last executing test programs: 8m13.916259592s ago: executing program 2 (id=2541): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') close(0xffffffffffffffff) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'wrr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r8, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) socket$l2tp6(0xa, 0x2, 0x73) 8m12.926741935s ago: executing program 2 (id=2544): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) read$FUSE(r6, &(0x7f0000000240)={0x2020}, 0x2020) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002340)={0x58, r7, 0x1, 0x0, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x9, 0x5, 0x5, 0x3ff]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x34c, 0x1ff, 0xffffffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x57}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x78}]}, 0x58}}, 0x8000) sendmsg$SEG6_CMD_SET_TUNSRC(r4, 0x0, 0x20000080) landlock_restrict_self(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x8000) 8m11.122621274s ago: executing program 2 (id=2551): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000004, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x3e0, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x394, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2a8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x260, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r8, 0x4008ae8a, &(0x7f00000002c0)={0xe5, 0x0, [{0x80000001, 0x2, 0x4, 0x8001}]}) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r9, r9, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) 8m8.902209125s ago: executing program 2 (id=2560): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1c8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') futex(0x0, 0x3, 0x0, 0x0, 0x0, 0x2) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x2000000002, 0x9, 0x3}}, 0x28) read$FUSE(r1, &(0x7f0000002440)={0x2020}, 0x2020) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000140)={0x1, 0x2, 0x12}) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0x4}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000150001000000001a000000000b000000080002000ab13d"], 0x1c}}, 0x20000080) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0182101, &(0x7f00000023c0)={0x0, 0x0}) ioprio_get$pid(0x2, r5) openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x7b9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x87ff, 0x1}, 0xe) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000)={0x2, 0x7d}, 0x2) 8m5.722696907s ago: executing program 2 (id=2575): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) creat(0x0, 0x10) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x5) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x100) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0xff0e) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40480923, 0x0) socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f00000003c0)="4ea96e93c84e67b39989aa1b7fdf3fc8d8053468e45889f239b8c0070ce7f9e5e4b69c8ee35cbeec328b3fa2c0fc0dbcc72ebb4a1f08773734c90cb60e5ddc65d08ba73142c83fc98b2a6b0281737131008b967b0f403867bff4ae4b5c7a0d1379aa6e9c097ed0c3ffbe651858406a7f9aae6a3902cd9afc789c52a5b0e9b55ba420a2b1e4ab265dfeca25dd048935e58ba14d9ab77d78d1fce13d05c86eebb677880c04b703f3fa3ca70983491a3d6317054e6e4267c0f9aa367b844d60c9f1b139af59b9bbfff8df04", 0xca, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 8m5.325713115s ago: executing program 2 (id=2576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xa) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket(0x10, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x2, 0x0) close(r7) r8 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r8, 0xc0804124, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1811700011a06c86085455b06b965b0000000000000000000000000000006119"], 0x0, 0x5}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x182df000) 8m5.278262165s ago: executing program 32 (id=2576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xa) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket(0x10, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x2, 0x0) close(r7) r8 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r8, 0xc0804124, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1811700011a06c86085455b06b965b0000000000000000000000000000006119"], 0x0, 0x5}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x182df000) 5.596132809s ago: executing program 4 (id=5176): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x7}, 0x7, 0x1, 0x4, 0x0, 0x9, 'syz0\x00', "523ca936f8f61abb3d7b1d6e25ad96acfe31ce82f2f500eb00d82e396194db04", "0b6bf1b1639cd090c61155070ae569ac4a65ef2100", [{0x8, 0x9, {0x1, 0xf}}, {0x800, 0x7, {0x1, 0xb}}, {0x9, 0x18, {0x0, 0x56c}}, {0x8, 0x1, {0x3, 0x2d}}, {0x0, 0x42, {0x0, 0x401}}, {0xffa8, 0x1, {0x3}}, {0xfff8, 0x7, {0x1, 0x2}}, {0x4, 0x1, {0x0, 0x1000000}}, {0x0, 0xfff7, {0x1, 0xa}}, {0xc, 0xff, {0x1, 0x7}}, {0x1000, 0x9, {0x1, 0xd3f}}, {0x16, 0x9, {0x0, 0x99}}, {0xe45a, 0x4fd, {0x2, 0xe3c7305}}, {0x6, 0x8, {0x1, 0x4}}, {0x2, 0xc, {0x1, 0x9}}, {0x9, 0x5, {0x2, 0x7f}}, {0x1, 0x1000, {0x2, 0x3}}, {0x0, 0xfff, {0x1, 0x2}}, {0x9, 0x7, {0x0, 0x3fd}}, {0x1, 0x10, {0x0, 0x7fff}}, {0x200e, 0x40, {0x3, 0x90a}}, {0x5, 0x2, {0x2, 0x3}}, {0x9, 0x6, {0x2, 0x6}}, {0xefe7, 0x6, {0x1, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0x40, 0x6ba5, {0x2, 0x8}}, {0xd9, 0xcf83, {0x1, 0xc}}, {0x2, 0xff7b, {0x2, 0x9953}}, {0x8000, 0xb, {0x1, 0xfd}}, {0xc, 0x2, {0x2, 0xb}}, {0x8003, 0x5, {0x1, 0x7}}, {0x1, 0x4, {0x2, 0xe141}}, {0x1000, 0x40, {0x0, 0x5}}, {0x2, 0x5, {0x0, 0x4}}, {0xb, 0x1, {0x3, 0x4}}, {0x4, 0x58, {0x1, 0x7}}, {0x6, 0xe, {0x3, 0x10001}}, {0x8, 0x6e, {0x2, 0x7fffffff}}, {0x3, 0xff, {0x2, 0x7}}, {0x400, 0x8, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, 0x0, 0x0) 4.915025209s ago: executing program 0 (id=5177): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@delpolicy={0xd0, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x67}}, [@sec_ctx={0x7e, 0x8, {0x7a, 0x8, 0x0, 0x25, 0x72, "5a16cd57d8fbbcc4df895e2aed685f29e9ef9f43990d98a465a768a0aa071198969de55862223457388e5208c6e4650ee5b4f39e2c5c7012604a81cdcb943fb2532db74a737b0034b2e9ff7408f78492c5b7d03c0212334744188b8c2cce639ba655d6b06c272fd3ca4ff7e00447d78708bb"}}]}, 0xd0}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 4.112266711s ago: executing program 0 (id=5181): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x400000000000009, 0x7ffc, 0x80000001, 0x800000010000, 0x3, 0x4002004c2, 0xffffffffffffffff, 0x654, 0x0, 0x3ffffc, 0xfffffffffffffefd, 0x7fffffff, 0x20000000008, 0x6, 0xfffffffffffffff7], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.927166362s ago: executing program 4 (id=5183): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x7}, 0x7, 0x1, 0x4, 0x0, 0x9, 'syz0\x00', "523ca936f8f61abb3d7b1d6e25ad96acfe31ce82f2f500eb00d82e396194db04", "0b6bf1b1639cd090c61155070ae569ac4a65ef2100", [{0x8, 0x9, {0x1, 0xf}}, {0x800, 0x7, {0x1, 0xb}}, {0x9, 0x18, {0x0, 0x56c}}, {0x8, 0x1, {0x3, 0x2d}}, {0x0, 0x42, {0x0, 0x401}}, {0xffa8, 0x1, {0x3}}, {0xfff8, 0x7, {0x1, 0x2}}, {0x4, 0x1, {0x0, 0x1000000}}, {0x0, 0xfff7, {0x1, 0xa}}, {0xc, 0xff, {0x1, 0x7}}, {0x1000, 0x9, {0x1, 0xd3f}}, {0x16, 0x9, {0x0, 0x99}}, {0xe45a, 0x4fd, {0x2, 0xe3c7305}}, {0x6, 0x8, {0x1, 0x4}}, {0x2, 0xc, {0x1, 0x9}}, {0x9, 0x5, {0x2, 0x7f}}, {0x1, 0x1000, {0x2, 0x3}}, {0x0, 0xfff, {0x1, 0x2}}, {0x9, 0x7, {0x0, 0x3fd}}, {0x1, 0x10, {0x0, 0x7fff}}, {0x200e, 0x40, {0x3, 0x90a}}, {0x5, 0x2, {0x2, 0x3}}, {0x9, 0x6, {0x2, 0x6}}, {0xefe7, 0x6, {0x1, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0x40, 0x6ba5, {0x2, 0x8}}, {0xd9, 0xcf83, {0x1, 0xc}}, {0x2, 0xff7b, {0x2, 0x9953}}, {0x8000, 0xb, {0x1, 0xfd}}, {0xc, 0x2, {0x2, 0xb}}, {0x8003, 0x5, {0x1, 0x7}}, {0x1, 0x4, {0x2, 0xe141}}, {0x1000, 0x40, {0x0, 0x5}}, {0x2, 0x5, {0x0, 0x4}}, {0xb, 0x1, {0x3, 0x4}}, {0x4, 0x58, {0x1, 0x7}}, {0x6, 0xe, {0x3, 0x10001}}, {0x8, 0x6e, {0x2, 0x7fffffff}}, {0x3, 0xff, {0x2, 0x7}}, {0x400, 0x8, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, 0x0, 0x0) 3.822078534s ago: executing program 1 (id=5184): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 3.430613033s ago: executing program 1 (id=5186): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb460}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private0, @mcast2}}}}, 0x0) 2.964291448s ago: executing program 0 (id=5187): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='#'], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 2.905334952s ago: executing program 1 (id=5188): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$binfmt_script(r0, &(0x7f0000001380)={'#! ', './file0'}, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 2.609672677s ago: executing program 0 (id=5189): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x7}, 0x7, 0x1, 0x4, 0x0, 0x9, 'syz0\x00', "523ca936f8f61abb3d7b1d6e25ad96acfe31ce82f2f500eb00d82e396194db04", "0b6bf1b1639cd090c61155070ae569ac4a65ef2100", [{0x8, 0x9, {0x1, 0xf}}, {0x800, 0x7, {0x1, 0xb}}, {0x9, 0x18, {0x0, 0x56c}}, {0x8, 0x1, {0x3, 0x2d}}, {0x0, 0x42, {0x0, 0x401}}, {0xffa8, 0x1, {0x3}}, {0xfff8, 0x7, {0x1, 0x2}}, {0x4, 0x1, {0x0, 0x1000000}}, {0x0, 0xfff7, {0x1, 0xa}}, {0xc, 0xff, {0x1, 0x7}}, {0x1000, 0x9, {0x1, 0xd3f}}, {0x16, 0x9, {0x0, 0x99}}, {0xe45a, 0x4fd, {0x2, 0xe3c7305}}, {0x6, 0x8, {0x1, 0x4}}, {0x2, 0xc, {0x1, 0x9}}, {0x9, 0x5, {0x2, 0x7f}}, {0x1, 0x1000, {0x2, 0x3}}, {0x0, 0xfff, {0x1, 0x2}}, {0x9, 0x7, {0x0, 0x3fd}}, {0x1, 0x10, {0x0, 0x7fff}}, {0x200e, 0x40, {0x3, 0x90a}}, {0x5, 0x2, {0x2, 0x3}}, {0x9, 0x6, {0x2, 0x6}}, {0xefe7, 0x6, {0x1, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0x40, 0x6ba5, {0x2, 0x8}}, {0xd9, 0xcf83, {0x1, 0xc}}, {0x2, 0xff7b, {0x2, 0x9953}}, {0x8000, 0xb, {0x1, 0xfd}}, {0xc, 0x2, {0x2, 0xb}}, {0x8003, 0x5, {0x1, 0x7}}, {0x1, 0x4, {0x2, 0xe141}}, {0x1000, 0x40, {0x0, 0x5}}, {0x2, 0x5, {0x0, 0x4}}, {0xb, 0x1, {0x3, 0x4}}, {0x4, 0x58, {0x1, 0x7}}, {0x6, 0xe, {0x3, 0x10001}}, {0x8, 0x6e, {0x2, 0x7fffffff}}, {0x3, 0xff, {0x2, 0x7}}, {0x400, 0x8, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, 0x0, 0x0) 2.590909234s ago: executing program 4 (id=5190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x3) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000021c0)={r2, 0x13}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x16, 0x0, r2}) 2.251306838s ago: executing program 3 (id=5191): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "01d78771b90bd8a3b4914783c58777003d5b9538"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [{{0x254, 0x1, {{0x0, 0x7}, 0x7, 0x1, 0x4, 0x0, 0x9, 'syz0\x00', "523ca936f8f61abb3d7b1d6e25ad96acfe31ce82f2f500eb00d82e396194db04", "0b6bf1b1639cd090c61155070ae569ac4a65ef2100", [{0x8, 0x9, {0x1, 0xf}}, {0x800, 0x7, {0x1, 0xb}}, {0x9, 0x18, {0x0, 0x56c}}, {0x8, 0x1, {0x3, 0x2d}}, {0x0, 0x42, {0x0, 0x401}}, {0xffa8, 0x1, {0x3}}, {0xfff8, 0x7, {0x1, 0x2}}, {0x4, 0x1, {0x0, 0x1000000}}, {0x0, 0xfff7, {0x1, 0xa}}, {0xc, 0xff, {0x1, 0x7}}, {0x1000, 0x9, {0x1, 0xd3f}}, {0x16, 0x9, {0x0, 0x99}}, {0xe45a, 0x4fd, {0x2, 0xe3c7305}}, {0x6, 0x8, {0x1, 0x4}}, {0x2, 0xc, {0x1, 0x9}}, {0x9, 0x5, {0x2, 0x7f}}, {0x1, 0x1000, {0x2, 0x3}}, {0x0, 0xfff, {0x1, 0x2}}, {0x9, 0x7, {0x0, 0x3fd}}, {0x1, 0x10, {0x0, 0x7fff}}, {0x200e, 0x40, {0x3, 0x90a}}, {0x5, 0x2, {0x2, 0x3}}, {0x9, 0x6, {0x2, 0x6}}, {0xefe7, 0x6, {0x1, 0x5}}, {0x9, 0x6, {0x3, 0x2}}, {0x40, 0x6ba5, {0x2, 0x8}}, {0xd9, 0xcf83, {0x1, 0xc}}, {0x2, 0xff7b, {0x2, 0x9953}}, {0x8000, 0xb, {0x1, 0xfd}}, {0xc, 0x2, {0x2, 0xb}}, {0x8003, 0x5, {0x1, 0x7}}, {0x1, 0x4, {0x2, 0xe141}}, {0x1000, 0x40, {0x0, 0x5}}, {0x2, 0x5, {0x0, 0x4}}, {0xb, 0x1, {0x3, 0x4}}, {0x4, 0x58, {0x1, 0x7}}, {0x6, 0xe, {0x3, 0x10001}}, {0x8, 0x6e, {0x2, 0x7fffffff}}, {0x3, 0xff, {0x2, 0x7}}, {0x400, 0x8, {0x0, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r9, 0x84, 0x4, 0x0, 0x0) 2.230049573s ago: executing program 1 (id=5192): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xc2c00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close_range(r0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r0}, 0x18) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 1.751549384s ago: executing program 4 (id=5193): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000000)="ab", 0x1a000, 0x4850, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 1.620837997s ago: executing program 4 (id=5194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000600000008000000ff"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.569357707s ago: executing program 1 (id=5195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b3b25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x28}], 0x1}, 0x20000884) 1.281658673s ago: executing program 1 (id=5196): syz_open_dev$hidraw(&(0x7f0000000080), 0x80000, 0x418400) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 760.485184ms ago: executing program 0 (id=5197): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 760.011441ms ago: executing program 3 (id=5198): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 744.721524ms ago: executing program 4 (id=5199): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 605.226421ms ago: executing program 3 (id=5200): r0 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000080)={0x0, r0}) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x9e6, 0x2001) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0x9) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x4004050) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, 0x0) 474.181336ms ago: executing program 3 (id=5201): r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x31, 0x0, 0x0, 0x5}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x45, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 338.676947ms ago: executing program 3 (id=5202): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000100)="b9ff03076844268c", 0x0, 0xfe, 0x60000e1e, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000003c0)=[{0x20, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xfe}, {}, @control={0x9, 0x0, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0x4}, {}, @quote}], 0x38) 168.432303ms ago: executing program 3 (id=5203): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile64(r3, r2, 0x0, 0x8) 0s ago: executing program 0 (id=5204): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): fuse: Bad value for 'rootmode' [ 1235.042700][T22426] fuse: Bad value for 'user_id' [ 1235.045050][T22426] fuse: Bad value for 'user_id' [ 1235.185461][T22438] fuse: Unknown parameter ') ' [ 1235.663792][T22449] ªªªªªª speed is unknown, defaulting to 1000 [ 1235.667257][T22449] wg2 speed is unknown, defaulting to 1000 [ 1235.706425][T22451] 9pnet_virtio: no channels available for device syz [ 1235.832807][T22449] ªªªªªª speed is unknown, defaulting to 1000 [ 1235.926757][T22454] block device autoloading is deprecated and will be removed. [ 1235.930341][T22454] SQUASHFS error: Failed to read block 0x0: -5 [ 1236.021620][T22449] geneve1 speed is unknown, defaulting to 1000 [ 1236.672331][T22459] binder: BINDER_SET_CONTEXT_MGR already set [ 1236.675738][T22459] binder: 22455:22459 ioctl 4018620d 80004a80 returned -16 [ 1237.909989][T22467] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1237.912250][T22467] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1237.915516][T22467] vhci_hcd vhci_hcd.0: Device attached [ 1237.962281][T22471] mkiss: ax0: crc mode is auto. [ 1237.972579][T22471] fuse: Unknown parameter 'use00000000000000000000' [ 1238.152112][T22476] mkiss: ax0: crc mode is auto. [ 1238.157578][T22476] fuse: Unknown parameter 'use00000000000000000000' [ 1238.180795][T16060] usb 38-1: SetAddress Request (86) to port 0 [ 1238.183892][T16060] usb 38-1: new SuperSpeed USB device number 86 using vhci_hcd [ 1238.291833][ T54] usb 46-1: device descriptor read/8, error -110 [ 1238.346222][T22480] mkiss: ax0: crc mode is auto. [ 1238.361918][T22480] fuse: Bad value for 'fd' [ 1238.587734][T22485] mkiss: ax0: crc mode is auto. [ 1238.614004][T22485] fuse: Bad value for 'rootmode' [ 1238.652234][T22488] netlink: 'syz.3.3524': attribute type 1 has an invalid length. [ 1238.778096][ T54] usb usb46-port1: attempt power cycle [ 1239.318387][T22468] vhci_hcd: connection reset by peer [ 1239.337921][T18417] vhci_hcd vhci_hcd.0: stop threads [ 1239.340674][T18417] vhci_hcd vhci_hcd.0: release socket [ 1239.351668][T18417] vhci_hcd vhci_hcd.0: disconnect device [ 1239.665725][T22494] mkiss: ax0: crc mode is auto. [ 1239.689002][T22494] fuse: Unknown parameter 'use00000000000000000000' [ 1239.995438][T22498] binder: BINDER_SET_CONTEXT_MGR already set [ 1239.997449][T22498] binder: 22495:22498 ioctl 4018620d 80004a80 returned -16 [ 1240.212163][ T54] usb usb46-port1: unable to enumerate USB device [ 1240.232124][T22502] mkiss: ax0: crc mode is auto. [ 1240.291238][T22502] fuse: Unknown parameter 'use00000000000000000000' [ 1240.407221][T22509] fuse: Bad value for 'fd' [ 1240.688518][T22514] ªªªªªª speed is unknown, defaulting to 1000 [ 1240.695446][T22514] wg2 speed is unknown, defaulting to 1000 [ 1240.902691][T22514] ªªªªªª speed is unknown, defaulting to 1000 [ 1241.070422][T22514] geneve1 speed is unknown, defaulting to 1000 [ 1241.174842][T22520] mkiss: ax0: crc mode is auto. [ 1241.238113][T22523] fuse: Bad value for 'rootmode' [ 1241.423914][T22531] 9pnet_virtio: no channels available for device syz [ 1241.459186][T22533] mkiss: ax0: crc mode is auto. [ 1241.469101][T22533] fuse: Unknown parameter 'use00000000000000000000' [ 1241.635181][T22535] block device autoloading is deprecated and will be removed. [ 1241.642560][T22535] SQUASHFS error: Failed to read block 0x0: -5 [ 1241.647787][T22538] fuse: Unknown parameter 'user_i00000000000000000000' [ 1241.904972][T22547] mkiss: ax0: crc mode is auto. [ 1241.955120][T22547] fuse: Bad value for 'rootmode' [ 1242.474643][T22557] fuse: Unknown parameter ') ' [ 1242.938188][T22560] mkiss: ax0: crc mode is auto. [ 1242.948912][T22560] fuse: Bad value for 'rootmode' [ 1243.132736][T22562] mkiss: ax0: crc mode is auto. [ 1243.138724][T22562] fuse: Unknown parameter 'user_i00000000000000000000' [ 1243.261273][T16060] usb 38-1: device descriptor read/8, error -110 [ 1243.354469][T22564] mkiss: ax0: crc mode is auto. [ 1243.363713][T22564] fuse: Unknown parameter 'use00000000000000000000' [ 1243.462593][T22568] mkiss: ax0: crc mode is auto. [ 1243.488777][T22568] fuse: Unknown parameter 'user_i00000000000000000000' [ 1243.661210][T16060] usb usb38-port1: attempt power cycle [ 1243.676134][T22574] usb usb7: usbfs: process 22574 (syz.0.3555) did not claim interface 0 before use [ 1243.696510][T22572] mkiss: ax0: crc mode is auto. [ 1243.714468][T22572] fuse: Unknown parameter 'use00000000000000000000' [ 1244.161413][T22586] mkiss: ax0: crc mode is auto. [ 1244.229806][T22586] fuse: Unknown parameter 'user_id00000000000000000000' [ 1244.258063][T16060] usb usb38-port1: unable to enumerate USB device [ 1244.499228][T22591] mkiss: ax0: crc mode is auto. [ 1244.519657][T22591] fuse: Unknown parameter 'use00000000000000000000' [ 1244.707123][T22593] mkiss: ax0: crc mode is auto. [ 1244.714649][T22593] fuse: Invalid rootmode [ 1244.895228][T22602] mkiss: ax0: crc mode is auto. [ 1244.909366][T22602] fuse: Unknown parameter 'use00000000000000000000' [ 1244.946783][T22603] ªªªªªª speed is unknown, defaulting to 1000 [ 1244.949498][T22603] wg2 speed is unknown, defaulting to 1000 [ 1245.115025][T22603] ªªªªªª speed is unknown, defaulting to 1000 [ 1245.217012][T22603] geneve1 speed is unknown, defaulting to 1000 [ 1245.250847][ T60] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1245.279221][T22612] mkiss: ax0: crc mode is auto. [ 1245.291122][T22612] fuse: Unknown parameter 'user_i00000000000000000000' [ 1245.420714][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 1245.424325][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.429369][ T60] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1245.433446][ T60] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1245.440278][ T60] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1245.444743][ T60] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1245.452375][ T60] usb 5-1: Product: syz [ 1245.454723][ T60] usb 5-1: Manufacturer: syz [ 1245.457186][ T60] usb 5-1: SerialNumber: syz [ 1245.480279][ T60] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input30 [ 1245.841058][ T60] usb 5-1: USB disconnect, device number 13 [ 1245.891857][ T60] appletouch 5-1:1.0: input: appletouch disconnected [ 1246.328491][T22616] mkiss: ax0: crc mode is auto. [ 1246.373858][T22616] fuse: Invalid rootmode [ 1246.381889][T22619] fuse: Invalid rootmode [ 1246.597902][T22629] mkiss: ax0: crc mode is auto. [ 1246.603232][T22629] fuse: Unknown parameter 'use00000000000000000000' [ 1246.614883][T22628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3576'. [ 1246.788391][T22637] mkiss: ax0: crc mode is auto. [ 1246.796987][T22637] fuse: Unknown parameter 'user_i00000000000000000000' [ 1246.836249][T22643] netlink: 'syz.4.3585': attribute type 30 has an invalid length. [ 1246.879135][T22641] mkiss: ax0: crc mode is auto. [ 1246.892037][T22641] fuse: Bad value for 'rootmode' [ 1246.957136][T22647] mkiss: ax0: crc mode is auto. [ 1246.960510][T22647] fuse: Unknown parameter 'use00000000000000000000' [ 1247.301936][T22668] mkiss: ax0: crc mode is auto. [ 1247.304996][T22670] 9pnet_virtio: no channels available for device syz [ 1247.308971][T22668] fuse: Unknown parameter 'user_i00000000000000000000' [ 1247.477218][T22671] block device autoloading is deprecated and will be removed. [ 1247.483276][T22671] SQUASHFS error: Failed to read block 0x0: -5 [ 1247.541442][T22675] mkiss: ax0: crc mode is auto. [ 1247.545794][T22675] fuse: Bad value for 'rootmode' [ 1247.608146][T22679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3601'. [ 1247.690538][T22681] mkiss: ax0: crc mode is auto. [ 1247.698864][T22681] fuse: Bad value for 'fd' [ 1247.960232][T22686] mkiss: ax0: crc mode is auto. [ 1247.971516][T22686] fuse: Unknown parameter 'use00000000000000000000' [ 1248.130457][T22696] mkiss: ax0: crc mode is auto. [ 1248.167368][T22696] fuse: Unknown parameter 'user_i00000000000000000000' [ 1248.232010][T22701] fuse: Invalid rootmode [ 1248.373599][T22705] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1248.604354][T22711] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3613'. [ 1248.660978][T22712] netlink: 'syz.4.3609': attribute type 10 has an invalid length. [ 1248.851925][T22716] ubi: mtd0 is already attached to ubi31 [ 1249.041740][T22717] binder: BINDER_SET_CONTEXT_MGR already set [ 1249.044906][T22717] binder: 22713:22717 ioctl 4018620d 80004a80 returned -16 [ 1249.417227][T22723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3617'. [ 1249.449797][T22726] 9pnet_virtio: no channels available for device syz [ 1249.578197][T22727] SQUASHFS error: Failed to read block 0x0: -5 [ 1250.546240][T22730] mkiss: ax0: crc mode is auto. [ 1250.551388][T22730] fuse: Unknown parameter 'use00000000000000000000' [ 1250.657941][T22736] mkiss: ax0: crc mode is auto. [ 1250.663707][T22732] fuse: Invalid rootmode [ 1250.665212][T22736] fuse: Bad value for 'fd' [ 1250.816116][T22746] mkiss: ax0: crc mode is auto. [ 1250.834829][T22746] fuse: Unknown parameter 'user_id00000000000000000000' [ 1251.197190][T22762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3630'. [ 1251.969482][T22765] mkiss: ax0: crc mode is auto. [ 1251.975330][T22765] fuse: Unknown parameter 'user_i00000000000000000000' [ 1252.148884][T22773] mkiss: ax0: crc mode is auto. [ 1252.161613][T22773] fuse: Unknown parameter 'user_id00000000000000000000' [ 1252.244761][T22781] fuse: Unknown parameter 'user_id00000000000000000000' [ 1252.257222][T22780] mkiss: ax0: crc mode is auto. [ 1252.263185][T22780] fuse: Unknown parameter 'user_id00000000000000000000' [ 1252.315791][T22782] netlink: 'syz.4.3632': attribute type 10 has an invalid length. [ 1252.434446][T22786] ªªªªªª speed is unknown, defaulting to 1000 [ 1252.438198][T22786] wg2 speed is unknown, defaulting to 1000 [ 1252.689996][T22786] ªªªªªª speed is unknown, defaulting to 1000 [ 1253.012429][T22801] mkiss: ax0: crc mode is auto. [ 1253.021447][T22803] fuse: Unknown parameter 'user_id00000000000000000000' [ 1253.022798][T22801] fuse: Bad value for 'fd' [ 1253.156085][T22786] geneve1 speed is unknown, defaulting to 1000 [ 1253.339787][T22819] binder: BINDER_SET_CONTEXT_MGR already set [ 1253.342615][T22819] binder: 22808:22819 ioctl 4018620d 80004a80 returned -16 [ 1253.558325][T22826] mkiss: ax0: crc mode is auto. [ 1253.576940][T22826] fuse: Bad value for 'fd' [ 1253.697412][T22828] mkiss: ax0: crc mode is auto. [ 1253.704364][T22828] fuse: Unknown parameter 'use00000000000000000000' [ 1253.867144][T22832] mkiss: ax0: crc mode is auto. [ 1253.873620][T22832] fuse: Bad value for 'rootmode' [ 1254.010181][T22834] mkiss: ax0: crc mode is auto. [ 1254.015119][T22834] fuse: Unknown parameter '0x000000000000000d' [ 1254.212215][T22847] netlink: 'syz.4.3659': attribute type 10 has an invalid length. [ 1254.320495][T22850] mkiss: ax0: crc mode is auto. [ 1254.335849][T22850] fuse: Bad value for 'rootmode' [ 1254.508395][T22853] mkiss: ax0: crc mode is auto. [ 1254.515509][T22853] fuse: Unknown parameter 'use00000000000000000000' [ 1254.778693][T22861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.806251][T22861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.855373][T22863] netlink: 'syz.4.3672': attribute type 10 has an invalid length. [ 1254.861886][T22863] batman_adv: batadv0: Adding interface: wlan0 [ 1254.864439][T22863] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.872751][T22863] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 1254.988833][T22867] mkiss: ax0: crc mode is auto. [ 1255.005217][T22867] fuse: Unknown parameter 'user_i00000000000000000000' [ 1255.087356][T22869] mkiss: ax0: crc mode is auto. [ 1255.099972][T22869] fuse: Unknown parameter 'use00000000000000000000' [ 1255.241955][T22874] mkiss: ax0: crc mode is auto. [ 1255.247182][T22874] fuse: Unknown parameter 'user_i00000000000000000000' [ 1255.399460][T22884] ubi: mtd0 is already attached to ubi31 [ 1255.512947][T22888] mkiss: ax0: crc mode is auto. [ 1255.522921][T22890] fuse: Bad value for 'fd' [ 1255.523274][T22888] fuse: Unknown parameter 'user_id00000000000000000000' [ 1255.742429][T22897] binder: BINDER_SET_CONTEXT_MGR already set [ 1255.744591][T22897] binder: 22885:22897 ioctl 4018620d 80004a80 returned -16 [ 1255.759644][T22896] mkiss: ax0: crc mode is auto. [ 1255.772761][T22896] fuse: Unknown parameter 'use00000000000000000000' [ 1255.847774][T22902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3689'. [ 1255.902247][T22903] netlink: 'syz.1.3680': attribute type 10 has an invalid length. [ 1256.117698][T22915] ªªªªªª speed is unknown, defaulting to 1000 [ 1256.167516][T22915] wg2 speed is unknown, defaulting to 1000 [ 1256.373623][T22915] ªªªªªª speed is unknown, defaulting to 1000 [ 1256.582394][T22924] mkiss: ax0: crc mode is auto. [ 1256.586415][T22924] fuse: Unknown parameter '0x000000000000000d' [ 1256.719247][T22928] mkiss: ax0: crc mode is auto. [ 1256.727080][T22915] geneve1 speed is unknown, defaulting to 1000 [ 1256.741877][T22928] fuse: Unknown parameter 'user_i00000000000000000000' [ 1256.883497][T22930] mkiss: ax0: crc mode is auto. [ 1256.891044][T22930] fuse: Unknown parameter 'use00000000000000000000' [ 1256.975370][T22938] mkiss: ax0: crc mode is auto. [ 1256.983325][T22938] fuse: Bad value for 'fd' [ 1257.106862][T22947] usb usb8: usbfs: process 22947 (syz.4.3709) did not claim interface 0 before use [ 1257.201036][T22954] openvswitch: netlink: IP tunnel dst address not specified [ 1257.263614][T22959] mkiss: ax0: crc mode is auto. [ 1257.270018][T22958] fuse: Unknown parameter '0x000000000000000d' [ 1257.275456][T22959] fuse: Unknown parameter 'user_i00000000000000000000' [ 1257.397386][T22972] comedi comedi0: rti802: I/O port conflict (0x6,4) [ 1257.798157][T23005] mkiss: ax0: crc mode is auto. [ 1257.814061][T23005] fuse: Unknown parameter '0x000000000000000d' [ 1257.849314][T23009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1258.032820][T23020] mkiss: ax0: crc mode is auto. [ 1258.047773][T23020] fuse: Bad value for 'fd' [ 1258.341507][T23028] mkiss: ax0: crc mode is auto. [ 1258.353150][T23028] fuse: Unknown parameter '0x000000000000000d' [ 1258.542318][T23035] mkiss: ax0: crc mode is auto. [ 1258.557129][T23035] fuse: Unknown parameter '0x000000000000000d' [ 1258.817868][T23042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3753'. [ 1259.466904][T23046] mkiss: ax0: crc mode is auto. [ 1259.488232][T23046] fuse: Unknown parameter 'user_i00000000000000000000' [ 1259.674578][T23052] mkiss: ax0: crc mode is auto. [ 1259.687346][T23052] fuse: Unknown parameter '0x000000000000000d' [ 1259.693012][T23056] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3757'. [ 1259.822429][T23060] mkiss: ax0: crc mode is auto. [ 1259.828153][T23060] fuse: Unknown parameter '0x000000000000000d' [ 1260.112148][T23070] mkiss: ax0: crc mode is auto. [ 1260.123673][T23070] fuse: Unknown parameter 'fd0x000000000000000d' [ 1260.241923][T23078] mkiss: ax0: crc mode is auto. [ 1260.246513][T23076] fuse: Unknown parameter 'user_id00000000000000000000' [ 1260.247562][T23078] fuse: Unknown parameter '0x000000000000000d' [ 1260.693317][T23102] mkiss: ax0: crc mode is auto. [ 1260.697365][T23102] fuse: Unknown parameter 'user_id00000000000000000000' [ 1260.701460][T23104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3781'. [ 1260.708900][T23104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3781'. [ 1260.933376][T23114] mkiss: ax0: crc mode is auto. [ 1260.950389][T23114] fuse: Unknown parameter '0x000000000000000d' [ 1261.289435][T23127] netlink: 'syz.0.3788': attribute type 10 has an invalid length. [ 1261.997175][T23142] mkiss: ax0: crc mode is auto. [ 1262.008038][T23142] fuse: Bad value for 'fd' [ 1262.136014][T23145] mkiss: ax0: crc mode is auto. [ 1262.158791][T23145] fuse: Unknown parameter 'fd0x000000000000000d' [ 1262.504682][T23152] mkiss: ax0: crc mode is auto. [ 1262.517231][T23152] fuse: Unknown parameter 'user_id00000000000000000000' [ 1262.668010][T23153] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1262.671315][T23153] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1262.707030][T23159] mkiss: ax0: crc mode is auto. [ 1262.723197][T23153] vhci_hcd vhci_hcd.0: Device attached [ 1262.723585][T23159] fuse: Bad value for 'fd' [ 1262.852679][ T40] audit: type=1800 audit(1262.723:1787): pid=23153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3799" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1262.930730][T23168] ªªªªªª speed is unknown, defaulting to 1000 [ 1262.934431][T23168] wg2 speed is unknown, defaulting to 1000 [ 1263.080750][ T5947] usb 38-1: SetAddress Request (90) to port 0 [ 1263.083259][ T5947] usb 38-1: new SuperSpeed USB device number 90 using vhci_hcd [ 1263.095298][T23171] mkiss: ax0: crc mode is auto. [ 1263.113405][T23171] fuse: Bad value for 'fd' [ 1263.116240][T18417] Bluetooth: hci4: Frame reassembly failed (-84) [ 1263.374207][T23174] mkiss: ax0: crc mode is auto. [ 1263.383159][T23176] comedi comedi0: dt2801: I/O port conflict (0x3,2) [ 1263.384684][T23174] fuse: Unknown parameter '0x000000000000000d' [ 1263.501048][T23168] ªªªªªª speed is unknown, defaulting to 1000 [ 1263.549029][T23182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3812'. [ 1263.614856][T23186] mkiss: ax0: crc mode is auto. [ 1263.619405][T23186] fuse: Bad value for 'fd' [ 1263.753816][T23192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3817'. [ 1263.788877][T23168] geneve1 speed is unknown, defaulting to 1000 [ 1263.974835][T23202] mkiss: ax0: crc mode is auto. [ 1263.978377][T23204] fuse: Unknown parameter 'fd0x000000000000000d' [ 1265.170788][T15212] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1265.243842][T23154] vhci_hcd: connection reset by peer [ 1265.255324][T20254] vhci_hcd vhci_hcd.0: stop threads [ 1265.257261][T20254] vhci_hcd vhci_hcd.0: release socket [ 1265.266192][T20254] vhci_hcd vhci_hcd.0: disconnect device [ 1265.744230][T23230] mkiss: ax0: crc mode is auto. [ 1265.834598][T23234] fuse: Unknown parameter 'fd0x000000000000000d' [ 1266.083088][T23248] netlink: 'syz.4.3839': attribute type 3 has an invalid length. [ 1266.085760][T23248] netlink: 118428 bytes leftover after parsing attributes in process `syz.4.3839'. [ 1266.290447][T23257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3843'. [ 1266.376131][T23258] netlink: 'syz.3.3841': attribute type 10 has an invalid length. [ 1266.389866][T23258] team0: Port device dummy0 added [ 1266.592363][T23265] ªªªªªª speed is unknown, defaulting to 1000 [ 1266.596471][T23265] wg2 speed is unknown, defaulting to 1000 [ 1266.843960][T23265] ªªªªªª speed is unknown, defaulting to 1000 [ 1266.962261][T23265] geneve1 speed is unknown, defaulting to 1000 [ 1267.593619][T23281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3850'. [ 1267.597656][T23281] batman_adv: batadv0: Removing interface: wlan0 [ 1267.850931][T23287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3853'. [ 1268.140865][ T5947] usb 38-1: device descriptor read/8, error -110 [ 1268.411912][T23317] mkiss: ax0: crc mode is auto. [ 1268.416118][T23317] fuse: Unknown parameter '0x000000000000000d' [ 1268.474798][T23321] bond2: (slave bond_slave_1): Device is not bonding slave [ 1268.477177][T23321] bond2: option active_slave: invalid value (bond_slave_1) [ 1268.481059][T23321] bond2 (unregistering): Released all slaves [ 1268.529483][T23324] macsec1: entered promiscuous mode [ 1268.531788][T23324] macsec1: entered allmulticast mode [ 1268.541203][ T5947] usb usb38-port1: attempt power cycle [ 1269.070175][T23349] mkiss: ax0: crc mode is auto. [ 1269.191713][ T5947] usb usb38-port1: unable to enumerate USB device [ 1269.429378][T23358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 1269.900798][T20400] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1270.062860][T20400] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1270.067183][T20400] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1270.071805][T20400] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1270.075791][T20400] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1270.079669][T20400] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1270.085858][T20400] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1270.089234][T20400] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.092626][T20400] usb 6-1: Product: syz [ 1270.094201][T20400] usb 6-1: Manufacturer: syz [ 1270.095785][T20400] usb 6-1: SerialNumber: syz [ 1270.099999][T20400] usb 6-1: config 0 descriptor?? [ 1270.103547][T23368] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1270.110438][T20400] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input31 [ 1270.126112][ C2] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 1270.422596][ T5947] usb 6-1: USB disconnect, device number 15 [ 1270.604854][T23376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3890'. [ 1271.002764][T23394] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 1271.027962][T23396] mkiss: ax0: crc mode is auto. [ 1271.035354][T23396] fuse: Unknown parameter '0x000000000000000d' [ 1271.270782][T23407] mkiss: ax0: crc mode is auto. [ 1272.098594][T23417] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1272.640370][T23445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1272.644508][T23445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1273.359372][T23450] mkiss: ax0: crc mode is auto. [ 1273.584659][T23454] bond3: (slave bond_slave_1): Device is not bonding slave [ 1273.587130][T23454] bond3: option active_slave: invalid value (bond_slave_1) [ 1273.594509][T23454] bond3 (unregistering): Released all slaves [ 1274.156932][T23469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.161527][T23469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.903600][T23484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3933'. [ 1275.129010][T23489] mkiss: ax0: crc mode is auto. [ 1275.665766][T23499] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1275.668671][T23499] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1275.672193][T23499] vhci_hcd vhci_hcd.0: Device attached [ 1275.744974][ T40] audit: type=1800 audit(1275.623:1788): pid=23499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3939" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1275.950791][ T54] usb 46-1: SetAddress Request (26) to port 0 [ 1275.953312][ T54] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1276.019115][ T6098] Bluetooth: hci4: Frame reassembly failed (-84) [ 1276.021732][ T6098] Bluetooth: hci4: Frame reassembly failed (-84) [ 1276.181038][T23509] xt_limit: Overflow, try lower: 271964/0 [ 1276.710769][T14884] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1276.860924][T14884] usb 6-1: Using ep0 maxpacket: 16 [ 1276.866185][T14884] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1276.869363][T14884] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1276.872474][T14884] usb 6-1: Product: syz [ 1276.874143][T14884] usb 6-1: Manufacturer: syz [ 1276.875871][T14884] usb 6-1: SerialNumber: syz [ 1276.879018][T14884] usb 6-1: config 0 descriptor?? [ 1277.232172][T22211] usb 6-1: USB disconnect, device number 16 [ 1277.506217][T23545] mkiss: ax0: crc mode is auto. [ 1277.593536][T23548] ªªªªªª speed is unknown, defaulting to 1000 [ 1277.598356][T23548] wg2 speed is unknown, defaulting to 1000 [ 1277.715043][T23548] ªªªªªª speed is unknown, defaulting to 1000 [ 1277.903130][T23548] geneve1 speed is unknown, defaulting to 1000 [ 1278.050847][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1278.050915][T15212] Bluetooth: hci4: command 0x1003 tx timeout [ 1278.076869][T23500] vhci_hcd: connection reset by peer [ 1278.079136][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1278.081605][ T13] vhci_hcd vhci_hcd.4: release socket [ 1278.084173][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1279.139684][T23591] netlink: 'syz.1.3973': attribute type 10 has an invalid length. [ 1280.647958][T23607] mkiss: ax0: crc mode is auto. [ 1280.797557][T23615] ªªªªªª speed is unknown, defaulting to 1000 [ 1280.818512][T23615] wg2 speed is unknown, defaulting to 1000 [ 1280.928381][T23621] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1280.931467][T23621] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1280.936367][T23621] vhci_hcd vhci_hcd.0: Device attached [ 1281.022190][ T54] usb 46-1: device descriptor read/8, error -110 [ 1281.055048][ T40] audit: type=1800 audit(1280.933:1789): pid=23621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3978" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1281.230874][T22211] usb 44-1: SetAddress Request (107) to port 0 [ 1281.233471][T22211] usb 44-1: new SuperSpeed USB device number 107 using vhci_hcd [ 1281.261335][ T6125] Bluetooth: hci4: Frame reassembly failed (-84) [ 1281.266156][ T6125] Bluetooth: hci4: Frame reassembly failed (-84) [ 1281.268397][ T6125] Bluetooth: hci4: Frame reassembly failed (-84) [ 1281.270772][ T5947] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1281.277368][ T6125] Bluetooth: hci4: Frame reassembly failed (-84) [ 1281.289533][ T6125] Bluetooth: hci4: Frame reassembly failed (-84) [ 1281.353220][T23615] ªªªªªª speed is unknown, defaulting to 1000 [ 1281.431668][ T54] usb usb46-port1: attempt power cycle [ 1281.441194][ T5947] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1281.444002][ T5947] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.447787][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1281.451158][ T5947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1281.456796][ T5947] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1281.460472][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1281.463879][ T5947] usb 5-1: Product: syz [ 1281.465620][ T5947] usb 5-1: Manufacturer: syz [ 1281.478986][ T5947] cdc_wdm 5-1:1.0: skipping garbage [ 1281.481293][ T5947] cdc_wdm 5-1:1.0: skipping garbage [ 1281.489091][ T5947] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1281.491498][ T5947] cdc_wdm 5-1:1.0: Unknown control protocol [ 1281.544563][T23615] geneve1 speed is unknown, defaulting to 1000 [ 1281.655484][T23628] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 0, id = 0 [ 1281.699948][T14884] usb 5-1: USB disconnect, device number 14 [ 1281.992395][ T54] usb usb46-port1: unable to enumerate USB device [ 1283.330824][T15212] Bluetooth: hci4: command 0x1003 tx timeout [ 1283.331387][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1283.373882][T23622] vhci_hcd: connection reset by peer [ 1283.377346][ T6098] vhci_hcd vhci_hcd.3: stop threads [ 1283.379173][ T6098] vhci_hcd vhci_hcd.3: release socket [ 1283.381572][ T6098] vhci_hcd vhci_hcd.3: disconnect device [ 1284.479410][T23664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1284.632522][T23688] ªªªªªª speed is unknown, defaulting to 1000 [ 1284.638177][T23688] wg2 speed is unknown, defaulting to 1000 [ 1284.893396][T23688] ªªªªªª speed is unknown, defaulting to 1000 [ 1285.074505][T23688] geneve1 speed is unknown, defaulting to 1000 [ 1285.313492][T23700] mkiss: ax0: crc mode is auto. [ 1285.357146][T23701] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1285.359558][T23701] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1285.364408][T23701] vhci_hcd vhci_hcd.0: Device attached [ 1285.587992][ T6125] Bluetooth: hci4: Frame reassembly failed (-84) [ 1285.591457][ T6125] Bluetooth: hci4: Frame reassembly failed (-84) [ 1285.630792][ T54] usb 40-1: SetAddress Request (115) to port 0 [ 1285.632958][ T54] usb 40-1: new SuperSpeed USB device number 115 using vhci_hcd [ 1286.300833][T22211] usb 44-1: device descriptor read/8, error -110 [ 1286.721756][T22211] usb usb44-port1: attempt power cycle [ 1287.282643][T22211] usb usb44-port1: unable to enumerate USB device [ 1287.560767][T14884] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1287.600441][T23761] mkiss: ax0: crc mode is auto. [ 1287.651250][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1287.680396][T23702] vhci_hcd: connection reset by peer [ 1287.684079][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1287.686088][ T13] vhci_hcd vhci_hcd.1: release socket [ 1287.688158][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1287.712876][T14884] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1287.716405][T14884] usb 5-1: config 0 has no interface number 0 [ 1287.718881][T14884] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1287.723381][T14884] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 64 [ 1287.727427][T14884] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1287.735129][T14884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.746310][T14884] usb 5-1: config 0 descriptor?? [ 1287.749292][T23756] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1287.760187][T14884] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1287.962833][T14884] usb 5-1: USB disconnect, device number 15 [ 1289.365591][T23787] mkiss: ax0: crc mode is auto. [ 1289.461582][T23790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.465309][T23790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.044995][T23803] netlink: 'syz.3.4046': attribute type 1 has an invalid length. [ 1290.313056][T23808] ªªªªªª speed is unknown, defaulting to 1000 [ 1290.317011][T23808] wg2 speed is unknown, defaulting to 1000 [ 1290.453503][T23808] ªªªªªª speed is unknown, defaulting to 1000 [ 1290.627975][T23808] geneve1 speed is unknown, defaulting to 1000 [ 1290.700094][ T54] usb 40-1: device descriptor read/8, error -110 [ 1291.121555][ T54] usb usb40-port1: attempt power cycle [ 1291.333096][T23831] mkiss: ax0: crc mode is auto. [ 1291.480827][T21951] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1291.608838][T23837] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4058'. [ 1291.642979][T21951] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1291.647771][T21951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.653979][T21951] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1291.657745][T21951] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1291.661527][T21951] usb 6-1: Manufacturer: syz [ 1291.665713][T21951] usb 6-1: config 0 descriptor?? [ 1291.701530][ T54] usb usb40-port1: unable to enumerate USB device [ 1291.720924][T21951] rc_core: IR keymap rc-hauppauge not found [ 1291.723974][T21951] Registered IR keymap rc-empty [ 1291.728019][T21951] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 1291.734903][T21951] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input32 [ 1291.879502][ T60] usb 6-1: USB disconnect, device number 17 [ 1293.121353][T23862] netlink: 'syz.1.4064': attribute type 10 has an invalid length. [ 1293.626695][T23869] hid-generic 0003:0627:0001.0005: pid 23869 passed too large report [ 1293.907477][T23883] mkiss: ax0: crc mode is auto. [ 1294.230928][T22492] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1294.462225][T22492] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.465434][T22492] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1294.468264][T22492] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1294.471582][T22492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.475781][T22492] usb 6-1: config 0 descriptor?? [ 1294.480433][T22492] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1294.483078][T22492] dvb-usb: bulk message failed: -22 (3/0) [ 1294.493518][T22492] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1294.503582][T22492] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1294.506353][T22492] usb 6-1: media controller created [ 1294.511385][T22492] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1294.523353][T22492] dvb-usb: bulk message failed: -22 (6/0) [ 1294.525369][T22492] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1294.537990][T23904] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1294.539057][T22492] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input33 [ 1294.540442][T23904] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1294.547633][T22492] dvb-usb: schedule remote query interval to 150 msecs. [ 1294.549757][T22492] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1294.565971][T23904] vhci_hcd vhci_hcd.0: Device attached [ 1294.686448][T23889] dvb-usb: bulk message failed: -22 (2/0) [ 1294.690505][T22492] usb 6-1: USB disconnect, device number 18 [ 1294.721259][T22492] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1294.950970][T21951] usb 38-1: SetAddress Request (94) to port 0 [ 1294.954501][T21951] usb 38-1: new SuperSpeed USB device number 94 using vhci_hcd [ 1295.268680][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 1295.561052][T23915] hid-generic 0003:0627:0001.0005: pid 23915 passed too large report [ 1295.762328][T23921] mkiss: ax0: crc mode is auto. [ 1296.774062][T23954] mkiss: ax0: crc mode is auto. [ 1297.045991][T23969] mkiss: ax0: crc mode is auto. [ 1297.263317][T23985] mkiss: ax0: crc mode is auto. [ 1297.330905][T15212] Bluetooth: hci4: command 0x1003 tx timeout [ 1297.335571][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1297.435565][T23905] vhci_hcd: connection reset by peer [ 1297.441044][ T13] vhci_hcd vhci_hcd.0: stop threads [ 1297.444395][ T13] vhci_hcd vhci_hcd.0: release socket [ 1297.450825][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 1297.527563][T23995] ªªªªªª speed is unknown, defaulting to 1000 [ 1297.531507][T23995] wg2 speed is unknown, defaulting to 1000 [ 1297.609261][T24001] usb usb5: usbfs: process 24001 (syz.3.4121) did not claim interface 0 before use [ 1297.742613][T24005] mkiss: ax0: crc mode is auto. [ 1297.835229][T23995] ªªªªªª speed is unknown, defaulting to 1000 [ 1298.091860][T23995] geneve1 speed is unknown, defaulting to 1000 [ 1299.055247][T24059] mkiss: ax0: crc mode is auto. [ 1299.446340][T24067] ªªªªªª speed is unknown, defaulting to 1000 [ 1299.492782][T24067] wg2 speed is unknown, defaulting to 1000 [ 1299.888313][T24067] ªªªªªª speed is unknown, defaulting to 1000 [ 1300.052289][T24099] netlink: 'syz.0.4161': attribute type 12 has an invalid length. [ 1300.060841][T21951] usb 38-1: device descriptor read/8, error -110 [ 1300.098250][T24101] mkiss: ax0: crc mode is auto. [ 1300.224591][T24067] geneve1 speed is unknown, defaulting to 1000 [ 1300.562178][T21951] usb usb38-port1: attempt power cycle [ 1301.200032][T21951] usb usb38-port1: unable to enumerate USB device [ 1301.914717][T24132] mkiss: ax0: crc mode is auto. [ 1302.349155][T24143] fuse: Bad value for 'rootmode' [ 1302.580800][T14884] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1302.750932][T14884] usb 6-1: Using ep0 maxpacket: 32 [ 1302.773897][T14884] usb 6-1: config 0 has no interfaces? [ 1302.782821][T14884] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1302.787024][T14884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.790438][T14884] usb 6-1: Product: syz [ 1302.793351][T14884] usb 6-1: Manufacturer: syz [ 1302.795048][T14884] usb 6-1: SerialNumber: syz [ 1302.805478][T14884] usb 6-1: config 0 descriptor?? [ 1303.010256][T22492] usb 6-1: USB disconnect, device number 19 [ 1303.447727][T24170] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1303.450548][T24170] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1303.454741][T24170] vhci_hcd vhci_hcd.0: Device attached [ 1303.609967][ T6125] Bluetooth: hci4: Frame reassembly failed (-84) [ 1303.740823][T22492] usb 46-1: SetAddress Request (30) to port 0 [ 1303.750503][T22492] usb 46-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1304.004542][T24185] mkiss: ax0: crc mode is auto. [ 1304.361320][T24192] ªªªªªª speed is unknown, defaulting to 1000 [ 1304.365528][T24192] wg2 speed is unknown, defaulting to 1000 [ 1304.545360][T24192] ªªªªªª speed is unknown, defaulting to 1000 [ 1304.719874][T24192] geneve1 speed is unknown, defaulting to 1000 [ 1304.960764][T21951] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 1305.126192][T21951] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1305.131488][T21951] usb 5-1: config 0 has no interface number 0 [ 1305.134543][T21951] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1305.139508][T21951] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1305.145825][T21951] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1305.151538][T21951] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1305.153727][T24202] mkiss: ax0: crc mode is auto. [ 1305.158366][T21951] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1305.162760][T24202] fuse: Unknown parameter 'user_i00000000000000000000' [ 1305.163556][T21951] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1305.171545][T21951] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1305.175620][T21951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.182258][T21951] usb 5-1: config 0 descriptor?? [ 1305.185947][T24197] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1305.189428][T24197] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1305.199831][T21951] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1305.411882][ T60] usb 5-1: USB disconnect, device number 16 [ 1305.433292][ T60] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1305.650889][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1305.650981][T15212] Bluetooth: hci4: command 0x1003 tx timeout [ 1305.676957][T24171] vhci_hcd: connection reset by peer [ 1305.679439][ T89] vhci_hcd vhci_hcd.4: stop threads [ 1305.682571][ T89] vhci_hcd vhci_hcd.4: release socket [ 1305.693338][ T89] vhci_hcd vhci_hcd.4: disconnect device [ 1306.184357][T24215] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1306.358101][T24224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.363399][T24224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.385049][T24226] mkiss: ax0: crc mode is auto. [ 1306.829836][T24236] mkiss: ax0: crc mode is auto. [ 1306.840959][T24236] fuse: Unknown parameter '0x000000000000000d' [ 1306.960901][ T54] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 1307.016170][T24239] mkiss: ax0: crc mode is auto. [ 1307.112830][ T54] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1307.115462][ T54] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1307.119200][ T54] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1307.124062][ T54] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1307.127809][ T54] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1307.133314][ T54] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1307.136314][ T54] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1307.143738][ T54] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1307.148993][ T54] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1307.162303][ T54] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1307.168648][ T54] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1307.173716][ T54] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1307.181535][ T54] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1307.186015][ T54] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1307.190198][ T54] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1307.206674][ T54] usb 5-1: string descriptor 0 read error: -22 [ 1307.208874][ T54] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1307.216529][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.238763][ T54] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1307.320944][T24247] fuse: Unknown parameter 'user_i00000000000000000000' [ 1307.437178][ T54] usb 5-1: USB disconnect, device number 17 [ 1307.833504][T24256] mkiss: ax0: crc mode is auto. [ 1307.837423][T24256] fuse: Unknown parameter 'user_id00000000000000000000' [ 1308.067969][T24269] mkiss: ax0: crc mode is auto. [ 1308.074264][T24269] fuse: Unknown parameter 'user_i00000000000000000000' [ 1308.423178][T24275] binder: BINDER_SET_CONTEXT_MGR already set [ 1308.425317][T24275] binder: 24271:24275 ioctl 4018620d 80004a80 returned -16 [ 1308.850879][T22492] usb 46-1: device descriptor read/8, error -110 [ 1309.084398][T24281] mkiss: ax0: crc mode is auto. [ 1309.144391][T24283] fuse: Unknown parameter 'user_id00000000000000000000' [ 1309.255100][T22492] usb usb46-port1: attempt power cycle [ 1309.286503][T24290] mkiss: ax0: crc mode is auto. [ 1309.296850][T24290] fuse: Unknown parameter 'fd0x000000000000000d' [ 1309.390259][T24294] mkiss: ax0: crc mode is auto. [ 1309.419276][T24296] ªªªªªª speed is unknown, defaulting to 1000 [ 1309.423473][T24296] wg2 speed is unknown, defaulting to 1000 [ 1309.456934][T24294] fuse: Unknown parameter 'user_i00000000000000000000' [ 1309.664019][T24296] ªªªªªª speed is unknown, defaulting to 1000 [ 1309.773940][T24296] geneve1 speed is unknown, defaulting to 1000 [ 1309.821344][T22492] usb usb46-port1: unable to enumerate USB device [ 1309.842520][T24307] binder: BINDER_SET_CONTEXT_MGR already set [ 1309.844651][T24307] binder: 24304:24307 ioctl 4018620d 80004a80 returned -16 [ 1310.228202][T24318] fuse: Bad value for 'group_id' [ 1310.231444][T24318] fuse: Bad value for 'group_id' [ 1310.350725][T21951] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1310.533635][T21951] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1310.537389][T21951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.563002][T21951] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1310.566593][T21951] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1310.570041][T21951] usb 6-1: Manufacturer: syz [ 1310.623845][T21951] usb 6-1: config 0 descriptor?? [ 1310.680779][T21951] rc_core: IR keymap rc-hauppauge not found [ 1310.690812][T21951] Registered IR keymap rc-empty [ 1310.697262][T21951] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 1310.712370][T21951] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input34 [ 1310.796918][T24323] mkiss: ax0: crc mode is auto. [ 1310.833303][T14884] usb 6-1: USB disconnect, device number 20 [ 1310.977652][T24326] fuse: Unknown parameter 'user_id00000000000000000000' [ 1311.021275][T24329] mkiss: ax0: crc mode is auto. [ 1311.995701][T24346] mkiss: ax0: crc mode is auto. [ 1312.197917][T24351] mkiss: ax0: crc mode is auto. [ 1312.204819][T24353] fuse: Unknown parameter 'user_id00000000000000000000' [ 1312.490810][T21951] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1312.650782][T21951] usb 6-1: Using ep0 maxpacket: 32 [ 1312.650944][T22492] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1312.655157][T21951] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1312.660230][T21951] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1312.665391][T21951] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1312.670140][T21951] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 59391, setting to 1024 [ 1312.676164][T21951] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1312.681736][T21951] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1312.686737][T21951] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1312.691029][T21951] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1312.695347][T21951] usb 6-1: Product: syz [ 1312.697454][T21951] usb 6-1: Manufacturer: syz [ 1312.699635][T21951] usb 6-1: SerialNumber: syz [ 1312.704249][T21951] usb 6-1: config 0 descriptor?? [ 1312.707305][T24355] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1312.712460][T21951] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1312.719745][T21951] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1312.802591][T22492] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.805981][T22492] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1312.809121][T22492] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1312.814105][T22492] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.818418][T22492] usb 5-1: config 0 descriptor?? [ 1312.822634][T22492] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1312.824967][T22492] dvb-usb: bulk message failed: -22 (3/0) [ 1312.829755][T22492] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1312.834443][T22492] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1312.837342][T22492] usb 5-1: media controller created [ 1312.840555][T22492] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1312.851771][T22492] dvb-usb: bulk message failed: -22 (6/0) [ 1312.856207][T22492] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1312.862875][T22492] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input35 [ 1312.870558][T22492] dvb-usb: schedule remote query interval to 150 msecs. [ 1312.873092][T22492] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1313.030287][T24358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1313.034047][T22492] dvb-usb: bulk message failed: -22 (1/0) [ 1313.034842][T24358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.037095][T22492] dvb-usb: error while querying for an remote control event. [ 1313.044829][T21951] usb 5-1: USB disconnect, device number 18 [ 1313.064538][T21951] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1313.099249][T22492] usb 6-1: USB disconnect, device number 21 [ 1313.105031][T22492] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1313.601312][T24361] mkiss: ax0: crc mode is auto. [ 1313.819884][T24370] mkiss: ax0: crc mode is auto. [ 1313.990763][ T60] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 1314.103551][T24375] mkiss: ax0: crc mode is auto. [ 1314.162375][ T60] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1314.165248][ T60] usb 6-1: config 0 has no interface number 0 [ 1314.167392][ T60] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1314.171551][ T60] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1314.175132][ T60] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1314.179194][ T60] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1314.183308][ T60] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1314.187402][ T60] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1314.192294][ T60] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1314.195309][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.199546][ T60] usb 6-1: config 0 descriptor?? [ 1314.202476][T24368] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1314.205898][T24368] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1314.212550][ T60] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1314.282308][T24378] mkiss: ax0: crc mode is auto. [ 1314.366603][T24383] fuse: Bad value for 'fd' [ 1314.421653][ T6150] usb 6-1: USB disconnect, device number 22 [ 1314.429940][ T6150] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1314.488235][T24389] mkiss: ax0: crc mode is auto. [ 1314.720481][T24397] mkiss: ax0: crc mode is auto. [ 1314.766154][T24399] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1315.045033][T24413] mkiss: ax0: crc mode is auto. [ 1315.299884][T24417] mkiss: ax0: crc mode is auto. [ 1315.709756][T24431] mkiss: ax0: crc mode is auto. [ 1316.270772][T22492] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1316.423069][T22492] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1316.426019][T22492] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1316.430945][T22492] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1316.434080][T22492] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1316.436992][T22492] usb 5-1: Manufacturer: syz [ 1316.439993][T22492] usb 5-1: config 0 descriptor?? [ 1316.490828][T22492] rc_core: IR keymap rc-hauppauge not found [ 1316.492838][T22492] Registered IR keymap rc-empty [ 1316.496193][T22492] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 1316.506742][T22492] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input36 [ 1316.675165][ T6150] usb 5-1: USB disconnect, device number 19 [ 1316.920770][T22492] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1317.072395][T22492] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.075580][T22492] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1317.078543][T22492] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1317.081640][T22492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.086197][T22492] usb 6-1: config 0 descriptor?? [ 1317.090769][T22492] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1317.093445][T22492] dvb-usb: bulk message failed: -22 (3/0) [ 1317.098075][T22492] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1317.104210][T22492] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1317.107687][T22492] usb 6-1: media controller created [ 1317.110505][T22492] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1317.120147][T22492] dvb-usb: bulk message failed: -22 (6/0) [ 1317.122214][T22492] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1317.127071][T22492] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input37 [ 1317.132708][T22492] dvb-usb: schedule remote query interval to 150 msecs. [ 1317.135109][T22492] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1317.265209][T24451] mkiss: ax0: crc mode is auto. [ 1317.290756][T22492] dvb-usb: bulk message failed: -22 (1/0) [ 1317.293101][T22492] dvb-usb: error while querying for an remote control event. [ 1317.300261][T22492] usb 6-1: USB disconnect, device number 23 [ 1317.313331][T22492] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1317.494135][T24454] mkiss: ax0: crc mode is auto. [ 1317.766068][T24457] mkiss: ax0: crc mode is auto. [ 1318.723813][ T6150] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1318.870770][ T6150] usb 5-1: Using ep0 maxpacket: 8 [ 1318.874059][ T6150] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1318.877368][ T6150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.884219][ T6150] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1318.886530][ T6150] pvrusb2: ********** [ 1318.888259][ T6150] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1318.891666][ T6150] pvrusb2: Important functionality might not be entirely working. [ 1318.894445][ T6150] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1318.898543][ T6150] pvrusb2: ********** [ 1318.990769][T14884] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1319.090090][ T2483] pvrusb2: Invalid write control endpoint [ 1319.141219][T14884] usb 6-1: Using ep0 maxpacket: 16 [ 1319.145218][T14884] usb 6-1: config index 0 descriptor too short (expected 65, got 36) [ 1319.147550][ T2483] pvrusb2: Invalid write control endpoint [ 1319.148225][T14884] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1319.155950][T14884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 229, changing to 11 [ 1319.156561][ T2483] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1319.159503][T14884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 26495, setting to 1024 [ 1319.165447][ T2483] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1319.165462][ T2483] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1319.165472][ T2483] pvrusb2: Device being rendered inoperable [ 1319.168246][ T2483] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1319.171285][T14884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1319.174992][ T2483] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1319.176291][T14884] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1319.186987][ T2483] pvrusb2: Attached sub-driver cx25840 [ 1319.190998][T14884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.197907][ T2483] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1319.199839][T14884] usb 6-1: config 0 descriptor?? [ 1319.205150][T24489] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1319.208050][ T2483] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1319.210395][T14884] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input38 [ 1319.291493][T22492] usb 5-1: USB disconnect, device number 20 [ 1319.418654][T21951] usb 6-1: USB disconnect, device number 24 [ 1319.607059][T24496] mkiss: ax0: crc mode is auto. [ 1319.875228][T24507] mkiss: ax0: crc mode is auto. [ 1320.184957][T24529] mkiss: ax0: crc mode is auto. [ 1320.456187][T24537] mkiss: ax0: crc mode is auto. [ 1320.461104][T22492] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1320.611043][T22492] usb 6-1: Using ep0 maxpacket: 8 [ 1320.614528][T22492] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1320.618528][T22492] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1320.622903][T22492] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1320.628293][T22492] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1320.635195][T22492] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1320.638755][T22492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.697452][T24541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.701680][T24541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.853323][T22492] usb 6-1: GET_CAPABILITIES returned 0 [ 1320.855233][T22492] usbtmc 6-1:16.0: can't read capabilities [ 1321.062365][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1321.067318][T24532] usbtmc 6-1:16.0: Unable to send data, error -71 [ 1321.070158][T22492] usb 6-1: USB disconnect, device number 25 [ 1321.272046][T24546] mkiss: ax0: crc mode is auto. [ 1321.340817][T21951] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1321.491407][T21951] usb 5-1: Using ep0 maxpacket: 16 [ 1321.495449][T21951] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.499551][T21951] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1321.503778][T21951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.508422][T21951] usb 5-1: config 0 descriptor?? [ 1321.516087][T21951] input: bcm5974 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input39 [ 1321.638905][ T40] audit: type=1326 audit(1321.513:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 1321.647677][ T40] audit: type=1326 audit(1321.513:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 1321.654923][ T40] audit: type=1326 audit(1321.513:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 1321.662136][ T40] audit: type=1326 audit(1321.513:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1321.670486][ T40] audit: type=1326 audit(1321.513:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 1321.679567][ T40] audit: type=1326 audit(1321.513:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 1321.689344][ T40] audit: type=1326 audit(1321.513:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1321.698857][ T40] audit: type=1326 audit(1321.513:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1321.708732][ T40] audit: type=1326 audit(1321.513:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705d598 code=0x7ffc0000 [ 1321.718943][ T40] audit: type=1326 audit(1321.513:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24552 comm="syz.1.4312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 1321.720366][T21951] bcm5974 5-1:0.0: could not read from device [ 1321.724365][T24555] mkiss: ax0: crc mode is auto. [ 1321.747410][ T5332] bcm5974 5-1:0.0: could not read from device [ 1321.753758][T21951] input: failed to attach handler mousedev to device input39, error: -5 [ 1321.763096][ T5332] bcm5974 5-1:0.0: could not read from device [ 1321.767721][T21951] usb 5-1: USB disconnect, device number 21 [ 1321.770442][ T5332] bcm5974 5-1:0.0: could not read from device [ 1322.076784][T24564] input: syz1 as /devices/virtual/input/input40 [ 1322.467365][T24581] mkiss: ax0: crc mode is auto. [ 1322.796980][T24590] binder: BINDER_SET_CONTEXT_MGR already set [ 1322.798998][T24590] binder: 24572:24590 ioctl 4018620d 80004a80 returned -16 [ 1323.011296][T24604] mkiss: ax0: crc mode is auto. [ 1323.730542][T24616] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4336'. [ 1323.897692][T24624] binder: BINDER_SET_CONTEXT_MGR already set [ 1323.900399][T24624] binder: 24605:24624 ioctl 4018620d 80004a80 returned -16 [ 1324.066659][T24626] mkiss: ax0: crc mode is auto. [ 1324.420974][T24631] mkiss: ax0: crc mode is auto. [ 1324.764303][T24642] fuse: Unknown parameter '0x000000000000000d' [ 1325.487034][T24659] mkiss: ax0: crc mode is auto. [ 1325.768173][T24668] mkiss: ax0: crc mode is auto. [ 1325.775233][T24668] fuse: Unknown parameter 'fd0x000000000000000d' [ 1325.978097][T24672] mkiss: ax0: crc mode is auto. [ 1326.255529][T24682] mkiss: ax0: crc mode is auto. [ 1326.682054][T24691] binder: BINDER_SET_CONTEXT_MGR already set [ 1326.684932][T24691] binder: 24669:24691 ioctl 4018620d 80004a80 returned -16 [ 1326.697536][T24694] mkiss: ax0: crc mode is auto. [ 1327.606865][T24704] mkiss: ax0: crc mode is auto. [ 1327.612325][T24704] fuse: Unknown parameter 'fd0x000000000000000d' [ 1327.953041][T24714] binder: BINDER_SET_CONTEXT_MGR already set [ 1327.955100][T24714] binder: 24707:24714 ioctl 4018620d 80004a80 returned -16 [ 1328.240884][T21951] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1328.420881][T21951] usb 6-1: Using ep0 maxpacket: 16 [ 1328.425317][T21951] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.428901][T21951] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1328.435818][T21951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.448788][T21951] usb 6-1: config 0 descriptor?? [ 1328.482391][T21951] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input41 [ 1328.671648][ T5332] bcm5974 6-1:0.0: could not read from device [ 1328.683998][T21951] bcm5974 6-1:0.0: could not read from device [ 1328.688327][ T5332] bcm5974 6-1:0.0: could not read from device [ 1328.701329][T21951] input: failed to attach handler mousedev to device input41, error: -5 [ 1328.709032][ T5332] bcm5974 6-1:0.0: could not read from device [ 1328.710178][T21951] usb 6-1: USB disconnect, device number 26 [ 1328.782844][T24726] binder: BINDER_SET_CONTEXT_MGR already set [ 1328.785464][T24726] binder: 24721:24726 ioctl 4018620d 80004a80 returned -16 [ 1328.792260][T24725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1328.822938][T24729] mkiss: ax0: crc mode is auto. [ 1329.870817][T24751] mkiss: ax0: crc mode is auto. [ 1329.984769][T24760] fuse: Unknown parameter 'grou00000000000000000000' [ 1330.206830][T24770] mkiss: ax0: crc mode is auto. [ 1330.736935][T24781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1330.742061][T24781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1331.064137][T24787] mkiss: ax0: crc mode is auto. [ 1331.457104][T24795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4394'. [ 1331.460858][T24795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4394'. [ 1331.676627][T24804] mkiss: ax0: crc mode is auto. [ 1333.042993][T24841] binder: BINDER_SET_CONTEXT_MGR already set [ 1333.045056][T24841] binder: 24835:24841 ioctl 4018620d 80004a80 returned -16 [ 1333.259927][T24847] mkiss: ax0: crc mode is auto. [ 1333.472865][T24850] mkiss: ax0: crc mode is auto. [ 1333.742999][T24859] mkiss: ax0: crc mode is auto. [ 1334.604021][T24877] mkiss: ax0: crc mode is auto. [ 1334.947831][T24892] mkiss: ax0: crc mode is auto. [ 1335.665905][T24904] random: crng reseeded on system resumption [ 1336.250819][T22211] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1336.346444][T24916] mkiss: ax0: crc mode is auto. [ 1336.400897][T22211] usb 6-1: Using ep0 maxpacket: 16 [ 1336.405965][T22211] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1336.411877][T22211] usb 6-1: config 0 has no interface number 0 [ 1336.414859][T22211] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1336.419400][T22211] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1336.426906][T22211] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1336.431038][T22211] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1336.434616][T22211] usb 6-1: Product: syz [ 1336.436610][T22211] usb 6-1: SerialNumber: syz [ 1336.441413][T22211] usb 6-1: config 0 descriptor?? [ 1336.449757][T22211] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1336.466075][T22211] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input42 [ 1336.694970][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1336.700750][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1336.704110][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1336.707397][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1336.710861][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1336.714260][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1336.718295][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1336.723277][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1336.726503][T22211] usb 6-1: USB disconnect, device number 27 [ 1336.726599][ C2] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1336.732066][ C2] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1336.740240][T22211] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1336.807818][T24921] mkiss: ax0: crc mode is auto. [ 1336.815354][ T40] kauditd_printk_skb: 82 callbacks suppressed [ 1336.815375][ T40] audit: type=1326 audit(1336.693:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24922 comm="syz.0.4437" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 1336.830112][ T40] audit: type=1326 audit(1336.693:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24922 comm="syz.0.4437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 1336.840975][ T40] audit: type=1326 audit(1336.693:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24922 comm="syz.0.4437" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 1336.851892][ T40] audit: type=1326 audit(1336.693:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24922 comm="syz.0.4437" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 1336.861072][ T40] audit: type=1326 audit(1336.693:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24922 comm="syz.0.4437" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 1336.870456][ T40] audit: type=1326 audit(1336.693:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24922 comm="syz.0.4437" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 1336.879875][ T40] audit: type=1326 audit(1336.693:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24922 comm="syz.0.4437" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 1336.889700][ T40] audit: type=1326 audit(1336.693:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24922 comm="syz.0.4437" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 1336.898814][ T40] audit: type=1326 audit(1336.693:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24922 comm="syz.0.4437" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad598 code=0x7ffc0000 [ 1336.908355][ T40] audit: type=1326 audit(1336.693:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24922 comm="syz.0.4437" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 1337.007849][T24928] mkiss: ax0: crc mode is auto. [ 1337.854211][T24967] mkiss: ax0: crc mode is auto. [ 1338.133294][T24970] mkiss: ax0: crc mode is auto. [ 1338.469749][T24980] vivid-006: disconnect [ 1338.509237][T24981] netlink: 'syz.0.4455': attribute type 10 has an invalid length. [ 1338.826616][T24987] ªªªªªª speed is unknown, defaulting to 1000 [ 1338.829700][T24987] wg2 speed is unknown, defaulting to 1000 [ 1338.833536][T24989] trusted_key: encrypted_key: keyword 'loûÿÿÿÿÿÿÿlt' not recognized [ 1338.951865][T24987] ªªªªªª speed is unknown, defaulting to 1000 [ 1339.086797][T24987] geneve1 speed is unknown, defaulting to 1000 [ 1339.174981][T24997] mkiss: ax0: crc mode is auto. [ 1339.246365][T24978] vivid-006: reconnect [ 1339.380721][T21951] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1339.543224][T21951] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1339.546472][T21951] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1339.550121][T21951] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1339.553224][T21951] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1339.556903][T21951] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1339.562445][T21951] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1339.565588][T21951] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1339.568404][T21951] usb 5-1: Product: syz [ 1339.570011][T21951] usb 5-1: Manufacturer: syz [ 1339.577138][T21951] cdc_wdm 5-1:1.0: skipping garbage [ 1339.591590][T21951] cdc_wdm 5-1:1.0: skipping garbage [ 1339.595016][T21951] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1339.597005][T21951] cdc_wdm 5-1:1.0: Unknown control protocol [ 1339.650872][T18219] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 1339.796622][ T60] usb 5-1: USB disconnect, device number 22 [ 1339.812957][T18219] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1339.816869][T18219] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1339.826506][T18219] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1339.832953][T18219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.050137][T18219] usb 6-1: GET_CAPABILITIES returned 0 [ 1340.052490][T18219] usbtmc 6-1:16.0: can't read capabilities [ 1340.254674][T14884] usb 6-1: USB disconnect, device number 28 [ 1340.410805][T25019] raw_sendmsg: syz.0.4472 forgot to set AF_INET. Fix it! [ 1340.456576][T25023] mkiss: ax0: crc mode is auto. [ 1340.829503][T25033] mkiss: ax0: crc mode is auto. [ 1341.403029][T25043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1341.406729][T25043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.430756][T22211] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1341.582700][T22211] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1341.586829][T22211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.602414][T22211] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1341.607478][T22211] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1341.612353][T22211] usb 6-1: Manufacturer: syz [ 1341.619400][T22211] usb 6-1: config 0 descriptor?? [ 1341.690870][T22211] rc_core: IR keymap rc-hauppauge not found [ 1341.693537][T22211] Registered IR keymap rc-empty [ 1341.696052][T22211] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 1341.701834][T22211] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input43 [ 1341.845964][ T60] usb 6-1: USB disconnect, device number 29 [ 1341.906177][T25053] ªªªªªª speed is unknown, defaulting to 1000 [ 1341.981249][T25053] wg2 speed is unknown, defaulting to 1000 [ 1342.018792][T25058] mkiss: ax0: crc mode is auto. [ 1342.219669][T25065] 9pnet_virtio: no channels available for device syz [ 1342.339318][T25053] ªªªªªª speed is unknown, defaulting to 1000 [ 1342.591421][T25053] geneve1 speed is unknown, defaulting to 1000 [ 1343.105110][T25077] ªªªªªª speed is unknown, defaulting to 1000 [ 1343.108228][T25077] wg2 speed is unknown, defaulting to 1000 [ 1343.367905][T25077] ªªªªªª speed is unknown, defaulting to 1000 [ 1343.393779][T25083] mkiss: ax0: crc mode is auto. [ 1343.429244][T25085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.434430][T25085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.525624][T25077] geneve1 speed is unknown, defaulting to 1000 [ 1344.494194][T25099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.504212][T25099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.757076][T25102] fuse: Unknown parameter 'group_id00000000000000000000' [ 1345.111421][T25105] mkiss: ax0: crc mode is auto. [ 1345.506081][T25112] mkiss: ax0: crc mode is auto. [ 1345.880797][T14884] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1346.030751][T14884] usb 5-1: Using ep0 maxpacket: 32 [ 1346.036343][T14884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1346.046895][T14884] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1346.051382][T14884] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1346.055849][T14884] usb 5-1: Product: syz [ 1346.059264][T14884] usb 5-1: Manufacturer: syz [ 1346.064133][T14884] usb 5-1: SerialNumber: syz [ 1346.077842][T14884] usb 5-1: config 0 descriptor?? [ 1346.082699][T25115] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1346.087542][T14884] hub 5-1:0.0: bad descriptor, ignoring hub [ 1346.091087][T14884] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1346.341705][T25122] mkiss: ax0: crc mode is auto. [ 1346.412639][T22211] usb 5-1: USB disconnect, device number 23 [ 1347.430740][T22211] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1347.590814][T22211] usb 6-1: Using ep0 maxpacket: 8 [ 1347.594061][T22211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1347.597819][T22211] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1347.605761][T22211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.612038][T22211] usb 6-1: config 0 descriptor?? [ 1347.859709][T22211] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1348.094557][T25150] ªªªªªª speed is unknown, defaulting to 1000 [ 1348.097603][T25150] wg2 speed is unknown, defaulting to 1000 [ 1348.197810][T25150] ªªªªªª speed is unknown, defaulting to 1000 [ 1348.270116][T22211] usb 6-1: USB disconnect, device number 30 [ 1348.310174][T25150] geneve1 speed is unknown, defaulting to 1000 [ 1348.660041][T25157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.671504][T25157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.140739][T25162] netlink: 'syz.1.4517': attribute type 10 has an invalid length. [ 1349.286177][T25164] mkiss: ax0: crc mode is auto. [ 1349.598214][T25171] mkiss: ax0: crc mode is auto. [ 1350.726770][T25196] mkiss: ax0: crc mode is auto. [ 1350.875511][T25199] binder: BINDER_SET_CONTEXT_MGR already set [ 1350.877825][T25199] binder: 25191:25199 ioctl 4018620d 80004a80 returned -16 [ 1350.980064][T25201] mkiss: ax0: crc mode is auto. [ 1351.984673][T25237] ªªªªªª speed is unknown, defaulting to 1000 [ 1351.988448][T25237] wg2 speed is unknown, defaulting to 1000 [ 1352.305942][T25237] ªªªªªª speed is unknown, defaulting to 1000 [ 1352.459857][T25237] geneve1 speed is unknown, defaulting to 1000 [ 1352.463461][T25248] binder: BINDER_SET_CONTEXT_MGR already set [ 1352.465938][T25248] binder: 25243:25248 ioctl 4018620d 80004a80 returned -16 [ 1352.876656][T25260] mkiss: ax0: crc mode is auto. [ 1353.319794][T25270] mkiss: ax0: crc mode is auto. [ 1353.351142][T22211] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1353.512498][T22211] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1353.517500][T22211] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1353.521929][T22211] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1353.529107][T22211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.545243][T25264] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1353.558764][T22211] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1353.633273][T25275] mkiss: ax0: crc mode is auto. [ 1353.766976][T22211] usb 5-1: USB disconnect, device number 24 [ 1353.867457][T25284] mkiss: ax0: crc mode is auto. [ 1354.525540][T25292] mkiss: ax0: crc mode is auto. [ 1354.949638][T25299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.953822][T25299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.359285][T25305] mkiss: ax0: crc mode is auto. [ 1355.364804][T25307] sit0: entered promiscuous mode [ 1355.367682][T25307] netlink: 'syz.0.4561': attribute type 1 has an invalid length. [ 1355.371969][T25307] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4561'. [ 1356.072585][T25330] ªªªªªª speed is unknown, defaulting to 1000 [ 1356.076510][T25330] wg2 speed is unknown, defaulting to 1000 [ 1356.386115][T25330] ªªªªªª speed is unknown, defaulting to 1000 [ 1356.501122][T25334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1356.518227][T25334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1356.651826][T25330] geneve1 speed is unknown, defaulting to 1000 [ 1356.659976][T25338] binder: BINDER_SET_CONTEXT_MGR already set [ 1356.662156][T25338] binder: 25337:25338 ioctl 4018620d 80004a80 returned -16 [ 1356.836926][T25346] mkiss: ax0: crc mode is auto. [ 1357.102161][T25352] mkiss: ax0: crc mode is auto. [ 1357.601359][T22211] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1357.659660][T25363] mkiss: ax0: crc mode is auto. [ 1357.761713][T22211] usb 6-1: Using ep0 maxpacket: 8 [ 1357.766048][T22211] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1357.770218][T22211] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1357.774728][T22211] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1357.779258][T22211] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1357.784234][T22211] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1357.790390][T22211] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1357.794796][T22211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.939997][T25366] mkiss: ax0: crc mode is auto. [ 1358.033109][T22211] usb 6-1: GET_CAPABILITIES returned 0 [ 1358.035161][T22211] usbtmc 6-1:16.0: can't read capabilities [ 1358.122104][T25372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.125749][T25372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.237680][T21951] usb 6-1: USB disconnect, device number 31 [ 1359.011161][T25384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.014804][T25384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1359.149840][T25389] binder: BINDER_SET_CONTEXT_MGR already set [ 1359.152508][T25389] binder: 25376:25389 ioctl 4018620d 80004a80 returned -16 [ 1359.210842][T25388] mkiss: ax0: crc mode is auto. [ 1359.477105][T25392] mkiss: ax0: crc mode is auto. [ 1359.771637][T25401] mkiss: ax0: crc mode is auto. [ 1359.887973][T25408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.895956][T25406] ªªªªªª speed is unknown, defaulting to 1000 [ 1359.903075][T25406] wg2 speed is unknown, defaulting to 1000 [ 1359.903470][T25408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.041727][T25406] ªªªªªª speed is unknown, defaulting to 1000 [ 1360.182047][T25406] geneve1 speed is unknown, defaulting to 1000 [ 1360.958619][T25424] netlink: 'syz.3.4599': attribute type 10 has an invalid length. [ 1361.430782][ T6150] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1361.592294][ T6150] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1361.600777][ T6150] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1361.604188][ T6150] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1361.609483][ T6150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.621371][T25426] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1361.627782][ T6150] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1361.656514][T25428] mkiss: ax0: crc mode is auto. [ 1361.829652][T22211] usb 5-1: USB disconnect, device number 25 [ 1361.898847][T25431] mkiss: ax0: crc mode is auto. [ 1362.320526][T25447] mkiss: ax0: crc mode is auto. [ 1362.511922][T25452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.515950][T25452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.846769][T25457] netlink: 'syz.0.4609': attribute type 10 has an invalid length. [ 1363.004736][T25459] mkiss: ax0: crc mode is auto. [ 1363.425435][T25474] mkiss: ax0: crc mode is auto. [ 1363.450913][T22211] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1363.505951][T25479] binder: BINDER_SET_CONTEXT_MGR already set [ 1363.508956][T25479] binder: 25467:25479 ioctl 4018620d 80004a80 returned -16 [ 1363.600841][T22211] usb 6-1: Using ep0 maxpacket: 16 [ 1363.604793][T22211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.608786][T22211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.612336][T22211] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1363.617578][T22211] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1363.621874][T22211] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.627736][T22211] usb 6-1: config 0 descriptor?? [ 1363.710958][ T6150] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1363.872492][ T6150] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1363.875902][ T6150] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.879602][ T6150] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1363.882980][ T6150] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.887949][ T6150] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1363.894791][ T6150] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1363.897592][ T6150] usb 5-1: Product: syz [ 1363.898898][ T6150] usb 5-1: Manufacturer: syz [ 1363.907459][ T6150] cdc_wdm 5-1:1.0: skipping garbage [ 1363.909742][ T6150] cdc_wdm 5-1:1.0: skipping garbage [ 1363.913942][ T6150] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1363.916174][ T6150] cdc_wdm 5-1:1.0: Unknown control protocol [ 1364.045366][T22211] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 1364.047724][T22211] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 1364.050064][T22211] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 1364.054726][T22211] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 1364.057158][T22211] shield 0003:0955:7214.0008: unknown main item tag 0x0 [ 1364.069317][T22211] input: HID 0955:7214 Haptics as /devices/virtual/input/input44 [ 1364.091686][T22211] shield 0003:0955:7214.0008: Registered Thunderstrike controller [ 1364.094572][T22211] shield 0003:0955:7214.0008: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1364.252853][ T54] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1364.257581][T22492] usb 6-1: USB disconnect, device number 32 [ 1364.267886][ T54] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1364.279465][ T54] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1364.283426][ T54] shield 0003:0955:7214.0008: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1364.721112][ T6150] usb 5-1: USB disconnect, device number 26 [ 1364.898078][T25502] binder: BINDER_SET_CONTEXT_MGR already set [ 1364.900193][T25502] binder: 25496:25502 ioctl 4018620d 80004a80 returned -16 [ 1364.976872][T25504] mkiss: ax0: crc mode is auto. [ 1365.216869][T25511] mkiss: ax0: crc mode is auto. [ 1365.670874][T22492] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1365.698561][T25523] mkiss: ax0: crc mode is auto. [ 1365.830831][T22492] usb 6-1: Using ep0 maxpacket: 8 [ 1365.835077][T22492] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1365.838180][T22492] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1365.842965][T22492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.848599][T22492] usb 6-1: config 0 descriptor?? [ 1365.954147][T25529] mkiss: ax0: crc mode is auto. [ 1366.167590][T25536] mkiss: ax0: crc mode is auto. [ 1366.264251][T22492] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1366.441307][T25544] ªªªªªª speed is unknown, defaulting to 1000 [ 1366.444230][T25544] wg2 speed is unknown, defaulting to 1000 [ 1366.451711][T25546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.455334][T25546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1366.468109][T22492] usb 6-1: USB disconnect, device number 33 [ 1366.574662][T25544] ªªªªªª speed is unknown, defaulting to 1000 [ 1366.678893][T25544] geneve1 speed is unknown, defaulting to 1000 [ 1367.184741][T25557] mkiss: ax0: crc mode is auto. [ 1367.215724][T25559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.221838][T25559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.415037][T25562] mkiss: ax0: crc mode is auto. [ 1367.649457][T25565] mkiss: ax0: crc mode is auto. [ 1367.956409][T25573] mkiss: ax0: crc mode is auto. [ 1368.050087][T25578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.054061][T25578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.188976][T25585] mkiss: ax0: crc mode is auto. [ 1368.356041][T25591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4658'. [ 1368.360714][T25591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4658'. [ 1368.441175][T25593] mkiss: ax0: crc mode is auto. [ 1368.672421][T25604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.676812][T25604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.757174][T25609] mkiss: ax0: crc mode is auto. [ 1368.986424][T25613] mkiss: ax0: crc mode is auto. [ 1369.610818][ T60] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1369.750952][ T6150] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1369.760967][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 1369.765228][ T60] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1369.769523][ T60] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1369.774392][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1369.778596][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1369.783336][ T60] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1369.789354][ T60] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1369.792833][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.920795][ T6150] usb 6-1: Using ep0 maxpacket: 8 [ 1369.931928][ T6150] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1369.935612][ T6150] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1369.939378][ T6150] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1369.944501][ T6150] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1369.948890][ T6150] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1369.954409][ T6150] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1369.958579][ T6150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.006975][ T60] usb 5-1: usb_control_msg returned -32 [ 1370.011265][ T60] usbtmc 5-1:16.0: can't read capabilities [ 1370.167422][ T6150] usb 6-1: GET_CAPABILITIES returned 0 [ 1370.169242][ T6150] usbtmc 6-1:16.0: can't read capabilities [ 1370.338156][T25624] ªªªªªª speed is unknown, defaulting to 1000 [ 1370.342498][T25624] wg2 speed is unknown, defaulting to 1000 [ 1370.366092][T25625] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 1370.494526][T25624] ªªªªªª speed is unknown, defaulting to 1000 [ 1370.568095][ T6150] usb 5-1: USB disconnect, device number 27 [ 1370.651538][T25624] geneve1 speed is unknown, defaulting to 1000 [ 1370.882615][T25629] mkiss: ax0: crc mode is auto. [ 1370.889843][ T6150] usb 6-1: USB disconnect, device number 34 [ 1371.201920][T25637] syzkaller1: entered promiscuous mode [ 1371.204677][T25637] syzkaller1: entered allmulticast mode [ 1371.214553][T25635] mkiss: ax0: crc mode is auto. [ 1371.265409][T25639] netlink: 'syz.1.4673': attribute type 10 has an invalid length. [ 1371.623627][T25649] mkiss: ax0: crc mode is auto. [ 1371.807175][T25652] binder: BINDER_SET_CONTEXT_MGR already set [ 1371.809651][T25652] binder: 25646:25652 ioctl 4018620d 80004a80 returned -16 [ 1372.075141][T25662] hsr0: entered promiscuous mode [ 1372.077652][T25662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4684'. [ 1372.086913][T25662] hsr_slave_0: left promiscuous mode [ 1372.091016][T25662] hsr_slave_1: left promiscuous mode [ 1372.117496][T25662] hsr0 (unregistering): left promiscuous mode [ 1372.160773][ T6150] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1372.246896][T25664] mkiss: ax0: crc mode is auto. [ 1372.320902][ T6150] usb 5-1: Using ep0 maxpacket: 32 [ 1372.328808][ T6150] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1372.336684][ T6150] usb 5-1: config 255 has an invalid interface number: 81 but max is 0 [ 1372.340033][ T6150] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.343980][ T6150] usb 5-1: config 255 has no interface number 0 [ 1372.346435][ T6150] usb 5-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1372.350821][ T6150] usb 5-1: config 255 interface 81 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1372.355112][ T6150] usb 5-1: config 255 interface 81 has no altsetting 0 [ 1372.359863][ T6150] usb 5-1: string descriptor 0 read error: -22 [ 1372.361886][ T6150] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 1372.364613][ T6150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.377569][ T6150] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:255.81/input/input45 [ 1372.500856][T25673] mkiss: ax0: crc mode is auto. [ 1372.652210][ C2] usbtouchscreen 5-1:255.81: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1372.663480][T21951] usb 5-1: USB disconnect, device number 28 [ 1372.699766][T25683] mkiss: ax0: crc mode is auto. [ 1372.933448][T21951] hid-generic 000B:0003:0004.000A: unknown main item tag 0x0 [ 1372.936230][T21951] hid-generic 000B:0003:0004.000A: unknown main item tag 0x0 [ 1372.938998][T21951] hid-generic 000B:0003:0004.000A: unknown main item tag 0x0 [ 1372.942275][T21951] hid-generic 000B:0003:0004.000A: unknown main item tag 0x0 [ 1372.945746][T21951] hid-generic 000B:0003:0004.000A: unknown main item tag 0x0 [ 1372.948979][T21951] hid-generic 000B:0003:0004.000A: unknown main item tag 0x0 [ 1372.952453][T21951] hid-generic 000B:0003:0004.000A: unknown main item tag 0x0 [ 1372.955592][T21951] hid-generic 000B:0003:0004.000A: unknown main item tag 0x0 [ 1372.958381][T21951] hid-generic 000B:0003:0004.000A: unknown main item tag 0x0 [ 1372.961815][T21951] hid-generic 000B:0003:0004.000A: unknown main item tag 0x0 [ 1372.969389][T21951] hid-generic 000B:0003:0004.000A: hidraw1: HID v0.00 Device [syz1] on syz1 [ 1373.035685][T25694] fido_id[25694]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1373.279713][T22492] hid-generic 0000:3000000:0000.000B: hidraw1: HID v0.00 Device [sy] on syz0 [ 1373.329314][T25703] fido_id[25703]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1373.422806][T25705] mkiss: ax0: crc mode is auto. [ 1373.681573][T25708] mkiss: ax0: crc mode is auto. [ 1373.953560][T25713] mkiss: ax0: crc mode is auto. [ 1373.979015][T25715] netlink: 'syz.3.4704': attribute type 1 has an invalid length. [ 1374.050973][ T6150] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1374.204099][ T6150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1374.209186][ T6150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1374.217246][ T6150] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1374.223833][ T6150] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1374.228101][ T6150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.234536][ T6150] usb 6-1: config 0 descriptor?? [ 1374.406612][T25727] mkiss: ax0: crc mode is auto. [ 1374.440884][ T29] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1374.590851][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 1374.596349][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1374.600330][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.604235][ T29] usb 5-1: Product: syz [ 1374.606368][ T29] usb 5-1: Manufacturer: syz [ 1374.608566][ T29] usb 5-1: SerialNumber: syz [ 1374.634641][T25730] mkiss: ax0: crc mode is auto. [ 1374.654380][ T6150] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xe [ 1374.669190][ T6150] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1374.821975][ T29] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1374.881975][T25734] mkiss: ax0: crc mode is auto. [ 1374.931990][T21951] usb 6-1: USB disconnect, device number 35 [ 1375.185334][T25738] ªªªªªª speed is unknown, defaulting to 1000 [ 1375.188595][T25738] wg2 speed is unknown, defaulting to 1000 [ 1375.287831][T25738] ªªªªªª speed is unknown, defaulting to 1000 [ 1375.404261][T25738] geneve1 speed is unknown, defaulting to 1000 [ 1375.578595][T25744] fuse: Bad value for 'rootmode' [ 1376.501719][T25753] mkiss: ax0: crc mode is auto. [ 1377.032147][T25768] mkiss: ax0: crc mode is auto. [ 1377.120791][ T6150] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1377.225402][ T29] usb 5-1: USB disconnect, device number 29 [ 1377.230564][ T29] usblp1: removed [ 1377.275668][ T6150] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1377.281176][ T6150] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1377.288195][ T6150] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1377.293629][ T6150] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1377.299597][ T6150] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1377.308043][ T6150] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1377.312942][ T6150] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1377.316677][ T6150] usb 6-1: Product: syz [ 1377.318853][ T6150] usb 6-1: Manufacturer: syz [ 1377.335342][ T6150] cdc_wdm 6-1:1.0: skipping garbage [ 1377.340977][ T6150] cdc_wdm 6-1:1.0: skipping garbage [ 1377.344283][ T6150] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1377.350999][ T6150] cdc_wdm 6-1:1.0: Unknown control protocol [ 1377.407969][T25776] fuse: Bad value for 'rootmode' [ 1378.298476][T18219] usb 6-1: USB disconnect, device number 36 [ 1378.604425][T25798] mkiss: ax0: crc mode is auto. [ 1379.003320][T25807] ªªªªªª speed is unknown, defaulting to 1000 [ 1379.006361][T25807] wg2 speed is unknown, defaulting to 1000 [ 1379.108748][T25807] ªªªªªª speed is unknown, defaulting to 1000 [ 1379.191293][T25807] geneve1 speed is unknown, defaulting to 1000 [ 1380.598010][T25820] fuse: Bad value for 'rootmode' [ 1380.692200][T25823] mkiss: ax0: crc mode is auto. [ 1380.984069][T25828] ªªªªªª speed is unknown, defaulting to 1000 [ 1380.987606][T25828] wg2 speed is unknown, defaulting to 1000 [ 1381.102776][T25828] ªªªªªª speed is unknown, defaulting to 1000 [ 1381.212219][T25828] geneve1 speed is unknown, defaulting to 1000 [ 1381.626790][T25841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1381.642888][T25843] mkiss: ax0: crc mode is auto. [ 1382.063362][T25867] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1382.067169][T25867] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1382.180059][T25874] mkiss: ax0: crc mode is auto. [ 1382.749003][T25890] mkiss: ax0: crc mode is auto. [ 1383.106894][T25899] binder: BINDER_SET_CONTEXT_MGR already set [ 1383.106905][T25899] binder: 25891:25899 ioctl 4018620d 80004a80 returned -16 [ 1383.492136][T25908] mkiss: ax0: crc mode is auto. [ 1383.878132][T25918] binder: BINDER_SET_CONTEXT_MGR already set [ 1383.880202][T25918] binder: 25904:25918 ioctl 4018620d 80004a80 returned -16 [ 1384.085616][T25926] mkiss: ax0: crc mode is auto. [ 1384.357008][T25936] tipc: Started in network mode [ 1384.359525][T25936] tipc: Node identity ac1414aa, cluster identity 4711 [ 1384.363555][T25936] tipc: Enabled bearer , priority 10 [ 1384.420989][T25938] mkiss: ax0: crc mode is auto. [ 1384.569093][T25944] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1384.572901][T25944] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 1384.600778][ T29] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1384.651752][T25946] mkiss: ax0: crc mode is auto. [ 1384.762239][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1384.766710][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1384.771614][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1384.775275][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1384.779491][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1384.782738][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.787477][ T29] usb 6-1: config 0 descriptor?? [ 1384.789841][T25935] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1385.106050][T25962] mkiss: ax0: crc mode is auto. [ 1385.196899][T25966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.202276][T25966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.207656][ T29] hid_parser_main: 25 callbacks suppressed [ 1385.207741][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1385.215323][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1385.219470][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1385.223386][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1385.226506][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1385.229598][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1385.232770][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1385.235445][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1385.238241][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1385.242158][ T29] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 1385.260429][ T29] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1385.349769][T25969] mkiss: ax0: crc mode is auto. [ 1385.473232][ T29] usb 6-1: USB disconnect, device number 37 [ 1385.480763][T20400] tipc: Node number set to 2886997162 [ 1385.777052][T25975] mkiss: ax0: crc mode is auto. [ 1386.044450][T25984] mkiss: ax0: crc mode is auto. [ 1386.273644][T25995] mkiss: ax0: crc mode is auto. [ 1386.438039][T26000] binder: BINDER_SET_CONTEXT_MGR already set [ 1386.440228][T26000] binder: 25990:26000 ioctl 4018620d 80004a80 returned -16 [ 1386.590793][T26002] mkiss: ax0: crc mode is auto. [ 1386.914475][T26019] binder: 26018:26019 ioctl c0306201 800003c0 returned -22 [ 1387.019593][T26024] mkiss: ax0: crc mode is auto. [ 1387.376049][T26033] mkiss: ax0: crc mode is auto. [ 1387.713163][T26048] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1387.718218][T26048] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1387.819343][T26053] syzkaller1: entered promiscuous mode [ 1387.821390][T26053] syzkaller1: entered allmulticast mode [ 1388.042228][T26060] mkiss: ax0: crc mode is auto. [ 1388.319323][T26066] netlink: 'syz.1.4832': attribute type 11 has an invalid length. [ 1389.010815][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1389.010834][T15212] Bluetooth: hci4: command 0x1003 tx timeout [ 1389.343679][T26088] mkiss: ax0: crc mode is auto. [ 1389.510749][T18219] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1389.539245][T26091] mkiss: ax0: crc mode is auto. [ 1389.662453][T18219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.667361][T18219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.671562][T18219] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1389.675528][T18219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.681169][T18219] usb 5-1: config 0 descriptor?? [ 1390.099292][T18219] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.000E/input/input46 [ 1390.120562][T18219] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 1390.233124][T26109] mkiss: ax0: crc mode is auto. [ 1390.299469][ T60] usb 5-1: USB disconnect, device number 30 [ 1391.032204][T26130] mkiss: ax0: crc mode is auto. [ 1391.299204][T26135] mkiss: ax0: crc mode is auto. [ 1391.357798][T26139] netlink: 'syz.0.4861': attribute type 10 has an invalid length. [ 1391.361228][T26139] netem: change failed [ 1391.560753][T26148] syzkaller1: entered promiscuous mode [ 1391.562731][T26148] syzkaller1: entered allmulticast mode [ 1391.599554][T15647] Bluetooth: hci4: Frame reassembly failed (-84) [ 1391.603701][T15647] Bluetooth: hci4: Frame reassembly failed (-84) [ 1391.676491][T26152] mkiss: ax0: crc mode is auto. [ 1391.708733][T26154] input: syz0 as /devices/virtual/input/input47 [ 1391.729063][T26156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4869'. [ 1391.732427][T26156] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4869'. [ 1391.735946][T26156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4869'. [ 1391.739818][T26156] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4869'. [ 1391.934196][T26165] input: syz1 as /devices/virtual/input/input48 [ 1391.936624][T26163] mkiss: ax0: crc mode is auto. [ 1392.550797][T18219] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1392.702710][T18219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.707446][T18219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.711863][T18219] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1392.717349][T18219] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1392.720799][T18219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.726035][T18219] usb 5-1: config 0 descriptor?? [ 1393.064743][T26181] mkiss: ax0: crc mode is auto. [ 1393.139444][T18219] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1393.351756][T26187] mkiss: ax0: crc mode is auto. [ 1393.650855][T15212] Bluetooth: hci4: command 0x1003 tx timeout [ 1393.650948][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1393.767045][T26194] mkiss: ax0: crc mode is auto. [ 1394.022149][T26206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.026140][T26206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.174871][T26210] ªªªªªª speed is unknown, defaulting to 1000 [ 1394.177898][T26210] wg2 speed is unknown, defaulting to 1000 [ 1394.284854][T26210] ªªªªªª speed is unknown, defaulting to 1000 [ 1394.344056][T18219] usb 5-1: USB disconnect, device number 31 [ 1394.410481][T26210] geneve1 speed is unknown, defaulting to 1000 [ 1394.841759][T26214] mkiss: ax0: crc mode is auto. [ 1395.035615][T26226] input: syz1 as /devices/virtual/input/input49 [ 1395.149243][T26230] mkiss: ax0: crc mode is auto. [ 1395.439942][T26245] mkiss: ax0: crc mode is auto. [ 1395.549093][T26254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1395.556302][T26254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1395.662886][T26256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4908'. [ 1395.985921][T26262] binder: BINDER_SET_CONTEXT_MGR already set [ 1395.988678][T26262] binder: 26259:26262 ioctl 4018620d 80004a80 returned -16 [ 1396.762181][T26284] fuse: Bad value for 'fd' [ 1397.157546][T26287] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4920'. [ 1397.320050][T26291] mkiss: ax0: crc mode is auto. [ 1397.452829][T26294] binder_alloc: binder_alloc_mmap_handler: 26293 80ffd000-80ffe000 already mapped failed -16 [ 1397.642932][ T40] kauditd_printk_skb: 98 callbacks suppressed [ 1397.642950][ T40] audit: type=1400 audit(1397.523:1990): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=26301 comm=FF [ 1397.728938][T26308] ªªªªªª speed is unknown, defaulting to 1000 [ 1397.732040][T26308] wg2 speed is unknown, defaulting to 1000 [ 1397.937219][T26308] ªªªªªª speed is unknown, defaulting to 1000 [ 1398.019968][T26308] geneve1 speed is unknown, defaulting to 1000 [ 1399.099978][T26335] mkiss: ax0: crc mode is auto. [ 1399.515808][T26355] input: syz1 as /devices/virtual/input/input50 [ 1399.770890][ T60] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1399.932335][ T60] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1399.937591][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1399.942572][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1399.946951][ T60] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1399.951919][ T60] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1399.955775][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.961433][ T60] usb 6-1: config 0 descriptor?? [ 1400.269325][T26376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.273362][T26376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.378238][ T60] hid_parser_main: 7 callbacks suppressed [ 1400.378254][ T60] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1400.395035][ T60] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1400.632804][ T60] usb 6-1: USB disconnect, device number 38 [ 1400.725623][T26379] mkiss: ax0: crc mode is auto. [ 1400.928288][T26384] input: syz1 as /devices/virtual/input/input52 [ 1401.215535][T26395] netlink: 'syz.1.4964': attribute type 3 has an invalid length. [ 1401.298769][T26400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.308005][T26400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1402.346119][T26417] block nbd1: shutting down sockets [ 1402.926570][T26437] binder: BINDER_SET_CONTEXT_MGR already set [ 1402.928744][T26437] binder: 26435:26437 ioctl 4018620d 80004a80 returned -16 [ 1403.171122][ T6150] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1403.334826][ T6150] usb 6-1: Using ep0 maxpacket: 8 [ 1403.338908][ T6150] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1403.344332][ T6150] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1403.349003][ T6150] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1403.354219][ T6150] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1403.359870][ T6150] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1403.373275][ T6150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1403.643638][ T6150] usb 6-1: GET_CAPABILITIES returned 0 [ 1403.645529][ T6150] usbtmc 6-1:16.0: can't read capabilities [ 1403.846085][ C2] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1403.858992][T22492] usb 6-1: USB disconnect, device number 39 [ 1403.861949][T26466] mkiss: ax0: crc mode is auto. [ 1404.651639][T26481] mkiss: ax0: crc mode is auto. [ 1405.440416][T26508] syzkaller1: entered promiscuous mode [ 1405.443103][T26508] syzkaller1: entered allmulticast mode [ 1405.636652][T26517] Bluetooth: hci0: unsupported parameter 255 [ 1405.639765][T26517] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1405.752759][T26519] kvm: user requested TSC rate below hardware speed [ 1405.875007][T26519] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1406.137385][T26529] 9p: Bad value for 'rfdno' [ 1406.466236][T26536] Bluetooth: hci0: invalid len left 7, exp >= 35 [ 1407.209363][T26546] mkiss: ax0: crc mode is auto. [ 1407.774889][ T6150] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1407.931036][ T6150] usb 6-1: Using ep0 maxpacket: 8 [ 1407.989967][ T6150] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1408.066417][ T6150] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1408.072361][ T6150] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1408.078556][ T6150] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1408.098174][ T6150] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1408.113457][ T6150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.430113][ T6150] usb 6-1: GET_CAPABILITIES returned 0 [ 1408.436131][ T6150] usbtmc 6-1:16.0: can't read capabilities [ 1408.636224][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.639841][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.645148][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.655124][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.688494][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.702184][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.738360][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.745948][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.751109][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.767027][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.776414][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.786022][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.797268][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.804471][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.818324][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1408.835507][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1408.842592][T21951] usb 6-1: USB disconnect, device number 40 [ 1408.953698][T26570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5028'. [ 1408.997255][T26570] netlink: 'syz.0.5028': attribute type 1 has an invalid length. [ 1409.004425][T26570] netlink: 'syz.0.5028': attribute type 2 has an invalid length. [ 1409.016743][T26570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5028'. [ 1409.111511][T26574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.126495][T26574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.252641][T26576] fuse: Unknown parameter '0x0000000000000003' [ 1410.383554][T26603] mkiss: ax0: crc mode is auto. [ 1411.515706][T26620] mkiss: ax0: crc mode is auto. [ 1412.256937][T21951] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1412.520362][T21951] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1412.538290][T21951] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1412.543431][T21951] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1412.560584][T21951] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 1412.571202][T21951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1412.577846][T21951] usb 6-1: Product: syz [ 1412.583718][T21951] usb 6-1: Manufacturer: syz [ 1412.587426][T21951] usb 6-1: SerialNumber: syz [ 1412.782050][ T5947] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1412.868164][T21951] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 41 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1412.970798][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 1412.976239][ T5947] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 1412.985494][ T5947] usb 5-1: config 0 has no interface number 0 [ 1412.988216][ T5947] usb 5-1: config 0 interface 186 has no altsetting 0 [ 1413.008524][ T5947] usb 5-1: New USB device found, idVendor=0499, idProduct=1000, bcdDevice=30.11 [ 1413.015121][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.019780][ T5947] usb 5-1: Product: syz [ 1413.023440][ T5947] usb 5-1: Manufacturer: syz [ 1413.026964][ T5947] usb 5-1: SerialNumber: syz [ 1413.058377][ T5947] usb 5-1: config 0 descriptor?? [ 1413.073143][ T5947] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1413.099889][ T6150] usb 6-1: USB disconnect, device number 41 [ 1413.122079][ T6150] usblp0: removed [ 1413.209233][ T5947] snd-usb-audio 5-1:0.186: probe with driver snd-usb-audio failed with error -2 [ 1413.219484][T21823] udevd[21823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.186/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1413.335051][T26637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1413.354106][T26637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1413.365821][ T5947] usb 5-1: USB disconnect, device number 32 [ 1413.412190][T26639] IPv4: Oversized IP packet from 127.202.26.0 [ 1414.286298][T26647] ªªªªªª speed is unknown, defaulting to 1000 [ 1414.292071][T26647] wg2 speed is unknown, defaulting to 1000 [ 1414.363682][T26649] mkiss: ax0: crc mode is auto. [ 1415.078121][T26657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1415.102366][T26657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1415.188926][T26647] ªªªªªª speed is unknown, defaulting to 1000 [ 1415.944964][T26647] geneve1 speed is unknown, defaulting to 1000 [ 1416.778195][T26679] netlink: 272 bytes leftover after parsing attributes in process `syz.3.5070'. [ 1418.588228][T26707] binder: BINDER_SET_CONTEXT_MGR already set [ 1418.591269][T26707] binder: 26706:26707 ioctl 4018620d 80004a80 returned -16 [ 1418.918213][T26717] ªªªªªª speed is unknown, defaulting to 1000 [ 1418.948314][T26717] wg2 speed is unknown, defaulting to 1000 [ 1419.922402][T26717] ªªªªªª speed is unknown, defaulting to 1000 [ 1420.250434][T26730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.259086][T26730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.279154][T26717] geneve1 speed is unknown, defaulting to 1000 [ 1421.670916][T26745] mkiss: ax0: crc mode is auto. [ 1423.155544][T26768] netlink: 'syz.0.5105': attribute type 1 has an invalid length. [ 1424.119485][T26779] mkiss: ax0: crc mode is auto. [ 1425.659826][T26812] mkiss: ax0: crc mode is auto. [ 1426.304249][T26821] binder: BINDER_SET_CONTEXT_MGR already set [ 1426.308449][T26821] binder: 26815:26821 ioctl 4018620d 80004a80 returned -16 [ 1426.404482][T26823] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5125'. [ 1427.667621][T26842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5132'. [ 1428.821350][T26864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5138'. [ 1429.425432][T26877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5142'. [ 1429.458160][T26879] input: syz0 as /devices/virtual/input/input53 [ 1430.987323][T26903] mkiss: ax0: crc mode is auto. [ 1431.138126][ T54] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1431.369579][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 1431.374007][ T54] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.378450][ T54] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1431.383636][ T54] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1431.388559][ T54] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1431.426015][ T54] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1431.443226][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.446675][ T54] usb 5-1: Product: syz [ 1431.448373][ T54] usb 5-1: Manufacturer: syz [ 1431.450279][ T54] usb 5-1: SerialNumber: syz [ 1431.493597][ C2] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1431.510504][ T54] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input54 [ 1431.801643][ T54] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1431.805878][ T54] (id 0x00) [ 1431.984038][ T54] rc_core: IR keymap rc-imon-pad not found [ 1431.987148][ T54] Registered IR keymap rc-empty [ 1432.034104][ T54] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1432.069068][ T54] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1432.107584][ T54] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 1432.118018][ T54] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input55 [ 1432.157332][ T54] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:33> initialized [ 1432.260126][ T40] audit: type=1326 audit(1432.133:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26910 comm="syz.3.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7fc00000 [ 1432.278684][ T54] usb 5-1: USB disconnect, device number 33 [ 1432.287989][ T40] audit: type=1326 audit(1432.153:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26910 comm="syz.3.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf709d579 code=0x7fc00000 [ 1432.352206][ T40] audit: type=1326 audit(1432.153:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26910 comm="syz.3.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7fc00000 [ 1432.429221][ T40] audit: type=1326 audit(1432.153:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26910 comm="syz.3.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7fc00000 [ 1432.516919][ T40] audit: type=1326 audit(1432.153:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26910 comm="syz.3.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7fc00000 [ 1432.555279][ T40] audit: type=1326 audit(1432.153:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26910 comm="syz.3.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7fc00000 [ 1432.608939][ T40] audit: type=1326 audit(1432.153:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26910 comm="syz.3.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7fc00000 [ 1432.651186][ T40] audit: type=1326 audit(1432.153:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26910 comm="syz.3.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7fc00000 [ 1432.695760][ T40] audit: type=1326 audit(1432.153:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26910 comm="syz.3.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7fc00000 [ 1432.719571][ T40] audit: type=1326 audit(1432.153:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26910 comm="syz.3.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d579 code=0x7fc00000 [ 1433.326006][T26940] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5162'. [ 1434.859803][T26966] mkiss: ax0: crc mode is auto. [ 1436.218244][T26979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.231041][T26979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.184250][T27000] binder: BINDER_SET_CONTEXT_MGR already set [ 1437.187708][T27000] binder: 26988:27000 ioctl 4018620d 80004a80 returned -16 [ 1439.521489][ T54] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1439.771684][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 1439.782338][ T54] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.818557][ T54] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1439.836987][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1439.849374][ T54] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1439.872906][ T54] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1439.885023][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.924833][ T54] hub 6-1:1.0: bad descriptor, ignoring hub [ 1439.955819][ T54] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1439.966535][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 1439.970527][ T54] cdc_wdm 6-1:1.0: skipping garbage [ 1440.006083][ T54] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1440.035105][ T54] cdc_wdm 6-1:1.0: Unknown control protocol [ 1440.474547][T27041] [ 1440.475577][T27041] ====================================================== [ 1440.478665][T27041] WARNING: possible circular locking dependency detected [ 1440.490552][T27041] syzkaller #0 Tainted: G L [ 1440.494277][T27041] ------------------------------------------------------ [ 1440.496688][T27041] syz.3.5203/27041 is trying to acquire lock: [ 1440.510992][T27041] ffff8880136a3320 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 1440.521726][T27041] [ 1440.521726][T27041] but task is already holding lock: [ 1440.539767][T27041] ffff88804e640868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1440.546250][T27041] [ 1440.546250][T27041] which lock already depends on the new lock. [ 1440.546250][T27041] [ 1440.553184][T27041] [ 1440.553184][T27041] the existing dependency chain (in reverse order) is: [ 1440.557467][T27041] [ 1440.557467][T27041] -> #3 (&pipe->mutex){+.+.}-{4:4}: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1440.560446][T27041] __mutex_lock+0x1aa/0x1ca0 [ 1440.586764][T27041] anon_pipe_write+0x15d/0x1bd0 [ 1440.589012][T27041] __kernel_write_iter+0x720/0xb10 [ 1440.594114][T27041] __kernel_write+0xf5/0x140 [ 1440.596796][T27041] autofs_notify_daemon+0x4db/0xd60 [ 1440.613703][T27041] autofs_wait+0x10f3/0x1ac0 [ 1440.618087][T27041] autofs_mount_wait+0x132/0x3c0 [ 1440.623216][T27041] autofs_d_automount+0x4b2/0x960 [ 1440.625812][T27041] __traverse_mounts+0x1b9/0x830 [ 1440.630639][T27041] step_into_slowpath+0x772/0xf50 [ 1440.638079][T27041] path_openat+0x10db/0x3140 [ 1440.654377][T27041] do_filp_open+0x20b/0x470 [ 1440.659780][T27041] do_sys_openat2+0x121/0x290 [ 1440.674217][T27041] __ia32_compat_sys_openat+0x16d/0x210 [ 1440.676844][T27041] __do_fast_syscall_32+0xe8/0x680 [ 1440.679310][T27041] do_fast_syscall_32+0x32/0x80 [ 1440.684597][T27041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1440.687855][T27041] [ 1440.687855][T27041] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1440.695086][T27041] __mutex_lock+0x1aa/0x1ca0 [ 1440.697549][T27041] autofs_notify_daemon+0x4a6/0xd60 [ 1440.718673][T27041] autofs_wait+0x10f3/0x1ac0 [ 1440.721969][T27041] autofs_mount_wait+0x132/0x3c0 [ 1440.724370][T27041] autofs_d_automount+0x4b2/0x960 [ 1440.728748][T27041] __traverse_mounts+0x1b9/0x830 [ 1440.732151][T27041] step_into_slowpath+0x772/0xf50 [ 1440.743780][T27041] path_lookupat+0x627/0xc40 [ 1440.747553][T27041] filename_lookup+0x224/0x5f0 [ 1440.751337][T27041] kern_path+0x35/0x50 [ 1440.756054][T27041] lookup_bdev+0xd8/0x280 [ 1440.759196][T27041] resume_store+0x1d6/0x490 [ 1440.763028][T27041] kobj_attr_store+0x58/0x80 [ 1440.771812][T27041] sysfs_kf_write+0xf2/0x150 [ 1440.775041][T27041] kernfs_fop_write_iter+0x3af/0x570 [ 1440.778213][T27041] vfs_write+0x7d3/0x11d0 [ 1440.780842][T27041] ksys_write+0x12a/0x250 [ 1440.784118][T27041] __do_fast_syscall_32+0xe8/0x680 [ 1440.802151][T27041] do_fast_syscall_32+0x32/0x80 [ 1440.809209][T27041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1440.813797][T27041] [ 1440.813797][T27041] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1440.817607][T27041] __mutex_lock+0x1aa/0x1ca0 [ 1440.820441][T27041] kernfs_seq_start+0x4f/0x2a0 [ 1440.823633][T27041] seq_read_iter+0x2c1/0x12d0 [ 1440.826976][T27041] kernfs_fop_read_iter+0x46c/0x610 [ 1440.830087][T27041] vfs_read+0x8bf/0xcf0 [ 1440.832362][T27041] ksys_read+0x12a/0x250 [ 1440.834926][T27041] __do_fast_syscall_32+0xe8/0x680 [ 1440.837845][T27041] do_fast_syscall_32+0x32/0x80 [ 1440.840444][T27041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1440.845623][T27041] [ 1440.845623][T27041] -> #0 (&p->lock){+.+.}-{4:4}: [ 1440.850081][T27041] __lock_acquire+0x1669/0x2890 [ 1440.852595][T27041] lock_acquire+0x179/0x330 [ 1440.856227][T27041] __mutex_lock+0x1aa/0x1ca0 [ 1440.859191][T27041] seq_read_iter+0xe1/0x12d0 [ 1440.862530][T27041] kernfs_fop_read_iter+0x46c/0x610 [ 1440.865401][T27041] copy_splice_read+0x618/0xc20 [ 1440.867582][T27041] do_splice_read+0x285/0x370 [ 1440.869704][T27041] splice_file_to_pipe+0x109/0x120 [ 1440.871944][T27041] do_sendfile+0x400/0xe50 [ 1440.873850][T27041] __ia32_sys_sendfile64+0x1d7/0x220 [ 1440.876026][T27041] __do_fast_syscall_32+0xe8/0x680 [ 1440.878051][T27041] do_fast_syscall_32+0x32/0x80 [ 1440.880081][T27041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1440.884237][T27041] [ 1440.884237][T27041] other info that might help us debug this: [ 1440.884237][T27041] [ 1440.889459][T27041] Chain exists of: [ 1440.889459][T27041] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 1440.889459][T27041] [ 1440.902830][T27041] Possible unsafe locking scenario: [ 1440.902830][T27041] [ 1440.908198][T27041] CPU0 CPU1 [ 1440.911370][T27041] ---- ---- [ 1440.921621][T27041] lock(&pipe->mutex); [ 1440.925666][T27041] lock(&sbi->pipe_mutex); [ 1440.934343][T27041] lock(&pipe->mutex); [ 1440.942030][T27041] lock(&p->lock); [ 1440.943652][T27041] [ 1440.943652][T27041] *** DEADLOCK *** [ 1440.943652][T27041] [ 1440.949603][T27041] 1 lock held by syz.3.5203/27041: [ 1440.953438][T27041] #0: ffff88804e640868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1440.982375][T27041] [ 1440.982375][T27041] stack backtrace: [ 1440.985367][T27041] CPU: 0 UID: 0 PID: 27041 Comm: syz.3.5203 Tainted: G L syzkaller #0 PREEMPT(full) [ 1440.985394][T27041] Tainted: [L]=SOFTLOCKUP [ 1440.985401][T27041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1440.985412][T27041] Call Trace: [ 1440.985420][T27041] [ 1440.985428][T27041] dump_stack_lvl+0x116/0x1f0 [ 1440.985455][T27041] print_circular_bug+0x275/0x340 [ 1440.985482][T27041] check_noncircular+0x146/0x160 [ 1440.985510][T27041] __lock_acquire+0x1669/0x2890 [ 1440.985526][T27041] ? mark_held_locks+0x49/0x80 [ 1440.985541][T27041] lock_acquire+0x179/0x330 [ 1440.985554][T27041] ? seq_read_iter+0xe1/0x12d0 [ 1440.985576][T27041] ? __pfx___might_resched+0x10/0x10 [ 1440.985605][T27041] __mutex_lock+0x1aa/0x1ca0 [ 1440.985628][T27041] ? seq_read_iter+0xe1/0x12d0 [ 1440.985646][T27041] ? do_sendfile+0x400/0xe50 [ 1440.985664][T27041] ? __do_fast_syscall_32+0xe8/0x680 [ 1440.985686][T27041] ? do_fast_syscall_32+0x32/0x80 [ 1440.985698][T27041] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1440.985718][T27041] ? seq_read_iter+0xe1/0x12d0 [ 1440.985740][T27041] ? __pfx___mutex_lock+0x10/0x10 [ 1440.985768][T27041] ? alloc_pages_bulk_noprof+0xac5/0x1410 [ 1440.985790][T27041] ? seq_read_iter+0xe1/0x12d0 [ 1440.985806][T27041] seq_read_iter+0xe1/0x12d0 [ 1440.985824][T27041] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1440.985844][T27041] kernfs_fop_read_iter+0x46c/0x610 [ 1440.985868][T27041] copy_splice_read+0x618/0xc20 [ 1440.985890][T27041] ? __pfx_aa_file_perm+0x10/0x10 [ 1440.985911][T27041] ? __pfx_copy_splice_read+0x10/0x10 [ 1440.985934][T27041] ? __fget_files+0x204/0x3c0 [ 1440.985955][T27041] ? __pfx_copy_splice_read+0x10/0x10 [ 1440.985974][T27041] do_splice_read+0x285/0x370 [ 1440.985995][T27041] splice_file_to_pipe+0x109/0x120 [ 1440.986017][T27041] do_sendfile+0x400/0xe50 [ 1440.986038][T27041] ? __pfx_do_sendfile+0x10/0x10 [ 1440.986055][T27041] ? do_seccomp+0x333/0x2640 [ 1440.986071][T27041] ? __pfx___seccomp_filter+0x10/0x10 [ 1440.986088][T27041] __ia32_sys_sendfile64+0x1d7/0x220 [ 1440.986102][T27041] ? xfd_validate_state+0x61/0x180 [ 1440.986115][T27041] ? __pfx___ia32_sys_sendfile64+0x10/0x10 [ 1440.986130][T27041] ? __secure_computing+0x21c/0x320 [ 1440.986147][T27041] __do_fast_syscall_32+0xe8/0x680 [ 1440.986170][T27041] do_fast_syscall_32+0x32/0x80 [ 1440.986182][T27041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1440.986200][T27041] RIP: 0023:0xf709d579 [ 1440.986212][T27041] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1440.986225][T27041] RSP: 002b:00000000f548d55c EFLAGS: 00000296 ORIG_RAX: 00000000000000ef [ 1440.986240][T27041] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000005 [ 1440.986249][T27041] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 1440.986257][T27041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1440.986265][T27041] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1440.986274][T27041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1440.986287][T27041] [ 1441.628295][ T54] usb 8-1: USB disconnect, device number 8 [ 1442.654943][T18417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.878171][T18417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.978642][T18417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.046472][T18417] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.636250][T18417] bond0 (unregistering): Released all slaves [ 1443.963512][T18417] bond1 (unregistering): Released all slaves [ 1444.193608][T18417] tipc: Disabling bearer [ 1444.195850][T18417] tipc: Left network mode [ 1444.306930][ T5947] usb 6-1: USB disconnect, device number 42 [ 1444.408490][T18417] IPVS: stopping backup sync thread 23628 ... [ 1444.941654][T27024] syz_tun (unregistering): left allmulticast mode [ 1445.442041][T18417] hsr_slave_0: left promiscuous mode [ 1445.446469][T18417] hsr_slave_1: left promiscuous mode [ 1445.465018][T18417] veth1_macvtap: left promiscuous mode [ 1445.468243][T18417] veth0_macvtap: left promiscuous mode [ 1445.593232][T18417] pimreg3 (unregistering): left allmulticast mode [ 1447.739748][T18417] IPVS: stop unused estimator thread 0... [ 1449.194531][T18417] .` (unregistering): Released all slaves [ 1449.753437][T18417] bond1 (unregistering): (slave veth3): Releasing active interface [ 1449.757153][T18417] bond1 (unregistering): Released all slaves [ 1450.270913][T18417] bond2 (unregistering): Released all slaves