T5807] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.616035][ T5807] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.721194][ T5883] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 224.820766][ T5807] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 224.982101][ T5883] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 224.992412][ T5807] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 224.993309][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.012948][ T5883] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 225.018116][ T5807] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.026581][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 225.047480][ T5883] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 225.056770][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.062875][ T5807] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.068131][ T5883] usb 3-1: config 0 descriptor?? [ 225.109897][ T5883] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 225.214004][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.273917][ T5807] usb 1-1: can't set config #16, error -71 [ 225.315087][ T5807] usb 1-1: USB disconnect, device number 7 [ 225.864457][ T6743] overlayfs: missing 'lowerdir' [ 226.874376][ T5759] usb 3-1: USB disconnect, device number 6 [ 228.910113][ T5775] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 232.311286][ T6770] 9pnet_fd: Insufficient options for proto=fd [ 232.374854][ T6769] Process accounting resumed [ 233.084650][ T6776] overlayfs: missing 'lowerdir' [ 234.015794][ T5883] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 234.185762][ T787] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 234.380956][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 234.402641][ T787] usb 1-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 234.441068][ T787] usb 1-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 234.504820][ T787] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 234.531174][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.539329][ T787] usb 1-1: Product: syz [ 234.570943][ T787] usb 1-1: Manufacturer: syz [ 234.575622][ T787] usb 1-1: SerialNumber: syz [ 235.082023][ T5808] usb 1-1: USB disconnect, device number 8 [ 237.724941][ T5775] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 238.611044][ T787] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 238.803118][ T787] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 238.824715][ T787] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 238.829476][ T6802] 9pnet_fd: Insufficient options for proto=fd [ 238.846232][ T787] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.873440][ T787] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 238.921077][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 238.927872][ T787] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 238.951184][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.961216][ T6802] Process accounting resumed [ 239.103049][ T787] usb 3-1: config 0 descriptor?? [ 239.797640][ T787] usbhid 3-1:0.0: can't add hid device: -71 [ 239.803906][ T787] usbhid: probe of 3-1:0.0 failed with error -71 [ 241.090267][ T787] usb 3-1: USB disconnect, device number 7 [ 241.824659][ T6814] overlayfs: missing 'lowerdir' [ 243.181021][ T787] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 243.347378][ T6823] Bluetooth: MGMT ver 1.22 [ 243.411398][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 243.444293][ T787] usb 3-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 243.466445][ T787] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 243.482193][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.500111][ T787] usb 3-1: Product: syz [ 243.509237][ T787] usb 3-1: Manufacturer: syz [ 243.519619][ T787] usb 3-1: SerialNumber: syz [ 245.349176][ T5883] usb 3-1: USB disconnect, device number 8 [ 245.398906][ T6838] Zero length message leads to an empty skb [ 245.439762][ T6839] 9pnet_fd: Insufficient options for proto=fd [ 245.601239][ T967] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 245.841255][ T967] usb 4-1: Using ep0 maxpacket: 8 [ 246.210758][ T6839] Process accounting resumed [ 246.371194][ T967] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.401197][ T967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.446520][ T967] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 246.593742][ T967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 246.603848][ T967] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.617468][ T967] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.626728][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.471019][ T5883] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 248.549794][ T967] usb 4-1: can't set config #16, error -71 [ 248.580747][ T967] usb 4-1: USB disconnect, device number 8 [ 248.678158][ T5883] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 248.701592][ T5883] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 248.750982][ T5883] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.788486][ T5883] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 248.813826][ T5883] usb 2-1: config 0 interface 0 has no altsetting 0 [ 248.820557][ T5883] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 248.864615][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.895099][ T5883] usb 2-1: config 0 descriptor?? [ 248.930363][ T6853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.287'. [ 251.401253][ T5883] usbhid 2-1:0.0: can't add hid device: -71 [ 251.408220][ T5883] usbhid: probe of 2-1:0.0 failed with error -71 [ 251.431429][ T5883] usb 2-1: USB disconnect, device number 9 [ 251.513018][ T5775] Bluetooth: hci0: unexpected event for opcode 0x0c20 [ 252.884743][ T6868] overlayfs: missing 'lowerdir' [ 253.862802][ T6867] 9pnet_fd: Insufficient options for proto=fd [ 253.908387][ T6867] Process accounting resumed [ 253.921085][ T5759] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 255.478658][ T5759] usb 2-1: Using ep0 maxpacket: 16 [ 255.508754][ T5759] usb 2-1: device descriptor read/all, error -71 [ 256.202946][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.209579][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.942645][ T27] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 260.424816][ T6905] overlayfs: missing 'lowerdir' [ 263.161140][ T967] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 264.709421][ T5808] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 265.593039][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.604300][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.629743][ T5808] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 265.660466][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.860523][ T5808] usb 4-1: config 0 descriptor?? [ 266.891044][ T27] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 267.875193][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 268.581411][ T27] usb 3-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 268.593886][ T5808] hid-led 0003:27B8:01ED.0004: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 268.631237][ T27] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 268.641413][ T5808] hid-led 0003:27B8:01ED.0004: ThingM blink(1) initialized [ 268.670337][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.698116][ T27] usb 3-1: Product: syz [ 268.710993][ T27] usb 3-1: Manufacturer: syz [ 268.720916][ T27] usb 3-1: SerialNumber: syz [ 269.473465][ T6947] overlayfs: missing 'lowerdir' [ 270.820682][ T8] usb 4-1: USB disconnect, device number 9 [ 271.033599][ T27] usb 3-1: USB disconnect, device number 10 [ 271.111022][ T967] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 271.209172][ T6952] binder: BINDER_SET_CONTEXT_MGR already set [ 271.228616][ T6952] binder: 6951:6952 ioctl 4018620d 200000004a80 returned -16 [ 271.393066][ T967] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 271.415957][ T967] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 271.446741][ T967] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.477509][ T967] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 271.529877][ T967] usb 1-1: config 0 interface 0 has no altsetting 0 [ 271.540318][ T967] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 271.552569][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.565077][ T967] usb 1-1: config 0 descriptor?? [ 272.032201][ T967] usbhid 1-1:0.0: can't add hid device: -71 [ 272.038615][ T967] usbhid: probe of 1-1:0.0 failed with error -71 [ 272.064047][ T967] usb 1-1: USB disconnect, device number 10 [ 272.523200][ T6961] nfs: Unknown parameter 'ÿÿÿÿ' [ 273.521169][ T967] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 273.943467][ T967] usb 2-1: Using ep0 maxpacket: 8 [ 273.972110][ T967] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.014162][ T967] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.025101][ T967] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.035959][ T967] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.069823][ T967] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.094117][ T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.158839][ T5775] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 274.495213][ T967] usb 2-1: usb_control_msg returned -32 [ 274.539721][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.554753][ T967] usbtmc 2-1:16.0: can't read capabilities [ 274.640967][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.141854][ T5808] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 277.321225][ T967] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 277.378313][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.401012][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.443560][ T5808] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 277.481058][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.513600][ T5808] usb 4-1: config 0 descriptor?? [ 277.562344][ T967] usb 1-1: Using ep0 maxpacket: 16 [ 277.589123][ T967] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 277.636138][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.690210][ T967] usb 1-1: Product: syz [ 277.720612][ T967] usb 1-1: Manufacturer: syz [ 277.740602][ T967] usb 1-1: SerialNumber: syz [ 277.858690][ T5759] usb 2-1: USB disconnect, device number 12 [ 278.494785][ T7001] overlayfs: missing 'lowerdir' [ 279.955364][ T967] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 280.005226][ T967] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.381735][ T967] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 281.413259][ T967] usb 1-1: media controller created [ 281.453007][ T5808] usbhid 4-1:0.0: can't add hid device: -71 [ 281.459272][ T5808] usbhid: probe of 4-1:0.0 failed with error -71 [ 281.503640][ T5808] usb 4-1: USB disconnect, device number 10 [ 281.528946][ T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.634719][ T967] zl10353_read_register: readreg error (reg=127, ret==-71) [ 281.967963][ T967] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 282.002351][ T967] usb 1-1: USB disconnect, device number 11 [ 284.979580][ T7022] binder_alloc: 7021: binder_alloc_buf, no vma [ 285.020986][ T5883] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 286.605355][ T5883] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 286.630911][ T5883] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 286.656712][ T5883] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.679042][ T5883] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 286.699482][ T5883] usb 2-1: config 0 interface 0 has no altsetting 0 [ 286.706707][ T5883] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 286.726702][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.753021][ T5883] usb 2-1: config 0 descriptor?? [ 287.343474][ T7033] overlayfs: missing 'lowerdir' [ 289.128084][ T5883] usbhid 2-1:0.0: can't add hid device: -71 [ 289.250978][ T5883] usbhid: probe of 2-1:0.0 failed with error -71 [ 289.531232][ T5883] usb 2-1: USB disconnect, device number 13 [ 290.170985][ T5883] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 290.533474][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.551043][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.598528][ T5883] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 290.628246][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.659640][ T5883] usb 2-1: config 0 descriptor?? [ 291.985514][ T5883] hid-led 0003:27B8:01ED.0005: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 292.005532][ T5883] hid-led 0003:27B8:01ED.0005: ThingM blink(1) initialized [ 293.091440][ T787] usb 2-1: USB disconnect, device number 14 [ 293.241283][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 293.490931][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 293.515857][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 293.527320][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 293.538283][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 293.549757][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.576829][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 293.631304][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.693784][ T7065] binder_alloc: 7064: binder_alloc_buf, no vma [ 293.875651][ T23] usb 4-1: usb_control_msg returned -32 [ 293.888742][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.907113][ T23] usbtmc 4-1:16.0: can't read capabilities [ 293.916527][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.784708][ T7071] overlayfs: missing 'lowerdir' [ 297.803535][ T5807] usb 4-1: USB disconnect, device number 11 [ 302.904960][ T7105] overlayfs: missing 'lowerdir' [ 304.083002][ T7111] binder_alloc: 7110: binder_alloc_buf, no vma [ 304.233679][ T7116] netlink: 'syz.1.352': attribute type 10 has an invalid length. [ 304.292331][ T7115] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 306.751335][ T5808] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 306.985520][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.149931][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.187944][ T5808] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 307.211839][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.253549][ T5808] usb 4-1: config 0 descriptor?? [ 308.839358][ T5808] hid-led 0003:27B8:01ED.0006: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 308.878686][ T5808] hid-led 0003:27B8:01ED.0006: ThingM blink(1) initialized [ 309.000356][ T7148] orangefs_mount: mount request failed with -4 [ 309.564516][ T7158] overlayfs: missing 'lowerdir' [ 310.567962][ T7164] binder: 7163:7164 ioctl c0306201 2000000002c0 returned -14 [ 310.676880][ T5808] usb 4-1: USB disconnect, device number 12 [ 311.903849][ T7172] nfs: Unknown parameter 'ÿÿÿÿ' [ 315.624500][ T7199] overlayfs: missing 'lowerdir' [ 317.465363][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 318.361666][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.368214][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.000925][ T7227] binder: 7226:7227 ioctl c0306201 2000000002c0 returned -14 [ 320.239965][ T7237] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 320.328114][ T7237] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 320.964494][ T7239] overlayfs: missing 'lowerdir' [ 322.108480][ T7237] team0: Port device dummy0 added [ 323.642621][ T7254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.386'. [ 324.587835][ T7254] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 326.577117][ T7254] syz.3.386 (7254) used greatest stack depth: 20168 bytes left [ 328.412585][ T7275] orangefs_mount: mount request failed with -4 [ 330.296493][ T7294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'. [ 330.515975][ T7293] orangefs_mount: mount request failed with -4 [ 331.114745][ T7299] overlayfs: missing 'lowerdir' [ 336.612731][ T7321] binder: BINDER_SET_CONTEXT_MGR already set [ 336.619434][ T7321] binder: 7318:7321 ioctl 4018620d 200000004a80 returned -16 [ 337.902291][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.405'. [ 339.020168][ T7339] overlayfs: missing 'lowerdir' [ 339.110980][ T7329] orangefs_mount: mount request failed with -4 [ 339.146480][ T7334] orangefs_mount: mount request failed with -4 [ 339.439594][ T5775] Bluetooth: hci0: unexpected event for opcode 0x0c20 [ 345.482276][ T5775] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 346.810982][ T7379] orangefs_mount: mount request failed with -4 [ 347.764540][ T7401] overlayfs: missing 'lowerdir' [ 350.797989][ T5775] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 351.996336][ T7418] orangefs_mount: mount request failed with -4 [ 358.072358][ T7465] orangefs_mount: mount request failed with -4 [ 359.169729][ T7477] orangefs_mount: mount request failed with -4 [ 363.170325][ T7503] 9pnet_fd: Insufficient options for proto=fd [ 364.243057][ T5775] Bluetooth: hci0: unexpected event 0x05 length: 11 > 4 [ 364.529547][ T5775] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 367.221179][ T7522] fuse: Bad value for 'fd' [ 369.718878][ T7537] 9pnet_fd: Insufficient options for proto=fd [ 372.840957][ T5759] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 373.083303][ T5759] usb 3-1: Using ep0 maxpacket: 16 [ 373.096239][ T5759] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 373.115838][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.189034][ T5759] usb 3-1: Product: syz [ 373.230650][ T5759] usb 3-1: Manufacturer: syz [ 373.252536][ T5759] usb 3-1: SerialNumber: syz [ 373.685423][ T5759] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 373.742044][ T5759] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 373.812285][ T7566] rtc_cmos 00:00: Alarms can be up to one day in the future [ 374.589736][ T5759] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 374.598473][ T5759] usb 3-1: media controller created [ 374.629275][ T5759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.709178][ T5759] zl10353_read_register: readreg error (reg=127, ret==-71) [ 374.842847][ T5759] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 374.891590][ T5759] usb 3-1: USB disconnect, device number 11 [ 375.110959][ T5883] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 375.111202][ T7578] netlink: 44 bytes leftover after parsing attributes in process `syz.1.472'. [ 375.141585][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.149187][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.212284][ T7578] netlink: 44 bytes leftover after parsing attributes in process `syz.1.472'. [ 375.340934][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 375.359738][ T5883] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 375.391927][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.419554][ T5883] usb 4-1: Product: syz [ 375.445401][ T5883] usb 4-1: Manufacturer: syz [ 376.171201][ T7579] fuse: Bad value for 'fd' [ 376.266042][ T5883] usb 4-1: SerialNumber: syz [ 376.302037][ T5883] usb 4-1: config 0 descriptor?? [ 376.530358][ T5883] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 376.754461][ T5883] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 376.776715][ T5883] usb 4-1: USB disconnect, device number 13 [ 377.439742][ T7586] nfs: Unknown parameter 'ÿÿÿÿ' [ 379.130147][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.151594][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.709149][ T7612] binder: BINDER_SET_CONTEXT_MGR already set [ 380.752281][ T7612] binder: 7611:7612 ioctl 4018620d 200000004a80 returned -16 [ 381.501188][ T7613] fuse: Bad value for 'fd' [ 382.431150][ T7616] fuse: Bad value for 'fd' [ 384.450057][ T7625] fuse: Unknown parameter '0x000000000000000700000000000000000000' [ 385.961750][ T7629] netlink: 44 bytes leftover after parsing attributes in process `syz.2.484'. [ 386.008077][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.015564][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.073428][ T7631] netlink: 44 bytes leftover after parsing attributes in process `syz.2.484'. [ 390.151187][ T7655] fuse: Bad value for 'fd' [ 394.871484][ T7668] netlink: 44 bytes leftover after parsing attributes in process `syz.0.497'. [ 394.905553][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.913149][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.203858][ T5775] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 395.206140][ T28] audit: type=1326 audit(1772701879.161:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7672 comm="syz.1.494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6adc19c799 code=0x0 [ 398.831139][ T7696] fuse: Bad value for 'fd' [ 398.892442][ T5883] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 399.150961][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 399.159702][ T5883] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.170235][ T5883] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.180732][ T5883] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 399.191127][ T5883] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.204671][ T5883] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 399.261048][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.822859][ T5883] usb 4-1: usb_control_msg returned -71 [ 400.849152][ T5883] usbtmc 4-1:16.0: can't read capabilities [ 400.902509][ T5883] usb 4-1: USB disconnect, device number 14 [ 404.865559][ T7728] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 404.890388][ T7733] netlink: 14 bytes leftover after parsing attributes in process `syz.2.513'. [ 405.545522][ T7728] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 405.855597][ T7733] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.925631][ T7733] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.993282][ T7733] bond0 (unregistering): Released all slaves [ 406.032231][ T7728] siw: device registration error -19 [ 406.311044][ T5808] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 406.421034][ T27] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 406.511050][ T5808] usb 4-1: Using ep0 maxpacket: 8 [ 406.568645][ T5808] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 406.578730][ T5808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 406.601793][ T5808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 406.712529][ T5808] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.772176][ T27] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 407.281177][ T5808] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 407.291286][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 407.303405][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.312151][ T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.336183][ T27] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 407.349449][ T27] usb 1-1: config 0 interface 0 has no altsetting 0 [ 407.356514][ T27] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 407.365754][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.393596][ T27] usb 1-1: config 0 descriptor?? [ 409.967692][ T27] ryos 0003:1E7D:3138.0007: item fetching failed at offset 4/5 [ 409.994433][ T27] ryos 0003:1E7D:3138.0007: parse failed [ 410.006105][ T27] ryos: probe of 0003:1E7D:3138.0007 failed with error -22 [ 410.151524][ T27] usb 1-1: USB disconnect, device number 12 [ 411.849188][ T5808] usb 4-1: usb_control_msg returned -71 [ 411.866837][ T5808] usbtmc 4-1:16.0: can't read capabilities [ 411.886396][ T7764] binder: 7762:7764 ioctl 4018620d 0 returned -22 [ 411.932051][ T5808] usb 4-1: USB disconnect, device number 15 [ 416.081299][ T27] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 416.326823][ T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 416.365656][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 416.401133][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.431013][ T27] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 416.470882][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 416.481400][ T27] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 416.490497][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.531759][ T27] usb 3-1: config 0 descriptor?? [ 417.043989][ T27] ryos 0003:1E7D:3138.0008: item fetching failed at offset 4/5 [ 417.073732][ T27] ryos 0003:1E7D:3138.0008: parse failed [ 417.081733][ T27] ryos: probe of 0003:1E7D:3138.0008 failed with error -22 [ 417.498016][ T27] usb 3-1: USB disconnect, device number 12 [ 419.921806][ T7801] sctp: failed to load transform for md5: -2 [ 421.224754][ T7817] binder: 7816:7817 ioctl 4018620d 0 returned -22 [ 425.701071][ T967] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 425.971090][ T967] usb 3-1: Using ep0 maxpacket: 8 [ 426.094206][ T967] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 426.104417][ T967] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 426.131012][ T967] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 426.223498][ T967] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.246110][ T967] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.256865][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.961065][ T967] usb 3-1: usb_control_msg returned -71 [ 427.985835][ T967] usbtmc 3-1:16.0: can't read capabilities [ 428.046054][ T967] usb 3-1: USB disconnect, device number 13 [ 430.713177][ T7865] binder: 7863:7865 ioctl 4018620d 0 returned -22 [ 431.560669][ T5775] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 435.041082][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 435.281135][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 435.349892][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.392725][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.465282][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.489644][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.582863][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 435.602099][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.271637][ T28] audit: type=1800 audit(1772701920.231:13): pid=7904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.559" name="bus" dev="ramfs" ino=13562 res=0 errno=0 [ 436.556568][ T8] usb 4-1: can't set config #16, error -71 [ 436.581094][ T8] usb 4-1: USB disconnect, device number 16 [ 436.809906][ T7914] binder: BINDER_SET_CONTEXT_MGR already set [ 436.853435][ T7914] binder: 7911:7914 ioctl 4018620d 200000004a80 returned -16 [ 441.081263][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.087587][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.666244][ T7940] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 442.167680][ T7931] netlink: 'syz.2.565': attribute type 10 has an invalid length. [ 442.193352][ T7931] team0: Port device dummy0 added [ 443.710563][ T7956] binder: BINDER_SET_CONTEXT_MGR already set [ 443.727295][ T7956] binder: 7955:7956 ioctl 4018620d 200000004a80 returned -16 [ 444.430125][ T5775] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 446.427798][ T28] audit: type=1800 audit(1772701930.381:14): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.574" name="bus" dev="ramfs" ino=14604 res=0 errno=0 [ 448.413571][ T7998] binder: BINDER_SET_CONTEXT_MGR already set [ 448.448251][ T7998] binder: 7995:7998 ioctl 4018620d 200000004a80 returned -16 [ 451.728514][ T8019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.590'. [ 451.804225][ T8020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 452.731060][ T8019] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 453.001609][ T8032] binder: 8031:8032 ioctl c0306201 0 returned -14 [ 453.046621][ T8032] binder: BINDER_SET_CONTEXT_MGR already set [ 453.078686][ T8032] binder: 8031:8032 ioctl 4018620d 200000004a80 returned -16 [ 455.058348][ T28] audit: type=1800 audit(1772701938.991:15): pid=8033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.592" name="bus" dev="ramfs" ino=14747 res=0 errno=0 [ 458.293968][ T8064] netlink: 24 bytes leftover after parsing attributes in process `syz.3.602'. [ 460.211024][ T8065] orangefs_mount: mount request failed with -4 [ 460.419532][ T8075] nfs: Unknown parameter 'ÿÿÿÿ' [ 463.000951][ T8] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 463.125968][ T8082] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.284618][ T8] usb 1-1: config 0 has no interfaces? [ 463.313339][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 463.366298][ T8] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 463.391450][ T8] usb 1-1: Product: syz [ 463.401457][ T8] usb 1-1: Manufacturer: syz [ 463.406117][ T8] usb 1-1: SerialNumber: syz [ 463.451796][ T8] usb 1-1: config 0 descriptor?? [ 463.604452][ T8082] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.990661][ T8082] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.062726][ T5775] Bluetooth: hci1: unexpected event for opcode 0x0c20 [ 464.181898][ T8094] binder: 8093:8094 ioctl c0306201 0 returned -14 [ 464.327331][ T8082] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.220266][ T8082] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.236869][ T8082] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.303474][ T28] audit: type=1800 audit(1772701949.251:16): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.608" name="bus" dev="ramfs" ino=14862 res=0 errno=0 [ 465.323169][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.361184][ T8082] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.878738][ T8082] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.119841][ T8] usb 1-1: USB disconnect, device number 13 [ 470.090812][ T8133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.614'. [ 470.664133][ T8132] orangefs_mount: mount request failed with -4 [ 470.968585][ T8136] binder: 8135:8136 ioctl c0306201 0 returned -14 [ 471.401657][ T8141] 9pnet_fd: Insufficient options for proto=fd [ 472.508340][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.0.626'. [ 472.963345][ T28] audit: type=1800 audit(1772701956.921:17): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.625" name="bus" dev="ramfs" ino=14979 res=0 errno=0 [ 473.068638][ T8158] orangefs_mount: mount request failed with -4 [ 473.874517][ T8172] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 474.233918][ T8172] netlink: 'syz.0.629': attribute type 10 has an invalid length. [ 474.376827][ T8167] sctp: failed to load transform for md5: -2 [ 475.035031][ T8186] 9pnet_fd: Insufficient options for proto=fd [ 476.954378][ T8211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.637'. [ 477.613803][ T8210] orangefs_mount: mount request failed with -4 [ 478.214195][ T8219] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 478.712720][ T8216] sctp: failed to load transform for md5: -2 [ 479.696269][ T8232] netlink: 'syz.1.641': attribute type 10 has an invalid length. [ 479.778505][ T8231] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 480.703154][ T8235] fuse: Bad value for 'fd' [ 480.920189][ T8212] syz.0.638 (8212) used greatest stack depth: 17864 bytes left [ 481.350959][ T28] audit: type=1800 audit(1772701965.301:18): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.643" name="bus" dev="ramfs" ino=15080 res=0 errno=0 [ 483.035043][ T5775] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 484.656894][ T8254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.648'. [ 485.167604][ T8253] orangefs_mount: mount request failed with -4 [ 486.077134][ T8269] nfs: Unknown parameter 'ÿÿÿÿ' [ 487.011095][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 487.251158][ T8] usb 4-1: device descriptor read/64, error -71 [ 488.321859][ T8] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 488.489193][ T8283] binder: 8282:8283 ioctl 4018620d 0 returned -22 [ 488.520907][ T8] usb 4-1: device descriptor read/64, error -71 [ 488.641116][ T8] usb usb4-port1: attempt power cycle [ 489.401029][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 489.484358][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 489.511331][ T8] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 489.520126][ T8] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 490.051190][ T8] usb 4-1: config 0 has no interface number 0 [ 490.273467][ T8] usb 4-1: config 0 interface 21 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 490.317857][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.660'. [ 490.570530][ T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 490.677086][ T8] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 490.705819][ T8] usb 4-1: Product: syz [ 490.750094][ T8] usb 4-1: Manufacturer: syz [ 490.782490][ T8] usb 4-1: config 0 descriptor?? [ 490.825529][ T8295] orangefs_mount: mount request failed with -4 [ 491.722769][ T8306] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 492.288426][ T8302] sctp: failed to load transform for md5: -2 [ 492.558374][ T8] usb 4-1: USB disconnect, device number 19 [ 492.709873][ T8315] nfs: Unknown parameter 'ÿÿÿÿ' [ 494.329026][ T8322] binder: BINDER_SET_CONTEXT_MGR already set [ 494.341146][ T8322] binder: 8320:8322 ioctl 4018620d 200000004a80 returned -16 [ 496.241070][ T5883] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 496.424645][ T5883] usb 2-1: device descriptor read/64, error -71 [ 496.710873][ T5883] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 496.891087][ T5883] usb 2-1: device descriptor read/64, error -71 [ 497.021645][ T5883] usb usb2-port1: attempt power cycle [ 497.460905][ T5883] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 497.531193][ T5883] usb 2-1: device descriptor read/8, error -71 [ 499.681140][ T8347] fuse: Bad value for 'fd' [ 500.835255][ T8357] nfs: Unknown parameter 'ÿÿÿÿ' [ 501.914378][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.923154][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.547655][ T8367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.669'. [ 503.045971][ T8370] binder: BINDER_SET_CONTEXT_MGR already set [ 503.066724][ T8370] binder: 8368:8370 ioctl 4018620d 200000004a80 returned -16 [ 503.115489][ T8366] orangefs_mount: mount request failed with -4 [ 505.456271][ T8394] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 505.741479][ T8383] sctp: failed to load transform for md5: -2 [ 506.484773][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 509.453681][ T8413] sctp: failed to load transform for md5: -2 [ 509.662221][ T8421] 9pnet_fd: Insufficient options for proto=fd [ 510.035490][ T8425] Bluetooth: MGMT ver 1.22 [ 511.888934][ T8428] fuse: Bad value for 'fd' [ 513.134595][ T8431] binder: BINDER_SET_CONTEXT_MGR already set [ 513.150910][ T8431] binder: 8430:8431 ioctl 4018620d 200000004a80 returned -16 [ 513.573253][ T8436] netlink: 44 bytes leftover after parsing attributes in process `syz.0.694'. [ 513.636752][ T8436] netlink: 44 bytes leftover after parsing attributes in process `syz.0.694'. [ 515.029497][ T8446] No such timeout policy "syz1" [ 520.936516][ T8472] binder: 8471:8472 ioctl c0306201 0 returned -14 [ 522.490166][ T8478] input: syz0 as /devices/virtual/input/input22 [ 523.680244][ T8490] netlink: 32 bytes leftover after parsing attributes in process `syz.3.706'. [ 527.553002][ T8506] binder: 8505:8506 ioctl c0306201 0 returned -14 [ 532.458220][ T8540] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 532.634373][ T8540] netlink: 'syz.3.723': attribute type 10 has an invalid length. [ 532.984042][ T8540] team0: Port device dummy0 added [ 534.314587][ T8557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.722'. [ 534.359071][ T8557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.722'. [ 534.530661][ T8559] No such timeout policy "syz1" [ 538.292495][ T8580] binder: 8579:8580 ioctl 4018620d 0 returned -22 [ 545.406593][ T8613] 9pnet_fd: Insufficient options for proto=fd [ 545.762853][ T8616] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 545.797452][ T8617] netlink: 'syz.2.745': attribute type 10 has an invalid length. [ 550.773323][ T8646] 9pnet_fd: Insufficient options for proto=fd [ 552.550080][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.755'. [ 552.961876][ T8660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.750'. [ 553.860388][ T8654] orangefs_mount: mount request failed with -4 [ 554.005149][ T8660] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 555.792851][ T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 557.156870][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.167503][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 557.201339][ T23] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 557.220813][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.252383][ T23] usb 3-1: config 0 descriptor?? [ 557.263551][ T23] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 558.896396][ T23] usb 3-1: USB disconnect, device number 15 [ 559.262949][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.764'. [ 560.077457][ T8694] orangefs_mount: mount request failed with -4 [ 560.437694][ T8703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.765'. [ 563.328764][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.033717][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.661464][ T787] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 567.893389][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.921129][ T787] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.954381][ T787] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 567.994670][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.020700][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.0.775'. [ 568.035070][ T8754] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 568.126218][ T787] usb 4-1: config 0 descriptor?? [ 568.285135][ T787] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 570.766008][ T967] usb 4-1: USB disconnect, device number 20 [ 575.806139][ T8792] nfs: Unknown parameter 'ÿÿÿÿ' [ 576.892940][ T5808] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 577.971310][ T5808] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.990811][ T5808] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 578.097720][ T5808] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 578.140872][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.162473][ T5808] usb 2-1: config 0 descriptor?? [ 578.175052][ T5808] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 579.870899][ T8] usb 2-1: USB disconnect, device number 19 [ 580.112090][ T8817] binder: 8815:8817 ioctl c0306201 2000000002c0 returned -14 [ 581.552407][ T8830] input: syz0 as /devices/virtual/input/input33 [ 581.711390][ T8831] netlink: 32 bytes leftover after parsing attributes in process `syz.0.795'. [ 583.091021][ T8834] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 587.138367][ T8856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.802'. [ 587.152038][ T8856] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 587.785004][ T8863] loop7: detected capacity change from 0 to 1 [ 588.686332][ T8864] loop7: detected capacity change from 1 to 0 [ 590.738706][ T8880] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 590.794043][ T8880] netlink: 'syz.1.799': attribute type 10 has an invalid length. [ 594.809810][ T8905] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 594.934218][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 594.948224][ T8909] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 596.718998][ T8921] loop7: detected capacity change from 0 to 1 [ 597.723824][ T8921] loop7: detected capacity change from 1 to 0 [ 598.004387][ T8931] ================================================================== [ 598.012513][ T8931] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 598.020301][ T8931] Read of size 8 at addr ffff888026ae9018 by task syz.3.819/8931 [ 598.028043][ T8931] [ 598.030386][ T8931] CPU: 1 PID: 8931 Comm: syz.3.819 Not tainted syzkaller #0 [ 598.037737][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.047833][ T8931] Call Trace: [ 598.051141][ T8931] [ 598.054096][ T8931] dump_stack_lvl+0x18c/0x250 [ 598.058912][ T8931] ? __lock_acquire+0x7d40/0x7d40 [ 598.064013][ T8931] ? show_regs_print_info+0x20/0x20 [ 598.069249][ T8931] ? load_image+0x400/0x400 [ 598.073814][ T8931] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 598.079409][ T8931] ? __virt_addr_valid+0x18c/0x540 [ 598.084592][ T8931] ? __virt_addr_valid+0x469/0x540 [ 598.089753][ T8931] print_report+0xa8/0x210 [ 598.094232][ T8931] ? dvb_device_open+0xca/0x370 [ 598.099113][ T8931] kasan_report+0x117/0x150 [ 598.103696][ T8931] ? dvb_device_open+0xca/0x370 [ 598.108580][ T8931] dvb_device_open+0xca/0x370 [ 598.113289][ T8931] chrdev_open+0x5cc/0x6a0 [ 598.117736][ T8931] ? cd_forget+0x160/0x160 [ 598.122280][ T8931] ? fsnotify_perm+0x3ed/0x5e0 [ 598.127129][ T8931] ? cd_forget+0x160/0x160 [ 598.131574][ T8931] do_dentry_open+0x8c6/0x1500 [ 598.136378][ T8931] path_openat+0x27f1/0x3230 [ 598.141034][ T8931] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 598.147045][ T8931] ? verify_lock_unused+0x140/0x140 [ 598.152277][ T8931] ? do_filp_open+0x430/0x430 [ 598.156984][ T8931] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 598.162993][ T8931] ? __virt_addr_valid+0x18c/0x540 [ 598.168155][ T8931] do_filp_open+0x1f5/0x430 [ 598.172690][ T8931] ? vfs_tmpfile+0x490/0x490 [ 598.177319][ T8931] ? _raw_spin_unlock+0x28/0x40 [ 598.182199][ T8931] ? alloc_fd+0x58f/0x630 [ 598.186562][ T8931] do_sys_openat2+0x134/0x1d0 [ 598.191342][ T8931] ? do_sys_open+0xe0/0xe0 [ 598.195789][ T8931] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 598.201887][ T8931] ? lock_chain_count+0x20/0x20 [ 598.206771][ T8931] __x64_sys_openat+0x139/0x160 [ 598.211670][ T8931] do_syscall_64+0x55/0xa0 [ 598.216128][ T8931] ? clear_bhb_loop+0x40/0x90 [ 598.220943][ T8931] ? clear_bhb_loop+0x40/0x90 [ 598.225660][ T8931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.231606][ T8931] RIP: 0033:0x7fb708d5cfce [ 598.236070][ T8931] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 598.255798][ T8931] RSP: 002b:00007fb706ff5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 598.264244][ T8931] RAX: ffffffffffffffda RBX: 00007fb706ff66c0 RCX: 00007fb708d5cfce [ 598.272329][ T8931] RDX: 0000000000000e82 RSI: 00007fb706ff5c00 RDI: ffffffffffffff9c [ 598.280327][ T8931] RBP: 00007fb706ff5c00 R08: 0000000000000000 R09: 0000000000000000 [ 598.288327][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 598.296333][ T8931] R13: 00007fb709016128 R14: 00007fb709016090 R15: 00007fff680f5ef8 [ 598.304339][ T8931] [ 598.307377][ T8931] [ 598.309704][ T8931] Allocated by task 1: [ 598.313782][ T8931] kasan_set_track+0x4e/0x70 [ 598.318408][ T8931] __kasan_kmalloc+0x8f/0xa0 [ 598.323025][ T8931] dvb_register_device+0x2fd/0x2210 [ 598.328248][ T8931] dvb_register_frontend+0x649/0x930 [ 598.333656][ T8931] vidtv_bridge_probe+0x9ab/0xf80 [ 598.338786][ T8931] platform_probe+0x13b/0x1c0 [ 598.343546][ T8931] really_probe+0x25b/0xb20 [ 598.348065][ T8931] __driver_probe_device+0x18c/0x330 [ 598.353366][ T8931] driver_probe_device+0x4f/0x420 [ 598.358498][ T8931] __driver_attach+0x44e/0x6e0 [ 598.363344][ T8931] bus_for_each_dev+0x235/0x2b0 [ 598.368274][ T8931] bus_add_driver+0x340/0x630 [ 598.373172][ T8931] driver_register+0x23a/0x310 [ 598.377946][ T8931] vidtv_bridge_init+0x3d/0x70 [ 598.382814][ T8931] do_one_initcall+0x242/0x790 [ 598.387697][ T8931] do_initcall_level+0x137/0x1f0 [ 598.392845][ T8931] do_initcalls+0x69/0xd0 [ 598.397199][ T8931] kernel_init_freeable+0x3ed/0x580 [ 598.402519][ T8931] kernel_init+0x1d/0x1c0 [ 598.406925][ T8931] ret_from_fork+0x48/0x80 [ 598.411371][ T8931] ret_from_fork_asm+0x11/0x20 [ 598.416171][ T8931] [ 598.418492][ T8931] Freed by task 8905: [ 598.422468][ T8931] kasan_set_track+0x4e/0x70 [ 598.427082][ T8931] kasan_save_free_info+0x2e/0x50 [ 598.432140][ T8931] ____kasan_slab_free+0x126/0x1e0 [ 598.437294][ T8931] slab_free_freelist_hook+0x130/0x1a0 [ 598.442871][ T8931] __kmem_cache_free+0xba/0x1e0 [ 598.447734][ T8931] dvb_device_open+0x2ee/0x370 [ 598.452494][ T8931] chrdev_open+0x5cc/0x6a0 [ 598.456916][ T8931] do_dentry_open+0x8c6/0x1500 [ 598.461695][ T8931] path_openat+0x27f1/0x3230 [ 598.466284][ T8931] do_filp_open+0x1f5/0x430 [ 598.470793][ T8931] do_sys_openat2+0x134/0x1d0 [ 598.475666][ T8931] __x64_sys_openat+0x139/0x160 [ 598.480605][ T8931] do_syscall_64+0x55/0xa0 [ 598.485112][ T8931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.491560][ T8931] [ 598.493976][ T8931] The buggy address belongs to the object at ffff888026ae9000 [ 598.493976][ T8931] which belongs to the cache kmalloc-256 of size 256 [ 598.508115][ T8931] The buggy address is located 24 bytes inside of [ 598.508115][ T8931] freed 256-byte region [ffff888026ae9000, ffff888026ae9100) [ 598.521839][ T8931] [ 598.524157][ T8931] The buggy address belongs to the physical page: [ 598.530643][ T8931] page:ffffea00009aba00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26ae8 [ 598.540978][ T8931] head:ffffea00009aba00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 598.549916][ T8931] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 598.557911][ T8931] page_type: 0xffffffff() [ 598.562360][ T8931] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 598.571052][ T8931] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 598.579644][ T8931] page dumped because: kasan: bad access detected [ 598.586142][ T8931] page_owner tracks the page as allocated [ 598.591935][ T8931] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14315910148, free_ts 0 [ 598.611643][ T8931] post_alloc_hook+0x1c1/0x200 [ 598.616450][ T8931] get_page_from_freelist+0x1951/0x19e0 [ 598.622010][ T8931] __alloc_pages+0x1f0/0x460 [ 598.626624][ T8931] alloc_page_interleave+0x24/0x1e0 [ 598.631839][ T8931] alloc_slab_page+0x5d/0x160 [ 598.636524][ T8931] new_slab+0x87/0x2d0 [ 598.640636][ T8931] ___slab_alloc+0xc5d/0x12f0 [ 598.645327][ T8931] __kmem_cache_alloc_node+0x19e/0x250 [ 598.650810][ T8931] kmalloc_trace+0x2a/0xe0 [ 598.655347][ T8931] bus_add_driver+0x162/0x630 [ 598.660126][ T8931] driver_register+0x23a/0x310 [ 598.665064][ T8931] usb_register_driver+0x206/0x3d0 [ 598.670243][ T8931] do_one_initcall+0x242/0x790 [ 598.675023][ T8931] do_initcall_level+0x137/0x1f0 [ 598.679982][ T8931] do_initcalls+0x69/0xd0 [ 598.684315][ T8931] kernel_init_freeable+0x3ed/0x580 [ 598.689596][ T8931] page_owner free stack trace missing [ 598.695056][ T8931] [ 598.697383][ T8931] Memory state around the buggy address: [ 598.703097][ T8931] ffff888026ae8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 598.711154][ T8931] ffff888026ae8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 598.719212][ T8931] >ffff888026ae9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 598.727275][ T8931] ^ [ 598.732137][ T8931] ffff888026ae9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 598.740275][ T8931] ffff888026ae9100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 598.748343][ T8931] ================================================================== [ 598.770979][ T8931] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 598.778233][ T8931] CPU: 1 PID: 8931 Comm: syz.3.819 Not tainted syzkaller #0 [ 598.785552][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.795984][ T8931] Call Trace: [ 598.799311][ T8931] [ 598.802266][ T8931] dump_stack_lvl+0x18c/0x250 [ 598.807000][ T8931] ? show_regs_print_info+0x20/0x20 [ 598.812241][ T8931] ? load_image+0x400/0x400 [ 598.816868][ T8931] panic+0x2dc/0x730 [ 598.820792][ T8931] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 598.826978][ T8931] ? bpf_jit_dump+0xd0/0xd0 [ 598.831513][ T8931] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 598.837590][ T8931] ? _raw_spin_unlock+0x40/0x40 [ 598.842504][ T8931] ? dvb_device_open+0xca/0x370 [ 598.847480][ T8931] check_panic_on_warn+0x84/0xa0 [ 598.853026][ T8931] ? dvb_device_open+0xca/0x370 [ 598.858043][ T8931] end_report+0x6f/0x130 [ 598.862335][ T8931] kasan_report+0x128/0x150 [ 598.866881][ T8931] ? dvb_device_open+0xca/0x370 [ 598.871806][ T8931] dvb_device_open+0xca/0x370 [ 598.876537][ T8931] chrdev_open+0x5cc/0x6a0 [ 598.881094][ T8931] ? cd_forget+0x160/0x160 [ 598.885545][ T8931] ? fsnotify_perm+0x3ed/0x5e0 [ 598.890357][ T8931] ? cd_forget+0x160/0x160 [ 598.894815][ T8931] do_dentry_open+0x8c6/0x1500 [ 598.899623][ T8931] path_openat+0x27f1/0x3230 [ 598.904255][ T8931] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 598.910365][ T8931] ? verify_lock_unused+0x140/0x140 [ 598.915605][ T8931] ? do_filp_open+0x430/0x430 [ 598.920320][ T8931] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 598.926379][ T8931] ? __virt_addr_valid+0x18c/0x540 [ 598.931616][ T8931] do_filp_open+0x1f5/0x430 [ 598.936150][ T8931] ? vfs_tmpfile+0x490/0x490 [ 598.940781][ T8931] ? _raw_spin_unlock+0x28/0x40 [ 598.945657][ T8931] ? alloc_fd+0x58f/0x630 [ 598.950025][ T8931] do_sys_openat2+0x134/0x1d0 [ 598.954739][ T8931] ? do_sys_open+0xe0/0xe0 [ 598.959203][ T8931] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 598.965292][ T8931] ? lock_chain_count+0x20/0x20 [ 598.970180][ T8931] __x64_sys_openat+0x139/0x160 [ 598.975067][ T8931] do_syscall_64+0x55/0xa0 [ 598.979525][ T8931] ? clear_bhb_loop+0x40/0x90 [ 598.984229][ T8931] ? clear_bhb_loop+0x40/0x90 [ 598.988934][ T8931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.994866][ T8931] RIP: 0033:0x7fb708d5cfce [ 598.999406][ T8931] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 599.019040][ T8931] RSP: 002b:00007fb706ff5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 599.027488][ T8931] RAX: ffffffffffffffda RBX: 00007fb706ff66c0 RCX: 00007fb708d5cfce [ 599.035486][ T8931] RDX: 0000000000000e82 RSI: 00007fb706ff5c00 RDI: ffffffffffffff9c [ 599.043655][ T8931] RBP: 00007fb706ff5c00 R08: 0000000000000000 R09: 0000000000000000 [ 599.051662][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 599.059662][ T8931] R13: 00007fb709016128 R14: 00007fb709016090 R15: 00007fff680f5ef8 [ 599.067664][ T8931] [ 599.071098][ T8931] Kernel Offset: disabled [ 599.075508][ T8931] Rebooting in 86400 seconds..