last executing test programs: 2.662089351s ago: executing program 1 (id=320): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000480), r2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) r4 = syz_clone(0x20022180, 0x0, 0xfe02, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, &(0x7f0000000000)=@secondary) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f00000004c0)=""/207, 0x0) keyctl$get_persistent(0x16, 0x0, r6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000020603000000000000000000000000000cf60680050015000300000005000000"], 0x54}}, 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r8 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9, 0x2, {0x2, 0xf0, 0x3}, 0xff}, 0x18) sendmmsg$sock(r8, &(0x7f00000088c0)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000002800)}, {&(0x7f0000002880)="e60886dd9a565f2033ffc09193bf0951e806d84cc884882a9717cbec5a5f4be292eaccd3cb113df58b2ddc8c8ec455353eb5d0c48365b69b6b49732a9c4247e16daba7", 0x43}, {&(0x7f0000002980)="0b93a5fa7b3ce951feeb23f7fa62d799238c819d13bbc7d36bc2db54b7d51777f365294bb86c3dc88d6ce041edfd0ef101d504a0213878e8f338610c2873e216792dbaf8b7b31e98911b98fe5487e4839474e8ba35b7c50df29d5f33614378bc239de2e0ec844f31528050e1098f8d52dfe6d725de95e6", 0x77}, {&(0x7f00000001c0)="f0b4c3a944b42452457082883cc69250bcf34ef653329bc1e38071c72fb04901c9", 0x21}], 0x4}}], 0x1, 0x4040000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f00000059c0)='./file0\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r10 = syz_open_procfs(r4, &(0x7f0000000040)='stat\x00') pread64(r10, 0x0, 0x0, 0x4) 1.534677687s ago: executing program 1 (id=334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r1, @ANYBLOB="93132cbd7000fcdbdf2512"], 0xbc}, 0x1, 0x3000000, 0x0, 0x20000010}, 0x40804) 1.450478216s ago: executing program 1 (id=335): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000030005000000000800040001000000", 0x24) 1.450249393s ago: executing program 1 (id=336): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000440)={0xfffffffe, 0x0, 0x2, 0xa4d, 0x0, "10120dfe0ef7f0220000ff490a0080002a00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20040811}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000019580)=ANY=[@ANYBLOB="140000001000030000000000000000000000000a78000000060a0b0400000000000000000200090038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140005800800024000001c03080001"], 0xa0}}, 0x0) 1.431197893s ago: executing program 0 (id=337): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000001bc0)) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69cb13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be6f2b546c27ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e63c157d64d90e4108e5eb8e917c00e9e52df03723c", 0xd3}, {&(0x7f0000000f80)="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", 0x104}], 0x2}, 0x8010) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff4]}, 0x8) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000001240)=0x5) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x40, 0x5, 0x81, 0xffff375b, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x107500) fchdir(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fffffff017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 1.31858641s ago: executing program 1 (id=339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700726f757465"], 0x1ac}}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/235, 0xeb}], 0x1) unshare(0x22020600) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0145401, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x2}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) unshare(0x4020400) 1.298753374s ago: executing program 0 (id=341): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000125a02, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) fadvise64(r0, 0x9154, 0x5, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.210133638s ago: executing program 1 (id=343): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x140, 0x0, 0xfdfd}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f0000000ec0)={{0x12, 0x1, 0x0, 0x18, 0x22, 0x1d, 0x10, 0x2639, 0x2, 0x3b1d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x9d, 0x3, 0x0, 0xba, 0xe5, 0xc8}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r4, r4, 0x0) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, r5) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000040a0500006bd68e000000000a0000050900010073797a31000000000900030073797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x3) sendmsg$NLBL_CALIPSO_C_LISTALL(r8, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4000840) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1e10f4f71462efd94d4254af85212c0039606e07b08ce5c97f4f1369d2388f1f0e93ad08573c5d187c0281ee9ebc092ead4b475451cff2a399238b8fd79036c85cfce27afa262ff500", @ANYRES16=r9, @ANYBLOB="00042cbd7000fddbdf250e00000008003b000200000008002c00008000000500350000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800040096860000534db9333c10e16ddd1df998da4a50412b29b8e0e4b535989e8db1dd79abeaa1cab9c82e2602a7e4792677240a931d2271c5c65ae55907e4f4c4ea48c398000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/kernel/hardlockup_count', 0x8000, 0x0) read$msr(r10, &(0x7f0000000c40)=""/4096, 0x1000) ioctl$VT_RESIZEX(r10, 0x560a, &(0x7f0000000000)={0x0, 0x2, 0xc, 0x3, 0x401, 0x6825}) 1.038434927s ago: executing program 0 (id=347): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="84010000100013070000040000000000ac1e010005fe8000000000000000000000000000bb0000000000000000000000003c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d3320000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0"], 0x184}}, 0x0) 1.007293629s ago: executing program 0 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x8c, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @initial, {0x6}}, 0x9, @default, 0x1971, @void, @val, @val={0x3, 0x1, 0xb5}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0xc9, 0xb6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x82, 0xb}}, @val={0x76, 0x6, {0x4, 0x7, 0x7, 0x7}}}}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}}, 0x24000080) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8914, &(0x7f00000001c0)={'vlan0\x00', 0x7fffffff}) syz_usb_connect$uac1(0x4, 0x100, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xee, 0x3, 0x1, 0x4, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x9}, [@extension_unit={0xd, 0x24, 0x8, 0x6, 0x4, 0xd4, "59542df78b57"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x3, 0x2, 0x6}, @extension_unit={0xa, 0x24, 0x8, 0x2, 0x9, 0x1, "35dd73"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x3, 0x5, 0x2, 0x5, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x18, 0xe, 0x2}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xd, 0x2, 0x40, 0x7f, "1213c27a1a5a65"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x8, 0x1, "e586685ec4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x79f, 0xff, 0xc, 0xe8, {0x7, 0x25, 0x1, 0x80, 0xa, 0x7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xa, 0x3, 0x1, 0x7, "37c4", "b9d2"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1000, 0xa08, 0x8, "64a508f57445b6f407"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb, 0x1, 0x9b, 0x5, "40da", 'q4'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x2, 0x1, 0x6, 0xd8, "bdf5c4b8"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x6, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x9, 0xfa, {0x7, 0x25, 0x1, 0x1, 0x4, 0xff}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x1, 0xd5, 0xff, 0x20, 0x7}, 0xea, &(0x7f0000000200)={0x5, 0xf, 0xea, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "14700d571b6471c7a95d83d99cb97956"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0xc, 0xfc, 0xb7fc, 0x1}, @generic={0xc3, 0x10, 0x1, "dfed9570f2bfce760362cfa52eb89b6da593bdb6cae588f9927e54c4660a8fa4659657daab90d03774fb537fe4117382a54b62cb46192c16df936b465da328449bf31a5e46b584e4d863d7b0eca7f372f1bcb3b2eee369c524f4e90a5e092526f8e84ec995e51b55d190be4a999dd0040142b0446768668b7d5f8f63b2d1da00a14bfdf702e4cc95e597847b0a336ee586b1e7564d81e48e8472be2a13d3113cac86ae7ec828244f3ba0d0c4e8dd4c495879c08c960fced092cc787649adbef1"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x444}}, {0x6f, &(0x7f0000000300)=@string={0x6f, 0x3, "a58fdb254fcd7116d5508e6784db6cd89e3301adda4694590dbd0c54fb4f2a002a2373f0fc4941b2d8781971a643c622c9523ef764d4cd97a370636448c25c6a92df6e1dc058b1f8cb28515ea16a0ad47e93ff8a47cca482dfe758fbcbdb9fdc88c8474655bbf12bee9362798b"}}]}) 545.79788ms ago: executing program 3 (id=360): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001b80), 0x0, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000001bc0)) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69cb13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be6f2b546c27ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e63c157d64d90e4108e5eb8e917c00e9e52df03723c", 0xd3}, {&(0x7f0000000f80)="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", 0x104}], 0x2}, 0x8010) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff4]}, 0x8) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000001240)=0x5) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x40, 0x5, 0x81, 0xffff375b, 0x7}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x107500) fchdir(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000007fffffff17000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 515.29498ms ago: executing program 3 (id=361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000200)={0xa, @pix_mp={0xd, 0x401, 0x56544943, 0x8, 0xa, [{0x3, 0xca}, {0x5, 0x7}, {0x80000000, 0xd4}, {0x6, 0xfffffffa}, {0x39, 0x2}, {0x5, 0xa}, {0xd, 0x1}, {0x4, 0x3}], 0x1, 0x4, 0x8, 0x2, 0x2}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000fe0001009a"], 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x3, 0x0, [{0x8c5, 0x0, 0xb331}, {0x30a, 0x0, 0x7}, {0xc0, 0x0, 0x29b}]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000097000040"]) 503.071308ms ago: executing program 2 (id=362): r0 = syz_open_procfs(0x0, &(0x7f0000002100)='attr/keycreate\x00') preadv2(r0, &(0x7f0000002780)=[{&(0x7f0000002680)=""/247, 0xf7}], 0x1, 0x1cf3d4a8, 0x4, 0x2) r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000100)={0xeeef0000, 0x1000}) write$6lowpan_enable(r1, 0x0, 0x34) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f000028f000/0x2000)=nil, 0x2000, 0x4, 0xc3072, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) mkdir(&(0x7f00000003c0)='./file0\x00', 0x16) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90f, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000140)}}) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x254, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x10001, @loopback, 0x6e1}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa4000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbaa}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "da73b0ed7033ea03cb41e33b0e068b755a7cee306c71721b377b98422199e004"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "d9951a778d0fac694bbc71cf08c2d368719a2219615e965eea9f50130cc03616c99926e4dc2663bd8c6dd07e4bc201caa1923bdbd51756529550a216b36e06f95416c5087f2c88752e26b82ba05dc995fef280219faf4060f83ee9bd2a8e824c64016176ed672fa6ae3e805f96bc9712dd480b408dad2d17a4789e03465be4f801148834dc9a9b7649df1e4c02c93d0e6e7c7810cc95550f556d777c0fd5cfa390efdb36f8c0d320c798ef686deb8af61b5cd2177b9592b852bbbab25758abeee81410ba80260eb64de5089313c2158d7a34"}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x40000}, 0x404c004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir, 0x3a}], [], 0x2f}) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x68}}, 0x4008050) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0xfc, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10000}, @TIPC_NLA_NODE_ID={0x41, 0x3, "6a9ae14b09dc86d73c1e027d1465c86e40ae8dd88fc21df306a82e4395082d7afad043703c4d43099df034ae4f6a47270f56e35931fc15b26b50dd7f20"}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd57}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x4004012) 362.446612ms ago: executing program 0 (id=363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfd, {{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x4e23, 0x4, 0xa, 0x0, 0x80, 0x32}, {0x800, 0x80, 0xfffffffffffffff8, 0x1ff, 0x1, 0x9, 0x9, 0x1158000000000}, {0x2, 0x1, 0xfd, 0x4}, 0x7, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x29}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x5}}]}, 0xcc}, 0x1, 0x0, 0x3000000, 0xc040}, 0x8010) 341.533944ms ago: executing program 0 (id=364): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000004", @ANYRES32=r0, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES16=r0, @ANYBLOB], 0x1c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="b5358fe6446d2a", @ANYRES32=r3, @ANYRESOCT=r0, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRESOCT=r0, @ANYRESHEX], 0x0) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) r7 = gettid() r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000200)={0xc, r9}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) mprotect(&(0x7f0000014000/0x4000)=nil, 0x4000, 0x4) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r8, 0x3b70, &(0x7f0000000500)={0x30}) r13 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r13, &(0x7f0000000300)=[{&(0x7f0000000440)=""/172, 0xac}], 0x1) rt_sigqueueinfo(r7, 0x21, &(0x7f0000000180)={0x0, 0x0, 0xfffffffb}) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES64=r3, @ANYRESHEX=r3, @ANYRESHEX=r5, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 341.388099ms ago: executing program 3 (id=365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x40, r1, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x400c015}, 0xc2010) 323.802903ms ago: executing program 2 (id=366): r0 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r1 = open(&(0x7f0000000080)='./bus\x00', 0x4001410c2, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x20000006, 0x401}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x9}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="050027bd7000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a003400020202020202000004000801"], 0x2c}, 0x1, 0x0, 0x0, 0x8018}, 0x0) sendfile(r3, r4, &(0x7f0000000100)=0x6, 0x100000000010001) inotify_init() close_range(r2, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r9 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x3, r9, 0x2}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x2}}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'geneve0\x00', {0x800}, 0x7}) 218.575084ms ago: executing program 3 (id=367): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000001c0)) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)={0x20, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0xc, 0x1a, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x8}]}]}, 0x20}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000011880), r1) 218.442424ms ago: executing program 3 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000fff500000000000000000a200000000e0a05000000000000000000050000000900010073797a30000000002c000000030a010100000000000000000500000009000100"], 0xc0}}, 0x0) 212.908786ms ago: executing program 3 (id=369): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) write$vhost_msg(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100feffffff0000000005000000180001801400020073797a5f74756e0000000000000000001800038010"], 0x44}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r6, &(0x7f0000000340)=0x4) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYRES64=r2]) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040010) socket$netlink(0x10, 0x3, 0x12) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff01320009050d", @ANYRES16], 0x0) 130.322753ms ago: executing program 2 (id=370): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000047c00000400f6000c00018006000600800a081064380280"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 40.198167ms ago: executing program 2 (id=371): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700002000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 39.933863ms ago: executing program 2 (id=372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r1, @ANYBLOB="93132cbd7000fcdbdf2512"], 0xbc}, 0x1, 0x200000000000000, 0x0, 0x20000010}, 0x40804) 0s ago: executing program 2 (id=373): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x6e, "9d0e953a36513c94d7fbd628db33496ac74458439ae4877c3b80d11d19a5c4fdd9942daeda5629ef682254075c6d1c4a72da3cfeaa46f1436819acad316ebcd86e2432c3975c068f7870026c35682c7eabad33e0c43c08dcf0704d48fa181d21d2c6a7610a436a3e65ce561d48a8"}, &(0x7f0000000100)=0x76) ioctl$VT_DISALLOCATE(r0, 0x5608) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x9}, 0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000300)={r4, 0x1, &(0x7f0000000240)=[0x40], &(0x7f0000000280)=[0xffb4, 0xc], &(0x7f00000002c0)=[0x1, 0x6, 0x3, 0x40, 0x8, 0xfff, 0x6]}) r5 = signalfd(r1, &(0x7f0000000340)={[0x7fff]}, 0x8) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) r6 = syz_open_pts(r0, 0x2) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000003c0)=0xff) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000400)) r7 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) r8 = getuid() ioctl$SIOCAX25DELUID(r7, 0x89e2, &(0x7f0000000480)={0x3, @bcast, r8}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f00000004c0), &(0x7f0000000500)=0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x35}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000780)={&(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x5, 0x6, 0x6}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000007c0), 0x4000c0, 0x0) ioctl$KDSKBSENT(r9, 0x4b49, &(0x7f0000000800)={0xca, "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"}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000a40)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000a80)={r10}) write$cgroup_freezer_state(r7, &(0x7f0000000ac0)='FREEZING\x00', 0x9) ioctl$IOC_PR_PREEMPT(r5, 0x401870cb, &(0x7f0000000b00)={0x4, 0x3, 0x78, 0x7}) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f0000000b40)={r2, 0x6}, &(0x7f0000000b80)=0x8) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000bc0)={'mangle\x00', 0x0, [0x2, 0x7fffffff, 0x1000]}, &(0x7f0000000c40)=0x54) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. [ 50.968216][ T5846] cgroup: Unknown subsys name 'net' [ 51.094901][ T5846] cgroup: Unknown subsys name 'cpuset' [ 51.102396][ T5846] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.248693][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.158910][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.167632][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.175190][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.183605][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.191139][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.199849][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.204296][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.207958][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.215344][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.221358][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.235937][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.244023][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.244501][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.261097][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.269228][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.305609][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.321666][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.329653][ T5869] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.348904][ T5869] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.356498][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.639328][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 54.688406][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 54.716126][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 54.809360][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 54.877658][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.887202][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.894712][ T5858] bridge_slave_0: entered allmulticast mode [ 54.901678][ T5858] bridge_slave_0: entered promiscuous mode [ 54.925116][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.932878][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.940116][ T5862] bridge_slave_0: entered allmulticast mode [ 54.947568][ T5862] bridge_slave_0: entered promiscuous mode [ 54.955974][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.963194][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.970328][ T5858] bridge_slave_1: entered allmulticast mode [ 54.977353][ T5858] bridge_slave_1: entered promiscuous mode [ 54.987411][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.994582][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.001689][ T5855] bridge_slave_0: entered allmulticast mode [ 55.008451][ T5855] bridge_slave_0: entered promiscuous mode [ 55.015130][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.022369][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.029471][ T5862] bridge_slave_1: entered allmulticast mode [ 55.036353][ T5862] bridge_slave_1: entered promiscuous mode [ 55.066948][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.074100][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.081312][ T5855] bridge_slave_1: entered allmulticast mode [ 55.089729][ T5855] bridge_slave_1: entered promiscuous mode [ 55.129404][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.140750][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.167468][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.177940][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.196760][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.204181][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.211291][ T5867] bridge_slave_0: entered allmulticast mode [ 55.218948][ T5867] bridge_slave_0: entered promiscuous mode [ 55.227401][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.253680][ T5858] team0: Port device team_slave_0 added [ 55.260527][ T5858] team0: Port device team_slave_1 added [ 55.266709][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.274000][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.281087][ T5867] bridge_slave_1: entered allmulticast mode [ 55.287872][ T5867] bridge_slave_1: entered promiscuous mode [ 55.295768][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.337454][ T5862] team0: Port device team_slave_0 added [ 55.361230][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.380120][ T5862] team0: Port device team_slave_1 added [ 55.386508][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.393667][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.419758][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.433098][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.443380][ T5855] team0: Port device team_slave_0 added [ 55.458151][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.465226][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.491175][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.515370][ T5855] team0: Port device team_slave_1 added [ 55.539367][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.546504][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.572814][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.584893][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.591817][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.617899][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.638204][ T5867] team0: Port device team_slave_0 added [ 55.669951][ T5867] team0: Port device team_slave_1 added [ 55.685444][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.692627][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.718749][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.731071][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.738127][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.764919][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.791862][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.798872][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.824810][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.844932][ T5858] hsr_slave_0: entered promiscuous mode [ 55.851016][ T5858] hsr_slave_1: entered promiscuous mode [ 55.866305][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.873526][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.899667][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.928128][ T5862] hsr_slave_0: entered promiscuous mode [ 55.934506][ T5862] hsr_slave_1: entered promiscuous mode [ 55.940462][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 55.946276][ T5862] Cannot create hsr debugfs directory [ 56.020773][ T5855] hsr_slave_0: entered promiscuous mode [ 56.026891][ T5855] hsr_slave_1: entered promiscuous mode [ 56.033202][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 56.038928][ T5855] Cannot create hsr debugfs directory [ 56.061318][ T5867] hsr_slave_0: entered promiscuous mode [ 56.067380][ T5867] hsr_slave_1: entered promiscuous mode [ 56.073582][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 56.079309][ T5867] Cannot create hsr debugfs directory [ 56.322765][ T5861] Bluetooth: hci2: command tx timeout [ 56.322767][ T5857] Bluetooth: hci0: command tx timeout [ 56.322949][ T5869] Bluetooth: hci1: command tx timeout [ 56.347494][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.357982][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.368259][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.384275][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.402308][ T5869] Bluetooth: hci3: command tx timeout [ 56.433266][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.453581][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.468014][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.485020][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.521043][ T5858] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.549652][ T5858] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.558751][ T5858] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.570989][ T5858] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.628887][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.637873][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.652741][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.666878][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.736328][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.774956][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.785040][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.806741][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.820482][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.827999][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.840120][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.847236][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.872518][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.884586][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.896744][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.903847][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.923678][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.930750][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.940359][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.947412][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.960502][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.985684][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.992788][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.017693][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.036863][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.052594][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.059650][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.085620][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.092687][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.403730][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.438176][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.454582][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.471423][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.508261][ T5862] veth0_vlan: entered promiscuous mode [ 57.543951][ T5862] veth1_vlan: entered promiscuous mode [ 57.551417][ T5858] veth0_vlan: entered promiscuous mode [ 57.578592][ T5855] veth0_vlan: entered promiscuous mode [ 57.589045][ T5858] veth1_vlan: entered promiscuous mode [ 57.609570][ T5862] veth0_macvtap: entered promiscuous mode [ 57.617668][ T5867] veth0_vlan: entered promiscuous mode [ 57.626619][ T5855] veth1_vlan: entered promiscuous mode [ 57.639146][ T5867] veth1_vlan: entered promiscuous mode [ 57.650107][ T5862] veth1_macvtap: entered promiscuous mode [ 57.675828][ T5858] veth0_macvtap: entered promiscuous mode [ 57.689211][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.701273][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.711864][ T5858] veth1_macvtap: entered promiscuous mode [ 57.734819][ T5855] veth0_macvtap: entered promiscuous mode [ 57.741423][ T3589] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.751025][ T3589] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.772494][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.779724][ T3589] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.788716][ T3589] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.803947][ T5855] veth1_macvtap: entered promiscuous mode [ 57.813968][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.837306][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.850407][ T5867] veth0_macvtap: entered promiscuous mode [ 57.860116][ T5867] veth1_macvtap: entered promiscuous mode [ 57.870863][ T3480] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.879822][ T3480] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.891991][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.908223][ T3480] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.931346][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.976687][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.986080][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.000180][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.011249][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.014819][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.027183][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.036279][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.058738][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.104652][ T3480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.113711][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.124575][ T3480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.125317][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.158935][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.168816][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.189907][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.198583][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.218282][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.297470][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.301154][ T5941] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 58.309016][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.321462][ T5941] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 58.330089][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.340842][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.357142][ T5941] batman_adv: batadv0: Adding interface: virt_wifi0 [ 58.364938][ T5941] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.395454][ T5941] batman_adv: batadv0: Interface activated: virt_wifi0 [ 58.402847][ T5869] Bluetooth: hci2: command tx timeout [ 58.403210][ T5861] Bluetooth: hci1: command tx timeout [ 58.403238][ T5861] Bluetooth: hci0: command tx timeout [ 58.429736][ T5942] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.480986][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.495569][ T5857] Bluetooth: hci3: command tx timeout [ 58.511116][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.566037][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.579863][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.583134][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.605738][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.815570][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 58.825776][ T5955] erspan0: default FDB implementation only supports local addresses [ 58.849063][ T5957] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 58.863120][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.022247][ T5930] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 59.038406][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 59.060103][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=00c7, bcdDevice= 0.40 [ 59.074293][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.088766][ T10] usb 2-1: Product: syz [ 59.096479][ T10] usb 2-1: Manufacturer: 쵺죻㣋䥾뒽릆쟨诸猟肆荳Иᒔ뿣ꇏ촼꫋큒򝦄 [ 59.106867][ T10] usb 2-1: SerialNumber: syz [ 59.127042][ T5969] QAT: failed to copy from user cfg_data. [ 59.134498][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 59.146210][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.163780][ T5967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 59.221588][ T5930] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 59.250395][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.260629][ T5930] usb 3-1: Product: syz [ 59.265932][ T5930] usb 3-1: Manufacturer: syz [ 59.270624][ T5930] usb 3-1: SerialNumber: syz [ 59.284274][ T5930] usb 3-1: config 0 descriptor?? [ 59.315792][ T5930] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 59.357993][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 59.370561][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 59.389863][ T10] usb 2-1: USB disconnect, device number 2 [ 59.472456][ T5859] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 59.572647][ T48] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 59.622902][ T5859] usb 4-1: Invalid ep0 maxpacket: 32 [ 59.712203][ T48] usb 1-1: device descriptor read/64, error -71 [ 59.762598][ T5859] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 59.922783][ T5859] usb 4-1: Invalid ep0 maxpacket: 32 [ 59.929717][ T5859] usb usb4-port1: attempt power cycle [ 59.952796][ T48] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 60.019137][ T5930] gspca_sunplus: reg_w_riv err -110 [ 60.026767][ T5930] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 60.092254][ T48] usb 1-1: device descriptor read/64, error -71 [ 60.162023][ T5985] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.17'. [ 60.213424][ T48] usb usb1-port1: attempt power cycle [ 60.228002][ T5987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18'. [ 60.255126][ T5902] usb 3-1: USB disconnect, device number 2 [ 60.282423][ T5859] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 60.303680][ T5859] usb 4-1: Invalid ep0 maxpacket: 32 [ 60.370677][ T5993] input: syz0 as /devices/virtual/input/input5 [ 60.426286][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 60.443736][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 60.462474][ T5859] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 60.484793][ T5857] Bluetooth: hci2: command tx timeout [ 60.490290][ T5857] Bluetooth: hci0: command tx timeout [ 60.496562][ T5869] Bluetooth: hci1: command tx timeout [ 60.505788][ T5859] usb 4-1: Invalid ep0 maxpacket: 32 [ 60.522198][ T5859] usb usb4-port1: unable to enumerate USB device [ 60.537705][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23'. [ 60.554069][ T48] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 60.562190][ T5869] Bluetooth: hci3: command tx timeout [ 60.592710][ T48] usb 1-1: device descriptor read/8, error -71 [ 60.641729][ T6006] random: crng reseeded on system resumption [ 60.807296][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 60.819832][ T6016] erspan0: default FDB implementation only supports local addresses [ 60.821552][ T6018] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 60.836392][ T48] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 60.862832][ T48] usb 1-1: device descriptor read/8, error -71 [ 60.974407][ T48] usb usb1-port1: unable to enumerate USB device [ 61.112215][ T5859] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 61.232283][ T93] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 61.264603][ T5859] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.275609][ T5859] usb 2-1: config 0 interface 0 has no altsetting 0 [ 61.282277][ T5859] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 61.291307][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.301533][ T5859] usb 2-1: config 0 descriptor?? [ 61.384157][ T93] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.395225][ T93] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.405102][ T93] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 61.414160][ T93] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.424278][ T93] usb 3-1: config 0 descriptor?? [ 61.718367][ T5859] hid-alps 0003:044E:1215.0001: unknown main item tag 0x1 [ 61.728607][ T5859] hid-alps 0003:044E:1215.0001: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.1-1/input0 [ 61.843913][ T93] aquacomputer_d5next 0003:0C70:F014.0002: hidraw1: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.2-1/input0 [ 61.927481][ T5859] usb 2-1: USB disconnect, device number 3 [ 62.038571][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.047731][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.057031][ T48] usb 3-1: USB disconnect, device number 3 [ 62.455533][ T6054] erspan0: default FDB implementation only supports local addresses [ 62.563765][ T5869] Bluetooth: hci1: command tx timeout [ 62.569299][ T5861] Bluetooth: hci0: command tx timeout [ 62.574703][ T5857] Bluetooth: hci2: command tx timeout [ 62.644928][ T5869] Bluetooth: hci3: command tx timeout [ 62.902567][ T48] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 62.912666][ T5895] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 62.948743][ T6091] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 63.011052][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.025967][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.043755][ T48] usb 4-1: device descriptor read/64, error -71 [ 63.073495][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 63.085499][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.114146][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 63.132828][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 63.143383][ T5895] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 63.154118][ T5895] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.170197][ T5895] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 63.179526][ T5895] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 63.189696][ T5895] usb 1-1: Manufacturer: syz [ 63.201978][ T5895] usb 1-1: config 0 descriptor?? [ 63.243130][ T93] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 63.275720][ T6109] 9pnet: p9_errstr2errno: server reported unknown error nѨK,kcRkVS:\{{ [ 63.287681][ T48] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 63.402104][ T93] usb 3-1: Using ep0 maxpacket: 32 [ 63.408588][ T93] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.418382][ T93] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 63.428149][ T93] usb 3-1: config 0 interface 0 has no altsetting 0 [ 63.432191][ T48] usb 4-1: device descriptor read/64, error -71 [ 63.436591][ T93] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 63.452892][ T93] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 63.463273][ T93] usb 3-1: Product: syz [ 63.472152][ T93] usb 3-1: Manufacturer: syz [ 63.476786][ T93] usb 3-1: SerialNumber: syz [ 63.485826][ T93] usb 3-1: config 0 descriptor?? [ 63.524978][ T5895] rc_core: IR keymap rc-hauppauge not found [ 63.530880][ T5895] Registered IR keymap rc-empty [ 63.536189][ T5895] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 63.562382][ T48] usb usb4-port1: attempt power cycle [ 63.567942][ T5895] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 63.582436][ T5902] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 63.594119][ T5895] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 63.609660][ T5895] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 63.626059][ T5895] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 63.652392][ T5895] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 63.672246][ T5895] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 63.692244][ T5895] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 63.706706][ T93] gs_usb 3-1:0.0: Couldn't send data format (err=-71) [ 63.712556][ T5895] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 63.714236][ T93] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 63.732851][ T5902] usb 2-1: Using ep0 maxpacket: 16 [ 63.737467][ T93] usb 3-1: USB disconnect, device number 4 [ 63.738310][ T5895] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 63.755296][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.768585][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 63.779611][ T5895] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 63.787021][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 63.798792][ T5902] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 63.808559][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.816657][ T5895] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 63.823813][ T5902] usb 2-1: Product: syz [ 63.827974][ T5902] usb 2-1: Manufacturer: syz [ 63.832653][ T5902] usb 2-1: SerialNumber: syz [ 63.838810][ T5902] usb 2-1: config 0 descriptor?? [ 63.852168][ T5895] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 63.872186][ T5895] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 63.895401][ T5895] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 63.904485][ T5895] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 63.922146][ T48] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 63.959308][ T48] usb 4-1: device descriptor read/8, error -71 [ 64.006621][ T9] usb 1-1: USB disconnect, device number 6 [ 64.048987][ T5902] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 64.065109][ T5902] usb 2-1: USB disconnect, device number 4 [ 64.203095][ T48] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 64.227930][ T48] usb 4-1: device descriptor read/8, error -71 [ 64.342383][ T48] usb usb4-port1: unable to enumerate USB device [ 64.356359][ T6121] __nla_validate_parse: 8 callbacks suppressed [ 64.356372][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.66'. [ 64.537425][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'. [ 64.617336][ T6131] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.71'. [ 64.727538][ T6137] Unsupported ieee802154 address type: 0 [ 64.749877][ T6140] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.892101][ T5895] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 65.056304][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 65.066543][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.077616][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.087381][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 65.100188][ T5895] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 65.109573][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.119553][ T5895] usb 2-1: config 0 descriptor?? [ 65.529888][ T5895] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 65.560555][ T5895] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input8 [ 65.647087][ T5895] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 65.731597][ T6154] FAULT_INJECTION: forcing a failure. [ 65.731597][ T6154] name failslab, interval 1, probability 0, space 0, times 1 [ 65.757326][ T6154] CPU: 1 UID: 0 PID: 6154 Comm: syz.0.77 Not tainted syzkaller #0 PREEMPT(full) [ 65.757345][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.757351][ T6154] Call Trace: [ 65.757356][ T6154] [ 65.757360][ T6154] dump_stack_lvl+0x189/0x250 [ 65.757381][ T6154] ? __pfx____ratelimit+0x10/0x10 [ 65.757394][ T6154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.757409][ T6154] ? __pfx__printk+0x10/0x10 [ 65.757426][ T6154] ? __pfx___might_resched+0x10/0x10 [ 65.757437][ T6154] ? fs_reclaim_acquire+0x7d/0x100 [ 65.757452][ T6154] should_fail_ex+0x414/0x560 [ 65.757467][ T6154] should_failslab+0xa8/0x100 [ 65.757481][ T6154] __kmalloc_noprof+0xcb/0x7f0 [ 65.757492][ T6154] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 65.757505][ T6154] ? rcu_is_watching+0x15/0xb0 [ 65.757521][ T6154] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 65.757539][ T6154] genl_family_rcv_msg_doit+0xb8/0x300 [ 65.757555][ T6154] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 65.757573][ T6154] ? apparmor_capable+0x137/0x1b0 [ 65.757586][ T6154] ? bpf_lsm_capable+0x9/0x20 [ 65.757596][ T6154] ? security_capable+0x7e/0x2e0 [ 65.757615][ T6154] genl_rcv_msg+0x60e/0x790 [ 65.757631][ T6154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 65.757642][ T6154] ? __pfx_mptcp_pm_nl_set_flags_doit+0x10/0x10 [ 65.757655][ T6154] ? __asan_memcpy+0x40/0x70 [ 65.757670][ T6154] ? __pfx_ref_tracker_free+0x10/0x10 [ 65.757688][ T6154] netlink_rcv_skb+0x205/0x470 [ 65.757701][ T6154] ? __lock_acquire+0xab9/0xd20 [ 65.757713][ T6154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 65.757725][ T6154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 65.757753][ T6154] ? down_read+0x1ad/0x2e0 [ 65.757765][ T6154] genl_rcv+0x28/0x40 [ 65.757775][ T6154] netlink_unicast+0x82c/0x9e0 [ 65.757795][ T6154] ? __pfx_netlink_unicast+0x10/0x10 [ 65.757809][ T6154] ? netlink_sendmsg+0x642/0xb30 [ 65.757823][ T6154] ? skb_put+0x11b/0x210 [ 65.757841][ T6154] netlink_sendmsg+0x805/0xb30 [ 65.757862][ T6154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.757880][ T6154] ? aa_sock_msg_perm+0xf1/0x1d0 [ 65.757896][ T6154] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 65.757910][ T6154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.757925][ T6154] __sock_sendmsg+0x21c/0x270 [ 65.757940][ T6154] ____sys_sendmsg+0x505/0x830 [ 65.757955][ T6154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.757971][ T6154] ? import_iovec+0x74/0xa0 [ 65.757990][ T6154] ___sys_sendmsg+0x21f/0x2a0 [ 65.758001][ T6154] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.758036][ T6154] ? __fget_files+0x2a/0x420 [ 65.758049][ T6154] ? __fget_files+0x3a0/0x420 [ 65.758070][ T6154] __x64_sys_sendmsg+0x19b/0x260 [ 65.758082][ T6154] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 65.758099][ T6154] ? __pfx_ksys_write+0x10/0x10 [ 65.758113][ T6154] ? do_syscall_64+0xbe/0xfa0 [ 65.758131][ T6154] do_syscall_64+0xfa/0xfa0 [ 65.758144][ T6154] ? lockdep_hardirqs_on+0x9c/0x150 [ 65.758158][ T6154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.758168][ T6154] ? clear_bhb_loop+0x60/0xb0 [ 65.758187][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.758197][ T6154] RIP: 0033:0x7fb26bd8eba9 [ 65.758207][ T6154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.758215][ T6154] RSP: 002b:00007fb26cc10038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.758228][ T6154] RAX: ffffffffffffffda RBX: 00007fb26bfd5fa0 RCX: 00007fb26bd8eba9 [ 65.758236][ T6154] RDX: 0000000004000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 65.758242][ T6154] RBP: 00007fb26cc10090 R08: 0000000000000000 R09: 0000000000000000 [ 65.758249][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.758254][ T6154] R13: 00007fb26bfd6038 R14: 00007fb26bfd5fa0 R15: 00007ffd674808b8 [ 65.758274][ T6154] [ 66.139014][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 66.149270][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 66.174455][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 66.231140][ T6162] netlink: 'syz.2.80': attribute type 2 has an invalid length. [ 66.236998][ T5902] usb 2-1: USB disconnect, device number 5 [ 66.255161][ T6162] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.80'. [ 66.415055][ T6171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.84'. [ 66.650286][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 66.815818][ T6201] process 'syz.3.97' launched './file1' with NULL argv: empty string added [ 66.922338][ T5895] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 66.992457][ T93] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 67.074518][ T5895] usb 1-1: config 0 has an invalid interface number: 223 but max is 3 [ 67.083182][ T5895] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.093304][ T5895] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 67.102262][ T5895] usb 1-1: config 0 has no interface number 1 [ 67.108371][ T5895] usb 1-1: config 0 interface 223 altsetting 103 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 67.121575][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 67.128191][ T5895] usb 1-1: config 0 interface 223 has no altsetting 0 [ 67.135016][ T5902] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 67.145207][ T5895] usb 1-1: New USB device found, idVendor=16d8, idProduct=7001, bcdDevice= e.1c [ 67.154366][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.157785][ T93] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.162360][ T5895] usb 1-1: Product: ᕯ敍Ȝ酳ꆅ홊熤ꍖ訯ꉜ䫽忟嶈⑔﵌徢㪭띦霶蒁阖霉⥶㈓鎑㢋ೝꑩ⚚蚬揻듩ᝧⵯ宀匭ﲈᱺ眳퓡Ͱ쁧渒뇵㘣✑磡昣흜᱙譼㪬ऊ셛䩂乥솧攵⻣ᥲ컰䖍庼 [ 67.162377][ T5895] usb 1-1: Manufacturer: 埬䓒儸⋇鳽鰟䛌뫒榍⿼잱㰆銸銲⧜‰䕟ភළꥸ఍ꀀ적ᮟ雨욤텈ꛏꝪ䕘벶背▁᎜覴纁ᥭ㻜蓊ⲅᵈ븸ㅦ竼냹ꓛ㝎犒董瀨㧆ꑮ倡狼엢ഌ໶읧࣒ꝳ륖嶅鏯쀢㍩ㇺ罤䦪侄뛚富䟿 [ 67.162393][ T5895] usb 1-1: SerialNumber: 꿊 [ 67.164216][ T5895] usb 1-1: config 0 descriptor?? [ 67.202115][ T93] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.220957][ C1] vkms_vblank_simulate: vblank timer overrun [ 67.246873][ T93] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.261250][ T93] usb 3-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 67.270499][ T93] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.280497][ T93] usb 3-1: config 0 descriptor?? [ 67.302140][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 67.309157][ T5902] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 67.317631][ T5902] usb 2-1: config 0 has no interface number 0 [ 67.326142][ T5902] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 67.335377][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.343407][ T5902] usb 2-1: Product: syz [ 67.347569][ T5902] usb 2-1: Manufacturer: syz [ 67.352196][ T5902] usb 2-1: SerialNumber: syz [ 67.359029][ T5902] usb 2-1: config 0 descriptor?? [ 67.437967][ T5895] option 1-1:0.223: GSM modem (1-port) converter detected [ 67.450134][ T5895] usb 1-1: USB disconnect, device number 7 [ 67.460728][ T5895] option 1-1:0.223: device disconnected [ 67.495143][ T6196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.507544][ T6196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.518377][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 67.667450][ T9] usb 2-1: USB disconnect, device number 6 [ 67.715783][ T6218] [U] [ 67.771469][ T6222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.781184][ T6222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.812198][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.821197][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.825843][ T6222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.838584][ T6222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.854731][ T93] usbhid 3-1:0.0: can't add hid device: -71 [ 67.861045][ T93] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 67.884553][ T93] usb 3-1: USB disconnect, device number 5 [ 68.045665][ T5895] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 68.090148][ T6240] openvswitch: netlink: Missing key (keys=40, expected=100) [ 68.212875][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 68.220749][ T5895] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 68.256097][ T5895] usb 4-1: config 0 has no interface number 0 [ 68.262206][ T5895] usb 4-1: config 0 interface 69 has no altsetting 0 [ 68.276630][ T5895] usb 4-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice= 2.bf [ 68.296672][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.309395][ T5895] usb 4-1: Product: syz [ 68.313569][ T5895] usb 4-1: Manufacturer: syz [ 68.323929][ T5895] usb 4-1: SerialNumber: syz [ 68.357316][ T5895] usb 4-1: config 0 descriptor?? [ 68.373492][ T93] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 68.558115][ T93] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 68.568435][ T93] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.581560][ T93] usb 3-1: config 0 descriptor?? [ 68.594275][ T6226] netlink: 'syz.3.105': attribute type 4 has an invalid length. [ 68.667437][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.677145][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.725873][ T5930] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 68.742209][ T5895] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 68.750255][ T5895] gspca_sn9c2028: read1 error -71 [ 68.755516][ T5895] gspca_sn9c2028: read1 error -71 [ 68.761156][ T5895] gspca_sn9c2028: read1 error -71 [ 68.767130][ T5895] sn9c2028 4-1:0.69: probe with driver sn9c2028 failed with error -71 [ 68.784880][ T5895] usb 4-1: USB disconnect, device number 10 [ 68.864794][ T5930] usb 1-1: device descriptor read/64, error -71 [ 69.020734][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.030082][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.133247][ T5930] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 69.219062][ T6281] vlan0: entered promiscuous mode [ 69.225796][ T6281] vlan0: entered allmulticast mode [ 69.232160][ T6281] veth0_vlan: entered allmulticast mode [ 69.260451][ T93] ath6kl: mismatched byte count 0 vs. expected 12 [ 69.270813][ T93] ath6kl: Failed to init ath6kl core: -22 [ 69.280399][ T5930] usb 1-1: device descriptor read/64, error -71 [ 69.294053][ T93] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 69.421141][ T5930] usb usb1-port1: attempt power cycle [ 69.477329][ T93] usb 3-1: USB disconnect, device number 6 [ 69.705561][ T6291] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.785436][ T5930] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 69.826791][ T5930] usb 1-1: device descriptor read/8, error -71 [ 69.835964][ T6293] __nla_validate_parse: 8 callbacks suppressed [ 69.835976][ T6293] netlink: 56 bytes leftover after parsing attributes in process `syz.3.134'. [ 69.856983][ T6293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'. [ 69.867497][ T6293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'. [ 69.942094][ T6295] netlink: 14428 bytes leftover after parsing attributes in process `syz.3.135'. [ 69.954177][ T6295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.095226][ T5930] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 70.127143][ T5930] usb 1-1: device descriptor read/8, error -71 [ 70.245891][ T5930] usb usb1-port1: unable to enumerate USB device [ 70.404713][ T981] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 70.490410][ T93] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 70.554340][ T5930] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 70.586426][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 70.592748][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.603777][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.613524][ T981] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 70.622567][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.632776][ T981] usb 3-1: config 0 descriptor?? [ 70.662835][ T93] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 70.675063][ T93] usb 4-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 70.684678][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.692657][ T93] usb 4-1: Product: syz [ 70.696844][ T93] usb 4-1: Manufacturer: syz [ 70.701417][ T93] usb 4-1: SerialNumber: syz [ 70.725445][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 70.732045][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.743687][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.753496][ T5930] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 70.762667][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.773915][ T5930] usb 2-1: config 0 descriptor?? [ 70.789944][ T5930] hub 2-1:0.0: USB hub found [ 70.858587][ T981] glorious 0003:258A:0033.0004: reserved main item tag 0xe [ 70.868318][ T981] glorious 0003:258A:0033.0004: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.2-1/input0 [ 70.924713][ T93] usb 4-1: selecting invalid altsetting 1 [ 70.931021][ T93] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 70.931092][ T93] dvb_usb_lmedm04 4-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 70.949921][ T93] usb 4-1: USB disconnect, device number 11 [ 70.998801][ T5930] hub 2-1:0.0: 1 port detected [ 71.083623][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.091049][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.098164][ T5895] usb 3-1: USB disconnect, device number 7 [ 71.488412][ T6318] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'. [ 71.523960][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 71.533064][ T6320] erspan0: default FDB implementation only supports local addresses [ 71.643366][ T5930] hub 2-1:0.0: activate --> -90 [ 71.706121][ T6330] openvswitch: netlink: Key type 262 is out of range max 32 [ 71.743497][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.151'. [ 71.833967][ T5869] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 71.973517][ T6345] capability: warning: `syz.0.157' uses deprecated v2 capabilities in a way that may be insecure [ 71.979654][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 72.002953][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 72.006681][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 72.292856][ T981] usb 2-1: USB disconnect, device number 7 [ 72.308461][ T5895] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 72.353588][ T6369] erspan0: default FDB implementation only supports local addresses [ 72.480649][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.504800][ T5895] usb 4-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.00 [ 72.508043][ T6380] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 72.525378][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.526494][ T5930] usb 2-1-port1: config error [ 72.553350][ T5895] usb 4-1: config 0 descriptor?? [ 73.006397][ T6351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.016797][ T6351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.048753][ T5895] usbhid 4-1:0.0: can't add hid device: -71 [ 73.055219][ T5895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 73.065314][ T5895] usb 4-1: USB disconnect, device number 12 [ 73.291964][ T5930] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 73.418774][ T6413] netlink: 'syz.0.186': attribute type 21 has an invalid length. [ 73.456939][ T5930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 73.468533][ T5930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 36128, setting to 64 [ 73.485429][ T5930] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 73.511295][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 73.519449][ T5930] usb 2-1: SerialNumber: syz [ 73.528155][ T6410] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 73.549337][ T5930] cdc_acm 2-1:1.0: skipping garbage [ 73.555705][ T5930] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 73.808902][ T5895] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 73.851357][ T9] usb 2-1: USB disconnect, device number 8 [ 73.948700][ T6448] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 73.987247][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 74.004619][ T5895] usb 1-1: config 4 has an invalid interface number: 140 but max is 0 [ 74.016945][ T5895] usb 1-1: config 4 has no interface number 0 [ 74.024886][ T5895] usb 1-1: config 4 interface 140 has no altsetting 0 [ 74.038119][ T5895] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=68.3b [ 74.047616][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.058591][ T5895] usb 1-1: Product: syz [ 74.062960][ T5895] usb 1-1: Manufacturer: syz [ 74.067546][ T5895] usb 1-1: SerialNumber: syz [ 74.089219][ T5895] ums-cypress 1-1:4.140: USB Mass Storage device detected [ 74.130905][ T6460] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 74.140542][ T6460] overlayfs: failed to set xattr on upper [ 74.146263][ T6460] overlayfs: ...falling back to redirect_dir=nofollow. [ 74.153947][ T6460] overlayfs: ...falling back to index=off. [ 74.275801][ T5930] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 74.293389][ T6467] tun0: tun_chr_ioctl cmd 21731 [ 74.310817][ T9] usb 1-1: USB disconnect, device number 12 [ 74.419405][ T6469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 74.436542][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 74.443997][ T5930] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 74.453178][ T5930] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 74.467311][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 74.478693][ T5930] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 74.490822][ T5930] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 74.506585][ T5930] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 74.517212][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.542838][ T6473] trusted_key: encrypted_key: insufficient parameters specified [ 74.583329][ T6475] tipc: Started in network mode [ 74.588499][ T6475] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 74.595640][ T6475] tipc: Enabled bearer , priority 10 [ 74.748075][ T5930] usb 3-1: GET_CAPABILITIES returned 0 [ 74.753648][ T5930] usbtmc 3-1:16.0: can't read capabilities [ 74.853298][ T5895] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 74.969244][ T5859] usb 3-1: USB disconnect, device number 8 [ 75.017609][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 75.027378][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 75.038602][ T5895] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.047663][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.055642][ T5895] usb 2-1: Product: syz [ 75.059993][ T5895] usb 2-1: Manufacturer: syz [ 75.064570][ T5895] usb 2-1: SerialNumber: syz [ 75.070700][ T5895] usb 2-1: config 0 descriptor?? [ 75.079214][ T5895] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 75.152725][ T5902] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 75.210515][ T6479] __nla_validate_parse: 14 callbacks suppressed [ 75.210525][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 75.228561][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.214'. [ 75.295459][ T6482] sctp: [Deprecated]: syz.3.214 (pid 6482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.295459][ T6482] Use struct sctp_sack_info instead [ 75.314839][ T5902] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 75.326543][ T5895] usb 2-1: USB disconnect, device number 9 [ 75.332551][ T5902] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 75.358765][ T5902] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 75.372391][ T5902] usb 1-1: config 220 has no interface number 2 [ 75.385947][ T5902] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 75.389029][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.400879][ T5902] usb 1-1: config 220 interface 0 has no altsetting 0 [ 75.424883][ T5902] usb 1-1: config 220 interface 76 has no altsetting 0 [ 75.434657][ T5902] usb 1-1: config 220 interface 1 has no altsetting 0 [ 75.444684][ T5902] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 75.454628][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.462606][ T5902] usb 1-1: Product: syz [ 75.467123][ T5902] usb 1-1: Manufacturer: syz [ 75.471702][ T5902] usb 1-1: SerialNumber: syz [ 75.701650][ T5902] usb 1-1: selecting invalid altsetting 0 [ 75.711479][ T5902] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 75.717816][ T5902] usb 1-1: No valid video chain found. [ 75.726607][ T5902] usb 1-1: selecting invalid altsetting 0 [ 75.732763][ T5902] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 75.744147][ T5902] usb 1-1: USB disconnect, device number 13 [ 75.785152][ T5895] tipc: Node number set to 10136234 [ 76.158115][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 76.319556][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 76.330066][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 76.339898][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 76.352147][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 76.361259][ T9] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 76.369396][ T9] usb 2-1: Manufacturer: syz [ 76.376243][ T9] usb 2-1: config 0 descriptor?? [ 76.383408][ T9] smsusb:smsusb_probe: board id=9, interface number 0 [ 76.390668][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 76.393214][ T5895] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 76.510819][ T48] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 76.554503][ T24] cfg80211: failed to load regulatory.db [ 76.564252][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 76.570897][ T5895] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 76.579169][ T5895] usb 4-1: config 4 has no interface number 0 [ 76.585351][ T5895] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 76.595970][ T5895] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 76.610078][ T5902] usb 2-1: USB disconnect, device number 10 [ 76.616654][ T5895] usb 4-1: config 4 interface 51 has no altsetting 0 [ 76.637299][ T5895] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 76.647649][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.657746][ T5895] usb 4-1: Product: syz [ 76.664834][ T5895] usb 4-1: Manufacturer: syz [ 76.669458][ T5895] usb 4-1: SerialNumber: syz [ 76.675883][ T48] usb 1-1: Using ep0 maxpacket: 8 [ 76.682697][ T48] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 76.701119][ T48] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.711236][ T6491] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 76.711516][ T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.728873][ T48] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.729459][ T6491] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 76.739141][ T48] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.759556][ T48] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.776001][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.990676][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.999630][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.008474][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.017190][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.019554][ T6493] netlink: 'syz.0.219': attribute type 2 has an invalid length. [ 77.039013][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.041088][ T48] usb 1-1: usb_control_msg returned -71 [ 77.049077][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.054182][ T48] usbtmc 1-1:16.0: can't read capabilities [ 77.067847][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.074840][ T48] usb 1-1: USB disconnect, device number 14 [ 77.083720][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.098715][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.107341][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.121047][ T5895] cdc_eem 4-1:4.51: probe with driver cdc_eem failed with error -71 [ 77.134433][ T5895] usb 4-1: USB disconnect, device number 13 [ 77.277817][ T6493] Zero length message leads to an empty skb [ 77.344610][ T6498] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 77.702448][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 77.711599][ T5895] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 77.881791][ T5895] usb 3-1: Invalid ep0 maxpacket: 16 [ 77.887135][ T48] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 77.983063][ T6538] netlink: 28 bytes leftover after parsing attributes in process `syz.3.237'. [ 78.029396][ T5895] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 78.051193][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 78.058725][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.069983][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.080253][ T48] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 78.089833][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.104433][ T48] usb 2-1: config 0 descriptor?? [ 78.114960][ T5859] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 78.150612][ T6547] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 78.189765][ T5895] usb 3-1: Invalid ep0 maxpacket: 16 [ 78.195306][ T5895] usb usb3-port1: attempt power cycle [ 78.286097][ T5859] usb 1-1: Using ep0 maxpacket: 8 [ 78.292734][ T5859] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 78.301661][ T5859] usb 1-1: config 179 has no interface number 0 [ 78.308010][ T5859] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 78.319252][ T5859] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 78.330666][ T5859] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 78.342317][ T5859] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 78.352634][ T5859] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 78.366077][ T5859] usb 1-1: config 179 interface 65 has no altsetting 0 [ 78.373105][ T5859] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 78.382316][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.404094][ T5859] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input9 [ 78.499944][ T5930] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 78.558576][ T48] ft260 0003:0403:6030.0005: unknown main item tag 0x7 [ 78.574709][ T5895] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 78.607304][ T5895] usb 3-1: Invalid ep0 maxpacket: 16 [ 78.608646][ T6527] netlink: 260 bytes leftover after parsing attributes in process `syz.0.233'. [ 78.635194][ T5965] usb 1-1: USB disconnect, device number 15 [ 78.635343][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 78.662980][ T5930] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 78.689336][ T5930] usb 4-1: config 8 interface 0 has no altsetting 0 [ 78.699760][ T5930] usb 4-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=73.93 [ 78.710906][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.721698][ T5930] usb 4-1: Product: syz [ 78.725937][ T5930] usb 4-1: Manufacturer: syz [ 78.730531][ T5930] usb 4-1: SerialNumber: syz [ 78.746201][ T5895] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 78.770191][ T6558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.243'. [ 78.779525][ T48] ft260 0003:0403:6030.0005: chip code: 6424 8183 [ 78.786197][ T5895] usb 3-1: Invalid ep0 maxpacket: 16 [ 78.792753][ T5895] usb usb3-port1: unable to enumerate USB device [ 78.960662][ T6566] syz.0.246 uses obsolete (PF_INET,SOCK_PACKET) [ 78.968281][ T6566] syzkaller1: entered promiscuous mode [ 78.975239][ T6566] syzkaller1: entered allmulticast mode [ 78.977709][ T5930] usb 4-1: USB disconnect, device number 14 [ 79.212571][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.221196][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.236523][ T5902] usb 2-1: USB disconnect, device number 11 [ 79.285377][ T6579] netlink: 'syz.1.250': attribute type 4 has an invalid length. [ 79.388867][ T48] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 79.549705][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.254'. [ 79.574366][ T48] usb 1-1: Using ep0 maxpacket: 16 [ 79.603291][ T48] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 79.613152][ T6596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.256'. [ 79.622779][ T48] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.635494][ T48] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 79.658751][ T48] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.683043][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.703363][ T48] usb 1-1: Product: syz [ 79.710602][ T48] usb 1-1: Manufacturer: syz [ 79.715525][ T48] usb 1-1: SerialNumber: syz [ 79.769137][ T6607] openvswitch: netlink: Actions may not be safe on all matching packets [ 79.787178][ T6609] netlink: 14428 bytes leftover after parsing attributes in process `syz.3.261'. [ 79.799428][ T6609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.071420][ T48] usb 1-1: 0:2 : does not exist [ 80.081920][ T48] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 80.100488][ T48] usb 1-1: USB disconnect, device number 16 [ 80.120771][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 80.140183][ T6636] netlink: 'syz.1.269': attribute type 1 has an invalid length. [ 80.414035][ T5930] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 80.574484][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 80.581161][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.589928][ T5930] usb 2-1: config 4 has an invalid descriptor of length 167, skipping remainder of the config [ 80.600765][ T5930] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 80.611666][ T5930] usb 2-1: New USB device found, idVendor=0506, idProduct=00df, bcdDevice=e2.02 [ 80.620919][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.629279][ T5930] usb 2-1: Product: syz [ 80.634051][ T5930] usb 2-1: Manufacturer: syz [ 80.638745][ T5930] usb 2-1: SerialNumber: syz [ 80.706412][ T6640] 9pnet_virtio: no channels available for device ./file0 [ 80.820162][ T6646] netlink: 'syz.2.274': attribute type 4 has an invalid length. [ 80.834792][ T6646] netlink: 'syz.2.274': attribute type 4 has an invalid length. [ 80.905708][ T5930] usb 2-1: USB disconnect, device number 12 [ 81.010546][ T6657] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 81.017161][ T6657] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 81.035962][ T6657] vhci_hcd vhci_hcd.0: Device attached [ 81.052720][ T6663] netlink: 14428 bytes leftover after parsing attributes in process `syz.2.279'. [ 81.065416][ T6663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.130672][ T5859] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 81.293064][ T5859] usb 1-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.306138][ T5859] usb 1-1: config 1 interface 0 has no altsetting 0 [ 81.314586][ T5859] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.323706][ T48] usb 36-1: SetAddress Request (2) to port 0 [ 81.329764][ T48] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 81.337237][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 81.346398][ T5859] usb 1-1: SerialNumber: syz [ 81.352929][ T6638] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.576218][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 81.585393][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'. [ 81.596523][ T5859] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 81.607617][ T5859] usb 1-1: USB disconnect, device number 17 [ 83.226494][ T5869] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.232605][ T6653] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 84.165126][ T6653] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.175132][ T6653] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 84.182557][ T6653] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 84.188501][ T6653] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 84.196113][ T6653] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 84.204194][ T6653] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 84.210990][ T6653] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 84.218143][ T6653] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 84.226724][ T6653] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 84.232789][ T6653] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.239368][ T6653] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 84.258975][ T6660] vhci_hcd: connection reset by peer [ 84.277336][ T13] vhci_hcd: stop threads [ 84.281899][ T13] vhci_hcd: release socket [ 84.292172][ T13] vhci_hcd: disconnect device [ 84.402680][ T6678] sctp: [Deprecated]: syz.2.286 (pid 6678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 84.402680][ T6678] Use struct sctp_sack_info instead [ 84.450781][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'. [ 84.510314][ T5895] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 84.610982][ T6688] netlink: 14428 bytes leftover after parsing attributes in process `syz.1.289'. [ 84.622040][ T6688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.671276][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 84.679993][ T5895] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 84.691173][ T5895] usb 1-1: config 0 has no interface number 0 [ 84.704959][ T5895] usb 1-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=81.e4 [ 84.715088][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.723084][ T5895] usb 1-1: Product: syz [ 84.727769][ T5895] usb 1-1: Manufacturer: syz [ 84.732390][ T5895] usb 1-1: SerialNumber: syz [ 84.755404][ T5895] usb 1-1: config 0 descriptor?? [ 84.820773][ T5902] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 84.855939][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 84.867012][ T6698] erspan0: default FDB implementation only supports local addresses [ 85.002567][ T5902] usb 3-1: Using ep0 maxpacket: 16 [ 85.016411][ T5902] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.035051][ T6670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.047189][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 85.063784][ T6670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.094923][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 85.106137][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 85.121860][ T5902] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.138770][ T5902] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 85.148698][ T5902] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 85.167933][ T5902] usb 3-1: Manufacturer: syz [ 85.178647][ T5902] usb 3-1: config 0 descriptor?? [ 85.466661][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 85.466841][ T5869] Bluetooth: hci0: command 0x0c1a tx timeout [ 85.482218][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 85.493655][ T5902] rc_core: IR keymap rc-hauppauge not found [ 85.499596][ T5902] Registered IR keymap rc-empty [ 85.501378][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 85.518406][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.558857][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.590724][ T5902] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 85.618740][ T5902] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 85.645963][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.661712][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 85.689649][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.748245][ T6735] vlan0: entered promiscuous mode [ 85.761369][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.769491][ T6735] vlan0: entered allmulticast mode [ 85.779873][ T6735] veth0_vlan: entered allmulticast mode [ 85.785892][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.798671][ T6739] capability: warning: `syz.3.308' uses 32-bit capabilities (legacy support in use) [ 85.814551][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.818108][ T6739] ======================================================= [ 85.818108][ T6739] WARNING: The mand mount option has been deprecated and [ 85.818108][ T6739] and is ignored by this kernel. Remove the mand [ 85.818108][ T6739] option from the mount to silence this warning. [ 85.818108][ T6739] ======================================================= [ 85.856519][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.857787][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.901377][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.932485][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.953450][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 85.975692][ T5902] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 86.009567][ T5902] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 86.017654][ T5902] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 86.017702][ T93] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 86.125358][ T5930] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 86.191061][ T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 86.212658][ T93] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 86.222002][ T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.235845][ T93] usb 2-1: config 0 descriptor?? [ 86.241632][ T6737] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 86.291326][ T5930] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 86.300584][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.323942][ T5930] usb 4-1: config 0 descriptor?? [ 86.332673][ T5930] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 86.366988][ T6757] openvswitch: netlink: Actions may not be safe on all matching packets [ 86.392574][ T5869] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.393855][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.399781][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.734200][ T48] usb 36-1: device descriptor read/8, error -110 [ 86.894639][ T5930] gspca_sunplus: reg_w_riv err -110 [ 86.899942][ T5930] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 86.908717][ T93] usbhid 2-1:0.0: can't add hid device: -71 [ 86.914679][ T93] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 86.935525][ T93] usb 2-1: USB disconnect, device number 13 [ 87.163703][ T48] usb usb36-port1: attempt power cycle [ 87.305640][ T6759] syz.0.315 (6759): drop_caches: 2 [ 87.395142][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.404882][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.675230][ T5869] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.720296][ T5902] usb 3-1: USB disconnect, device number 13 [ 87.767542][ T48] usb usb36-port1: unable to enumerate USB device [ 87.778180][ T6774] input: syz1 as /devices/virtual/input/input11 [ 87.984766][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 87.993732][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 88.002907][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 88.113871][ T6782] netlink: 14428 bytes leftover after parsing attributes in process `syz.0.325'. [ 88.123082][ T6782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.161468][ T6784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.172985][ T6784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.175456][ T6785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.194881][ T6785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.489282][ T6791] openvswitch: netlink: Actions may not be safe on all matching packets [ 88.526321][ T6793] netlink: 20 bytes leftover after parsing attributes in process `syz.2.330'. [ 88.567219][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.331'. [ 88.616268][ T5857] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.616276][ T5861] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.629200][ T5869] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.666961][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 88.694947][ T6799] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.333'. [ 88.881443][ T6811] netlink: 232 bytes leftover after parsing attributes in process `syz.1.339'. [ 89.043721][ T5902] usb 4-1: USB disconnect, device number 15 [ 89.278970][ T6837] openvswitch: netlink: Actions may not be safe on all matching packets [ 89.311501][ T24] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 89.314925][ T6839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.351'. [ 89.492825][ T6854] erspan0: default FDB implementation only supports local addresses [ 89.502311][ T24] usb 2-1: config 0 has an invalid interface number: 157 but max is 0 [ 89.512120][ T24] usb 2-1: config 0 has no interface number 0 [ 89.522233][ T24] usb 2-1: config 0 interface 157 has no altsetting 0 [ 89.529400][ T24] usb 2-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=3b.1d [ 89.541248][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.565062][ T24] usb 2-1: config 0 descriptor?? [ 89.799180][ T6819] kvm: user requested TSC rate below hardware speed [ 89.816919][ T24] usb 2-1: USB disconnect, device number 14 [ 89.907893][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.922852][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.045732][ T30] audit: type=1326 audit(1757459741.720:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.2.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac5838eba9 code=0x7fc00000 [ 90.092373][ T6886] openvswitch: netlink: Actions may not be safe on all matching packets [ 90.148505][ T6872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.165015][ T6872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.187755][ T5895] ax88179_178a 1-1:0.84: probe with driver ax88179_178a failed with error -22 [ 90.239763][ T6892] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000b2: 0000 [#1] SMP KASAN PTI [ 90.239781][ T6892] KASAN: null-ptr-deref in range [0x0000000000000590-0x0000000000000597] [ 90.239799][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.2.373 Not tainted syzkaller #0 PREEMPT(full) [ 90.239813][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.239820][ T6892] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 90.239839][ T6892] Code: e8 52 c2 cf fc 49 c7 07 00 00 00 00 eb 0e e8 74 bf 6b fc eb 05 e8 6d bf 6b fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 2e c1 cf fc 4d 8b 3e 4d 85 ff 74 [ 90.239849][ T6892] RSP: 0018:ffffc9000b5af9e0 EFLAGS: 00010206 [ 90.239862][ T6892] RAX: ffffffff85543ca3 RBX: 0000000000000000 RCX: 0000000000080000 [ 90.239870][ T6892] RDX: ffffc9000caa2000 RSI: 0000000000003804 RDI: 0000000000003805 [ 90.239878][ T6892] RBP: ffffc9000b5afa90 R08: ffffffff8fe506cf R09: 1ffffffff1fca0d9 [ 90.239886][ T6892] R10: dffffc0000000000 R11: fffffbfff1fca0da R12: 00000000000000b2 [ 90.239894][ T6892] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a272c50 [ 90.239902][ T6892] FS: 00007fac592ba6c0(0000) GS:ffff8881258b3000(0000) knlGS:0000000000000000 [ 90.239911][ T6892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.239918][ T6892] CR2: 0000001b32d23ffc CR3: 0000000031f92000 CR4: 00000000003526f0 [ 90.239929][ T6892] Call Trace: [ 90.239933][ T6892] [ 90.239938][ T6892] ? vt_disallocate_all+0x3b/0xe0 [ 90.239954][ T6892] ? __pfx_vc_deallocate+0x10/0x10 [ 90.239966][ T6892] ? is_console_locked+0x9/0x20 [ 90.239981][ T6892] vt_disallocate_all+0x60/0xe0 [ 90.240006][ T6892] vt_ioctl+0x1adc/0x1f20 [ 90.240019][ T6892] ? __pfx_vt_ioctl+0x10/0x10 [ 90.240033][ T6892] ? __fget_files+0x2a/0x420 [ 90.240046][ T6892] ? tty_jobctrl_ioctl+0x369/0xb70 [ 90.240056][ T6892] ? __fget_files+0x3a0/0x420 [ 90.240071][ T6892] ? __fget_files+0x2a/0x420 [ 90.240087][ T6892] tty_ioctl+0x929/0xde0 [ 90.240101][ T6892] ? __pfx_tty_ioctl+0x10/0x10 [ 90.240115][ T6892] __se_sys_ioctl+0xfc/0x170 [ 90.240125][ T6892] do_syscall_64+0xfa/0xfa0 [ 90.240139][ T6892] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.240154][ T6892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.240165][ T6892] ? clear_bhb_loop+0x60/0xb0 [ 90.240186][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.240197][ T6892] RIP: 0033:0x7fac5838eba9 [ 90.240207][ T6892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.240217][ T6892] RSP: 002b:00007fac592ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.240231][ T6892] RAX: ffffffffffffffda RBX: 00007fac585d5fa0 RCX: 00007fac5838eba9 [ 90.240239][ T6892] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003 [ 90.240247][ T6892] RBP: 00007fac58411e19 R08: 0000000000000000 R09: 0000000000000000 [ 90.240253][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.240261][ T6892] R13: 00007fac585d6038 R14: 00007fac585d5fa0 R15: 00007ffd1ec8b3f8 [ 90.240273][ T6892] [ 90.240278][ T6892] Modules linked in: [ 90.240301][ T6892] ---[ end trace 0000000000000000 ]--- [ 90.240309][ T6892] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 90.240323][ T6892] Code: e8 52 c2 cf fc 49 c7 07 00 00 00 00 eb 0e e8 74 bf 6b fc eb 05 e8 6d bf 6b fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 2e c1 cf fc 4d 8b 3e 4d 85 ff 74 [ 90.240332][ T6892] RSP: 0018:ffffc9000b5af9e0 EFLAGS: 00010206 [ 90.240344][ T6892] RAX: ffffffff85543ca3 RBX: 0000000000000000 RCX: 0000000000080000 [ 90.240353][ T6892] RDX: ffffc9000caa2000 RSI: 0000000000003804 RDI: 0000000000003805 [ 90.240361][ T6892] RBP: ffffc9000b5afa90 R08: ffffffff8fe506cf R09: 1ffffffff1fca0d9 [ 90.240370][ T6892] R10: dffffc0000000000 R11: fffffbfff1fca0da R12: 00000000000000b2 [ 90.240378][ T6892] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a272c50 [ 90.240386][ T6892] FS: 00007fac592ba6c0(0000) GS:ffff8881258b3000(0000) knlGS:0000000000000000 [ 90.240396][ T6892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.240404][ T6892] CR2: 0000001b32d23ffc CR3: 0000000031f92000 CR4: 00000000003526f0 [ 90.240416][ T6892] Kernel panic - not syncing: Fatal exception [ 90.240535][ T6892] Kernel Offset: disabled