last executing test programs: 7.727557807s ago: executing program 3 (id=2310): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x63}) 7.251848814s ago: executing program 3 (id=2314): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x4c}}, 0x0) 7.037031267s ago: executing program 3 (id=2316): r0 = memfd_create(&(0x7f0000000580)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac\b\x00\x80\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xd6_#\xa6\xb3\xcd\xa8\xdc\xa6\x8b\xe5\xb1\x85n\xfecJ\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4W;)\x9f\x9cR\xae\x12G\xd8\xa4y\x069\xfb\x13\xc3\x04_]\x0fcI\xca\xe2\x89IN\x9d\xff\t\x15\x90 \xf7\xeb\x9b\v[1u`\xf7\x94J\x94\xfa\xd7.\xf0\x8f\xedO\xa6\xc3\xfdUDL\xbd\xdc~Z\xed\xbc(\xc4m0:\xce\ni.hl\x860L\"_\x12M?t\xf4\xeb\xf1y\xd8\x8e\xa2\xf9\x9d\x10U\xfa<\x83\x16\xe3~|ia\xc9\xd7\x9f$\xef\xc0\x83\xda\xcf\x1f\xa9,3\x0f\xcc\xc7/\xd54\x02\xe8c\xf5\xba\xd6\x94\\\xcd\xc0\x8d\xdc\xe2\xe4<\xe5{\xe36\xd0\xff\x8c\xb13\x0f*2>X\xfe\xd7iv\x18}K\xe5\x03\xc6\x1cAE\xc7L!Y\x8f\xdf\xe9\xe4\xdeF>?6', 0x0) r1 = dup(r0) write$cgroup_pid(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x12) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) sendfile(r0, r1, &(0x7f0000000100), 0x6c03) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 5.899504834s ago: executing program 3 (id=2318): mount$9p_unix(0x0, &(0x7f00000024c0)='./file0\x00', 0x0, 0x0, 0x0) mlockall(0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) 5.761498165s ago: executing program 4 (id=2320): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = inotify_init1(0x0) r2 = dup3(r0, r1, 0x0) mlockall(0x1) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) getsockname$packet(r2, 0x0, 0x0) 3.863285937s ago: executing program 0 (id=2326): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.354587809s ago: executing program 0 (id=2328): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x2000000000000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x0, 0x10006}]}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200", @ANYRES32, @ANYBLOB="e00000017f000001000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f000001ac141400000000001c000900000000000000000007010000440c0001022101"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700", 0x2c}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="04"], 0x1, 0x174, &(0x7f0000000240)="$eJzskj9OAkEUxr9Zlj9aGE2saCCRKBbKsqgxNlpi7wEksCJxUWE3UQjFGmMoLIylJ+AaJl5AC+MBqCmItVkzs28ns17B+RV8+755b2beG869npcF8DMfNXEEQQpL+GAMJoACi7yZEekz6SfpUyR4p7xj8u9J895geNFwXadfPChiJWEA+BaetLzDOwMzsdXXfNTkH6cAwjAMudcCeDrUnBSAnpKTN4FV0UQoc3gjPNgAUPG71xVvMNzqdBttp+1c2nZtz9qxrF27ctZxHSv6ZcoR1Aq4bgLg81pQ1tMAHihnEUmYcjVaZ2ptRplheS1Zayi1sTK8ytos4vcCTrCOHICbgCluSexiQrRUB0OKgqqp3C86KycWtptXbmsMBhaXTWDKPapTpGVgq0FtP4ivPSYtkdZJJ6RT0sKfv4wp3vaRonIAZHDb8P1+lQ8p+pKeLT17OVAHxk99MZLNvRnQaDQajUaj0Wg0mv/ObwAAAP///ip6PA==") pipe2$9p(&(0x7f0000000100), 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x6, 0x529080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002d00)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001600000008000300", @ANYBLOB="0324"], 0x28}}, 0x0) mkdir(0x0, 0x0) open(&(0x7f0000000480)='.\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000040), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) 2.799950809s ago: executing program 2 (id=2330): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000040)=ANY=[], 0x3, 0x657, &(0x7f0000000ac0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000002480)='./file1\x00', 0x101042, 0x0) pwritev2(r2, &(0x7f00000042c0)=[{&(0x7f0000000140)="ed", 0x1}], 0x1, 0x7fff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000500), 0xfea7) chown(0x0, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000042, &(0x7f0000000400), 0x3, 0x4ea, &(0x7f00000006c0)="$eJzs3UtvG1sdAPD/OPa9yW3AuYVFqURb+lCKoE7S9BGxKK3EY1UJUfZpSJwoihNXidM2UQXuJwChCpBYsWKDxAdAQv0ICKkS7FiwAlWQ0gUbZDR+tI1jh+TWjdvk95NO58w59fz/x4/xnJlRHMCRdSYibkbEQERciIh8sz3TLFFtlPT/vdh6NJuWJGq1O/9MImm2tW/zWPNhqe9/N+KHyc64axubSzOlUnF1e/PmpcXlmYXiQnFlcnLi2tT1qatT43scSZLdrXc4Im586+XPf/Kb79z4w9cf/G36Hxd/lKZ1t9nfaRy90Bh6LgZbDdV3EaV/0vdNtj5CAAA+BOcj4nhEnI2Ir0Y+BmLXw2gAAADgA1T75vDHrSoAAABwOGXq98YmmULzft/hyGQKhcY9vF+MTzKl8lrla/Pl9ZW5xj20I5HLzC+WiuPNe4VHIpek6xP1+uv1y23rkxHxaUQ8yQ+l6/U+AAAA4GAca5v/v8w35v8AAADAIeNiPAAAABx+5v8AAABw+Jn/AwAAwKH2vdu301J7sfWo/jsAc/c31pfK9y/NFdeWCsvrs4XZ8uq9wkK5vFAqFgb+//ZK5fK9K7Gy/nCskl2rjK1tbE4vl9dXKtP13/WeLh4/gDEBAAAA2316+ulfkoiofmOoXlIfNftyfc0MeI8k2baGu1/pUyZAT+zhlP52Z9bfTSLAgWv/TgeODnN8IGlvaDswGOx2qPDH/cdyzAEAAP0x+iXX/+GoyvQ7AaBvftrvBIC+cS4ejq7c/u8ABA6ZHdf/2wx269jz9f9abV8JAQAAPTfcWFSjeS1wODKZQuHVZcFkfrFUHI+Iz0fEn/O5j9P1iT7mCwAAAAAAAAAAAAAAAAAAAAAAAAAfolotiRoAAABwqEVk/p40f/9rNH9+uP38wEfJf/L1ZUQ8+NWdXzycqVRWJ9L2f71qr/yy2X65H2cwAAAA4CjK7drbmqe35vEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Esvth7NtspBxn1+K4ZipFP8bAzWl4ORi4hP/p1E9o3HJREx0IP41ccRcaJT/CRNK0aaWbTHz0TEUJ/jH+tBfDjKnt6KiJudPn+ZOFNfdv78ZZvlbT2/Vf+Qd4zf2v8NdNn/fW6PMU4++91Y1/iPI05mO+9/WvGTLvHP7TH+3R9sbnbrq/06YrTj90+yLdZYZfne2NrG5qXF5ZmF4kJxZXJy4trU9amrU+Nj84ulYvPfjjF+9uXfV590HX+mvnwzfmucI40Mf9xt/Of3OP7/Pnu49YVGNbczfsTFc51f/xP1ZefnP31PXGh+D6T9o616tVF/06nf/ulUt9zS+HNdnv/G65+vdRv/xb0Nf8eYAYD+WtvYXJoplYqrB1A5e6V3G0wOKGeVLpXB9yONg658+6230zocfpvt/LVn40rnDJ27+rxjAgAAeu71QX+/MwEAAAAAAAAAAAAAAAAAAICj6zP98bDT+3tUe8xqf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCr/wUAAP//GpnIcw==") removexattr(0x0, &(0x7f0000000140)=@known='system.posix_acl_access\x00') fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) tgkill(r4, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000380), 0x208e24b) 2.674392633s ago: executing program 1 (id=2331): syz_open_dev$mouse(0x0, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioprio_get$uid(0x2, 0x0) 2.15210439s ago: executing program 1 (id=2332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="9306d813d7dcd35750a7408871cdd4a61fe4d48beecb38f12aae45f2f226fe45b578c97ff4bf7fdf7504c5c08a0f1e6bdbaa7b79ce572f50574943f7972d5b84424ff66e3f4143a7fc5e2b4d4cf6018d1cab4e37ecd6531fb3dde7cbebef87c81a", 0x61, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000004a80)=""/4101, 0x1005}], 0x1) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4140aecd, &(0x7f00000001c0)=ANY=[]) 2.063318915s ago: executing program 0 (id=2333): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) 1.971766026s ago: executing program 2 (id=2334): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x28, 0x0, 0x0}) 1.872041294s ago: executing program 0 (id=2335): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 1.584036966s ago: executing program 0 (id=2336): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x4c}}, 0x0) 1.42801126s ago: executing program 1 (id=2337): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) close(0xffffffffffffffff) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x2}) ptrace(0xffffffffffffffff, 0x0) 1.427848256s ago: executing program 2 (id=2338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.409313583s ago: executing program 0 (id=2339): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x80e85411) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(0x0, 0x17) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) userfaultfd(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x8b800}], 0x1}, 0x3) creat(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) 1.077604497s ago: executing program 2 (id=2340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@loopback={0xfec0ffff00000394, 0x14}, 0x0, r2}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000003c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x0, r2}) 915.885398ms ago: executing program 3 (id=2341): socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000100)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 915.592188ms ago: executing program 2 (id=2342): syz_open_dev$mouse(0x0, 0x0, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioprio_get$uid(0x2, 0x0) 866.176931ms ago: executing program 2 (id=2343): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x2000000000000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x0, 0x10006}]}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200", @ANYRES32, @ANYBLOB="e00000017f000001000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="7f000001ac141400000000001c000900000000000000000007010000440c0001022101"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b63d25a80648c2594f91624fc60100c214002000003050582c137153e370248078000f01700", 0x2c}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="04"], 0x1, 0x174, &(0x7f0000000240)="$eJzskj9OAkEUxr9Zlj9aGE2saCCRKBbKsqgxNlpi7wEksCJxUWE3UQjFGmMoLIylJ+AaJl5AC+MBqCmItVkzs28ns17B+RV8+755b2beG869npcF8DMfNXEEQQpL+GAMJoACi7yZEekz6SfpUyR4p7xj8u9J895geNFwXadfPChiJWEA+BaetLzDOwMzsdXXfNTkH6cAwjAMudcCeDrUnBSAnpKTN4FV0UQoc3gjPNgAUPG71xVvMNzqdBttp+1c2nZtz9qxrF27ctZxHSv6ZcoR1Aq4bgLg81pQ1tMAHihnEUmYcjVaZ2ptRplheS1Zayi1sTK8ytos4vcCTrCOHICbgCluSexiQrRUB0OKgqqp3C86KycWtptXbmsMBhaXTWDKPapTpGVgq0FtP4ivPSYtkdZJJ6RT0sKfv4wp3vaRonIAZHDb8P1+lQ8p+pKeLT17OVAHxk99MZLNvRnQaDQajUaj0Wg0mv/ObwAAAP///ip6PA==") pipe2$9p(&(0x7f0000000100), 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x6, 0x529080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002d00)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001600000008000300", @ANYBLOB="0324"], 0x28}}, 0x0) mkdir(0x0, 0x0) open(&(0x7f0000000480)='.\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000640)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000040), 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) 806.793895ms ago: executing program 4 (id=2344): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x63}) 624.007047ms ago: executing program 4 (id=2345): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90) 503.263155ms ago: executing program 1 (id=2346): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 447.993403ms ago: executing program 4 (id=2347): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 198.881402ms ago: executing program 3 (id=2348): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x5}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="14040000", @ANYRES16=r0, @ANYBLOB="0100000000000000000012000000"], 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffeee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'batadv0\x00'}) socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "ac06f105d310541258e0a2a0b883eb29e46b1fac57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb4582b7757f779254377a6a42493fb7023b15fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67102000665988ad55f281047000000000000000003000000000100", "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"}) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) 198.405813ms ago: executing program 4 (id=2349): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x28, 0x0, 0x0}) 196.735578ms ago: executing program 1 (id=2350): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 104.057µs ago: executing program 4 (id=2351): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 0s ago: executing program 1 (id=2352): syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60000000000000000000ff02000000000000000002000000000186009078060000000000"], 0x0) kernel console output (not intermixed with test programs): Mfr=0, Product=0, SerialNumber=0 [ 457.543587][ T5098] usb 4-1: config 0 descriptor?? [ 457.562841][ T5161] usb 3-1: Using ep0 maxpacket: 16 [ 457.577912][ T5161] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.606070][ T5161] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 457.620522][ T5161] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 457.630110][ T5161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.654077][ T5161] usb 3-1: config 0 descriptor?? [ 457.668707][ T5161] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 457.873031][ T5098] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 458.101133][ T5231] usb 4-1: USB disconnect, device number 40 [ 458.192409][ T5098] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 458.253966][T10813] input: syz0 as /devices/virtual/input/input17 [ 458.299286][ T5098] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.345207][ T5098] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.354481][ T5098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.371819][ T5098] usb 2-1: config 0 descriptor?? [ 458.387459][ T5098] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 458.699733][T10816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.718678][T10816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.094216][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802c8d3800: rx timeout, send abort [ 459.102833][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802c8d3000: rx timeout, send abort [ 459.111616][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802c8d3800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 459.127117][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802c8d3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 459.887889][ T5107] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 460.342813][ T5151] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 460.367659][ T29] audit: type=1326 audit(1720004395.762:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10837 comm="syz.4.1624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdb5775b99 code=0x0 [ 460.502929][ T5151] usb 4-1: device descriptor read/64, error -71 [ 460.773103][ T5151] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 460.839512][ T5146] usb 2-1: USB disconnect, device number 40 [ 460.934238][ T5151] usb 4-1: device descriptor read/64, error -71 [ 460.984227][ T58] usb 3-1: USB disconnect, device number 28 [ 461.063553][ T5151] usb usb4-port1: attempt power cycle [ 461.283075][ T5146] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 461.473079][ T5151] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 461.499186][ T5146] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 461.524392][ T5151] usb 4-1: device descriptor read/8, error -71 [ 461.533492][ T5146] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.565062][ T5146] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 461.592853][ T5146] usb 2-1: config 1 interface 1 has no altsetting 0 [ 461.612588][ T5146] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.631122][ T5146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.649637][ T5146] usb 2-1: Product: syz [ 461.662749][ T5146] usb 2-1: Manufacturer: syz [ 461.682821][ T5146] usb 2-1: SerialNumber: syz [ 461.802964][ T5151] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 461.832854][ T5161] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 461.845449][ T5151] usb 4-1: device descriptor read/8, error -71 [ 461.925902][ T5146] usb 2-1: selecting invalid altsetting 0 [ 461.939389][ T5146] usb 2-1: selecting invalid altsetting 0 [ 461.946003][ T5146] cdc_ncm 2-1:1.0: bind() failure [ 461.957749][ T5146] usb 2-1: selecting invalid altsetting 0 [ 461.969930][ T5146] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -22 [ 461.978970][ T5151] usb usb4-port1: unable to enumerate USB device [ 461.990630][ T5146] usb 2-1: selecting invalid altsetting 0 [ 461.997562][ T5146] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -22 [ 462.009120][ T5146] usb 2-1: selecting invalid altsetting 0 [ 462.015119][ T5146] usbtest 2-1:1.1: probe with driver usbtest failed with error -22 [ 462.022845][ T5161] usb 5-1: Using ep0 maxpacket: 8 [ 462.030541][ T5161] usb 5-1: config 0 has no interfaces? [ 462.031739][ T5146] usb 2-1: USB disconnect, device number 41 [ 462.052771][ T5161] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 462.072789][ T5161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.093935][ T5161] usb 5-1: config 0 descriptor?? [ 462.439088][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807e750800: rx timeout, send abort [ 462.447650][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807e753000: rx timeout, send abort [ 462.456589][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807e750800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 462.471245][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807e753000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 462.692542][ T5146] usb 5-1: USB disconnect, device number 41 [ 463.326785][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 463.421111][ T5098] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 463.736015][ T5098] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 463.781272][ T5098] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 463.812950][ T5098] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 463.839178][ T5098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.874612][ T5098] usb 2-1: config 0 descriptor?? [ 463.902962][ T5161] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 463.922095][ T5098] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 464.031665][ T5100] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.043356][ T5100] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.051865][ T5100] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.071443][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.088977][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 464.097003][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.119961][ T5161] usb 1-1: Using ep0 maxpacket: 8 [ 464.657303][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.967955][ T5161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.982229][ T5161] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.005669][ T5161] usb 1-1: New USB device found, idVendor=0596, idProduct=0502, bcdDevice= 0.00 [ 465.053007][ T5161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.080524][ T5161] usb 1-1: config 0 descriptor?? [ 465.097828][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.113006][ T5180] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 465.191675][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.260280][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.337227][ T5180] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.349486][ T5180] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 465.389693][ T5180] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 465.401079][ T5180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.417246][ T5180] usb 3-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 465.602467][T10892] chnl_net:caif_netlink_parms(): no params data found [ 465.683773][ T1102] bridge_slave_1: left allmulticast mode [ 465.689986][ T1102] bridge_slave_1: left promiscuous mode [ 465.696314][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.719110][ T1102] bridge_slave_0: left allmulticast mode [ 465.725548][ T1102] bridge_slave_0: left promiscuous mode [ 465.731606][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.741414][ T5161] usbhid 1-1:0.0: can't add hid device: -71 [ 465.751043][ T5161] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 465.777935][ T5161] usb 1-1: USB disconnect, device number 31 [ 465.943010][ T5098] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 466.123512][ T5100] Bluetooth: hci2: command tx timeout [ 466.143026][ T5098] usb 5-1: Using ep0 maxpacket: 8 [ 466.150195][ T5098] usb 5-1: config 0 has no interfaces? [ 466.156601][ T5098] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 466.169851][ T5098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.189503][ T5151] usb 2-1: USB disconnect, device number 42 [ 466.204833][ T5098] usb 5-1: config 0 descriptor?? [ 466.358643][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1651'. [ 466.431621][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.473168][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.492915][ T1102] bond0 (unregistering): Released all slaves [ 466.594144][ T5180] usb 3-1: 0:2 : does not exist [ 466.638287][ T5180] usb 3-1: USB disconnect, device number 29 [ 466.938636][ T9604] udevd[9604]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.077596][ T5151] usb 5-1: USB disconnect, device number 42 [ 468.232992][ T5100] Bluetooth: hci2: command tx timeout [ 468.253485][T10892] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.280836][T10892] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.319345][T10892] bridge_slave_0: entered allmulticast mode [ 468.351115][T10892] bridge_slave_0: entered promiscuous mode [ 468.527961][T10892] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.565264][T10892] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.572574][T10892] bridge_slave_1: entered allmulticast mode [ 468.590702][T10892] bridge_slave_1: entered promiscuous mode [ 468.836337][T10892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.886449][T10892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.009887][ T1102] hsr_slave_0: left promiscuous mode [ 469.015514][ T5161] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 469.045379][ T1102] hsr_slave_1: left promiscuous mode [ 469.094769][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.135615][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.183959][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.192826][ T5151] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 469.209037][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.258883][ T1102] veth1_macvtap: left promiscuous mode [ 469.523130][ T1102] veth0_macvtap: left promiscuous mode [ 469.563320][ T5151] usb 2-1: Using ep0 maxpacket: 32 [ 469.621580][ T1102] veth1_vlan: left promiscuous mode [ 469.701761][ T5151] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 469.924894][ T1102] veth0_vlan: left promiscuous mode [ 469.940073][ T5161] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.993469][ T5161] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.084842][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.096434][ T5161] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.113859][ T5151] usb 2-1: config 0 descriptor?? [ 470.127307][ T5151] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 470.158927][ T5161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.205742][ T5161] usb 3-1: config 0 descriptor?? [ 470.236336][ T5161] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 470.255826][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'. [ 470.285766][ T5100] Bluetooth: hci2: command tx timeout [ 471.150263][ T5151] gspca_vc032x: reg_w err -71 [ 471.159728][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.182835][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.188179][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.223921][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.229258][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.234962][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.254286][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.259623][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.286776][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.292116][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.297611][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.326850][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.332193][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.342357][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.359041][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.364728][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.370992][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.385856][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.391188][ T5151] gspca_vc032x: Unknown sensor... [ 471.397356][ T5151] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 471.420552][ T5151] usb 2-1: USB disconnect, device number 43 [ 471.455089][ T5180] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 471.646828][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 471.694822][ T5180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 48, changing to 7 [ 471.713751][ T5180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8240, setting to 1024 [ 471.750237][ T5180] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 471.760510][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 471.762608][ T5180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.782844][ T5180] usb 5-1: Product: syz [ 471.787308][ T5180] usb 5-1: Manufacturer: syz [ 471.793353][ T5180] usb 5-1: SerialNumber: syz [ 471.814964][ T5180] usb 5-1: config 0 descriptor?? [ 472.130225][ T5180] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 472.148980][ T5180] usb 5-1: USB disconnect, device number 43 [ 472.303410][ T5151] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 472.363354][ T5100] Bluetooth: hci2: command tx timeout [ 472.385934][ T9604] udevd[9604]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.502872][ T5151] usb 2-1: Using ep0 maxpacket: 8 [ 472.520766][ T5149] usb 3-1: USB disconnect, device number 30 [ 472.536167][ T5151] usb 2-1: config 0 has no interfaces? [ 472.553578][ T5151] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 472.586614][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.614854][T10892] team0: Port device team_slave_0 added [ 472.621894][ T5151] usb 2-1: config 0 descriptor?? [ 472.640599][T10892] team0: Port device team_slave_1 added [ 472.750117][T10892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.760630][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'. [ 472.775301][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.823570][T10892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.857027][T10892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.873332][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.988491][T10892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.157511][T10892] hsr_slave_0: entered promiscuous mode [ 474.198145][T10892] hsr_slave_1: entered promiscuous mode [ 474.206382][ T5149] usb 2-1: USB disconnect, device number 44 [ 474.258089][T10892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.273094][T10892] Cannot create hsr debugfs directory [ 474.372200][ T1102] IPVS: stop unused estimator thread 0... [ 474.433014][ T25] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 474.602952][ T25] usb 3-1: device descriptor read/64, error -71 [ 474.892878][ T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 475.075923][ T25] usb 3-1: device descriptor read/64, error -71 [ 475.935863][ T25] usb usb3-port1: attempt power cycle [ 476.578070][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'. [ 477.079584][T10892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 477.139093][T10892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 477.303340][T10892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 477.436984][T10892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 478.622208][T10892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.721290][T10892] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.775713][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.783094][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.917608][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.924861][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.312981][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 479.566497][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1696'. [ 480.319957][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.333740][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.359821][ T25] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 480.467722][ T25] usb 3-1: config 1 interface 1 has no altsetting 0 [ 480.543274][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.552599][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.561814][ T25] usb 3-1: Product: syz [ 480.575601][ T25] usb 3-1: Manufacturer: syz [ 480.580347][ T25] usb 3-1: SerialNumber: syz [ 481.060331][ T25] usb 3-1: selecting invalid altsetting 0 [ 481.182958][ T25] usb 3-1: selecting invalid altsetting 0 [ 481.204258][ T25] cdc_ncm 3-1:1.0: bind() failure [ 481.232674][ T25] usb 3-1: selecting invalid altsetting 0 [ 481.238665][ T25] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -22 [ 481.247836][ T25] usb 3-1: selecting invalid altsetting 0 [ 481.254015][ T25] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -22 [ 481.951535][ T25] usb 3-1: selecting invalid altsetting 0 [ 481.957402][ T25] usbtest 3-1:1.1: probe with driver usbtest failed with error -22 [ 481.973127][ T25] usb 3-1: USB disconnect, device number 34 [ 482.005061][T10892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.653109][ T29] audit: type=1326 audit(1720004418.042:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11133 comm="syz.4.1705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdb5775b99 code=0x0 [ 482.685434][T10892] veth0_vlan: entered promiscuous mode [ 482.712230][T10892] veth1_vlan: entered promiscuous mode [ 482.826927][T10892] veth0_macvtap: entered promiscuous mode [ 482.842159][T10892] veth1_macvtap: entered promiscuous mode [ 482.911211][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.973845][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.102748][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.248580][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.292899][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.367128][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.377289][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.388867][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.421417][T10892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.590547][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1710'. [ 483.624876][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.636260][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.648550][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.659409][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.671649][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.321903][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.373465][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.396821][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.870173][T10892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.918791][T10892] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.964467][T10892] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.997981][T10892] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.016752][T10892] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.262792][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.270690][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.319404][ T5107] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 486.341233][ T5107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 486.353247][ T5107] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 486.379702][ T5107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 486.391779][ T5107] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 486.405770][ T5107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.407684][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.471200][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.503054][ T5098] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 486.892851][ T5098] usb 1-1: Using ep0 maxpacket: 16 [ 486.905561][ T5098] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 487.002378][ T5098] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 487.013912][ T5098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.082190][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'. [ 487.109816][ T5098] usb 1-1: config 0 descriptor?? [ 487.910776][T11196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.947165][T11196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.216884][ T5098] hid-generic 0003:0158:0100.0012: unknown main item tag 0x1 [ 488.327751][ T5098] hid-generic 0003:0158:0100.0012: unexpected long global item [ 488.447359][ T5098] hid-generic 0003:0158:0100.0012: probe with driver hid-generic failed with error -22 [ 488.534328][ T5100] Bluetooth: hci4: command tx timeout [ 488.692633][ T5098] usb 1-1: USB disconnect, device number 32 [ 489.082173][T11200] chnl_net:caif_netlink_parms(): no params data found [ 490.418645][T11262] wireguard0: entered promiscuous mode [ 490.424429][T11262] wireguard0: entered allmulticast mode [ 490.693006][ T5100] Bluetooth: hci4: command tx timeout [ 491.008992][T11200] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.037637][T11200] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.071232][T11200] bridge_slave_0: entered allmulticast mode [ 491.102851][T11200] bridge_slave_0: entered promiscuous mode [ 491.136602][T11200] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.158607][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.171544][T11200] bridge_slave_1: entered allmulticast mode [ 491.189075][T11200] bridge_slave_1: entered promiscuous mode [ 491.355135][T11200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.523701][ T25] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 491.531842][T11200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.712934][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 491.749594][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 491.762965][ T25] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 491.772145][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.858329][ T25] usb 4-1: config 0 descriptor?? [ 492.061617][T11286] syz.1.1738[11286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.061889][T11286] syz.1.1738[11286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.491643][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.843295][ T5100] Bluetooth: hci4: command tx timeout [ 494.107534][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.452129][T11200] team0: Port device team_slave_0 added [ 494.473939][T11200] team0: Port device team_slave_1 added [ 495.514411][ T5100] Bluetooth: hci4: command tx timeout [ 496.448102][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 496.462895][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 496.487395][T11311] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 496.596314][T11200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.610218][ T25] usb 4-1: USB disconnect, device number 45 [ 496.619879][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.716891][T11200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.736397][T11200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.743852][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.806097][T11200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.007776][T11200] hsr_slave_0: entered promiscuous mode [ 497.017981][T11200] hsr_slave_1: entered promiscuous mode [ 497.207020][T11200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.789708][T11200] Cannot create hsr debugfs directory [ 497.887456][T11334] fuse: Bad value for 'fd' [ 500.058948][T11200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.235112][T11200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.334671][T11200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.352918][ T5180] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 500.633675][T11200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.664036][ T5180] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 500.692605][ T5180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.705409][ T5180] usb 5-1: Product: syz [ 500.711984][ T5180] usb 5-1: Manufacturer: syz [ 500.717564][ T5180] usb 5-1: SerialNumber: syz [ 500.954948][ T5180] gspca_main: pac207-2.14.0 probing 093a:2476 [ 500.976006][ T5180] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 500.988879][T11200] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 500.999267][ T5180] usb 5-1: Found UVC 0.00 device syz (093a:2476) [ 501.007114][ T5180] usb 5-1: No valid video chain found. [ 501.019691][T11200] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 501.029692][ T5180] usb 5-1: USB disconnect, device number 44 [ 501.049853][T11200] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 501.082631][T11200] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 501.266523][T11370] fuse: Bad value for 'fd' [ 501.681655][T11200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.721306][T11200] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.739287][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.746823][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.766564][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.774025][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.860500][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.867858][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.893535][T11382] wireguard0: entered promiscuous mode [ 501.918591][T11382] wireguard0: entered allmulticast mode [ 503.170465][T11200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 503.210255][T11200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.797415][T11200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.011365][T11200] veth0_vlan: entered promiscuous mode [ 504.032870][T11200] veth1_vlan: entered promiscuous mode [ 504.348167][T11200] veth0_macvtap: entered promiscuous mode [ 504.362294][T11200] veth1_macvtap: entered promiscuous mode [ 504.403397][ T5161] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 504.415767][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.431565][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.454856][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.471412][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.511776][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.527933][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.539686][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.560311][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.587018][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.601864][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.617822][ T5161] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 504.631355][ T5161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.640160][ T5161] usb 2-1: Product: syz [ 504.641331][T11200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.644615][ T5161] usb 2-1: Manufacturer: syz [ 504.657170][ T5161] usb 2-1: SerialNumber: syz [ 504.705931][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.717047][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.728238][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.747655][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.758031][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.772291][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.787176][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.800571][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.810739][T11200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.821632][T11200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.834664][T11200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.849108][T11200] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.868042][T11200] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.877330][T11200] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.886387][T11200] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.915462][ T5161] gspca_main: pac207-2.14.0 probing 093a:2476 [ 504.931127][ T5161] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 504.953900][ T5161] usb 2-1: Found UVC 0.00 device syz (093a:2476) [ 504.961207][ T5161] usb 2-1: No valid video chain found. [ 504.983440][ T5161] usb 2-1: USB disconnect, device number 45 [ 505.254349][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.282224][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.348216][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.370829][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.095931][ T5149] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 508.051474][ T5149] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 508.071088][ T5149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.091407][ T5149] usb 1-1: Product: syz [ 508.100588][ T5149] usb 1-1: Manufacturer: syz [ 508.109604][ T5149] usb 1-1: SerialNumber: syz [ 508.292997][ T5161] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 508.312333][T11481] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 508.353831][ T5149] gspca_main: pac207-2.14.0 probing 093a:2476 [ 508.386343][ T5149] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 508.422980][ T5149] usb 1-1: Found UVC 0.00 device syz (093a:2476) [ 508.432969][ T5149] usb 1-1: No valid video chain found. [ 508.454921][ T5149] usb 1-1: USB disconnect, device number 33 [ 508.506876][ T5161] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.534069][ T5161] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 508.553355][ T5161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.583829][ T5161] usb 5-1: config 0 descriptor?? [ 508.616776][ T5161] rndis_host 5-1:0.0: skipping garbage [ 508.634823][ T5161] usb 5-1: bad CDC descriptors [ 508.658535][ T5161] cdc_acm 5-1:0.0: skipping garbage [ 508.683068][ T5161] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 508.690957][ T5161] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 508.732137][ T5161] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 508.820413][ T5161] usb 5-1: USB disconnect, device number 45 [ 508.998158][ T29] audit: type=1326 audit(1720004444.372:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11478 comm="syz.2.1798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3e9175b99 code=0x0 [ 512.183134][ T5098] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 512.374650][ T5098] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.397982][T11532] xt_hashlimit: overflow, rate too high: 0 [ 512.415440][ T5098] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.473213][ T5098] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.506219][ T5098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.552164][ T5098] usb 4-1: SerialNumber: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 512.770920][T11537] syz.1.1817[11537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.771105][T11537] syz.1.1817[11537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.815093][ T5098] usb 4-1: 0:2 : does not exist [ 512.863449][T10914] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 512.894200][ T5098] usb 4-1: USB disconnect, device number 46 [ 513.064431][T10914] usb 5-1: Using ep0 maxpacket: 8 [ 513.074963][T10914] usb 5-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=58.58 [ 513.089083][T10914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.108760][T10914] usb 5-1: config 0 descriptor?? [ 513.126500][T10914] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now attached [ 513.135984][ T9604] udevd[9604]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.328406][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 513.406089][T11529] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 513.452977][ T5098] usb 5-1: USB disconnect, device number 46 [ 513.459541][ T5098] cypress_cy7c63 5-1:0.0: Cypress CY7C63xxx device now disconnected [ 513.613037][ T25] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 513.815649][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 513.846172][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 513.859474][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.875097][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 513.900427][ T25] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 513.932987][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.951273][ T25] usb 1-1: Product: syz [ 513.955712][ T25] usb 1-1: Manufacturer: syz [ 513.982257][ T25] usb 1-1: SerialNumber: syz [ 514.019928][ T25] usb 1-1: config 0 descriptor?? [ 514.053739][ T25] ipaq 1-1:0.0: PocketPC PDA converter detected [ 514.073119][ T25] usb 1-1: active config #0 != 1 ?? [ 517.207509][T10914] usb 1-1: USB disconnect, device number 34 [ 517.913047][ T5151] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 518.112801][ T5151] usb 1-1: Using ep0 maxpacket: 16 [ 518.125981][ T5151] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.152767][ T5151] usb 1-1: config 1 interface 0 has no altsetting 0 [ 518.162465][ T5151] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40 [ 518.182836][ T5151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.193091][ T5151] usb 1-1: Manufacturer: 《 [ 518.197745][ T5151] usb 1-1: SerialNumber: 糿妼牫칐뒑浾⬬븽゗䭐﬙ﻡ噇撧ᄒ봴傍狃䖩洽鲭廔䀊␎⿈哈쁏䞔颶韔韤°䱂⭏禍N灡閏풯煫⩃㆑㷾黁ଊㅅ噉突鬏౯ퟃ離뫙Θ㢲乪瀜淄豿툅ⶸ㫤矉썫﹫辗摭㑃鿌몀逊啢抁욿岱룻읥開癄蹽ታ廣皡ꊓȎ疅鿨⶚⤁疅훊곱길迭䜽 [ 518.529167][ T5151] usbhid 1-1:1.0: can't add hid device: -71 [ 518.541490][ T5151] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 518.571570][ T5151] usb 1-1: USB disconnect, device number 35 [ 522.462253][T11689] netlink: 'syz.4.1873': attribute type 8 has an invalid length. [ 522.470321][T11689] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1873'. [ 522.488187][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 522.540234][T11692] IPVS: Unknown mcast interface: ip6erspan0 [ 522.711924][ T5151] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 522.994930][T10914] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 523.755668][ T5151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.766812][ T5151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.777117][ T5151] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 523.786678][ T5151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.789411][T10914] usb 5-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01 [ 523.826162][T10914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.827966][ T5151] usb 4-1: config 0 descriptor?? [ 523.842421][T10914] usb 5-1: config 0 descriptor?? [ 524.272855][T10914] mxuport 5-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 524.281436][T10914] mxuport 5-1:0.0: probe with driver mxuport failed with error -5 [ 524.296520][ T5151] hid-multitouch 0003:1FD2:6007.0013: unknown main item tag 0x0 [ 524.306164][ T5151] hid-multitouch 0003:1FD2:6007.0013: unknown main item tag 0x0 [ 524.307610][T10914] usb 5-1: USB disconnect, device number 47 [ 524.316042][ T5151] hid-multitouch 0003:1FD2:6007.0013: unknown main item tag 0x0 [ 524.332311][ T5151] hid-multitouch 0003:1FD2:6007.0013: unknown main item tag 0x0 [ 524.341727][ T5151] hid-multitouch 0003:1FD2:6007.0013: unknown main item tag 0x0 [ 524.352833][ T5231] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 524.361740][ T5151] hid-multitouch 0003:1FD2:6007.0013: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 524.373817][ T5107] Bluetooth: hci1: command 0x0406 tx timeout [ 524.499640][ T5149] usb 4-1: USB disconnect, device number 47 [ 524.564844][ T5231] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.577820][ T5231] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.594693][ T5231] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 524.604184][ T5231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.612335][ T5231] usb 1-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 524.623041][ T5231] usb 1-1: SerialNumber: syz [ 525.075260][ T5231] usb 1-1: 0:2 : does not exist [ 525.154419][ T5231] usb 1-1: USB disconnect, device number 36 [ 525.414233][ T9604] udevd[9604]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 525.443089][ T5107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 525.457393][ T5107] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 525.468899][ T5107] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 525.488552][ T5107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 525.499075][ T5107] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 525.508100][ T5107] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 525.518396][ T5098] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 525.708976][ T5098] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.748959][ T5098] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 525.783912][ T5098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.805176][ T5098] usb 5-1: config 0 descriptor?? [ 525.824291][ T5098] rndis_host 5-1:0.0: skipping garbage [ 525.829823][ T5098] usb 5-1: bad CDC descriptors [ 525.835531][ T5098] cdc_acm 5-1:0.0: skipping garbage [ 525.840866][ T5098] cdc_acm 5-1:0.0: Control and data interfaces are not separated! [ 525.849115][ T5098] cdc_acm 5-1:0.0: This needs exactly 3 endpoints [ 525.861496][ T5098] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 526.034039][ T5149] usb 5-1: USB disconnect, device number 48 [ 526.288444][T11719] chnl_net:caif_netlink_parms(): no params data found [ 526.535579][T11736] xt_hashlimit: overflow, rate too high: 0 [ 526.558885][T11719] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.581918][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.602322][T11719] bridge_slave_0: entered allmulticast mode [ 526.622291][T11719] bridge_slave_0: entered promiscuous mode [ 526.640567][T11719] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.668476][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.701452][T11719] bridge_slave_1: entered allmulticast mode [ 526.726137][T11719] bridge_slave_1: entered promiscuous mode [ 526.847436][T11719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.879802][T11719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.942948][ T5149] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 527.025326][T11719] team0: Port device team_slave_0 added [ 527.043254][T11719] team0: Port device team_slave_1 added [ 527.126430][T11719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.143030][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.173405][ T5149] usb 1-1: Using ep0 maxpacket: 8 [ 527.186550][ T5149] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=58.58 [ 527.192885][T11719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.213432][ T5149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.236015][T11719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.248527][ T5149] usb 1-1: config 0 descriptor?? [ 527.252884][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.282257][ T5149] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now attached [ 527.342806][T11719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.471348][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1892'. [ 527.488715][T11719] hsr_slave_0: entered promiscuous mode [ 527.508192][T11719] hsr_slave_1: entered promiscuous mode [ 527.520953][T11719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.533047][T11719] Cannot create hsr debugfs directory [ 527.538922][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1887'. [ 527.572277][ T5100] Bluetooth: hci5: command tx timeout [ 527.630710][ T5149] usb 1-1: USB disconnect, device number 37 [ 527.664324][ T5149] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now disconnected [ 528.040065][T11719] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.183318][T11719] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.323116][ T5151] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 528.333113][ T5098] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 528.334545][T11719] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.484152][T11719] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.524451][ T5151] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.543001][ T5098] usb 5-1: Using ep0 maxpacket: 8 [ 528.545806][ T5151] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.556759][ T5098] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 528.594130][ T5151] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 528.601151][ T5098] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 528.620360][ T5098] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.622804][ T5151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.650790][ T5098] usb 5-1: config 0 has no interface number 0 [ 528.659231][ T5098] usb 5-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.683606][ T5151] usb 3-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 528.687889][ T5098] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 528.712270][ T5098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.714268][ T5151] usb 3-1: SerialNumber: syz [ 528.728847][ T5098] usb 5-1: config 0 descriptor?? [ 528.780342][T11765] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 528.814790][T11719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 528.867060][T11719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 528.887486][T11765] evm: overlay not supported [ 528.907431][T11719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 528.928495][T11719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 529.001659][ T5151] usb 3-1: 0:2 : does not exist [ 529.090638][T11758] Cannot find add_set index 0 as target [ 529.098289][ T5151] usb 3-1: USB disconnect, device number 35 [ 529.132385][ T5231] usb 5-1: USB disconnect, device number 49 [ 529.283969][T11719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.342486][T11719] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.370974][T10914] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.378266][T10914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.393411][ T9604] udevd[9604]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.398323][T10914] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.416512][T10914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.540931][T11719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 529.643614][ T5100] Bluetooth: hci5: command tx timeout [ 529.752818][ T5151] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 529.954697][ T5151] usb 4-1: Using ep0 maxpacket: 32 [ 529.962328][ T5151] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 529.995863][ T5151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.032481][T11719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.051110][ T5151] usb 4-1: config 0 descriptor?? [ 530.065882][ T5151] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 530.074370][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'. [ 530.231822][T11719] veth0_vlan: entered promiscuous mode [ 530.273149][ T5151] gspca_vc032x: reg_r err -32 [ 530.277895][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.284637][T11767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.343468][T11767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.406634][T11719] veth1_vlan: entered promiscuous mode [ 530.547934][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.553555][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.558971][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.564411][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.572272][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.580299][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.585781][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.591580][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.598293][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.604113][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.609551][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.615654][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.621067][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.626602][T11719] veth0_macvtap: entered promiscuous mode [ 530.631159][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.648100][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.658658][T11719] veth1_macvtap: entered promiscuous mode [ 530.683072][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.688424][ T5151] gspca_vc032x: I2c Bus Busy Wait 00 [ 530.700031][ T5151] gspca_vc032x: Unknown sensor... [ 530.712902][ T5151] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 530.737347][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.760344][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.784499][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.808544][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.828959][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.841983][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.861651][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.873375][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.887316][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.907865][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.926526][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.947831][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.964195][T11719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.002546][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.014286][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.027384][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.038510][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.050617][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.052968][ T5151] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 531.062237][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.104002][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.122811][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.145786][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.172952][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.195282][T11719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.222731][T11719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.251961][T11719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.275682][T11719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.302829][T11719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.321577][T11719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.322584][ T5151] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.341220][T11719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.372665][ T5151] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.393505][ T5151] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.417840][ T5151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.432786][ T5151] usb 3-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 531.462850][ T5151] usb 3-1: SerialNumber: syz [ 531.612865][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.636434][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.680398][ T7060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.691227][ T7060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.710386][ T5151] usb 3-1: 0:2 : does not exist [ 531.723309][ T5100] Bluetooth: hci5: command tx timeout [ 531.765659][ T5151] usb 3-1: USB disconnect, device number 36 [ 531.862986][ T5161] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 531.912172][T11806] loop1: detected capacity change from 0 to 512 [ 531.943400][T11806] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 531.990577][T11806] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.1881: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 532.015248][ T9604] udevd[9604]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.023854][T11806] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1881: couldn't read orphan inode 15 (err -117) [ 532.064834][T11806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.080841][T11806] ext2 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.093216][ T5161] usb 5-1: Using ep0 maxpacket: 8 [ 532.113941][ T5161] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 532.122268][ T5161] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 532.145600][ T5161] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.170121][ T5161] usb 5-1: config 0 has no interface number 0 [ 532.186644][ T5161] usb 5-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.200360][ T5161] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 532.215603][ T5161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.234990][ T5161] usb 5-1: config 0 descriptor?? [ 532.263734][T11719] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.541488][ T5231] usb 4-1: USB disconnect, device number 48 [ 532.804971][T11802] Cannot find add_set index 0 as target [ 532.844770][ T5231] usb 5-1: USB disconnect, device number 50 [ 533.040370][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1916'. [ 533.717275][ T5231] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 533.803996][ T5100] Bluetooth: hci5: command tx timeout [ 533.924863][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 533.938549][ T5231] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 533.942861][ T5180] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 533.963989][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.002741][ T5231] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 534.058981][ T5231] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 534.095053][ T5231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.130187][ T5231] usb 4-1: Product: syz [ 534.139731][ T5231] usb 4-1: Manufacturer: syz [ 534.158629][ T5231] usb 4-1: SerialNumber: syz [ 534.223120][ T5231] usb 4-1: config 0 descriptor?? [ 534.302265][ T5231] ipaq 4-1:0.0: PocketPC PDA converter detected [ 534.321863][ T5231] usb 4-1: active config #0 != 1 ?? [ 534.323099][ T5180] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.365201][ T5180] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.390243][ T5180] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 534.400067][ T5180] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.420605][ T5180] usb 5-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 534.451554][ T5180] usb 5-1: SerialNumber: syz [ 534.729869][ T5180] usb 5-1: 0:2 : does not exist [ 534.802353][ T5180] usb 5-1: USB disconnect, device number 51 [ 535.123285][ T9604] udevd[9604]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.682806][T10914] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 535.877158][T10914] usb 5-1: Using ep0 maxpacket: 16 [ 535.901223][T10914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 535.932209][T10914] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 536.022790][T10914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.047145][T10914] usb 5-1: config 0 descriptor?? [ 536.374783][T11846] loop1: detected capacity change from 0 to 40427 [ 536.452329][T11846] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 536.493071][T11849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.534056][T11846] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 536.545139][T11849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.554982][ T5161] usb 4-1: USB disconnect, device number 49 [ 536.601989][T10914] hid-generic 0003:0158:0100.0014: unknown main item tag 0x1 [ 536.662854][T10914] hid-generic 0003:0158:0100.0014: unexpected long global item [ 536.671323][T10914] hid-generic 0003:0158:0100.0014: probe with driver hid-generic failed with error -22 [ 536.685181][T11846] F2FS-fs (loop1): Found nat_bits in checkpoint [ 536.871251][T11846] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 536.880346][T11846] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 537.174278][T11719] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 537.200973][T11719] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 537.240558][T11719] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 537.261008][T11719] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 537.275049][T11719] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 537.292961][ T5151] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 537.303084][T11719] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 537.310806][T11719] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 537.369762][T10914] usb 5-1: USB disconnect, device number 52 [ 537.515205][ T5151] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 537.534860][ T5151] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.559198][ T5151] usb 4-1: string descriptor 0 read error: -22 [ 537.593316][ T5151] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 537.602457][ T5151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.734411][ T5151] usb 4-1: 0:2 : does not exist [ 537.978142][ T5151] usb 4-1: USB disconnect, device number 50 [ 538.194238][T10914] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 538.667978][T10914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 538.679321][T10914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 538.697443][T10914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.707662][T10914] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 538.720523][T10914] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 540.074672][T10914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.083134][T10914] usb 5-1: Product: syz [ 540.087332][T10914] usb 5-1: Manufacturer: syz [ 540.094054][T10914] usb 5-1: SerialNumber: syz [ 540.118896][T10914] usb 5-1: config 0 descriptor?? [ 540.135838][T10914] ipaq 5-1:0.0: PocketPC PDA converter detected [ 540.153071][T10914] usb 5-1: active config #0 != 1 ?? [ 541.022833][ T5151] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 541.187323][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'. [ 541.382869][ T5151] usb 2-1: Using ep0 maxpacket: 16 [ 541.391034][ T5151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.412755][ T5151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.438145][ T5151] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 541.472800][ T5151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.514022][ T5151] usb 2-1: config 0 descriptor?? [ 541.603485][T10914] usb 5-1: USB disconnect, device number 53 [ 541.680641][T11917] kvm: MWAIT instruction emulated as NOP! [ 541.790607][ T5151] usbhid 2-1:0.0: can't add hid device: -71 [ 541.807136][ T5151] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 541.860926][ T5151] usb 2-1: USB disconnect, device number 46 [ 542.172825][ T5098] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 542.403027][ T5098] usb 3-1: Using ep0 maxpacket: 16 [ 542.422479][ T5098] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 542.460050][ T5098] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 542.487397][ T5098] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.513171][ T5098] usb 3-1: config 0 descriptor?? [ 542.826378][T11942] loop1: detected capacity change from 0 to 512 [ 543.117199][T11922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.335649][T11922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.679427][ T5098] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 543.717852][ T5098] hid-generic 0003:0158:0100.0015: unexpected long global item [ 543.774166][ T5098] hid-generic 0003:0158:0100.0015: probe with driver hid-generic failed with error -22 [ 543.774738][T11942] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 543.827979][T11942] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 543.844292][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 543.933467][T11942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.159444][T11942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.276992][ T5151] usb 3-1: USB disconnect, device number 37 [ 545.317059][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1970'. [ 545.912841][ T5150] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 546.103525][ T5150] usb 2-1: Using ep0 maxpacket: 16 [ 546.116995][ T5150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 546.180050][ T5150] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 546.251478][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.094344][ T5150] usb 2-1: config 0 descriptor?? [ 547.126392][T12017] xt_hashlimit: overflow, rate too high: 0 [ 547.507971][T11991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.543304][T11991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.622888][ T5151] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 547.635112][ T5150] hid-generic 0003:0158:0100.0016: unknown main item tag 0x1 [ 547.642583][ T5150] hid-generic 0003:0158:0100.0016: unexpected long global item [ 547.897483][ T5150] hid-generic 0003:0158:0100.0016: probe with driver hid-generic failed with error -22 [ 548.032896][ T5151] usb 1-1: Using ep0 maxpacket: 8 [ 548.058624][ T5151] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=58.58 [ 548.095738][ T5151] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.159221][ T5151] usb 1-1: config 0 descriptor?? [ 548.204201][ T5151] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now attached [ 548.398991][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1979'. [ 548.407919][ T5151] usb 2-1: USB disconnect, device number 47 [ 548.533415][ T5150] usb 1-1: USB disconnect, device number 38 [ 548.541486][ T5150] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now disconnected [ 548.613718][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1989'. [ 551.062840][T10914] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 551.132880][ T5146] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 551.323191][T10914] usb 2-1: Using ep0 maxpacket: 16 [ 551.344365][T10914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 551.344846][ T5146] usb 1-1: Using ep0 maxpacket: 16 [ 551.433458][T10914] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 551.478603][ T5146] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 551.482716][T10914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.490800][ T5146] usb 1-1: config 1 interface 0 has no altsetting 0 [ 551.554546][ T5146] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40 [ 551.562623][T10914] usb 2-1: config 0 descriptor?? [ 551.600858][ T5146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.622814][ T5146] usb 1-1: Manufacturer: 《 [ 551.627484][ T5146] usb 1-1: SerialNumber: 糿妼牫칐뒑浾⬬븽゗䭐﬙ﻡ噇撧ᄒ봴傍狃䖩洽鲭廔䀊␎⿈哈쁏䞔颶韔韤°䱂⭏禍N灡閏풯煫⩃㆑㷾黁ଊㅅ噉突鬏౯ퟃ離뫙Θ㢲乪瀜淄豿툅ⶸ㫤矉썫﹫辗摭㑃鿌몀逊啢抁욿岱룻읥開癄蹽ታ廣皡ꊓȎ疅鿨⶚⤁疅훊곱길迭䜽 [ 551.822933][ T5180] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 551.946728][ T5146] usbhid 1-1:1.0: can't add hid device: -71 [ 551.955093][ T5146] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 551.967870][ T5146] usb 1-1: USB disconnect, device number 39 [ 551.993377][T12068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.006419][T12068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.032120][T10914] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 552.052167][ T5180] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.076493][T10914] hid-generic 0003:0158:0100.0017: unexpected long global item [ 552.086957][ T5180] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 552.109081][T10914] hid-generic 0003:0158:0100.0017: probe with driver hid-generic failed with error -22 [ 552.132835][ T5180] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 552.165426][ T5180] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.182542][ T5180] usb 4-1: Product: syz [ 552.190596][ T5180] usb 4-1: Manufacturer: syz [ 552.200191][ T5180] usb 4-1: SerialNumber: syz [ 553.423233][ T5150] usb 2-1: USB disconnect, device number 48 [ 553.766358][ T5180] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 553.795582][ T5180] cdc_ncm 4-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 553.898498][ T5180] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 554.058440][ T5180] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 554.085747][T10914] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 554.297073][T10914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 554.332786][T10914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 554.373356][T10914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.409063][T10914] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 554.453702][T10914] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 554.463896][T10914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.472217][T10914] usb 3-1: Product: syz [ 554.486794][T10914] usb 3-1: Manufacturer: syz [ 554.491445][T10914] usb 3-1: SerialNumber: syz [ 554.528556][T10914] usb 3-1: config 0 descriptor?? [ 554.555759][T10914] ipaq 3-1:0.0: PocketPC PDA converter detected [ 554.575575][T10914] usb 3-1: active config #0 != 1 ?? [ 554.651757][T12130] loop0: detected capacity change from 0 to 256 [ 554.662998][ T5180] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 554.872788][ T5180] usb 2-1: Using ep0 maxpacket: 16 [ 555.010783][ T5180] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 17, changing to 8 [ 555.024434][T10914] usb 4-1: USB disconnect, device number 51 [ 555.031394][T10914] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 555.066169][ T5180] usb 2-1: config 1 interface 0 has no altsetting 0 [ 555.106389][ T5180] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40 [ 555.127114][ T5180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.161756][ T5180] usb 2-1: Manufacturer: 《 [ 555.810785][ T5180] usb 2-1: SerialNumber: 糿妼牫칐뒑浾⬬븽゗䭐﬙ﻡ噇撧ᄒ봴傍狃䖩洽鲭廔䀊␎⿈哈쁏䞔颶韔韤°䱂⭏禍N灡閏풯煫⩃㆑㷾黁ଊㅅ噉突鬏౯ퟃ離뫙Θ㢲乪瀜淄豿툅ⶸ㫤矉썫﹫辗摭㑃鿌몀逊啢抁욿岱룻읥開癄蹽ታ廣皡ꊓȎ疅鿨⶚⤁疅훊곱길迭䜽 [ 556.152922][ T5180] usbhid 2-1:1.0: can't add hid device: -71 [ 556.159226][ T5180] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 556.195001][ T5180] usb 2-1: USB disconnect, device number 49 [ 557.376442][T10914] usb 3-1: USB disconnect, device number 38 [ 557.623946][ T58] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 557.847382][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.880223][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.920557][ T58] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 557.942888][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.202034][ T58] usb 5-1: config 0 descriptor?? [ 559.962285][T12186] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 559.970925][T12186] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 560.548203][ T58] usb 5-1: can't set config #0, error -71 [ 560.556897][ T58] usb 5-1: USB disconnect, device number 54 [ 561.032993][ T58] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 561.095767][ T5231] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 561.168986][T12212] loop0: detected capacity change from 0 to 512 [ 561.203334][T12212] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 561.285473][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 561.315074][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.332835][ T58] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 561.343938][ T5231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.354762][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.369758][ T5231] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 561.379573][ T58] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 561.400157][ T5231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.446834][ T58] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 561.465736][ T5231] usb 4-1: config 0 descriptor?? [ 561.479810][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.519354][ T58] usb 5-1: Product: syz [ 561.533220][ T58] usb 5-1: Manufacturer: syz [ 561.537937][ T58] usb 5-1: SerialNumber: syz [ 561.552905][T10914] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 561.577842][ T58] usb 5-1: config 0 descriptor?? [ 561.602554][ T58] ipaq 5-1:0.0: PocketPC PDA converter detected [ 561.611809][ T58] usb 5-1: active config #0 != 1 ?? [ 561.765608][T10914] usb 2-1: Using ep0 maxpacket: 32 [ 561.774351][T10914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.786112][T10914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.796516][T10914] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 561.808347][T10914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.829747][T10914] usb 2-1: config 0 descriptor?? [ 561.846472][T10914] hub 2-1:0.0: USB hub found [ 561.982192][ T5231] hid-multitouch 0003:1FD2:6007.0018: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 562.067584][T10914] hub 2-1:0.0: 1 port detected [ 562.151967][ T5161] usb 4-1: USB disconnect, device number 52 [ 562.284314][T10914] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 562.295177][T10914] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 562.330317][T10914] usbhid 2-1:0.0: can't add hid device: -71 [ 562.337379][T10914] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 562.375024][T10914] usb 2-1: USB disconnect, device number 50 [ 562.605869][T12235] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 563.246942][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.253431][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.373324][T12260] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 564.521658][T12265] veth1_macvtap: left promiscuous mode [ 564.664582][T10914] usb 5-1: USB disconnect, device number 55 [ 565.103124][ T5149] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 565.242992][T10914] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 565.306023][ T5149] usb 1-1: Using ep0 maxpacket: 32 [ 565.323245][ T5098] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 565.341835][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.361918][ T5149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.382140][ T5149] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 565.407883][ T5149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.428465][ T5149] usb 1-1: config 0 descriptor?? [ 565.446359][ T5149] hub 1-1:0.0: USB hub found [ 565.453156][T10914] usb 5-1: Using ep0 maxpacket: 32 [ 565.460837][T10914] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 565.473659][T10914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.503857][T10914] usb 5-1: config 0 descriptor?? [ 565.514849][T10914] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 565.550644][ T5098] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.564363][ T5098] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 565.574951][ T5098] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.593190][ T5098] usb 3-1: config 0 descriptor?? [ 565.670182][ T5149] hub 1-1:0.0: 1 port detected [ 565.742883][T10914] gspca_vc032x: reg_r err -32 [ 565.747866][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.773040][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.778498][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.784073][ T8] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 565.799454][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.807704][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.822831][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.828333][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.838206][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.843806][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.849269][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.855329][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.860755][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.870248][ T5149] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 565.883473][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.888873][ T5149] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 565.901383][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.911836][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.918267][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.924875][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.930581][T10914] gspca_vc032x: I2c Bus Busy Wait 00 [ 565.936601][T10914] gspca_vc032x: Unknown sensor... [ 565.941775][T10914] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 565.950526][ T5149] usbhid 1-1:0.0: can't add hid device: -71 [ 565.957780][ T5149] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 566.011477][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.026095][ T5149] usb 1-1: USB disconnect, device number 40 [ 566.046145][ T5098] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 566.055226][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.088587][ T8] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 566.094975][T12294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.110990][ T5098] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0019/input/input19 [ 566.125417][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.134714][T12294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.154165][ T8] usb 4-1: config 0 descriptor?? [ 566.310244][ T5098] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 566.503648][ T5098] usb 3-1: USB disconnect, device number 39 [ 566.581874][ T8] steelseries 0003:1038:1410.001A: item fetching failed at offset 0/3 [ 566.608307][ T8] steelseries 0003:1038:1410.001A: parse failed [ 566.631456][ T8] steelseries 0003:1038:1410.001A: probe with driver steelseries failed with error -22 [ 566.810476][T10914] usb 4-1: USB disconnect, device number 53 [ 566.852971][ T5151] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 567.055367][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 567.065347][ T5151] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 567.075895][ T5151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.088773][ T5151] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 567.102457][ T5151] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 567.122374][ T5151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.136369][ T5151] usb 1-1: Product: syz [ 567.140597][ T5151] usb 1-1: Manufacturer: syz [ 567.146018][ T5151] usb 1-1: SerialNumber: syz [ 567.167022][ T5151] usb 1-1: config 0 descriptor?? [ 567.175572][ T5151] ipaq 1-1:0.0: PocketPC PDA converter detected [ 567.192578][ T5151] usb 1-1: active config #0 != 1 ?? [ 567.552901][ T5151] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 567.755327][ T5151] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.779879][ T5151] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 567.806894][ T5151] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 567.837379][ T5151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.871363][ T5098] usb 5-1: USB disconnect, device number 56 [ 567.903570][ T5151] usb 3-1: Product: syz [ 567.921940][ T5151] usb 3-1: Manufacturer: syz [ 567.935416][ T5151] usb 3-1: SerialNumber: syz [ 569.057522][ T5151] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 569.133135][ T5151] cdc_ncm 3-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 569.140597][ T5151] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 569.348037][ T5151] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 570.761647][ T5150] usb 1-1: USB disconnect, device number 41 [ 571.065658][T10914] usb 3-1: USB disconnect, device number 40 [ 571.110544][T10914] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 571.603928][ T5150] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 571.813419][ T5150] usb 1-1: Using ep0 maxpacket: 32 [ 571.842424][ T5150] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 571.872800][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.913292][ T5150] usb 1-1: config 0 descriptor?? [ 571.951113][ T5150] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 572.155050][ T5150] gspca_vc032x: reg_r err -32 [ 572.173203][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.182078][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.204590][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.231965][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.249621][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.255359][ T5146] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 572.272803][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.292335][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.303370][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.308948][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.322771][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.338567][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.354219][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.366842][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.380753][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.391849][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.405615][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.421342][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.434851][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 572.446468][ T5146] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 572.474522][ T5150] gspca_vc032x: Unknown sensor... [ 572.492614][ T5146] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 572.503232][ T5150] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 572.505737][T12384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.544788][ T5146] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 572.566165][T12384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.573575][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.614123][T12366] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 573.385597][ T5150] usb 2-1: USB disconnect, device number 51 [ 573.826187][T12409] syz.2.2107[12409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 573.826369][T12409] syz.2.2107[12409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 574.328364][ T5146] usb 1-1: USB disconnect, device number 42 [ 575.702810][ T5146] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 575.938014][ T5146] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.975345][ T5146] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 576.037952][ T5146] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.047731][ T58] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 576.058687][ T5146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.080690][ T5146] usb 1-1: Product: syz [ 576.089150][ T5146] usb 1-1: Manufacturer: syz [ 576.099297][ T5146] usb 1-1: SerialNumber: syz [ 576.273138][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 576.287217][ T58] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 576.298021][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.327123][ T58] usb 3-1: config 0 descriptor?? [ 576.339654][ T58] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 576.513026][ T5150] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 576.756659][T12443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.779268][T12467] trusted_key: syz.4.2134 sent an empty control message without MSG_MORE. [ 576.794913][ T5150] usb 4-1: Using ep0 maxpacket: 16 [ 576.803658][T12443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.816382][ T5150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 576.847620][ T5150] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 576.881307][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.901514][ T5150] usb 4-1: config 0 descriptor?? [ 577.113051][ T8] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 577.173552][ T5146] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 577.180061][ T5146] cdc_ncm 1-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 577.207957][ T5146] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 577.316081][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 577.328254][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 577.346163][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 577.355604][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.355932][T12459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.392565][T12472] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 577.400667][T12459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.429431][ T5146] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 577.452856][ T58] gspca_vc032x: reg_w err -71 [ 577.457653][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.478157][ T5150] hid-generic 0003:0158:0100.001B: unknown main item tag 0x1 [ 577.511942][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.519075][ T5150] hid-generic 0003:0158:0100.001B: unexpected long global item [ 577.527303][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.537442][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.547632][ T5150] hid-generic 0003:0158:0100.001B: probe with driver hid-generic failed with error -22 [ 577.558033][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.574500][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.585436][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.590920][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.611244][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.621402][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.662757][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.668128][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.712453][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.742729][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.752246][ T8] usb 1-1: USB disconnect, device number 43 [ 577.770055][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.797868][ T5150] usb 2-1: USB disconnect, device number 52 [ 577.808272][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.822055][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.834340][ T8] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 577.848769][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 577.884620][ T58] gspca_vc032x: Unknown sensor... [ 577.904968][ T58] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 577.942967][ T58] usb 3-1: USB disconnect, device number 41 [ 578.261926][T10914] usb 4-1: USB disconnect, device number 54 [ 578.994635][T12531] xt_hashlimit: overflow, rate too high: 0 [ 579.309238][ T5150] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 579.513163][T10914] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 580.136322][ T58] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 580.322962][T10914] usb 4-1: Using ep0 maxpacket: 8 [ 580.339071][ T58] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 580.341843][T10914] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=58.58 [ 580.362925][ T5150] usb 2-1: Using ep0 maxpacket: 32 [ 580.371183][T10914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.378317][ T58] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 580.404560][T10914] usb 4-1: config 0 descriptor?? [ 580.404889][ T5150] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 580.413801][T10914] cypress_cy7c63 4-1:0.0: Cypress CY7C63xxx device now attached [ 580.462767][ T58] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 580.485023][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.502761][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.515950][ T5150] usb 2-1: config 0 descriptor?? [ 580.544040][T12525] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 580.562076][ T5150] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 580.672852][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2151'. [ 580.787591][T12523] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 580.873900][ T58] usb 4-1: USB disconnect, device number 55 [ 580.939993][ T58] cypress_cy7c63 4-1:0.0: Cypress CY7C63xxx device now disconnected [ 580.953904][ T5151] usb 3-1: USB disconnect, device number 42 [ 580.964926][T12518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.983380][T12518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.634927][ T5150] gspca_vc032x: reg_w err -71 [ 581.642910][T10914] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 581.660271][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.674445][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.679982][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.696503][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.702191][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.711696][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.722480][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.732439][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.744957][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.750522][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.763436][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.780724][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.795239][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.811323][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.828751][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.841830][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.850752][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.855061][T10914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 10 [ 581.867868][ T5150] gspca_vc032x: I2c Bus Busy Wait 00 [ 581.877176][ T5150] gspca_vc032x: Unknown sensor... [ 581.882567][ T5150] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 581.896962][T10914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 581.902572][ T5150] usb 2-1: USB disconnect, device number 53 [ 581.919965][T10914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 581.954807][T10914] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 581.995601][T10914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.027883][T10914] usb 1-1: config 0 descriptor?? [ 582.502001][T10914] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 582.530574][T10914] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 582.547142][T10914] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 582.564636][T10914] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 582.577262][T10914] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 582.585342][T10914] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 582.619908][T10914] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 582.644107][T10914] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 582.661197][T10914] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 582.673129][ T5098] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 582.701888][T10914] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 582.873160][ T5098] usb 5-1: Using ep0 maxpacket: 8 [ 582.889002][ T5098] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 582.904045][ T5098] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 582.912602][ T5098] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 582.925774][ T5098] usb 5-1: config 0 has no interface number 0 [ 582.937274][ T5098] usb 5-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 582.951225][ T5098] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 582.961348][ T5098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.987463][ T5098] usb 5-1: config 0 descriptor?? [ 583.368045][T12606] Cannot find add_set index 0 as target [ 583.409739][ T5150] usb 5-1: USB disconnect, device number 57 [ 584.182999][ T58] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 584.394191][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 584.417861][ T58] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 584.442875][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.471998][ T58] usb 4-1: config 0 descriptor?? [ 584.482621][ T58] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 584.651054][ T5150] usb 1-1: USB disconnect, device number 44 [ 584.892080][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.928796][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.965240][ T29] audit: type=1800 audit(1720004520.352:132): pid=12670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2205" name="/" dev="fuse" ino=1 res=0 errno=0 [ 585.565201][ T58] gspca_vc032x: reg_w err -71 [ 585.571356][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.577807][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.588344][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.594252][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.599865][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.615453][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.633161][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.641326][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.668791][T10914] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 585.671213][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.684650][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.692225][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.703630][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.712168][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.728456][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.751755][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.768712][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.774758][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.780257][ T58] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.786375][ T58] gspca_vc032x: Unknown sensor... [ 585.792309][ T58] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 585.809829][ T58] usb 4-1: USB disconnect, device number 56 [ 585.983203][T12680] loop1: detected capacity change from 0 to 4096 [ 586.131138][T10914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 10 [ 586.178842][T10914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 586.193518][T12680] ntfs3: loop1: MFT: r=b, expect seq=0 instead of b! [ 586.205522][T10914] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 586.219078][T10914] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 586.238784][T10914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.270271][T10914] usb 1-1: config 0 descriptor?? [ 586.708107][T10914] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 586.738727][T10914] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 586.747243][T10914] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 586.756562][T10914] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 586.773195][T10914] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 586.971419][T10914] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 587.001566][T10914] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 587.017692][T10914] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 587.029204][T10914] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 587.067580][T10914] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 587.154097][T10914] usb 1-1: USB disconnect, device number 45 [ 588.232824][ T5231] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 588.433496][ T5231] usb 3-1: Using ep0 maxpacket: 32 [ 588.454809][ T5231] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 588.476134][ T5231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.495436][ T5231] usb 3-1: config 0 descriptor?? [ 588.511621][ T5231] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 589.731059][ T5231] gspca_vc032x: reg_w err -71 [ 589.766632][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.794498][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.806866][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.812362][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.818170][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.829716][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.839402][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.848642][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.869107][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.879302][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.932464][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.949363][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.991180][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 589.999257][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.005110][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.022750][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.028109][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.053131][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 590.074505][ T5231] gspca_vc032x: Unknown sensor... [ 590.093138][ T5231] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 590.122007][ T5231] usb 3-1: USB disconnect, device number 43 [ 590.335421][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.481885][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.583830][T10914] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 590.709934][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.788311][T10914] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 590.820788][T10914] usb 1-1: config 1 has no interface number 0 [ 590.825330][T12759] futex_wake_op: syz.4.2248 tries to shift op by 32; fix this program [ 590.857258][T10914] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.893510][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.904200][T10914] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 590.923662][ T5100] Bluetooth: hci2: command 0x0406 tx timeout [ 590.952523][T10914] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 590.976345][T10914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.988062][T10914] usb 1-1: Product: syz [ 590.992986][T10914] usb 1-1: Manufacturer: syz [ 590.998185][T10914] usb 1-1: SerialNumber: syz [ 591.102958][ T5100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 591.118076][ T5100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 591.136315][ T5100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 591.149570][ T5100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 591.158043][ T5100] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 591.165986][ T5100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 591.373054][ T11] bridge_slave_1: left allmulticast mode [ 591.386387][ T11] bridge_slave_1: left promiscuous mode [ 591.411013][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.435953][ T11] bridge_slave_0: left allmulticast mode [ 591.450858][ T11] bridge_slave_0: left promiscuous mode [ 591.461444][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.674130][T12765] futex_wake_op: syz.2.2249 tries to shift op by 32; fix this program [ 591.854849][T10914] cdc_ncm 1-1:1.1: bind() failure [ 591.897393][T10914] usb 1-1: USB disconnect, device number 46 [ 591.939412][T12769] IPVS: length: 174 != 8 [ 592.043918][ T8] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 592.192002][T12772] IPVS: length: 174 != 1776 [ 592.245034][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 10 [ 592.276958][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 592.313071][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 592.355153][ T8] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 592.372091][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.430032][ T8] usb 4-1: config 0 descriptor?? [ 592.853074][ T5231] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 592.875074][ T8] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 592.901510][ T8] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 592.916505][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.933089][ T8] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 592.945554][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.952961][ T8] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 592.977838][ T11] bond0 (unregistering): Released all slaves [ 592.981677][ T8] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 593.002617][ T8] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 593.012312][ T8] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 593.044819][ T8] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 593.054838][ T5231] usb 1-1: Using ep0 maxpacket: 32 [ 593.073604][ T5231] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 593.081492][ T8] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 593.112911][ T5231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.164653][ T5231] usb 1-1: config 0 descriptor?? [ 593.170758][ T8] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 593.203926][ T5231] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 593.243142][ T5100] Bluetooth: hci5: command tx timeout [ 593.251995][ T8] usb 4-1: USB disconnect, device number 57 [ 594.107495][ T11] hsr_slave_0: left promiscuous mode [ 594.131681][ T11] hsr_slave_1: left promiscuous mode [ 594.227491][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.253645][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.302465][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.335988][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.385498][ T5231] gspca_vc032x: reg_w err -71 [ 594.390694][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.404223][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.424817][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.448912][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.451616][ T11] veth0_macvtap: left promiscuous mode [ 594.471022][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.484150][ T11] veth1_vlan: left promiscuous mode [ 594.497894][ T11] veth0_vlan: left promiscuous mode [ 594.500557][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.511787][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.532079][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.546243][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.558935][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.573264][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.594599][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.610122][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.625796][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.654530][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.668043][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.688825][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.704366][ T5231] gspca_vc032x: I2c Bus Busy Wait 00 [ 594.720666][ T5231] gspca_vc032x: Unknown sensor... [ 594.741909][ T5231] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 594.780770][ T5231] usb 1-1: USB disconnect, device number 47 [ 595.049120][T12814] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.2261'. [ 595.327225][ T5100] Bluetooth: hci5: command tx timeout [ 595.693198][ T8] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 595.920273][ T8] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 595.953780][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.975046][ T8] usb 4-1: Product: syz [ 595.979513][ T8] usb 4-1: Manufacturer: syz [ 595.993168][ T8] usb 4-1: SerialNumber: syz [ 596.075630][T12844] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.2272'. [ 596.208162][ T11] team0 (unregistering): Port device team_slave_1 removed [ 596.227065][ T8] gspca_main: pac207-2.14.0 probing 093a:2476 [ 596.254686][ T8] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 596.273642][ T8] usb 4-1: Found UVC 0.00 device syz (093a:2476) [ 596.293078][ T8] usb 4-1: No valid video chain found. [ 596.322010][ T8] usb 4-1: USB disconnect, device number 58 [ 596.343633][ T11] team0 (unregistering): Port device team_slave_0 removed [ 597.402871][ T5100] Bluetooth: hci5: command tx timeout [ 597.778910][T12761] chnl_net:caif_netlink_parms(): no params data found [ 598.315804][T12881] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.2282'. [ 598.352159][T12761] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.385509][T12761] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.423914][T12761] bridge_slave_0: entered allmulticast mode [ 598.445008][T12761] bridge_slave_0: entered promiscuous mode [ 598.484853][T12761] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.492383][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.512810][T12761] bridge_slave_1: entered allmulticast mode [ 598.524600][T12761] bridge_slave_1: entered promiscuous mode [ 598.688554][T12761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.750770][T12761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.209287][ T8] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 599.244979][T12761] team0: Port device team_slave_0 added [ 599.282258][T12761] team0: Port device team_slave_1 added [ 599.414995][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 599.440834][ T8] usb 4-1: config 1 has no interface number 0 [ 599.463249][ T8] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.484395][ T5100] Bluetooth: hci5: command tx timeout [ 599.490475][ T8] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 599.551377][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 599.583109][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.597539][T12761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.612993][T12761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.630704][ T8] usb 4-1: Product: syz [ 599.664120][ T8] usb 4-1: Manufacturer: syz [ 599.676312][ T8] usb 4-1: SerialNumber: syz [ 599.678636][T12761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.725834][T12761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.750798][T12761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.823402][T12761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.056105][T12761] hsr_slave_0: entered promiscuous mode [ 600.069650][T12761] hsr_slave_1: entered promiscuous mode [ 600.085739][T12761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.096338][T12761] Cannot create hsr debugfs directory [ 600.115336][ T29] audit: type=1326 audit(1720004535.512:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.4.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5775b99 code=0x7ffc0000 [ 600.220637][ T29] audit: type=1326 audit(1720004535.512:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.4.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5775b99 code=0x7ffc0000 [ 600.272992][ T29] audit: type=1326 audit(1720004535.552:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.4.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdb5775b99 code=0x7ffc0000 [ 600.375840][ T29] audit: type=1326 audit(1720004535.552:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.4.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5775b99 code=0x7ffc0000 [ 600.458479][ T29] audit: type=1326 audit(1720004535.552:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.4.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5775b99 code=0x7ffc0000 [ 600.560101][ T29] audit: type=1326 audit(1720004535.552:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.4.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdb5775b99 code=0x7ffc0000 [ 600.617161][ T8] cdc_ncm 4-1:1.1: bind() failure [ 600.688287][ T8] usb 4-1: USB disconnect, device number 59 [ 600.693541][ T29] audit: type=1326 audit(1720004535.552:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.4.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5775b99 code=0x7ffc0000 [ 600.769137][ T29] audit: type=1326 audit(1720004535.552:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.4.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdb5775b99 code=0x7ffc0000 [ 600.870353][ T29] audit: type=1326 audit(1720004535.552:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.4.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb5775b99 code=0x7ffc0000 [ 600.933029][ T29] audit: type=1326 audit(1720004535.562:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12902 comm="syz.4.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efdb5775b99 code=0x7ffc0000 [ 600.934378][T12918] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.2292'. [ 602.253679][T12761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 602.291597][T12959] atomic_op ffff88807b655198 conn xmit_atomic 0000000000000000 [ 602.299861][ T58] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 602.340642][T12761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 602.416561][T12761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 602.458773][T12761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 602.505638][ T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.544183][ T58] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 602.602278][ T58] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.622725][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.643309][ T58] usb 3-1: Product: syz [ 602.655161][ T58] usb 3-1: Manufacturer: syz [ 602.673696][ T58] usb 3-1: SerialNumber: syz [ 602.998115][T12761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.101950][T12761] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.158422][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.165702][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.218106][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.225368][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.745708][ T58] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 603.752218][ T58] cdc_ncm 3-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 603.780460][ T58] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 603.956604][T12761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.017900][ T58] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 604.147877][T12761] veth0_vlan: entered promiscuous mode [ 604.253205][T12761] veth1_vlan: entered promiscuous mode [ 604.293432][ T5151] usb 3-1: USB disconnect, device number 44 [ 604.325939][ T5151] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 605.207212][T12761] veth0_macvtap: entered promiscuous mode [ 605.248419][T12761] veth1_macvtap: entered promiscuous mode [ 605.360111][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.396870][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.441362][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.468141][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.502820][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.529497][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.562160][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.600406][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.638699][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.672823][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.703035][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.742695][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.764902][T12761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.823666][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.862741][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.872624][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.943235][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.977309][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.014343][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.071076][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.112976][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.133081][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.172695][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.203375][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.232886][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.290004][T12761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.337526][T12761] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.392811][T12761] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.422465][T12761] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.448489][T12761] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.793823][ T2866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.822285][ T2866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.932456][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.967157][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.615915][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2327'. [ 607.652791][T13076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.673796][T13076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.737696][T13076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.766139][T13076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.204513][T13151] Oops: stack segment: 0000 [#1] PREEMPT SMP KASAN PTI [ 611.204538][T13151] CPU: 1 UID: 0 PID: 13151 Comm: syz.4.2351 Not tainted 6.10.0-rc6-next-20240703-syzkaller #0 [ 611.204557][T13151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 611.204567][T13151] RIP: 0010:dev_hash_map_redirect+0x64/0x620 [ 611.204594][T13151] Code: 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 9f 9c 3d 00 48 8b 03 48 89 44 24 08 48 8d 58 38 48 89 dd 48 c1 ed 03 <42> 0f b6 44 3d 00 84 c0 0f 85 f5 03 00 00 44 8b 33 44 89 f6 83 e6 [ 611.204607][T13151] RSP: 0018:ffffc9000313f958 EFLAGS: 00010202 [ 611.204623][T13151] RAX: 0000000000000000 RBX: 0000000000000038 RCX: 0000000000040000 [ 611.204633][T13151] RDX: ffffc90016150000 RSI: 00000000000001be RDI: 00000000000001bf [ 611.204644][T13151] RBP: 0000000000000007 R08: 0000000000000007 R09: ffffffff81b5ee2f [ 611.204655][T13151] R10: 0000000000000004 R11: ffff88807bf28000 R12: 0000000000000008 [ 611.204665][T13151] R13: 000000000313f9b0 R14: 0000000000000000 R15: dffffc0000000000 [ 611.204676][T13151] FS: 00007efdb65b86c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 611.204690][T13151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.204702][T13151] CR2: 000000110c32e5b5 CR3: 00000000546d6000 CR4: 00000000003506f0 [ 611.204716][T13151] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 611.204726][T13151] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 611.204736][T13151] Call Trace: [ 611.204742][T13151] [ 611.204749][T13151] ? __die_body+0x88/0xe0 [ 611.204773][T13151] ? die+0xcf/0x110 [ 611.204796][T13151] ? do_trap+0x15a/0x3a0 [ 611.204819][T13151] ? do_error_trap+0x1dc/0x2c0 [ 611.204842][T13151] ? __pfx_do_error_trap+0x10/0x10 [ 611.204865][T13151] ? rcu_is_watching+0x15/0xb0 [ 611.204890][T13151] ? exc_stack_segment+0x38/0x50 [ 611.204908][T13151] ? asm_exc_stack_segment+0x26/0x30 [ 611.204929][T13151] ? bpf_ringbuf_query+0x4f/0x150 [ 611.204951][T13151] ? dev_hash_map_redirect+0x64/0x620 [ 611.204970][T13151] ? dev_hash_map_redirect+0x2b/0x620 [ 611.204990][T13151] bpf_prog_ec9efaa32d58ce69+0x56/0x5a [ 611.205004][T13151] tun_get_user+0x3321/0x4560 [ 611.205023][T13151] ? tun_get_user+0x84c/0x4560 [ 611.205046][T13151] ? __pfx_tun_get_user+0x10/0x10 [ 611.205066][T13151] ? tun_get+0x1e/0x2f0 [ 611.205088][T13151] ? tun_get+0x1e/0x2f0 [ 611.205102][T13151] ? tun_get+0x27d/0x2f0 [ 611.205117][T13151] tun_chr_write_iter+0x113/0x1f0 [ 611.205134][T13151] vfs_write+0xa72/0xc90 [ 611.205151][T13151] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 611.205167][T13151] ? __pfx_vfs_write+0x10/0x10 [ 611.205180][T13151] ? do_futex+0x33b/0x560 [ 611.205210][T13151] ksys_write+0x1a0/0x2c0 [ 611.205227][T13151] ? __pfx_ksys_write+0x10/0x10 [ 611.205242][T13151] ? do_syscall_64+0x100/0x230 [ 611.205257][T13151] ? do_syscall_64+0xb6/0x230 [ 611.205280][T13151] do_syscall_64+0xf3/0x230 [ 611.205293][T13151] ? clear_bhb_loop+0x35/0x90 [ 611.205314][T13151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.205333][T13151] RIP: 0033:0x7efdb577471f [ 611.205345][T13151] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 611.205358][T13151] RSP: 002b:00007efdb65b8010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 611.205373][T13151] RAX: ffffffffffffffda RBX: 00007efdb5903f60 RCX: 00007efdb577471f [ 611.205386][T13151] RDX: 0000000000000036 RSI: 0000000020000000 RDI: 00000000000000c8 [ 611.205396][T13151] RBP: 00007efdb57e4a7a R08: 0000000000000000 R09: 0000000000000000 [ 611.205406][T13151] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000000 [ 611.205416][T13151] R13: 000000000000000b R14: 00007efdb5903f60 R15: 00007ffe2fcc8478 [ 611.205434][T13151] [ 611.205439][T13151] Modules linked in: [ 611.205450][T13151] ---[ end trace 0000000000000000 ]--- [ 611.402932][ T5107] Bluetooth: hci4: command 0x0406 tx timeout [ 611.403816][T13151] RIP: 0010:dev_hash_map_redirect+0x64/0x620 [ 611.591184][T13151] Code: 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 9f 9c 3d 00 48 8b 03 48 89 44 24 08 48 8d 58 38 48 89 dd 48 c1 ed 03 <42> 0f b6 44 3d 00 84 c0 0f 85 f5 03 00 00 44 8b 33 44 89 f6 83 e6 [ 611.610957][T13151] RSP: 0018:ffffc9000313f958 EFLAGS: 00010202 [ 611.617065][T13151] RAX: 0000000000000000 RBX: 0000000000000038 RCX: 0000000000040000 [ 611.625082][T13151] RDX: ffffc90016150000 RSI: 00000000000001be RDI: 00000000000001bf [ 611.633102][T13151] RBP: 0000000000000007 R08: 0000000000000007 R09: ffffffff81b5ee2f [ 611.641080][T13151] R10: 0000000000000004 R11: ffff88807bf28000 R12: 0000000000000008 [ 611.649091][T13151] R13: 000000000313f9b0 R14: 0000000000000000 R15: dffffc0000000000 [ 611.657093][T13151] FS: 00007efdb65b86c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 611.666050][T13151] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 611.672698][T13151] CR2: 000000110c32e5b5 CR3: 00000000546d6000 CR4: 00000000003506f0 [ 611.680686][T13151] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 611.688696][T13151] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 611.696884][T13151] Kernel panic - not syncing: Fatal exception in interrupt [ 611.704380][T13151] Kernel Offset: disabled [ 611.708703][T13151] Rebooting in 86400 seconds..