last executing test programs: 8m17.048613956s ago: executing program 4 (id=419): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000080)='./bus\x00', 0x163242, 0x0) getdents(r0, 0x0, 0x0) 8m16.70940144s ago: executing program 4 (id=424): syz_emit_ethernet(0x32, &(0x7f00000001c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x8}}}}}}}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) connect$ax25(r0, &(0x7f0000000180)={{0x3, @default, 0x8}, [@null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) 8m16.337510098s ago: executing program 4 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2505000000200001800d0001007564700606568d678b"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 8m16.06176208s ago: executing program 4 (id=435): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003c3000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000240)=0x100000001, 0x9, 0x0) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000008000/0x1000)=nil, 0x2) 8m14.3158546s ago: executing program 4 (id=450): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) fcntl$setstatus(r0, 0x4, 0x2c00) 8m13.98621674s ago: executing program 4 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x24, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) 7m58.825767492s ago: executing program 32 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x24, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) 7m54.806847134s ago: executing program 0 (id=623): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0x6, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140)=0xd5, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) 7m54.653949145s ago: executing program 0 (id=625): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x2000000d}) 7m54.471359939s ago: executing program 0 (id=626): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xf, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ed0}, 0x94) 7m54.395190479s ago: executing program 0 (id=627): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 7m54.325905265s ago: executing program 0 (id=628): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 7m54.252947346s ago: executing program 0 (id=629): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xff}}]}, 0xb4}}, 0x0) 7m38.711273193s ago: executing program 33 (id=629): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0xff}}]}, 0xb4}}, 0x0) 3m0.613245819s ago: executing program 2 (id=4031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x7) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x42, r1, 0x0, 0x0, 0x34}, &(0x7f00000000c0)={0x0, 0x0, 0x8000000, 0x7, 0x0, r1, 0x0, 0x0, 0x7, 0x0, 0x1, r1}]) 3m0.346209008s ago: executing program 2 (id=4037): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) get_mempolicy(0x0, 0x0, 0xa1ff, &(0x7f000059c000/0x2000)=nil, 0x3) 3m0.153494876s ago: executing program 2 (id=4039): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000003700)=ANY=[]) 2m57.026054776s ago: executing program 2 (id=4094): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0\x00') 2m56.834446503s ago: executing program 2 (id=4096): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 2m55.850280111s ago: executing program 2 (id=4110): write$tun(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 2m55.346837804s ago: executing program 34 (id=4110): write$tun(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 4.649783443s ago: executing program 6 (id=6550): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000140), &(0x7f00000001c0)=r0}, 0x20) 4.537170378s ago: executing program 1 (id=6552): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x4, 0x7, 0x80005, 0x0, 0x0, 0x1, '&\x00', 0xc, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000040000003003e00ebffffff9402"], 0x78) 4.494148986s ago: executing program 6 (id=6554): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_TUPLE_MASTER={0x40, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0) 3.610215304s ago: executing program 6 (id=6566): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000180)={0x4000, r0}, 0x0) landlock_restrict_self(r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1) 3.593853678s ago: executing program 1 (id=6567): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r1], 0x44}}, 0x0) 3.507634845s ago: executing program 6 (id=6569): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.404278047s ago: executing program 1 (id=6572): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x21, 0x7, {0x7, 0x10, "8a707c23dc"}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000040)={0x20, 0xc, 0x15, {0x15, 0x23, "3640054a348017cd8e9b15e0d04e0a1c697aac"}}, 0x0, 0x0, 0x0}, 0x0) 2.71854016s ago: executing program 7 (id=6584): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.572541164s ago: executing program 5 (id=6586): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) shutdown(r0, 0x0) 2.378174343s ago: executing program 7 (id=6587): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe654, 0x1, 0x1, 0x80000}, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2.244387067s ago: executing program 7 (id=6589): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$igmp(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000240)={0x0}) 2.049722944s ago: executing program 7 (id=6591): syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.862255077s ago: executing program 7 (id=6593): unshare(0x20000400) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) kcmp(0x0, 0x0, 0xde6c8001d5ed5ea6, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 1.578474182s ago: executing program 7 (id=6596): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.278175271s ago: executing program 1 (id=6597): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0xc796, 0x4) 1.230530456s ago: executing program 5 (id=6599): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1.080755954s ago: executing program 1 (id=6600): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x48004) read$alg(r1, &(0x7f0000000000)=""/35, 0x1cc) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) 978.62114ms ago: executing program 5 (id=6602): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x10040a4, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x5, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000200)=0x7fff, 0x4) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000b00)={0xa, 0x4e20, 0x0, @local, 0x2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) 841.381528ms ago: executing program 3 (id=6603): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 745.96816ms ago: executing program 3 (id=6604): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/57, 0x39}, {&(0x7f0000000340)=""/158, 0x5b}, {0x0}], 0x3}, 0xff}], 0x1, 0x0, 0x0) 712.391706ms ago: executing program 3 (id=6605): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 697.90957ms ago: executing program 1 (id=6606): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x3, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0xd}, 0x40000) 634.115494ms ago: executing program 5 (id=6607): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r0, 0xac926000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) memfd_create(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 623.384209ms ago: executing program 6 (id=6608): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) connect$unix(r2, 0x0, 0x0) 589.350542ms ago: executing program 3 (id=6609): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 450.963022ms ago: executing program 5 (id=6610): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x20002, r0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000100)) 349.867938ms ago: executing program 3 (id=6611): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1, 0x400}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 302.339451ms ago: executing program 6 (id=6612): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 40.20379ms ago: executing program 3 (id=6613): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f00000004c0)=@file={0x1}, 0x6e) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 0s ago: executing program 5 (id=6614): syz_open_dev$vim2m(0x0, 0x8, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081003000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14068 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306112f6c9 code=0x7ffc0000 [ 434.406612][ T38] audit: type=1326 audit(1762605686.088:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14068 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306112f6c9 code=0x7ffc0000 [ 434.459896][ T38] audit: type=1326 audit(1762605686.158:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14068 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f306112f6c9 code=0x7ffc0000 [ 434.459954][ T38] audit: type=1326 audit(1762605686.158:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14068 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306112f6c9 code=0x7ffc0000 [ 434.460000][ T38] audit: type=1326 audit(1762605686.158:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14068 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306112f6c9 code=0x7ffc0000 [ 434.461178][ T38] audit: type=1326 audit(1762605686.158:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14068 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f306112f6c9 code=0x7ffc0000 [ 434.461234][ T38] audit: type=1326 audit(1762605686.158:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14068 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306112f6c9 code=0x7ffc0000 [ 434.462511][ T38] audit: type=1326 audit(1762605686.158:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14068 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f306112f6c9 code=0x7ffc0000 [ 434.462563][ T38] audit: type=1326 audit(1762605686.158:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14068 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306112f6c9 code=0x7ffc0000 [ 434.476143][ T38] audit: type=1326 audit(1762605686.168:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14068 comm="syz.2.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f306112f6c9 code=0x7ffc0000 [ 434.596627][T14074] binder: 14072:14074 ioctl c018620c 200000000000 returned -22 [ 435.914681][T14123] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input31 [ 436.077270][T14132] binder: BINDER_SET_CONTEXT_MGR already set [ 436.077288][T14132] binder: 14131:14132 ioctl 40046207 0 returned -16 [ 436.782323][T14165] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3627'. [ 436.785354][T14165] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3627'. [ 436.997007][ T37] Bluetooth: hci5: Frame reassembly failed (-84) [ 436.997047][ T37] Bluetooth: hci5: Frame reassembly failed (-84) [ 438.145231][T14193] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3640'. [ 438.368746][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 438.525581][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.525655][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.565713][ T9] usb 3-1: New USB device found, idVendor=05a5, idProduct=a4a1, bcdDevice= 0.40 [ 438.565744][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.565765][ T9] usb 3-1: Product: syz [ 438.565780][ T9] usb 3-1: Manufacturer: syz [ 438.565795][ T9] usb 3-1: SerialNumber: syz [ 438.634574][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.654691][ T9] cdc_ncm 3-1:1.0: skipping garbage [ 438.818561][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.998764][ T62] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 439.218551][ T5889] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 439.388617][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 439.396362][ T5889] usb 6-1: unable to get BOS descriptor or descriptor too short [ 439.398064][ T5889] usb 6-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config [ 439.398196][ T5889] usb 6-1: config 1 interface 0 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.398230][ T5889] usb 6-1: config 1 interface 0 has no altsetting 0 [ 439.446296][ T5889] usb 6-1: string descriptor 0 read error: -22 [ 439.446600][ T5889] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.446629][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.496665][ T5889] usb 6-1: bad CDC descriptors [ 439.708485][ T9] cdc_ncm 3-1:1.0: bind() failure [ 439.729410][ T5873] usb 6-1: USB disconnect, device number 19 [ 439.768562][ T9] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 439.796024][ T9] usb 3-1: USB disconnect, device number 25 [ 440.558183][T14291] netlink: 'syz.5.3687': attribute type 10 has an invalid length. [ 440.651200][T14297] netlink: 'syz.5.3687': attribute type 10 has an invalid length. [ 440.818579][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 440.868794][T14291] dummy0: entered allmulticast mode [ 440.870211][T14291] team0: Port device dummy0 added [ 440.949332][T14297] dummy0: left allmulticast mode [ 440.981015][T14297] team0: Port device dummy0 removed [ 441.002071][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.002100][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.003973][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 441.004002][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 441.004023][ T9] usb 3-1: SerialNumber: syz [ 441.053082][T14297] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 441.159163][T14314] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 441.159196][T14314] CIFS mount error: No usable UNC path provided in device string! [ 441.159196][T14314] [ 441.159484][T14314] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 441.314532][ T9] usb 3-1: 0:2 : does not exist [ 441.377743][ T9] usb 3-1: USB disconnect, device number 26 [ 441.456443][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.099501][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3712'. [ 442.343376][ T5882] IPVS: starting estimator thread 0... [ 442.347829][T14354] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 442.404759][T14359] vivid-004: disconnect [ 442.439469][T14357] IPVS: using max 7 ests per chain, 16800 per kthread [ 442.482296][ T5882] vivid-004: reconnect [ 442.675814][T14372] tipc: Started in network mode [ 442.675851][T14372] tipc: Node identity ac1414aa, cluster identity 4711 [ 442.711544][T14372] tipc: Enabled bearer , priority 10 [ 443.415999][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.550491][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 443.550511][ T38] audit: type=1326 audit(1762605695.248:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14401 comm="syz.2.3739" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f306112f6c9 code=0x0 [ 443.835285][ T31] tipc: Node number set to 2886997162 [ 444.278602][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 444.431294][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 444.436771][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 444.436805][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.436828][ T10] usb 7-1: Product: syz [ 444.436845][ T10] usb 7-1: Manufacturer: syz [ 444.436862][ T10] usb 7-1: SerialNumber: syz [ 444.485070][ T10] usb 7-1: config 0 descriptor?? [ 444.982473][ T10] usb 7-1: USB disconnect, device number 24 [ 445.491383][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.491727][T14482] loop0: Can't mount, would change RO state [ 445.644529][ T62] Bluetooth: hci2: unexpected event for opcode 0x0c58 [ 445.827709][T14499] binder: 14498:14499 ioctl c0306201 0 returned -14 [ 445.832052][T14499] binder: 14498:14499 ioctl 4008b100 0 returned -22 [ 446.148523][ T31] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 446.304834][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 446.306910][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 446.308172][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.308199][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.342939][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 446.343546][ T31] usb 3-1: string descriptor 0 read error: -22 [ 446.343675][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 446.343695][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.405663][ T31] usb 3-1: 0:2 : does not exist [ 446.498681][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 446.503171][ T10] usb 7-1: config 0 has an invalid interface number: 230 but max is 0 [ 446.503202][ T10] usb 7-1: config 0 has no interface number 0 [ 446.503256][ T10] usb 7-1: config 0 interface 230 has no altsetting 0 [ 446.543701][ T10] usb 7-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 446.543734][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.543756][ T10] usb 7-1: Product: syz [ 446.543772][ T10] usb 7-1: Manufacturer: syz [ 446.543789][ T10] usb 7-1: SerialNumber: syz [ 446.590634][ T10] usb 7-1: config 0 descriptor?? [ 446.595199][ T10] ums-usbat 7-1:0.230: USB Mass Storage device detected [ 446.613126][ T10] ums-usbat 7-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 447.175586][T14540] loop6: detected capacity change from 0 to 524287999 [ 447.439257][ T31] usb 3-1: 5:0: bogus dB values (-9931/-9623), disabling dB reporting [ 447.449965][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 447.477896][ T31] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 447.503226][ T31] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 447.638127][ T31] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 447.654454][ T31] usb 3-1: USB disconnect, device number 27 [ 447.658485][ T5818] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 447.818557][ T5818] usb 6-1: Using ep0 maxpacket: 8 [ 447.821011][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 447.821047][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 447.821074][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 447.824493][ T5818] usb 6-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 447.824525][ T5818] usb 6-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 447.824549][ T5818] usb 6-1: Product: syz [ 447.824566][ T5818] usb 6-1: Manufacturer: syz [ 447.824582][ T5818] usb 6-1: SerialNumber: syz [ 447.900958][ T5818] usb 6-1: config 0 descriptor?? [ 447.907366][ T5818] smsusb:smsusb_probe: board id=2, interface number 0 [ 447.908323][ T5818] smsusb:smsusb_probe: Device initialized with return code -19 [ 448.121267][ T5818] usb 6-1: USB disconnect, device number 20 [ 449.023400][ T10] ums-usbat 7-1:0.230: probe with driver ums-usbat failed with error -5 [ 449.143746][ T10] usb 7-1: USB disconnect, device number 25 [ 449.633189][T14606] overlayfs: failed to clone lowerpath [ 449.723731][ T62] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 449.723901][ T62] Bluetooth: hci2: Injecting HCI hardware error event [ 449.728007][ T5820] Bluetooth: hci2: hardware error 0x00 [ 450.828617][ T5818] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 451.007009][ T5818] usb 7-1: Using ep0 maxpacket: 8 [ 451.010036][ T5818] usb 7-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 451.010113][ T5818] usb 7-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 451.010145][ T5818] usb 7-1: config 0 interface 0 has no altsetting 0 [ 451.010182][ T5818] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 451.010208][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.071339][ T5818] usb 7-1: config 0 descriptor?? [ 451.501167][ T5818] gt683r_led 0003:1770:FF00.0019: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.6-1/input0 [ 451.695896][ T5818] usb 7-1: USB disconnect, device number 26 [ 451.717881][ T5947] gt683r_led 0003:1770:FF00.0019: failed to send set report request: -19 [ 451.959076][ T5820] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 452.546351][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 453.128552][ T5947] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 453.281473][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.281529][ T5947] usb 6-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 453.281556][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.323583][ T5947] usb 6-1: config 0 descriptor?? [ 453.572945][ T5947] usbhid 6-1:0.0: can't add hid device: -71 [ 453.573079][ T5947] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 453.616086][ T5947] usb 6-1: USB disconnect, device number 21 [ 453.818795][ T31] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 453.968921][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 453.975699][ T31] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.975739][ T31] usb 7-1: config 0 interface 0 has no altsetting 0 [ 453.975778][ T31] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 453.975806][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.986411][ T31] usb 7-1: config 0 descriptor?? [ 454.442670][ T31] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 454.867201][ T5889] usb 7-1: USB disconnect, device number 27 [ 455.720346][ T31] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 455.871357][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 455.871397][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 455.871444][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 455.871470][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.880412][ T31] usb 2-1: config 0 descriptor?? [ 455.881796][T14811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 456.328634][ T31] microsoft 0003:045E:009D.001B: hidraw0: USB HID vff.fa Device [HID 045e:009d] on usb-dummy_hcd.1-1/input0 [ 456.328673][ T31] microsoft 0003:045E:009D.001B: no inputs found [ 456.328689][ T31] microsoft 0003:045E:009D.001B: could not initialize ff, continuing anyway [ 456.517617][ T5947] usb 2-1: USB disconnect, device number 23 [ 457.148888][ T31] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 457.301771][ T31] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 457.301805][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.321308][ T31] usb 6-1: config 0 descriptor?? [ 457.668588][ T31] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 457.866469][ T31] [drm:udl_init] *ERROR* Selecting channel failed [ 457.980071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 458.093052][ T31] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 458.093080][ T31] [drm] Initialized udl on minor 2 [ 458.099837][ T31] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 458.100230][ T31] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 458.103993][ T31] usb 6-1: USB disconnect, device number 22 [ 458.104181][ T5915] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 458.104580][ T5915] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 458.104771][ T5915] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 458.808564][ T5818] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 458.961009][ T5818] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 458.961044][ T5818] usb 6-1: config 0 interface 0 has no altsetting 0 [ 458.964076][ T5818] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 458.964107][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 458.964130][ T5818] usb 6-1: Product: syz [ 458.964146][ T5818] usb 6-1: Manufacturer: syz [ 458.964162][ T5818] usb 6-1: SerialNumber: syz [ 459.032576][ T5818] usb 6-1: config 0 descriptor?? [ 459.052578][ T5818] usb 6-1: selecting invalid altsetting 0 [ 459.360093][ T5873] usb 6-1: USB disconnect, device number 23 [ 459.538551][ T5915] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 459.688523][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 459.691024][ T5915] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.691056][ T5915] usb 3-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 459.691085][ T5915] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 459.691122][ T5915] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 459.691146][ T5915] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 459.691190][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 459.691223][ T5915] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 459.691248][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.712231][ T5915] usb 3-1: config 0 descriptor?? [ 459.790056][ T38] audit: type=1326 audit(1762605711.488:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 459.790224][ T38] audit: type=1326 audit(1762605711.488:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 459.790579][ T38] audit: type=1326 audit(1762605711.488:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 459.791367][ T38] audit: type=1326 audit(1762605711.488:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 459.791698][ T38] audit: type=1326 audit(1762605711.488:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc5c21c1f85 code=0x7ffc0000 [ 459.791864][ T38] audit: type=1326 audit(1762605711.488:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 459.792993][ T38] audit: type=1326 audit(1762605711.488:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc5c21c1f85 code=0x7ffc0000 [ 459.841114][ T38] audit: type=1326 audit(1762605711.538:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc5c21c1f85 code=0x7ffc0000 [ 459.847710][ T38] audit: type=1326 audit(1762605711.538:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc5c21c1f85 code=0x7ffc0000 [ 459.859669][ T38] audit: type=1326 audit(1762605711.548:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14945 comm="syz.1.3992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc5c21c1f85 code=0x7ffc0000 [ 460.163445][ T5915] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0 [ 460.163486][ T5915] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0 [ 460.163517][ T5915] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0 [ 460.163546][ T5915] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0 [ 460.163575][ T5915] hid-thrustmaster 0003:044F:B65D.001C: unknown main item tag 0x0 [ 460.217135][ T5915] hid-thrustmaster 0003:044F:B65D.001C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 460.217504][ T5915] hid-thrustmaster 0003:044F:B65D.001C: setup data couldn't be sent [ 460.412004][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3999'. [ 460.412032][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3999'. [ 460.416031][ C1] hid-thrustmaster 0003:044F:B65D.001C: URB to get model id failed with error -71 [ 460.449445][ T5818] usb 3-1: USB disconnect, device number 28 [ 460.754949][ T5915] kernel read not supported for file /vcs1 (pid: 5915 comm: kworker/1:6) [ 461.290118][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4017'. [ 461.290166][T15002] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4017'. [ 462.022965][T15026] batadv_slave_1: entered promiscuous mode [ 462.048910][T15025] batadv_slave_1: left promiscuous mode [ 462.158573][ T5818] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 462.321741][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 462.321778][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 462.321807][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 462.321823][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 462.321864][ T5818] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 462.321881][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.328166][ T5818] usb 6-1: config 0 descriptor?? [ 462.758794][ T5882] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 462.763052][ T5818] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 462.763095][ T5818] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 462.763125][ T5818] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 462.763153][ T5818] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 462.763181][ T5818] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 462.821148][ T5818] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 462.908628][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 462.910805][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 462.910854][ T5882] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 462.910871][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.927299][ T5882] usb 3-1: config 0 descriptor?? [ 463.040701][ T5818] usb 6-1: USB disconnect, device number 24 [ 463.189729][ T5882] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 463.748558][ T5915] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 463.912594][ T5915] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 463.912679][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.912709][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.912734][ T5915] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 463.912778][ T5915] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 463.913860][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.922831][ T5915] usb 7-1: config 0 descriptor?? [ 464.376350][ T5915] plantronics 0003:047F:FFFF.001E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 464.557952][ T5915] usb 7-1: USB disconnect, device number 28 [ 465.221602][T15130] infiniband syz0: set active [ 465.221625][T15130] infiniband syz0: added bond_slave_0 [ 465.395749][T15130] RDS/IB: syz0: added [ 465.401685][T15130] smc: adding ib device syz0 with port count 1 [ 465.401949][T15130] smc: ib device syz0 port 1 has no pnetid [ 465.587379][ T5915] usb 3-1: USB disconnect, device number 29 [ 465.619171][T15161] sctp: [Deprecated]: syz.6.4092 (pid 15161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.619171][T15161] Use struct sctp_sack_info instead [ 466.888611][ T5947] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 466.908606][ T5915] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 467.058528][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 467.060607][ T5915] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.060634][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 467.060663][ T5915] usb 2-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00 [ 467.060685][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.065818][ T5915] usb 2-1: config 0 descriptor?? [ 467.070596][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.070631][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.070656][ T5947] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.070701][ T5947] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.070726][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.172629][ T5947] usb 7-1: config 0 descriptor?? [ 467.515158][ T5915] uclogic 0003:2179:0077.001F: interface is invalid, ignoring [ 467.576874][ T1502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.599039][ T5947] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 467.667111][ T5947] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 467.731271][ T5915] usb 2-1: USB disconnect, device number 24 [ 467.912445][ T5882] usb 7-1: USB disconnect, device number 29 [ 468.051724][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 468.082811][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.099042][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.106844][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.127070][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.153609][ T1502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.581107][ T1502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.877785][T15228] loop6: detected capacity change from 0 to 7 [ 468.906572][T15228] Dev loop6: unable to read RDB block 7 [ 468.906623][T15228] loop6: unable to read partition table [ 468.906882][T15228] loop6: partition table beyond EOD, truncated [ 468.906947][T15228] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 469.274539][T15239] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4132'. [ 469.372004][ T1502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.433432][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4129'. [ 470.283972][ T5820] Bluetooth: hci2: command tx timeout [ 470.548873][ T1502] bridge_slave_1: left allmulticast mode [ 470.548904][ T1502] bridge_slave_1: left promiscuous mode [ 470.549167][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.640475][ T1502] bridge_slave_0: left allmulticast mode [ 470.640509][ T1502] bridge_slave_0: left promiscuous mode [ 470.640800][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.389972][ T5820] Bluetooth: hci2: command tx timeout [ 473.736192][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.813264][ C0] vkms_vblank_simulate: vblank timer overrun [ 474.448881][ T5820] Bluetooth: hci2: command tx timeout [ 474.717107][ T1502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.790815][ T1502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.833875][ T1502] bond0 (unregistering): Released all slaves [ 474.985596][T15327] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4173'. [ 475.205608][ T1502] tipc: Disabling bearer [ 475.207305][ T1502] tipc: Left network mode [ 475.219294][T15206] chnl_net:caif_netlink_parms(): no params data found [ 475.331912][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.470057][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.538532][ T5915] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 475.691878][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 475.694534][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 475.694571][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 475.694617][ T5915] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 475.694644][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.731169][ T5915] usb 2-1: config 0 descriptor?? [ 476.183037][ T5915] hid_parser_main: 25 callbacks suppressed [ 476.183062][ T5915] uclogic 0003:5543:0781.0021: unknown main item tag 0x0 [ 476.183095][ T5915] uclogic 0003:5543:0781.0021: unknown main item tag 0x0 [ 476.183124][ T5915] uclogic 0003:5543:0781.0021: unknown main item tag 0x0 [ 476.183153][ T5915] uclogic 0003:5543:0781.0021: unknown main item tag 0x0 [ 476.183179][ T5915] uclogic 0003:5543:0781.0021: unknown main item tag 0x0 [ 476.204234][ T5915] uclogic 0003:5543:0781.0021: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 476.410992][ T5889] usb 2-1: USB disconnect, device number 25 [ 476.528642][ T5820] Bluetooth: hci2: command tx timeout [ 477.152356][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.195992][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 477.331297][T15206] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.331491][T15206] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.331864][T15206] bridge_slave_0: entered allmulticast mode [ 477.341433][T15206] bridge_slave_0: entered promiscuous mode [ 477.366262][T15206] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.367675][T15206] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.367958][T15206] bridge_slave_1: entered allmulticast mode [ 477.379273][T15206] bridge_slave_1: entered promiscuous mode [ 477.423630][T15441] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 477.423686][T15441] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 477.423717][T15441] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 477.470482][T15443] overlayfs: failed to clone lowerpath [ 477.600885][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.732528][T15206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.759222][T15206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.296905][T15206] team0: Port device team_slave_0 added [ 478.310277][T15206] team0: Port device team_slave_1 added [ 479.528909][ T1502] hsr_slave_0: left promiscuous mode [ 479.590909][ T1502] hsr_slave_1: left promiscuous mode [ 479.763487][ T1502] veth1_macvtap: left promiscuous mode [ 479.763606][ T1502] veth0_macvtap: left promiscuous mode [ 479.763896][ T1502] veth1_vlan: left promiscuous mode [ 481.481702][ T38] kauditd_printk_skb: 193 callbacks suppressed [ 481.481723][ T38] audit: type=1326 audit(1762605734.177:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.6.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a275df6c9 code=0x7ffc0000 [ 481.525082][ T38] audit: type=1326 audit(1762605734.197:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.6.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9a275df6c9 code=0x7ffc0000 [ 481.530589][ T38] audit: type=1326 audit(1762605734.227:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.6.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a275df6c9 code=0x7ffc0000 [ 481.534166][ T38] audit: type=1326 audit(1762605734.227:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.6.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a275df6c9 code=0x7ffc0000 [ 481.535885][ T38] audit: type=1326 audit(1762605734.227:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.6.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9a275df6c9 code=0x7ffc0000 [ 481.539451][ T38] audit: type=1326 audit(1762605734.227:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.6.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a275df6c9 code=0x7ffc0000 [ 481.539511][ T38] audit: type=1326 audit(1762605734.227:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.6.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a275df6c9 code=0x7ffc0000 [ 481.539558][ T38] audit: type=1326 audit(1762605734.227:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.6.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f9a275df6c9 code=0x7ffc0000 [ 481.539606][ T38] audit: type=1326 audit(1762605734.227:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.6.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a275df6c9 code=0x7ffc0000 [ 481.539652][ T38] audit: type=1326 audit(1762605734.227:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15547 comm="syz.6.4276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f9a275df6c9 code=0x7ffc0000 [ 481.668490][ T5889] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 481.844803][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 481.854746][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.854781][ T5889] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.854806][ T5889] usb 2-1: config 0 interface 0 has no altsetting 0 [ 481.854842][ T5889] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 481.854868][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.870778][ T5889] usb 2-1: config 0 descriptor?? [ 481.938572][ T5873] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 482.083703][T15545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.084153][T15545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.088580][ T5873] usb 6-1: Using ep0 maxpacket: 32 [ 482.091324][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.091355][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.091392][ T5873] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 482.091422][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.154703][ T5873] usb 6-1: config 0 descriptor?? [ 482.300727][ T5889] hid (null): unknown global tag 0xc [ 482.300766][ T5889] hid (null): unknown global tag 0xd [ 482.514683][ T5889] usb 2-1: USB disconnect, device number 26 [ 482.610520][ T5873] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 482.610556][ T5873] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 482.610582][ T5873] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 482.610609][ T5873] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 482.610635][ T5873] savu 0003:1E7D:2D5A.0023: unknown main item tag 0x0 [ 482.610660][ T5873] savu 0003:1E7D:2D5A.0023: unbalanced collection at end of report description [ 482.611429][ T5873] savu 0003:1E7D:2D5A.0023: parse failed [ 482.611498][ T5873] savu 0003:1E7D:2D5A.0023: probe with driver savu failed with error -22 [ 482.807488][ T5873] usb 6-1: USB disconnect, device number 25 [ 484.198582][ T5873] page_pool_release_retry() stalled pool shutdown: id 84, 1 inflight 60 sec [ 484.519857][ T1124] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 485.381590][ T1502] team0 (unregistering): Port device team_slave_1 removed [ 489.380500][T15206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.380520][T15206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.380553][T15206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.510682][T15206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.510702][T15206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.510735][T15206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.917036][T15206] hsr_slave_0: entered promiscuous mode [ 489.921353][T15206] hsr_slave_1: entered promiscuous mode [ 489.924427][T15206] debugfs: 'hsr0' already exists in 'hsr' [ 489.924460][T15206] Cannot create hsr debugfs directory [ 491.118201][T15838] syzkaller1: entered promiscuous mode [ 491.118231][T15838] syzkaller1: entered allmulticast mode [ 491.360125][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 491.646637][T15863] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4422'. [ 491.728574][ T5915] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 491.879039][ T5915] usb 7-1: Using ep0 maxpacket: 16 [ 491.881712][ T5915] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 491.881742][ T5915] usb 7-1: config 0 has no interface number 0 [ 491.881792][ T5915] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 491.881820][ T5915] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 491.884973][ T5915] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 491.885009][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.885032][ T5915] usb 7-1: Product: syz [ 491.885048][ T5915] usb 7-1: Manufacturer: syz [ 491.885064][ T5915] usb 7-1: SerialNumber: syz [ 491.902188][ T5915] usb 7-1: config 0 descriptor?? [ 491.903601][T15857] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 491.903849][T15857] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 492.032830][T15206] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 492.142810][T15206] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 492.159254][T15857] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 492.159407][T15857] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 492.219908][T15206] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 492.361037][T15883] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4430'. [ 492.362778][T15206] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 492.770523][ T5915] asix 7-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0xb1 [ 492.822163][T15206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.873558][T15206] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.905212][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.905454][ T3655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.953134][ T3655] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.953293][ T3655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.985709][ T5873] usb 7-1: USB disconnect, device number 30 [ 493.313915][T15914] overlayfs: missing 'lowerdir' [ 493.762906][T15206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.041445][T15938] overlayfs: failed to clone upperpath [ 494.422880][T15953] 9pnet_fd: Insufficient options for proto=fd [ 494.720040][T15965] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.4462'. [ 494.781198][T15206] veth0_vlan: entered promiscuous mode [ 494.828987][T15206] veth1_vlan: entered promiscuous mode [ 494.905816][T15206] veth0_macvtap: entered promiscuous mode [ 494.939179][T15206] veth1_macvtap: entered promiscuous mode [ 494.975666][T15206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.019844][T15206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.061240][ T153] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.061488][ T153] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.061529][ T153] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.061569][ T153] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.430540][ T3655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.430563][ T3655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.546403][ T1542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.546425][ T1542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.939738][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4112'. [ 495.955139][T16007] vlan2: entered allmulticast mode [ 495.955669][T16007] bridge0: port 3(vlan2) entered blocking state [ 495.955931][T16007] bridge0: port 3(vlan2) entered disabled state [ 495.960920][T16007] vlan2: entered promiscuous mode [ 496.155576][T16019] netlink: 'syz.7.4487': attribute type 23 has an invalid length. [ 496.577398][T16038] netlink: 'syz.6.4496': attribute type 29 has an invalid length. [ 496.582754][T16038] netlink: 'syz.6.4496': attribute type 29 has an invalid length. [ 496.583982][T16038] netlink: 500 bytes leftover after parsing attributes in process `syz.6.4496'. [ 496.732658][ T5873] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 496.900138][ T5873] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 496.900173][ T5873] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 496.900195][ T5873] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 496.900225][ T5873] usb 6-1: config 220 has no interface number 2 [ 496.900309][ T5873] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 496.900341][ T5873] usb 6-1: config 220 interface 0 has no altsetting 0 [ 496.900362][ T5873] usb 6-1: config 220 interface 76 has no altsetting 0 [ 496.900383][ T5873] usb 6-1: config 220 interface 1 has no altsetting 0 [ 496.911734][ T5873] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 496.911775][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.911801][ T5873] usb 6-1: Product: syz [ 496.911818][ T5873] usb 6-1: Manufacturer: syz [ 496.911838][ T5873] usb 6-1: SerialNumber: syz [ 497.210107][ T5873] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 497.210156][ T5873] uvcvideo 6-1:220.0: No valid video chain found. [ 497.210222][ T5873] usb 6-1: selecting invalid altsetting 0 [ 497.270725][ T5873] usb 6-1: selecting invalid altsetting 0 [ 497.270768][ T5873] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 497.341506][ T5873] usb 6-1: USB disconnect, device number 26 [ 497.976294][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4516'. [ 498.468932][ T5882] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 498.622918][ T5882] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 498.632099][ T5882] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 498.632144][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.632171][ T5882] usb 8-1: Product: syz [ 498.632187][ T5882] usb 8-1: Manufacturer: syz [ 498.632211][ T5882] usb 8-1: SerialNumber: syz [ 498.730123][ T5882] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 499.207936][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 499.207957][ T38] audit: type=1326 audit(1762605751.897:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16128 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 499.208013][ T38] audit: type=1326 audit(1762605751.897:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16128 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 499.209998][ T38] audit: type=1326 audit(1762605751.897:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16128 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 499.210498][ T38] audit: type=1326 audit(1762605751.907:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16128 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 499.211482][ T38] audit: type=1326 audit(1762605751.907:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16128 comm="syz.1.4538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 499.475503][T16137] batadv_slave_1: entered promiscuous mode [ 499.497374][T16135] batadv_slave_1: left promiscuous mode [ 499.588021][ T5882] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 499.629071][ T5882] usb 8-1: USB disconnect, device number 2 [ 500.294333][T16175] input: syz1 as /devices/virtual/input/input33 [ 500.593722][T16188] input: syz0 as /devices/virtual/input/input34 [ 501.385197][T16216] nullb0: [POWERTEC] p1 [ 501.385337][T16216] nullb0: p1 size 809004142 extends beyond EOD, truncated [ 503.903802][T16285] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4605'. [ 504.259940][ T5915] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 504.378496][ T5947] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 504.411352][ T5915] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.411387][ T5915] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 504.411442][ T5915] usb 8-1: New USB device found, idVendor=046d, idProduct=005c, bcdDevice= 0.00 [ 504.411468][ T5915] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.449248][ T5915] usb 8-1: config 0 descriptor?? [ 504.550072][ T5947] usb 7-1: Using ep0 maxpacket: 16 [ 504.562011][ T5947] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 504.562046][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.562071][ T5947] usb 7-1: Product: syz [ 504.562090][ T5947] usb 7-1: Manufacturer: syz [ 504.562108][ T5947] usb 7-1: SerialNumber: syz [ 504.592010][ T5947] usb 7-1: config 0 descriptor?? [ 504.988547][ T5915] hid-generic 0003:046D:005C.0024: hidraw0: USB HID v0.00 Device [HID 046d:005c] on usb-dummy_hcd.7-1/input0 [ 505.028056][ T5947] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 505.059546][ T5947] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 505.060641][ T5947] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 505.060702][ T5947] usb 7-1: media controller created [ 505.134346][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 505.170029][ T5889] usb 8-1: USB disconnect, device number 3 [ 505.235674][ T5947] zl10353_read_register: readreg error (reg=127, ret==0) [ 505.235741][ T5947] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 505.235756][ T5947] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 505.269745][ T5947] usb 7-1: USB disconnect, device number 31 [ 505.356850][ T5947] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 505.818700][ T5947] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 505.964407][T16344] trusted_key: syz.5.4635 sent an empty control message without MSG_MORE. [ 505.981024][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 505.981064][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 505.981112][ T5947] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 505.981140][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.031313][ T5947] usb 2-1: config 0 descriptor?? [ 506.032561][T16332] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 506.140572][T16347] syzkaller1: entered promiscuous mode [ 506.140603][T16347] syzkaller1: entered allmulticast mode [ 506.203768][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4640'. [ 506.469897][ T5947] hid-rmi 0003:0461:4E72.0025: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 506.555213][T16352] veth1_macvtap: left promiscuous mode [ 506.660353][ T5915] usb 2-1: USB disconnect, device number 27 [ 506.939559][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.780209][T16412] binder: 16409:16412 ioctl c0306201 2000000000c0 returned -14 [ 508.032170][T16419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 509.430570][T16475] syz.5.4699(16475): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 510.311676][T16511] batadv_slave_1: entered promiscuous mode [ 510.313212][T16509] batadv_slave_1: left promiscuous mode [ 511.308634][ T989] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 511.465111][ T989] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.465145][ T989] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.467415][ T989] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 511.467449][ T989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 511.467475][ T989] usb 8-1: SerialNumber: syz [ 511.714451][ T989] usb 8-1: 0:2 : does not exist [ 511.770538][ T989] usb 8-1: USB disconnect, device number 4 [ 512.366348][T16586] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4751'. [ 513.461775][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 513.613467][ T10] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 513.613535][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 513.613566][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 513.613595][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 513.613623][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 513.613670][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.613695][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.698276][ T10] usb 8-1: config 0 descriptor?? [ 513.704589][T16616] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 513.805615][T16635] bond0: entered promiscuous mode [ 513.805641][T16635] bond_slave_0: entered promiscuous mode [ 513.805910][T16635] bond_slave_1: entered promiscuous mode [ 513.806110][T16635] dummy0: entered promiscuous mode [ 513.841575][T16635] batadv0: entered promiscuous mode [ 513.846499][T16635] debugfs: 'hsr1' already exists in 'hsr' [ 513.846529][T16635] Cannot create hsr debugfs directory [ 513.854573][T16635] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 513.898954][T16635] bond0: left promiscuous mode [ 513.898979][T16635] bond_slave_0: left promiscuous mode [ 513.899315][T16635] bond_slave_1: left promiscuous mode [ 513.899546][T16635] dummy0: left promiscuous mode [ 513.948976][T16635] batadv0: left promiscuous mode [ 514.138591][ T5889] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 514.141412][ T10] plantronics 0003:047F:FFFF.0026: reserved main item tag 0xd [ 514.170549][ T10] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 514.291714][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 514.295746][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.295784][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.295828][ T5889] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 514.295855][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.344890][ T5889] usb 2-1: config 0 descriptor?? [ 514.452169][ T5915] usb 8-1: USB disconnect, device number 5 [ 514.794376][ T5889] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 514.794419][ T5889] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 514.794449][ T5889] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 514.794480][ T5889] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 514.836773][ T5889] mcp2221 0003:04D8:00DD.0027: unknown main item tag 0x0 [ 514.851803][ T5889] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 515.039887][ T989] usb 2-1: USB disconnect, device number 28 [ 516.196166][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4810'. [ 516.196193][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4810'. [ 516.288750][T16714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4813'. [ 516.308010][T16716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4811'. [ 516.520541][ T1416] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 516.966550][T16716] hsr_slave_1 (unregistering): left promiscuous mode [ 518.895307][T16795] option changes via remount are deprecated (pid=16794 comm=syz.7.4850) [ 519.302435][ T5915] kernel write not supported for file bpf-prog (pid: 5915 comm: kworker/1:6) [ 519.488448][ T5947] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 519.641155][ T5947] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 519.641189][ T5947] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 519.641211][ T5947] usb 6-1: config 220 descriptor has 1 excess byte, ignoring [ 519.641233][ T5947] usb 6-1: config 220 has no interface number 2 [ 519.641313][ T5947] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 519.641345][ T5947] usb 6-1: config 220 interface 0 has no altsetting 0 [ 519.641366][ T5947] usb 6-1: config 220 interface 76 has no altsetting 0 [ 519.641385][ T5947] usb 6-1: config 220 interface 1 has no altsetting 0 [ 519.644399][ T5947] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 519.644426][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.644443][ T5947] usb 6-1: Product: syz [ 519.644455][ T5947] usb 6-1: Manufacturer: syz [ 519.644467][ T5947] usb 6-1: SerialNumber: syz [ 519.918302][T16832] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4866'. [ 519.939464][T16832] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4866'. [ 519.993116][ T5947] uvcvideo 6-1:220.1: Unknown video format c07fffff-ffff-ffff-ffff-ff0500000000 [ 519.993202][ T5947] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 519.993234][ T5947] uvcvideo 6-1:220.0: No valid video chain found. [ 519.993300][ T5947] usb 6-1: selecting invalid altsetting 0 [ 520.036054][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.053790][ T5947] usb 6-1: selecting invalid altsetting 0 [ 520.053834][ T5947] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 520.081117][ T5947] usb 6-1: USB disconnect, device number 27 [ 520.214516][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.470091][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.534872][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.804205][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.025393][T16840] bridge0: entered promiscuous mode [ 521.036457][T16840] macsec1: entered promiscuous mode [ 521.050871][T16840] bridge0: port 3(macsec1) entered blocking state [ 521.051109][T16840] bridge0: port 3(macsec1) entered disabled state [ 521.051409][T16840] macsec1: entered allmulticast mode [ 521.051429][T16840] bridge0: entered allmulticast mode [ 521.126891][T16840] macsec1: left allmulticast mode [ 521.126917][T16840] bridge0: left allmulticast mode [ 521.166271][T16840] bridge0: left promiscuous mode [ 521.294386][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.439485][T16846] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 521.742547][T16866] geneve2: entered promiscuous mode [ 521.742581][T16866] geneve2: entered allmulticast mode [ 522.305908][T16893] netlink: 'syz.1.4893': attribute type 83 has an invalid length. [ 523.353768][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.034049][T16980] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4934'. [ 525.368611][ T5947] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 525.529651][ T5947] usb 8-1: Using ep0 maxpacket: 32 [ 525.545274][ T5947] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 525.545304][ T5947] usb 8-1: config 0 has no interface number 0 [ 525.545371][ T5947] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 525.553999][ T5947] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 525.554034][ T5947] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.554056][ T5947] usb 8-1: Product: syz [ 525.554073][ T5947] usb 8-1: Manufacturer: syz [ 525.554090][ T5947] usb 8-1: SerialNumber: syz [ 525.610556][ T5947] usb 8-1: config 0 descriptor?? [ 525.630347][ T5947] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 525.630387][ T5947] em28xx 8-1:0.132: Video interface 132 found: [ 525.707200][ T989] IPVS: starting estimator thread 0... [ 525.798803][T17007] IPVS: using max 7 ests per chain, 16800 per kthread [ 525.985930][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4947'. [ 526.054264][ T5947] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 526.250257][ T989] kernel read not supported for file /audio1 (pid: 989 comm: kworker/1:2) [ 526.478481][ T5947] em28xx 8-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 526.478522][ T5947] em28xx 8-1:0.132: board has no eeprom [ 526.729742][ T5947] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 526.729775][ T5947] em28xx 8-1:0.132: analog set to bulk mode. [ 526.755780][ T5947] usb 8-1: USB disconnect, device number 6 [ 526.755863][ T9] em28xx 8-1:0.132: Registering V4L2 extension [ 526.777030][ T5947] em28xx 8-1:0.132: Disconnecting em28xx [ 526.808048][T17035] netlink: 'syz.1.4959': attribute type 1 has an invalid length. [ 526.892417][T17035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.116239][T17040] bond1: (slave veth3): Enslaving as an active interface with a down link [ 527.140317][ T9] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 527.140345][ T9] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 527.140361][ T9] em28xx 8-1:0.132: No AC97 audio processor [ 527.204172][ T9] usb 8-1: Decoder not found [ 527.204204][ T9] em28xx 8-1:0.132: failed to create media graph [ 527.204275][ T9] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 527.245066][ T9] em28xx 8-1:0.132: Remote control support is not available for this card. [ 527.245133][ T5947] em28xx 8-1:0.132: Closing input extension [ 527.271591][ T5947] em28xx 8-1:0.132: Freeing device [ 527.556331][T17055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.818814][ T5882] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 528.973807][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 528.976165][ T5882] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 528.976193][ T5882] usb 6-1: config 0 has no interface number 0 [ 528.991193][ T5882] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 528.991232][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.991259][ T5882] usb 6-1: Product: syz [ 528.991278][ T5882] usb 6-1: Manufacturer: syz [ 528.991296][ T5882] usb 6-1: SerialNumber: syz [ 529.043822][ T5882] usb 6-1: config 0 descriptor?? [ 529.059211][ T5882] smsc95xx v2.0.0 [ 529.518573][ T5882] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 529.518610][ T5882] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 530.122453][ T5882] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 530.122781][ T5882] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 530.149000][ T5882] usb 6-1: USB disconnect, device number 28 [ 531.835245][T17184] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5024'. [ 532.234135][T17201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5032'. [ 532.488764][ T5882] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 532.547040][T17218] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5039'. [ 532.638508][ T5882] usb 7-1: Using ep0 maxpacket: 32 [ 532.644465][ T5882] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 532.644498][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.673438][ T5882] usb 7-1: config 0 descriptor?? [ 532.716519][ T5882] gspca_main: sunplus-2.14.0 probing 041e:400b [ 533.268504][ T5889] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 533.433345][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.433383][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.433428][ T5889] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 533.433456][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.460068][ T5889] usb 6-1: config 0 descriptor?? [ 533.904907][ T5889] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 533.905051][ T5889] cm6533_jd 0003:0D8C:0022.0028: unknown main item tag 0x0 [ 533.949625][ T5882] gspca_sunplus: reg_w_riv err -71 [ 533.949731][ T5882] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 533.974330][ T5889] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0028/input/input36 [ 533.991878][ T5882] usb 7-1: USB disconnect, device number 32 [ 534.061222][ T5889] cm6533_jd 0003:0D8C:0022.0028: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 534.154968][ T5915] usb 6-1: USB disconnect, device number 29 [ 534.216730][T17266] netlink: 'syz.1.5059': attribute type 3 has an invalid length. [ 534.216754][T17266] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5059'. [ 534.845725][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.519644][T17304] input: syz0 as /devices/virtual/input/input37 [ 536.436559][T17335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5087'. [ 536.436587][T17335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5087'. [ 538.144970][T17381] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.145015][T17381] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.706422][T17381] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.706464][T17381] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.166510][T17381] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.166554][T17381] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.470735][T17443] netlink: 'syz.5.5144': attribute type 1 has an invalid length. [ 539.596243][T17381] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.596287][T17381] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.706907][T17448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.879621][T17445] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 539.882525][T17445] bond1: (slave batadv1): making interface the new active one [ 539.909580][T17445] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 540.121279][T17465] netlink: 'syz.5.5153': attribute type 10 has an invalid length. [ 540.217065][T17465] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.230490][T17465] bond0: (slave team0): Enslaving as an active interface with an up link [ 540.248584][ T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 540.252656][ T1502] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.252692][ T1502] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.335578][ T1124] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.335619][ T1124] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.407539][ T1502] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.407579][ T1502] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.427886][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.427953][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 540.427990][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 540.428021][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 540.474426][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 540.474460][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 540.474483][ T9] usb 2-1: Manufacturer: syz [ 540.524086][ T9] usb 2-1: config 0 descriptor?? [ 540.574172][ T1502] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.574212][ T1502] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.828456][ T9] rc_core: IR keymap rc-hauppauge not found [ 540.828480][ T9] Registered IR keymap rc-empty [ 540.831816][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 540.860911][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 540.880187][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 540.884426][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input38 [ 540.922843][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 540.957530][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 540.969419][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 541.006123][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 541.019498][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 541.039107][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 541.060330][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 541.079154][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 541.099402][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 541.129091][ T9] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 541.172086][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 541.172340][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 541.233492][ T9] usb 2-1: USB disconnect, device number 29 [ 541.746843][T17519] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5176'. [ 541.746877][T17519] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5176'. [ 541.909999][ T38] audit: type=1326 audit(1762605794.607:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17522 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 541.913389][ T38] audit: type=1326 audit(1762605794.607:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17522 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 541.920289][ T38] audit: type=1326 audit(1762605794.617:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17522 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 541.928684][ T38] audit: type=1326 audit(1762605794.617:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17522 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 541.928757][ T38] audit: type=1326 audit(1762605794.617:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17522 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 541.931295][ T38] audit: type=1326 audit(1762605794.627:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17522 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc5c21915e7 code=0x7ffc0000 [ 541.931353][ T38] audit: type=1326 audit(1762605794.627:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17522 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc5c219155c code=0x7ffc0000 [ 541.931403][ T38] audit: type=1326 audit(1762605794.627:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17522 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc5c2191494 code=0x7ffc0000 [ 541.931453][ T38] audit: type=1326 audit(1762605794.627:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17522 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fc5c2191494 code=0x7ffc0000 [ 541.931502][ T38] audit: type=1326 audit(1762605794.627:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17522 comm="syz.1.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc5c218e32a code=0x7ffc0000 [ 542.796868][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5173'. [ 543.674382][T17575] fuse: Bad value for 'fd' [ 543.742802][T17577] block nbd1: shutting down sockets [ 544.458533][ T5889] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 544.623954][ T5889] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 544.623989][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.653101][ T5889] usb 2-1: config 0 descriptor?? [ 544.672720][ T5889] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 544.879959][ T5889] gp8psk: usb in 128 operation failed. [ 544.883628][ T5889] gp8psk: usb in 137 operation failed. [ 544.883651][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 544.884674][ T5889] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 544.885379][ T5889] usb 2-1: media controller created [ 544.965655][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.979760][T17619] netlink: 'syz.6.5223': attribute type 3 has an invalid length. [ 545.007608][ T5889] gp8psk_fe: Frontend attached [ 545.018557][ T5889] usb 2-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 545.021187][ T5889] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 545.106264][ T5889] gp8psk: usb in 138 operation failed. [ 545.106287][ T5889] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 545.106302][ T5889] gp8psk: found Genpix USB device pID = 203 (hex) [ 545.130986][ T5889] usb 2-1: USB disconnect, device number 30 [ 545.241488][ T5889] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 545.973316][T17662] netlink: 'syz.5.5242': attribute type 13 has an invalid length. [ 546.110559][T17662] erspan0: left promiscuous mode [ 546.146939][T17662] erspan0: refused to change device tx_queue_len [ 546.147477][T17662] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 546.590377][T17692] netlink: 'syz.7.5256': attribute type 4 has an invalid length. [ 546.590402][T17692] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5256'. [ 546.638702][T17695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5257'. [ 546.646381][T17692] .`: renamed from bond0 (while UP) [ 547.048209][T17717] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5268'. [ 548.519495][ T1542] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 548.711005][T17782] hub 2-0:1.0: USB hub found [ 548.711555][T17782] hub 2-0:1.0: 1 port detected [ 549.878485][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 550.046863][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 550.051677][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 550.057673][ T10] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 550.057710][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.057735][ T10] usb 6-1: Product: syz [ 550.057752][ T10] usb 6-1: Manufacturer: syz [ 550.057768][ T10] usb 6-1: SerialNumber: syz [ 550.090822][ T10] usb 6-1: config 0 descriptor?? [ 550.550908][ T10] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 550.659604][ T5882] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 551.044377][ T5882] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 551.044435][ T5882] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 551.044461][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.101145][ T5882] usb 7-1: config 0 descriptor?? [ 551.102380][T17851] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 551.377702][ T10] usb 6-1: USB disconnect, device number 30 [ 551.625904][T17864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5336'. [ 551.625936][T17864] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5336'. [ 551.672196][ T5882] elan 0003:04F3:0755.0029: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 551.749795][T17868] loop6: detected capacity change from 0 to 524287999 [ 552.412632][ T10] usb 7-1: USB disconnect, device number 33 [ 553.079469][ T5947] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 553.247379][ T5947] usb 6-1: Using ep0 maxpacket: 32 [ 553.285224][ T5947] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.285272][ T5947] usb 6-1: config 0 has no interfaces? [ 553.285307][ T5947] usb 6-1: New USB device found, idVendor=056a, idProduct=0004, bcdDevice= 0.00 [ 553.285333][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.301607][ T5947] usb 6-1: config 0 descriptor?? [ 553.614189][ T5947] usb 6-1: USB disconnect, device number 31 [ 554.342248][T17935] Bluetooth: hci5: Frame reassembly failed (-84) [ 554.829031][ T5882] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 554.978836][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 554.981564][ T5882] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.981625][ T5882] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 554.981651][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.987220][ T5882] usb 6-1: config 0 descriptor?? [ 555.043762][ T5882] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 556.218508][ T5882] gspca_vc032x: reg_w err -71 [ 556.218607][ T5882] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 556.223066][ T5882] usb 6-1: USB disconnect, device number 32 [ 556.358925][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 556.409906][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.669969][T18017] netlink: 'syz.6.5408': attribute type 5 has an invalid length. [ 556.748966][ T5882] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 556.898841][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 556.909459][ T5882] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 556.909492][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.937976][ T5882] usb 2-1: config 0 descriptor?? [ 556.954532][ T5882] gspca_main: sq930x-2.14.0 probing 041e:403c [ 557.587205][T18050] overlayfs: failed to clone lowerpath [ 557.621513][T18050] overlayfs: failed to clone lowerpath [ 557.838586][ T5947] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 557.992739][ T5947] usb 7-1: Using ep0 maxpacket: 32 [ 557.995206][ T5947] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 557.995239][ T5947] usb 7-1: config 0 has no interface number 0 [ 557.995296][ T5947] usb 7-1: config 0 interface 184 has no altsetting 0 [ 558.008854][ T5947] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 558.008885][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.008906][ T5947] usb 7-1: Product: syz [ 558.008921][ T5947] usb 7-1: Manufacturer: syz [ 558.008937][ T5947] usb 7-1: SerialNumber: syz [ 558.027301][ T5947] usb 7-1: config 0 descriptor?? [ 558.095320][ T5947] smsc75xx v1.0.0 [ 558.218781][ T5882] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 558.218897][ T5882] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 558.242152][ T5882] usb 2-1: USB disconnect, device number 31 [ 558.536124][T18072] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 558.562624][T18072] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 558.562787][T18072] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 558.562929][T18072] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 558.563079][T18072] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 558.563226][T18072] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 558.563366][T18072] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 558.563515][T18072] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 558.563656][T18072] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 558.563791][T18072] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 559.850904][ T5947] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 559.906038][T18089] loop2: detected capacity change from 0 to 7 [ 559.915353][T18089] Dev loop2: unable to read RDB block 7 [ 559.915486][T18089] loop2: unable to read partition table [ 559.915969][T18089] loop2: partition table beyond EOD, truncated [ 559.915995][T18089] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 560.051555][ T5947] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 560.051590][ T5947] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 560.051611][ T5947] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 560.051636][ T5947] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 560.051944][ T5947] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 560.073176][ T5947] usb 7-1: USB disconnect, device number 34 [ 560.528454][ T5947] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 560.683512][T18124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5457'. [ 560.705603][ T5947] usb 8-1: Using ep0 maxpacket: 16 [ 560.708287][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.709029][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.709074][ T5947] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 560.709129][ T5947] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 560.709160][ T5947] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.731860][ T5947] usb 8-1: config 0 descriptor?? [ 561.163859][ T5947] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 561.163900][ T5947] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 561.163929][ T5947] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 561.163957][ T5947] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 561.163987][ T5947] shield 0003:0955:7214.002A: unknown main item tag 0x0 [ 561.218042][ T5947] input: HID 0955:7214 Haptics as /devices/virtual/input/input39 [ 561.351041][T18106] netlink: 'syz.7.5449': attribute type 2 has an invalid length. [ 561.351068][T18106] netlink: 244 bytes leftover after parsing attributes in process `syz.7.5449'. [ 561.359994][ T5947] shield 0003:0955:7214.002A: Registered Thunderstrike controller [ 561.360512][ T5947] shield 0003:0955:7214.002A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 561.473507][ T5947] usb 8-1: USB disconnect, device number 7 [ 561.497843][ T10] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 561.497937][ T10] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 561.498023][ T10] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 561.522057][ T10] shield 0003:0955:7214.002A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 561.585710][ T10] thermal thermal_zone0: Temperature check failed (-19) [ 563.247184][ T989] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 563.398620][ T989] usb 6-1: Using ep0 maxpacket: 32 [ 563.400696][ T989] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 563.400720][ T989] usb 6-1: config 0 has no interface number 0 [ 563.400763][ T989] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 563.405730][ T989] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 563.405761][ T989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.405782][ T989] usb 6-1: Product: syz [ 563.405797][ T989] usb 6-1: Manufacturer: syz [ 563.405813][ T989] usb 6-1: SerialNumber: syz [ 563.497721][ T989] usb 6-1: config 0 descriptor?? [ 563.500540][T18220] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 563.724259][T18220] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 564.340902][ T989] asix 6-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 564.749567][ T989] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 564.749864][ T989] asix 6-1:0.188: probe with driver asix failed with error -71 [ 564.798759][ T989] usb 6-1: USB disconnect, device number 33 [ 566.369375][T18317] netlink: 'syz.6.5544': attribute type 10 has an invalid length. [ 566.788575][ T5947] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 566.941330][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.941367][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.941393][ T5947] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.941510][ T5947] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.941539][ T5947] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.000600][ T5947] usb 8-1: config 0 descriptor?? [ 567.217689][ T38] kauditd_printk_skb: 7 callbacks suppressed [ 567.217761][ T38] audit: type=1326 audit(1762605819.907:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18347 comm="syz.6.5558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a275df6c9 code=0x0 [ 567.260609][T18353] syzkaller1: entered promiscuous mode [ 567.260638][T18353] syzkaller1: entered allmulticast mode [ 567.768291][ T5947] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 567.771180][ T5947] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 567.771218][ T5947] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 567.771247][ T5947] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 567.771276][ T5947] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 567.771306][ T5947] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 567.771334][ T5947] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 567.771363][ T5947] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 567.771392][ T5947] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 567.771420][ T5947] plantronics 0003:047F:FFFF.002B: unknown main item tag 0x0 [ 567.857633][ T5947] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 568.076886][ T989] usb 8-1: USB disconnect, device number 8 [ 568.366827][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.516481][T18441] tls_set_device_offload: netdev not found [ 570.458878][ T5882] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 570.615624][ T5882] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 570.615658][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.615681][ T5882] usb 7-1: Product: syz [ 570.615696][ T5882] usb 7-1: Manufacturer: syz [ 570.615711][ T5882] usb 7-1: SerialNumber: syz [ 570.632212][ T5882] usb 7-1: config 0 descriptor?? [ 570.642030][ T5882] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 571.879075][ T989] usb 7-1: USB disconnect, device number 35 [ 572.730634][T18532] netlink: 67 bytes leftover after parsing attributes in process `syz.1.5639'. [ 573.288076][T18559] netlink: 'syz.1.5652': attribute type 13 has an invalid length. [ 574.239423][T18559] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.242865][T18559] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.154007][T18559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.227992][T18559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.558966][ T5820] Bluetooth: hci1: command 0x0419 tx timeout [ 576.661323][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.718777][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.718834][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.718874][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.668515][ T5873] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 577.843681][ T5873] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.843710][ T5873] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.847764][ T5873] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.847796][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.847818][ T5873] usb 7-1: Product: syz [ 577.847834][ T5873] usb 7-1: Manufacturer: syz [ 577.847848][ T5873] usb 7-1: SerialNumber: syz [ 578.087567][ T5873] usb 7-1: 0:2 : does not exist [ 578.098960][ T5873] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 578.159022][ T5873] usb 7-1: USB disconnect, device number 36 [ 578.168964][ T989] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 578.318863][ T989] usb 2-1: Using ep0 maxpacket: 8 [ 578.321647][ T989] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 578.321675][ T989] usb 2-1: config 0 has no interface number 0 [ 578.321788][ T989] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 578.321838][ T989] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 578.321864][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.328032][ T989] usb 2-1: config 0 descriptor?? [ 578.412532][ T989] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 578.546905][ T989] usb 2-1: USB disconnect, device number 32 [ 579.214802][T18760] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 580.159361][ T38] audit: type=1326 audit(1762605832.857:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18799 comm="syz.5.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f5dbf6c9 code=0x7ffc0000 [ 580.160044][ T38] audit: type=1326 audit(1762605832.857:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18799 comm="syz.5.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f5dbf6c9 code=0x7ffc0000 [ 580.160534][ T38] audit: type=1326 audit(1762605832.857:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18799 comm="syz.5.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f5dbf6c9 code=0x7ffc0000 [ 580.160585][ T38] audit: type=1326 audit(1762605832.857:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18799 comm="syz.5.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f5dbf6c9 code=0x7ffc0000 [ 580.168853][ T38] audit: type=1326 audit(1762605832.867:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18799 comm="syz.5.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f92f5dbf6c9 code=0x7ffc0000 [ 580.169748][ T38] audit: type=1326 audit(1762605832.867:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18799 comm="syz.5.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f5dbf6c9 code=0x7ffc0000 [ 580.169980][ T38] audit: type=1326 audit(1762605832.867:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18799 comm="syz.5.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f5dbf6c9 code=0x7ffc0000 [ 580.172404][ T38] audit: type=1326 audit(1762605832.867:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18799 comm="syz.5.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f5dbf6c9 code=0x7ffc0000 [ 580.175135][ T38] audit: type=1326 audit(1762605832.867:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18799 comm="syz.5.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f92f5dbf6c9 code=0x7ffc0000 [ 580.175451][ T38] audit: type=1326 audit(1762605832.867:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18799 comm="syz.5.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f5dbf6c9 code=0x7ffc0000 [ 580.521034][ T1124] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 580.889599][T18825] netlink: 300 bytes leftover after parsing attributes in process `syz.6.5776'. [ 580.889627][T18825] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5776'. [ 581.578534][ T5873] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 581.735329][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 581.747742][ T5873] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 581.747777][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.747801][ T5873] usb 6-1: Product: syz [ 581.747817][ T5873] usb 6-1: Manufacturer: syz [ 581.747833][ T5873] usb 6-1: SerialNumber: syz [ 581.781217][ T5873] usb 6-1: config 0 descriptor?? [ 581.994321][ T5873] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 582.708727][T18883] tipc: Started in network mode [ 582.708838][T18883] tipc: Node identity ac14140f, cluster identity 4711 [ 582.728167][T18883] tipc: New replicast peer: 255.255.255.255 [ 582.736577][T18883] tipc: Enabled bearer , priority 10 [ 583.218962][ T5873] usb write operation failed. (-71) [ 583.226016][ T5873] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 583.226821][ T5873] dvbdev: DVB: registering new adapter (Terratec H7) [ 583.226877][ T5873] usb 6-1: media controller created [ 583.232023][ T5873] usb read operation failed. (-71) [ 583.232554][ T5873] usb write operation failed. (-71) [ 583.237454][ T5873] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 583.297926][ T5873] usb 6-1: USB disconnect, device number 34 [ 583.848480][ T5873] tipc: Node number set to 2886997007 [ 584.707925][T18923] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5823'. [ 584.807251][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.001052][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.435575][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 585.435595][ T38] audit: type=1326 audit(1762605838.127:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18942 comm="syz.1.5833" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x0 [ 585.648462][ T31] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 585.659497][T18949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.671664][T18949] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 585.804882][ T31] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 585.804915][ T31] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 585.804937][ T31] usb 8-1: Product: syz [ 585.804953][ T31] usb 8-1: Manufacturer: syz [ 585.804970][ T31] usb 8-1: SerialNumber: syz [ 585.828579][ T5947] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 585.852018][ T31] usb 8-1: config 0 descriptor?? [ 585.877114][ T31] ch341 8-1:0.0: ch341-uart converter detected [ 586.008524][ T5947] usb 7-1: Using ep0 maxpacket: 16 [ 586.014858][ T5947] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 586.014890][ T5947] usb 7-1: config 0 has no interface number 0 [ 586.014948][ T5947] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 586.021406][ T5947] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 586.021444][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.021468][ T5947] usb 7-1: Product: syz [ 586.021485][ T5947] usb 7-1: Manufacturer: syz [ 586.021501][ T5947] usb 7-1: SerialNumber: syz [ 586.053960][ T5947] usb 7-1: config 0 descriptor?? [ 586.696362][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 586.696809][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 586.732642][ T5947] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.214/input/input40 [ 586.868059][ T5947] usb 7-1: USB disconnect, device number 37 [ 586.961768][ T31] ch341-uart ttyUSB0: break control not supported, using simulated break [ 586.964173][ T31] usb 8-1: ch341-uart converter now attached to ttyUSB0 [ 586.989153][ T31] usb 8-1: USB disconnect, device number 9 [ 587.016048][ T31] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 587.016574][ T31] ch341 8-1:0.0: device disconnected [ 587.321825][T18985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 587.326908][T18985] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 588.025547][T19013] net_ratelimit: 3320 callbacks suppressed [ 588.025572][T19013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.393727][T19021] netlink: 'syz.7.5868': attribute type 4 has an invalid length. [ 588.437151][T19021] netlink: 'syz.7.5868': attribute type 4 has an invalid length. [ 588.692227][T19034] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.588483][ T5873] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 590.752211][ T5873] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 590.752243][ T5873] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 590.752265][ T5873] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 590.752288][ T5873] usb 7-1: config 220 has no interface number 2 [ 590.752373][ T5873] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 590.752404][ T5873] usb 7-1: config 220 interface 0 has no altsetting 0 [ 590.752425][ T5873] usb 7-1: config 220 interface 76 has no altsetting 0 [ 590.752447][ T5873] usb 7-1: config 220 interface 1 has no altsetting 0 [ 590.755501][ T5873] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 590.755533][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.755557][ T5873] usb 7-1: Product: syz [ 590.755572][ T5873] usb 7-1: Manufacturer: syz [ 590.755589][ T5873] usb 7-1: SerialNumber: syz [ 591.142765][ T5873] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 591.142812][ T5873] uvcvideo 7-1:220.0: No valid video chain found. [ 591.142879][ T5873] usb 7-1: selecting invalid altsetting 0 [ 591.230524][ T5873] usb 7-1: selecting invalid altsetting 0 [ 591.230568][ T5873] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 591.241035][ T5873] usb 7-1: USB disconnect, device number 38 [ 591.608217][ T5820] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 593.648113][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 593.655293][ T62] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 594.239173][T19248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.377476][T19297] input: syz1 as /devices/virtual/input/input41 [ 596.078443][ T5873] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 596.158454][ T5882] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 596.233003][ T5873] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 596.233034][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.233055][ T5873] usb 7-1: config 0 has no interfaces? [ 596.233086][ T5873] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 596.233110][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.249104][ T5873] usb 7-1: config 0 descriptor?? [ 596.322699][ T5882] usb 8-1: config 4 has an invalid interface number: 28 but max is 0 [ 596.322729][ T5882] usb 8-1: config 4 has no interface number 0 [ 596.334523][ T5882] usb 8-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 596.334561][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.334588][ T5882] usb 8-1: Product: syz [ 596.334606][ T5882] usb 8-1: Manufacturer: syz [ 596.334624][ T5882] usb 8-1: SerialNumber: syz [ 596.400933][ T5882] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:4.28/input/input42 [ 596.515335][ T5889] usb 7-1: USB disconnect, device number 39 [ 596.622392][ T5161] bcm5974 8-1:4.28: could not read from device [ 596.700263][ T5882] bcm5974 8-1:4.28: could not read from device [ 596.868396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 597.177830][ T5161] bcm5974 8-1:4.28: could not read from device [ 597.293071][ T5882] input: failed to attach handler mousedev to device input42, error: -5 [ 597.317781][ T5882] usb 8-1: USB disconnect, device number 10 [ 597.348187][ T5161] bcm5974 8-1:4.28: could not read from device [ 597.558904][ T5820] Bluetooth: hci2: command 0x0405 tx timeout [ 598.059816][T19378] netlink: 'syz.7.6008': attribute type 1 has an invalid length. [ 598.059841][T19378] netlink: 'syz.7.6008': attribute type 4 has an invalid length. [ 598.059854][T19378] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.6008'. [ 599.138512][ T5882] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 599.300850][ T5882] usb 8-1: Using ep0 maxpacket: 16 [ 599.303246][ T5882] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 599.303324][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.303353][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.303378][ T5882] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 75, changing to 10 [ 599.303407][ T5882] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 130 [ 599.303452][ T5882] usb 8-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 599.303478][ T5882] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.310713][ T5882] usb 8-1: config 0 descriptor?? [ 599.648803][ T5820] Bluetooth: hci2: command 0x0405 tx timeout [ 599.803356][ T5882] nintendo 0003:057E:2009.002C: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.7-1/input0 [ 599.952489][T19446] evm: overlay not supported [ 599.967337][ T5882] nintendo 0003:057E:2009.002C: Failed to get joycon info; ret=-71 [ 599.967363][ T5882] nintendo 0003:057E:2009.002C: Failed to retrieve controller info; ret=-71 [ 599.967384][ T5882] nintendo 0003:057E:2009.002C: Failed to initialize controller; ret=-71 [ 600.006468][ T5882] nintendo 0003:057E:2009.002C: probe - fail = -71 [ 600.006618][ T5882] nintendo 0003:057E:2009.002C: probe with driver nintendo failed with error -71 [ 600.039168][ T5882] usb 8-1: USB disconnect, device number 11 [ 600.046911][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.582696][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.699743][T19473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6049'. [ 600.787851][T19473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 600.795095][T19481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.804887][T19481] bond2: (slave bond0): Enslaving as an active interface with an up link [ 600.823339][T19478] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6050'. [ 600.823441][T19478] vlan2: left promiscuous mode [ 600.823888][T19478] bridge0: port 3(vlan2) entered disabled state [ 600.920805][T19478] bridge_slave_1: left allmulticast mode [ 600.920838][T19478] bridge_slave_1: left promiscuous mode [ 600.923724][T19478] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.011598][T19478] bridge_slave_0: left promiscuous mode [ 601.015915][T19478] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.241338][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.497737][T19508] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6064'. [ 603.036628][T19561] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 603.950756][T19595] loop6: detected capacity change from 0 to 7 [ 603.951952][T19595] Dev loop6: unable to read RDB block 7 [ 603.951998][T19595] loop6: unable to read partition table [ 603.952240][T19595] loop6: partition table beyond EOD, truncated [ 603.952259][T19595] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 604.483488][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6110'. [ 604.483523][T19615] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6110'. [ 607.148351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 607.148742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 607.149652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 607.149733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 607.149888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 607.149918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 607.150255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 607.150952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 607.393667][ T5889] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 607.558808][ T5889] usb 6-1: Using ep0 maxpacket: 32 [ 607.563645][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.563682][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.563724][ T5889] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 607.563750][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.567795][ T5889] usb 6-1: config 0 descriptor?? [ 607.576183][ T5889] hub 6-1:0.0: USB hub found [ 607.809806][ T5889] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 608.120760][ T5889] hid-generic 0003:046D:C31C.002D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0 [ 608.389474][ T31] usb 6-1: USB disconnect, device number 35 [ 610.228463][ T5889] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 610.274774][T19732] Set syz1 is full, maxelem 1048 reached [ 610.450144][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 610.452897][ T5889] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 610.452928][ T5889] usb 6-1: config 179 has no interface number 0 [ 610.452981][ T5889] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 610.453012][ T5889] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 610.453043][ T5889] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 610.453072][ T5889] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 610.453103][ T5889] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 610.453151][ T5889] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 610.453177][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.469492][T19722] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 610.817828][ T5873] usb 6-1: USB disconnect, device number 36 [ 610.817845][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 610.817922][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 610.905600][T19749] input: syz1 as /devices/virtual/input/input43 [ 611.723712][ T9] libceph: connect (1)[c::]:6789 error -101 [ 611.724986][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 611.742711][ T5889] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 611.746172][ T9] libceph: connect (1)[c::]:6789 error -101 [ 611.746384][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 611.752728][T19771] ceph: No mds server is up or the cluster is laggy [ 611.930592][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.930628][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.934412][ T5889] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 611.934444][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.934467][ T5889] usb 6-1: Product: syz [ 611.934483][ T5889] usb 6-1: Manufacturer: syz [ 611.934499][ T5889] usb 6-1: SerialNumber: syz [ 611.960400][ T5889] usb 6-1: config 0 descriptor?? [ 611.993483][ T5889] uvcvideo 6-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 611.993520][ T5889] uvcvideo 6-1:0.0: No valid video chain found. [ 612.178491][ T5889] usb 6-1: USB disconnect, device number 37 [ 612.518728][T19158] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 613.272788][T19823] syz_tun: entered allmulticast mode [ 613.290543][T19823] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6203'. [ 613.530627][T19823] syz_tun (unregistering): left allmulticast mode [ 613.965090][T19846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.621712][T19998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6275'. [ 622.564896][T20111] GUP no longer grows the stack in syz.6.6325 (20111): 200000004000-20000000a000 (200000002000) [ 622.564952][T20111] CPU: 0 UID: 0 PID: 20111 Comm: syz.6.6325 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 622.564980][T20111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 622.565002][T20111] Call Trace: [ 622.565016][T20111] [ 622.565027][T20111] dump_stack_lvl+0x189/0x250 [ 622.565077][T20111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 622.565127][T20111] ? __pfx__printk+0x10/0x10 [ 622.565153][T20111] ? find_vma+0xe7/0x160 [ 622.565211][T20111] __get_user_pages+0x22f0/0x2860 [ 622.565296][T20111] get_user_pages_remote+0x2f1/0xac0 [ 622.565330][T20111] ? __pfx_mtree_load+0x10/0x10 [ 622.565375][T20111] ? __pfx_get_user_pages_remote+0x10/0x10 [ 622.565417][T20111] ? __access_remote_vm+0x367/0x7d0 [ 622.565461][T20111] __access_remote_vm+0x211/0x7d0 [ 622.565510][T20111] ? __pfx___access_remote_vm+0x10/0x10 [ 622.565544][T20111] ? set_page_refcounted+0xa0/0x1e0 [ 622.565582][T20111] ? alloc_pages_noprof+0xe4/0x1e0 [ 622.565625][T20111] proc_pid_cmdline_read+0x433/0x810 [ 622.565648][T20111] ? __asan_memset+0x22/0x50 [ 622.565693][T20111] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 622.565722][T20111] ? rw_verify_area+0x2ac/0x4e0 [ 622.565758][T20111] vfs_readv+0x5b3/0x850 [ 622.565798][T20111] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 622.565825][T20111] ? __pfx_vfs_readv+0x10/0x10 [ 622.565883][T20111] ? __fget_files+0x2a/0x420 [ 622.565924][T20111] ? __fget_files+0x3a6/0x420 [ 622.565957][T20111] ? __fget_files+0x2a/0x420 [ 622.566004][T20111] __x64_sys_preadv+0x19a/0x2a0 [ 622.566041][T20111] ? __pfx___x64_sys_preadv+0x10/0x10 [ 622.566080][T20111] ? do_syscall_64+0xbe/0xfa0 [ 622.566121][T20111] do_syscall_64+0xfa/0xfa0 [ 622.566156][T20111] ? lockdep_hardirqs_on+0x9c/0x150 [ 622.566190][T20111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.566214][T20111] ? clear_bhb_loop+0x60/0xb0 [ 622.566244][T20111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.566268][T20111] RIP: 0033:0x7f9a275df6c9 [ 622.566290][T20111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.566313][T20111] RSP: 002b:00007f9a25846038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 622.566339][T20111] RAX: ffffffffffffffda RBX: 00007f9a27835fa0 RCX: 00007f9a275df6c9 [ 622.566357][T20111] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 622.566372][T20111] RBP: 00007f9a27661f91 R08: 0000000000000000 R09: 0000000000000000 [ 622.566387][T20111] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 622.566401][T20111] R13: 00007f9a27836038 R14: 00007f9a27835fa0 R15: 00007ffeedb090f8 [ 622.566441][T20111] [ 623.429001][ T31] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 623.581766][ T31] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 623.583315][ T31] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.583346][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 623.583369][ T31] usb 7-1: SerialNumber: syz [ 623.653830][ T31] cdc_acm 7-1:1.0: skipping garbage [ 623.656411][ T31] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 623.691678][T20152] futex_wake_op: syz.1.6344 tries to shift op by -1; fix this program [ 623.774801][T20155] overlayfs: overlapping lowerdir path [ 623.859371][ T5947] usb 7-1: USB disconnect, device number 40 [ 624.222957][T20177] loop2: detected capacity change from 0 to 7 [ 624.224598][T20177] Dev loop2: unable to read RDB block 7 [ 624.224645][T20177] loop2: unable to read partition table [ 624.224901][T20177] loop2: partition table beyond EOD, truncated [ 624.224920][T20177] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 624.308822][T20183] batadv_slave_1: entered promiscuous mode [ 624.312382][T20182] batadv_slave_1: left promiscuous mode [ 625.046544][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.243730][T20277] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6400'. [ 629.556945][ T38] audit: type=1326 audit(1762605882.247:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20325 comm="syz.1.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 629.559672][ T38] audit: type=1326 audit(1762605882.247:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20325 comm="syz.1.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 629.566635][ T38] audit: type=1326 audit(1762605882.257:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20325 comm="syz.1.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 629.569438][ T38] audit: type=1326 audit(1762605882.257:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20325 comm="syz.1.6420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c218f6c9 code=0x7ffc0000 [ 629.820046][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.831224][T20357] overlayfs: failed to clone upperpath [ 630.902641][T20360] netlink: 'syz.7.6432': attribute type 4 has an invalid length. [ 630.961381][T20363] netlink: 'syz.7.6432': attribute type 4 has an invalid length. [ 631.333858][T20370] kvm: Disabled LAPIC found during irq injection [ 633.980963][T20465] netlink: 'syz.6.6480': attribute type 3 has an invalid length. [ 634.841563][ T989] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 634.990183][ T989] usb 8-1: Using ep0 maxpacket: 32 [ 635.008213][ T989] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 635.008247][ T989] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.011300][ T989] usb 8-1: Product: syz [ 635.011325][ T989] usb 8-1: Manufacturer: syz [ 635.011344][ T989] usb 8-1: SerialNumber: syz [ 635.020191][ T989] usb 8-1: config 0 descriptor?? [ 635.082982][ T989] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 635.403836][T20525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6503'. [ 635.838558][ T5873] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 635.992222][ T5873] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 635.992256][ T5873] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 635.992279][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 635.992399][ T5873] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 636.002067][ T5873] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 636.002106][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 636.002132][ T5873] usb 2-1: Product: syz [ 636.002150][ T5873] usb 2-1: Manufacturer: syz [ 636.081297][ T5873] cdc_wdm 2-1:1.0: skipping garbage [ 636.081321][ T5873] cdc_wdm 2-1:1.0: skipping garbage [ 636.136245][ T5873] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 636.136671][ T5873] cdc_wdm 2-1:1.0: Unknown control protocol [ 636.330925][ T5947] usb 2-1: USB disconnect, device number 33 [ 636.482933][ T5820] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 636.501669][ T989] gspca_ov534_9: reg_r err -71 [ 636.760246][ T989] gspca_ov534_9: Unknown sensor 0000 [ 636.760349][ T989] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 636.768654][ T989] usb 8-1: USB disconnect, device number 12 [ 637.040140][T20582] binder: 20579:20582 ioctl c0306201 200000000540 returned -14 [ 637.289079][T20587] kvm: apic: phys broadcast and lowest prio [ 638.038579][ T5947] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 638.200308][ T5947] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 638.200340][ T5947] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 638.200362][ T5947] usb 6-1: config 220 has an invalid descriptor of length 251, skipping remainder of the config [ 638.200384][ T5947] usb 6-1: config 220 has no interface number 2 [ 638.200470][ T5947] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 638.200503][ T5947] usb 6-1: config 220 interface 0 has no altsetting 0 [ 638.200523][ T5947] usb 6-1: config 220 interface 76 has no altsetting 0 [ 638.200543][ T5947] usb 6-1: config 220 interface 1 has no altsetting 0 [ 638.204410][ T5947] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 638.204442][ T5947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.204463][ T5947] usb 6-1: Product: syz [ 638.204479][ T5947] usb 6-1: Manufacturer: syz [ 638.204827][ T5947] usb 6-1: SerialNumber: syz [ 638.545991][ T5947] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 638.546029][ T5947] uvcvideo 6-1:220.0: No valid video chain found. [ 638.546094][ T5947] usb 6-1: selecting invalid altsetting 0 [ 638.627671][ T5947] usb 6-1: selecting invalid altsetting 0 [ 638.627715][ T5947] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 638.642684][ T5947] usb 6-1: USB disconnect, device number 38 [ 639.508487][ T5947] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 639.508652][ T5889] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 639.658402][ T5889] usb 7-1: Using ep0 maxpacket: 32 [ 639.664165][ T5947] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 639.664195][ T5947] usb 2-1: config 0 has no interface number 0 [ 639.664323][ T5947] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.664353][ T5947] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.664378][ T5947] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 639.664487][ T5947] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 639.664514][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.668104][ T5889] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 639.668135][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.668157][ T5889] usb 7-1: Product: syz [ 639.668172][ T5889] usb 7-1: Manufacturer: syz [ 639.668189][ T5889] usb 7-1: SerialNumber: syz [ 639.786532][ T5947] usb 2-1: config 0 descriptor?? [ 639.806225][ T5889] usb 7-1: config 0 descriptor?? [ 639.837313][ T5889] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 640.441544][ T5947] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.002E/input/input44 [ 640.622438][ T5947] input: HID 28bd:0042 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.002E/input/input45 [ 640.711282][ T5947] uclogic 0003:28BD:0042.002E: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1 [ 640.746971][ T5947] usb 2-1: USB disconnect, device number 34 [ 640.894610][ T38] audit: type=1326 audit(1762605893.587:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20722 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c24f6c9 code=0x7ffc0000 [ 640.895745][ T38] audit: type=1326 audit(1762605893.587:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20722 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c24f6c9 code=0x7ffc0000 [ 640.898988][ T38] audit: type=1326 audit(1762605893.587:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20722 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5a6c24f6c9 code=0x7ffc0000 [ 640.899053][ T38] audit: type=1326 audit(1762605893.597:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20722 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c24f6c9 code=0x7ffc0000 [ 640.899105][ T38] audit: type=1326 audit(1762605893.597:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20722 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c24f6c9 code=0x7ffc0000 [ 640.907646][ T38] audit: type=1326 audit(1762605893.597:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20722 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f5a6c24f6c9 code=0x7ffc0000 [ 640.908000][ T38] audit: type=1326 audit(1762605893.597:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20722 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c24f6c9 code=0x7ffc0000 [ 640.909603][ T38] audit: type=1326 audit(1762605893.607:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20722 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a6c24f6c9 code=0x7ffc0000 [ 640.912086][ T38] audit: type=1326 audit(1762605893.607:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20722 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c24f6c9 code=0x7ffc0000 [ 640.912438][ T38] audit: type=1326 audit(1762605893.607:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20722 comm="syz.7.6593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6c24f6c9 code=0x7ffc0000 [ 641.272521][ T5889] gspca_topro: reg_r err -71 [ 641.272560][ T5889] gspca_topro: Sensor soi763a [ 641.291366][ T5889] usb 7-1: USB disconnect, device number 41 [ 641.529129][ T989] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 641.679106][ T989] usb 8-1: Using ep0 maxpacket: 16 [ 641.683963][ T989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.684001][ T989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.684026][ T989] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 641.684072][ T989] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 641.684098][ T989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.712407][ T989] usb 8-1: config 0 descriptor?? [ 642.141991][T20728] random: crng reseeded on system resumption [ 642.348221][ T989] input: HID 0955:7214 Haptics as /devices/virtual/input/input46 [ 642.680170][ T989] shield 0003:0955:7214.002F: Registered Thunderstrike controller [ 642.680685][ T989] shield 0003:0955:7214.002[ 642.680685][ T989] shield 0003:0955:7214.002F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 642.686270][T20765] ------------[ cut here ]------------ [ 642.686285][T20765] kernel BUG at net/ipv6/route.c:1473! [ 642.686330][T20765] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 642.686358][T20765] CPU: 1 UID: 0 PID: 20765 Comm: syz.6.6612 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 642.686386][T20765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 642.686401][T20765] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 642.686447][T20765] Code: ab f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 be 13 ab f8 e9 f6 fa ff ff e8 84 5b 49 f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 642.686469][T20765] RSP: 0018:ffffc900147ef280 EFLAGS: 00010283 [ 642.686492][T20765] RAX: ffffffff8975649c RBX: ffff888126ef9000 RCX: 0000000000080000 [ 642.686510][T20765] RDX: ffffc9001e89d000 RSI: 0000000000000b79 RDI: 0000000000000b7a [ 642.686528][T20765] RBP: ffffc900147ef3a0 R08: ffffe8ffffd35af7 R09: 1ffffd1ffffa6b5e [ 642.686546][T20765] R10: dffffc0000000000 R11: fffff91ffffa6b5f R12: ffff8880313e2780 [ 642.686566][T20765] R13: ffffffff89755482 R14: dffffc0000000000 R15: 0000607ed8e3caf0 [ 642.686585][T20765] FS: 00007f9a258256c0(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 642.686607][T20765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.686622][T20765] CR2: 0000555564c07808 CR3: 0000000033db6000 CR4: 00000000003526f0 [ 642.686643][T20765] Call Trace: [ 642.686652][T20765] [ 642.686670][T20765] ? ip6_pol_route+0x162/0x1180 [ 642.686712][T20765] ? __pfx_ip6_pol_route+0x10/0x10 [ 642.686756][T20765] ? fib_rules_lookup+0x96/0xe90 [ 642.686786][T20765] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 642.686808][T20765] fib6_rule_action+0x206/0x7d0 [ 642.686833][T20765] ? __pfx_fib6_rule_action+0x10/0x10 [ 642.686857][T20765] fib_rules_lookup+0x767/0xe90 [ 642.686888][T20765] ? fib_rules_lookup+0x96/0xe90 [ 642.686915][T20765] ? __pfx_fib_rules_lookup+0x10/0x10 [ 642.686940][T20765] ? l3mdev_update_flow+0x29/0x640 [ 642.686962][T20765] ? l3mdev_update_flow+0x4d1/0x640 [ 642.686987][T20765] fib6_rule_lookup+0x18e/0x6f0 [ 642.687011][T20765] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 642.687033][T20765] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 642.687060][T20765] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 642.687091][T20765] ip6_route_output_flags+0x364/0x5d0 [ 642.687114][T20765] ? ip6_route_output_flags+0x2e/0x5d0 [ 642.687139][T20765] rxrpc_assess_MTU_size+0x2c0/0xa90 [ 642.687171][T20765] ? __pfx_rxrpc_assess_MTU_size+0x10/0x10 [ 642.687205][T20765] ? trace_rxrpc_peer+0x80/0x200 [ 642.687231][T20765] ? rxrpc_lookup_peer+0x418/0xaa0 [ 642.687256][T20765] ? rxrpc_lookup_peer+0x25f/0xaa0 [ 642.687286][T20765] rxrpc_lookup_peer+0x57d/0xaa0 [ 642.687313][T20765] ? rxrpc_lookup_peer+0x25f/0xaa0 [ 642.687343][T20765] rxrpc_do_sendmsg+0xb0a/0x1220 [ 642.687382][T20765] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 642.687414][T20765] ? rt_spin_unlock+0x161/0x200 [ 642.687442][T20765] ? lock_sock_nested+0x5f/0x130 [ 642.687480][T20765] ? rxrpc_sendmsg+0x4cc/0x710 [ 642.687513][T20765] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 642.687545][T20765] __sock_sendmsg+0x21c/0x270 [ 642.687581][T20765] ____sys_sendmsg+0x508/0x820 [ 642.687613][T20765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.687646][T20765] ? import_iovec+0x74/0xa0 [ 642.687683][T20765] ___sys_sendmsg+0x21f/0x2a0 [ 642.687714][T20765] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.687765][T20765] ? __fget_files+0x2a/0x420 [ 642.687799][T20765] ? __fget_files+0x3a6/0x420 [ 642.687840][T20765] __x64_sys_sendmsg+0x1a1/0x260 [ 642.687870][T20765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.687909][T20765] ? do_syscall_64+0xbe/0xfa0 [ 642.687946][T20765] do_syscall_64+0xfa/0xfa0 [ 642.687979][T20765] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.688012][T20765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.688035][T20765] ? clear_bhb_loop+0x60/0xb0 [ 642.688062][T20765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.688086][T20765] RIP: 0033:0x7f9a275df6c9 [ 642.688106][T20765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.688127][T20765] RSP: 002b:00007f9a25825038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.688150][T20765] RAX: ffffffffffffffda RBX: 00007f9a27836090 RCX: 00007f9a275df6c9 [ 642.688169][T20765] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 642.688184][T20765] RBP: 00007f9a27661f91 R08: 0000000000000000 R09: 0000000000000000 [ 642.688199][T20765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.688214][T20765] R13: 00007f9a27836128 R14: 00007f9a27836090 R15: 00007ffeedb090f8 [ 642.688243][T20765] [ 642.688263][T20765] Modules linked in: [ 642.688351][T20765] ---[ end trace 0000000000000000 ]--- [ 642.704568][T20765] RIP: 0010:ip6_pol_route+0x117d/0x1180 [ 642.704630][T20765] Code: ab f8 e9 f4 fa ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fb ff ff 48 89 df e8 be 13 ab f8 e9 f6 fa ff ff e8 84 5b 49 f8 90 <0f> 0b 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e [ 642.704668][T20765] RSP: 0018:ffffc900147ef280 EFLAGS: 00010283 [ 642.704694][T20765] RAX: ffffffff8975649c RBX: ffff888126ef9000 RCX: 0000000000080000 [ 642.704715][T20765] RDX: ffffc9001e89d000 RSI: 0000000000000b79 RDI: 0000000000000b7a [ 642.704733][T20765] RBP: ffffc900147ef3a0 R08: ffffe8ffffd35af7 R09: 1ffffd1ffffa6b5e [ 642.704754][T20765] R10: dffffc0000000000 R11: fffff91ffffa6b5f R12: ffff8880313e2780 [ 642.704776][T20765] R13: ffffffff89755482 R14: dffffc0000000000 R15: 0000607ed8e3caf0 [ 642.704798][T20765] FS: 00007f9a258256c0(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 642.704822][T20765] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 642.704841][T20765] CR2: 00007f6fd1cbc470 CR3: 0000000033db6000 CR4: 00000000003526f0 [ 642.704880][T20765] Kernel panic - not syncing: Fatal exception in interrupt [ 642.705216][T20765] Kernel Offset: disabled