last executing test programs: 2m42.755540367s ago: executing program 3 (id=89): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x101000, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7f}}, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000640)={0x0, 0x2, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick=0x1000000, {}, {}, @raw32}], 0x1001a) 2m42.485059863s ago: executing program 3 (id=91): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) fsetxattr$smack_xattr_label(r2, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f00000000c0)={'s.events\x00\x00\x00\x00'}, 0xd, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000140)="20eba9fdb4cbab48929e1af151000000000000000000000000000100", 0x1c}], 0x1) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14c}}) 2m41.979899765s ago: executing program 3 (id=95): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m39.700175917s ago: executing program 3 (id=101): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a07000000000000000000c3fe2ed79e031f67a953444934093a020000000900010073797a300000000030000000030a01020000000000000000020000000900010073797a30000000000e00030091abc12404cf378042f2000014000000020a09000000000000000000000000001400fcff1100010000000000000000000000000a"], 0x8c}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x15) syz_usb_connect(0x4, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="17010000030057400e0c001183ec000400000002120001000000000904", @ANYBLOB="f9f5beecd3f29ed852a11e1640c914fb34"], 0x0) r2 = fanotify_init(0x8, 0x40000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x101}, 0x14}}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x6, &(0x7f0000000100)=0x7) close_range(r2, 0xffffffffffffffff, 0x0) 2m36.307304073s ago: executing program 3 (id=109): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"a2e3ad0e090d07f91b5e1a1887f70706d038e7ff7fc6e5539b0d3c0a8b089b3f32356c030890e0879b0a4cc6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07732f0acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xffffffffffffff34}}, 0x1006) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "ffffffffffffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", "dd959210", "00f700"}, 0x28) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffff9}, &(0x7f0000000200)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = gettid() r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r6, 0xc1004111, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) preadv(r7, &(0x7f0000005180)=[{&(0x7f0000004180)=""/4096, 0x1000}], 0x1, 0x9, 0x4) 2m32.937579942s ago: executing program 3 (id=116): socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socket$unix(0x1, 0x1, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002"], 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x358, 0x1e0, 0x2c0, 0x2c0, 0x2c0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010101, @local, 0xffffffff, 0xffffff00, 'vlan0\x00', 'dvmrp1\x00', {}, {}, 0x21, 0x0, 0x10}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x5, 0x5, 0x4, 0x7, 0x1, 0x4], 0x1, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0xb}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x26}, 0xff000000, 0xffffffff, 'pimreg1\x00', 'vxcan1\x00', {0x12bcc6b7c778bdd7}, {0xff}, 0x4, 0x1, 0x1c}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x53}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x7f}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'pim6reg1\x00', 'syzkaller1\x00', {}, {0xff}, 0x6c, 0x2, 0x2a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x6, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x10000, 0x3d5d092fbad8cb6e, 0x1, 0x0, 0x6}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x3}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) 2m31.304273921s ago: executing program 32 (id=116): socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) socket$unix(0x1, 0x1, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002"], 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x488, 0x358, 0x1e0, 0x2c0, 0x2c0, 0x2c0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010101, @local, 0xffffffff, 0xffffff00, 'vlan0\x00', 'dvmrp1\x00', {}, {}, 0x21, 0x0, 0x10}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x5, 0x5, 0x4, 0x7, 0x1, 0x4], 0x1, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x4}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0xb}}}, {{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x26}, 0xff000000, 0xffffffff, 'pimreg1\x00', 'vxcan1\x00', {0x12bcc6b7c778bdd7}, {0xff}, 0x4, 0x1, 0x1c}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x53}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x7f}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'pim6reg1\x00', 'syzkaller1\x00', {}, {0xff}, 0x6c, 0x2, 0x2a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x6, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000240)={0x10000, 0x3d5d092fbad8cb6e, 0x1, 0x0, 0x6}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0, 0x3}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r4, 0x40107447, 0x0) 5.516150822s ago: executing program 1 (id=651): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.304303265s ago: executing program 1 (id=654): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000140)='\x00', 0x1) 5.274357004s ago: executing program 1 (id=655): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.314445127s ago: executing program 2 (id=669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f00000011c0)={{0x0, 0x0, 0x80}}) 3.160057672s ago: executing program 5 (id=670): syz_emit_ethernet(0x1e, &(0x7f0000000300)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x1}}, {@llc={0x4, {@snap={0x154, 0xaa, "1a", "37c614", 0x8906}}}}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x43}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 2.912163474s ago: executing program 5 (id=671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x8000000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) 2.132163362s ago: executing program 1 (id=674): syz_usb_connect(0x5, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ecef8708d8132200c81701fd030109021200010508e0220904"], 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x4000) 2.002757664s ago: executing program 2 (id=675): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 1.728153394s ago: executing program 4 (id=677): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x20000}, 0x18) 1.706826715s ago: executing program 0 (id=678): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000700)={0x1}) 1.64112609s ago: executing program 5 (id=679): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.588217025s ago: executing program 0 (id=680): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="f397", 0x2}, {&(0x7f0000002180)="c80057", 0x3}], 0x2) 1.58798793s ago: executing program 4 (id=681): syz_emit_ethernet(0x1e, &(0x7f0000000300)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x1}}, {@llc={0x4, {@snap={0x154, 0xaa, "1a", "37c614", 0x8906}}}}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x43}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 1.53218584s ago: executing program 2 (id=682): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0xf, 0x0, 0x0) 1.359393161s ago: executing program 4 (id=683): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x676, {0x1000, 0x1}, {0x61, 0x2}, @period={0x59, 0x0, 0x4, 0x3, 0x80, {0x1, 0x218, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) close(r2) 1.056036064s ago: executing program 2 (id=684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r2 = syz_open_pts(r0, 0x141601) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) 861.444042ms ago: executing program 0 (id=685): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 772.020458ms ago: executing program 4 (id=686): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x8000, 0x0) sendmmsg$inet6(r0, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)="cc", 0x1}], 0x1}}], 0x1, 0x50) shutdown(r0, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) 580.149296ms ago: executing program 0 (id=687): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$proc_mixer(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="60647f061f23e874fc267b57af6b1bacef0e73d3643abbfd45427ca3e5c3d34515ac1d65d77ecdc2b4072a133ee9b4beb596ca2c0af633ffa89b77895f7dc8237361c35ffce6acb5c0be12384d6ed25c919ae52709"], 0x178) dup3(0xffffffffffffffff, r0, 0x0) 574.309559ms ago: executing program 1 (id=688): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x10, 0x0, &(0x7f0000000400)=[@clear_death], 0x0, 0x0, 0x0}) 557.031272ms ago: executing program 2 (id=689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 512.077036ms ago: executing program 5 (id=690): socket$inet6(0xa, 0x3, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x14) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES16]) 482.603119ms ago: executing program 0 (id=691): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_pidfd_open(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x2fd, 0xffff, 0x101, 0x300}}) 390.521266ms ago: executing program 4 (id=692): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x20000}, 0x18) 298.259148ms ago: executing program 5 (id=693): syz_emit_ethernet(0x1e, &(0x7f0000000300)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x1, 0x0, 0x1}}, {@llc={0x4, {@snap={0x154, 0xaa, "1a", "37c614", 0x8906}}}}}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x43}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 298.060532ms ago: executing program 1 (id=694): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 220.171893ms ago: executing program 0 (id=695): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, 0x0) 165.509577ms ago: executing program 4 (id=696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x676, {0x1000, 0x1}, {0x61, 0x2}, @period={0x59, 0x0, 0x4, 0x3, 0x80, {0x1, 0x218, 0xf, 0x1}, 0x0, 0x0}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) close(r2) 135.790004ms ago: executing program 5 (id=697): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 2 (id=698): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414"], 0x5c}}, 0x40) kernel console output (not intermixed with test programs): ] team0: Port device team_slave_0 added [ 93.053125][ T5821] team0: Port device team_slave_1 added [ 93.087906][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.094991][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.121385][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.140752][ T5828] hsr_slave_0: entered promiscuous mode [ 93.147245][ T5828] hsr_slave_1: entered promiscuous mode [ 93.156609][ T5823] team0: Port device team_slave_1 added [ 93.204555][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.211729][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.237997][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.273450][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.280573][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.306596][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.348484][ T5818] hsr_slave_0: entered promiscuous mode [ 93.355138][ T5818] hsr_slave_1: entered promiscuous mode [ 93.361645][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.369511][ T5818] Cannot create hsr debugfs directory [ 93.404712][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.411729][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.437755][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.494231][ T5827] hsr_slave_0: entered promiscuous mode [ 93.502111][ T5827] hsr_slave_1: entered promiscuous mode [ 93.508309][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.515999][ T5827] Cannot create hsr debugfs directory [ 93.561128][ T5821] hsr_slave_0: entered promiscuous mode [ 93.567663][ T5821] hsr_slave_1: entered promiscuous mode [ 93.576546][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.584850][ T5821] Cannot create hsr debugfs directory [ 93.778649][ T5823] hsr_slave_0: entered promiscuous mode [ 93.785226][ T5823] hsr_slave_1: entered promiscuous mode [ 93.791554][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.799213][ T5823] Cannot create hsr debugfs directory [ 94.199109][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.213856][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.243130][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.263439][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.322991][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.355418][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.380652][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.402424][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.440652][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.473888][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.510538][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.521556][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.559574][ T5826] Bluetooth: hci3: command tx timeout [ 94.621326][ T5821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.635160][ T5821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.643649][ T5826] Bluetooth: hci4: command tx timeout [ 94.666104][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.681403][ T5821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.693379][ T5821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.719185][ T5826] Bluetooth: hci0: command tx timeout [ 94.719392][ T55] Bluetooth: hci2: command tx timeout [ 94.724624][ T5826] Bluetooth: hci1: command tx timeout [ 94.755702][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.828083][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.849849][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.857091][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.876187][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.890748][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.906791][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.914153][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.931147][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.038386][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.054989][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.106298][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.118374][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.163075][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.170283][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.183146][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.190375][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.241895][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.249126][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.261042][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.268186][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.281820][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.375292][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.408235][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.415435][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.488358][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.495631][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.555958][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.635713][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.705075][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.734361][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.741590][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.804144][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.811400][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.837251][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.113370][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.275808][ T5828] veth0_vlan: entered promiscuous mode [ 96.341758][ T5828] veth1_vlan: entered promiscuous mode [ 96.393046][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.478431][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.574226][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.601549][ T5828] veth0_macvtap: entered promiscuous mode [ 96.623062][ T5828] veth1_macvtap: entered promiscuous mode [ 96.639802][ T5826] Bluetooth: hci3: command tx timeout [ 96.691770][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.712572][ T5827] veth0_vlan: entered promiscuous mode [ 96.718514][ T5821] veth0_vlan: entered promiscuous mode [ 96.724937][ T5826] Bluetooth: hci4: command tx timeout [ 96.747119][ T5818] veth0_vlan: entered promiscuous mode [ 96.767445][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.781487][ T5821] veth1_vlan: entered promiscuous mode [ 96.795911][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.800143][ T5826] Bluetooth: hci1: command tx timeout [ 96.810767][ T5839] Bluetooth: hci2: command tx timeout [ 96.810777][ T55] Bluetooth: hci0: command tx timeout [ 96.811180][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.830804][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.841287][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.854890][ T5818] veth1_vlan: entered promiscuous mode [ 96.864121][ T5827] veth1_vlan: entered promiscuous mode [ 96.911998][ T5823] veth0_vlan: entered promiscuous mode [ 96.964335][ T5823] veth1_vlan: entered promiscuous mode [ 96.982610][ T5821] veth0_macvtap: entered promiscuous mode [ 97.051320][ T5821] veth1_macvtap: entered promiscuous mode [ 97.072461][ T5818] veth0_macvtap: entered promiscuous mode [ 97.072948][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.099465][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.115925][ T5827] veth0_macvtap: entered promiscuous mode [ 97.147765][ T5827] veth1_macvtap: entered promiscuous mode [ 97.161239][ T5818] veth1_macvtap: entered promiscuous mode [ 97.181761][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.195329][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.213956][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.225848][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.242995][ T5821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.253841][ T5821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.263332][ T5821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.272155][ T5821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.286194][ T5823] veth0_macvtap: entered promiscuous mode [ 97.327594][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.352449][ T5823] veth1_macvtap: entered promiscuous mode [ 97.372105][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.377554][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.417480][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.437799][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.462820][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.473247][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.482126][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.491300][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.553569][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.575245][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.614159][ T5818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.626648][ T5818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.637638][ T5818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.655104][ T5818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.682438][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.705147][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.733076][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.747180][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.756774][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.775227][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.866831][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.883640][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.035515][ T5911] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.048393][ T5912] Invalid ELF header magic: != ELF [ 98.098568][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.126379][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.238071][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.271544][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.324548][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.356793][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.477646][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.502498][ T5877] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.512509][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.541995][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.582947][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.631661][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.649742][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.690757][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 98.719902][ T5826] Bluetooth: hci3: command tx timeout [ 98.733082][ T5877] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 98.750247][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.768549][ T5877] usb 3-1: Product: syz [ 98.799276][ T5826] Bluetooth: hci4: command tx timeout [ 98.807635][ T5877] usb 3-1: Manufacturer: syz [ 98.822981][ T5877] usb 3-1: SerialNumber: syz [ 98.840865][ T5877] usb 3-1: config 0 descriptor?? [ 98.874162][ T5877] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 98.890155][ T5826] Bluetooth: hci1: command tx timeout [ 98.895627][ T5826] Bluetooth: hci2: command tx timeout [ 98.903676][ T5839] Bluetooth: hci0: command tx timeout [ 98.912000][ T5877] usb 3-1: setting power ON [ 98.916934][ T5877] dvb-usb: bulk message failed: -22 (2/0) [ 98.938321][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.950796][ T5877] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 98.961331][ T5877] usb 3-1: media controller created [ 98.991231][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.030058][ T5877] usb 3-1: selecting invalid altsetting 6 [ 99.046671][ T5877] usb 3-1: digital interface selection failed (-22) [ 99.076507][ T5877] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 99.085246][ T5914] dvb-usb: bulk message failed: -22 (3/0) [ 99.097609][ T5914] usb 3-1: gpio_write failed. [ 99.107210][ T5877] usb 3-1: setting power OFF [ 99.115262][ T5914] cxusb: i2c wr: len=80 is too big! [ 99.115262][ T5914] [ 99.126749][ T5877] dvb-usb: bulk message failed: -22 (2/0) [ 99.133470][ T5877] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 99.143700][ T5877] (NULL device *): no alternate interface [ 99.433883][ T5877] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 99.562008][ T5877] usb 3-1: USB disconnect, device number 2 [ 99.714178][ T5928] Zero length message leads to an empty skb [ 100.650043][ T5928] sctp: failed to load transform for md5: -2 [ 100.809904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.830046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.946046][ T5942] Bluetooth: hci5: Frame reassembly failed (-90) [ 100.989865][ T5933] Bluetooth: hci5: Frame reassembly failed (-84) [ 101.036075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.120493][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.129235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 101.139360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.151361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.160550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.239693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.359453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.964871][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 103.128895][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.301922][ T5948] dlm: non-version read from control device 8224 [ 107.391404][ T5983] IPv6: Can't replace route, no match found [ 108.977425][ T5990] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 108.984193][ T5990] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.998019][ T5990] vhci_hcd vhci_hcd.0: Device attached [ 109.011223][ T5990] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 109.017931][ T5990] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.031883][ T5990] vhci_hcd vhci_hcd.0: Device attached [ 109.038566][ T5990] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.284597][ T5990] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 109.291356][ T5990] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 109.310627][ T24] vhci_hcd: vhci_device speed not set [ 109.395983][ T24] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 109.933128][ T5996] delete_channel: no stack [ 109.989721][ T5998] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 109.996466][ T5998] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.069311][ T30] audit: type=1804 audit(1747413140.799:2): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.18" name="bus" dev="ramfs" ino=7918 res=1 errno=0 [ 110.099314][ T5990] vhci_hcd vhci_hcd.0: Device attached [ 110.107316][ T30] audit: type=1804 audit(1747413140.799:3): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.18" name="bus" dev="ramfs" ino=7918 res=1 errno=0 [ 110.149890][ T5998] vhci_hcd vhci_hcd.0: Device attached [ 110.151083][ T5990] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.185882][ T6007] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(24) [ 110.192540][ T6007] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 110.204954][ T5998] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.213875][ T6007] vhci_hcd vhci_hcd.0: Device attached [ 110.258434][ T5990] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.260133][ T6014] netlink: 'syz.4.24': attribute type 9 has an invalid length. [ 110.294065][ T6014] netlink: 146708 bytes leftover after parsing attributes in process `syz.4.24'. [ 110.313880][ T5990] vhci_hcd vhci_hcd.0: port 0 already used [ 110.428407][ T6008] vhci_hcd: connection closed [ 110.428418][ T6002] vhci_hcd: connection closed [ 110.430871][ T12] vhci_hcd: stop threads [ 110.435347][ T5992] vhci_hcd: connection reset by peer [ 110.447792][ T6001] vhci_hcd: connection closed [ 110.448632][ T5994] vhci_hcd: connection closed [ 110.473527][ T12] vhci_hcd: release socket [ 110.508472][ T12] vhci_hcd: disconnect device [ 110.908791][ T12] vhci_hcd: stop threads [ 110.964215][ T12] vhci_hcd: release socket [ 111.033628][ T12] vhci_hcd: disconnect device [ 111.108039][ T12] vhci_hcd: stop threads [ 111.160691][ T12] vhci_hcd: release socket [ 111.226509][ T12] vhci_hcd: disconnect device [ 111.296006][ T12] vhci_hcd: stop threads [ 111.355139][ T12] vhci_hcd: release socket [ 111.412152][ T12] vhci_hcd: disconnect device [ 111.561742][ T12] vhci_hcd: stop threads [ 111.601454][ T12] vhci_hcd: release socket [ 111.666949][ T12] vhci_hcd: disconnect device [ 112.169975][ T9] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 112.285315][ T6024] IPv6: NLM_F_REPLACE set, but no existing node found! [ 112.423510][ T6024] kAFS: Can only specify source 'none' with -o dyn [ 113.009182][ T9] usb 4-1: device descriptor read/64, error -71 [ 113.289455][ T9] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 113.311828][ T6035] netlink: 248 bytes leftover after parsing attributes in process `syz.3.30'. [ 113.804499][ T6039] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 113.812552][ T6039] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 113.821860][ T6039] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 113.829743][ T6039] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 115.161229][ T6049] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 115.170307][ T6049] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.179810][ T6049] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 115.187615][ T6049] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 115.855187][ T24] vhci_hcd: vhci_device speed not set [ 115.986313][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 116.221152][ T6057] nbd: must specify at least one socket [ 116.249201][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 116.421205][ T6050] macsec0: entered promiscuous mode [ 116.665580][ T6064] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 116.672317][ T6064] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 116.739080][ T6064] vhci_hcd vhci_hcd.0: Device attached [ 116.811332][ T6068] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 116.818018][ T6068] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.882732][ T6068] vhci_hcd vhci_hcd.0: Device attached [ 116.952361][ T1224] vhci_hcd: vhci_device speed not set [ 116.961415][ T6064] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 116.976804][ T6064] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(18) [ 116.983447][ T6064] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.010914][ T1224] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 117.012627][ T6064] vhci_hcd vhci_hcd.0: Device attached [ 117.069576][ T59] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.078219][ T6064] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 117.084855][ T6064] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.099382][ T6064] vhci_hcd vhci_hcd.0: Device attached [ 117.120844][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'. [ 117.130300][ T6064] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(22) [ 117.136941][ T6064] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 117.250650][ T5878] usb usb34-port1: attempt power cycle [ 117.319424][ T6064] vhci_hcd vhci_hcd.0: Device attached [ 117.320107][ T6068] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.325128][ T59] usb 4-1: Using ep0 maxpacket: 32 [ 117.356404][ T6064] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.412702][ T6068] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 117.846643][ T6064] vhci_hcd vhci_hcd.0: port 0 already used [ 118.122926][ T59] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 118.174081][ T59] usb 4-1: config 0 has no interface number 0 [ 118.232961][ T59] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 118.250565][ T6086] vhci_hcd: connection closed [ 118.250656][ T6078] vhci_hcd: connection closed [ 118.255572][ T6082] vhci_hcd: connection closed [ 118.261315][ T6065] vhci_hcd: connection reset by peer [ 118.272126][ T6072] vhci_hcd: connection closed [ 118.279958][ T199] vhci_hcd: stop threads [ 118.290433][ T59] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.466155][ T199] vhci_hcd: release socket [ 118.479477][ T59] usb 4-1: Product: syz [ 118.484349][ T199] vhci_hcd: disconnect device [ 118.493096][ T59] usb 4-1: Manufacturer: syz [ 118.581066][ T6099] capability: warning: `syz.0.40' uses 32-bit capabilities (legacy support in use) [ 119.231784][ T59] usb 4-1: SerialNumber: syz [ 119.231835][ T199] vhci_hcd: stop threads [ 119.247997][ T199] vhci_hcd: release socket [ 119.272343][ T199] vhci_hcd: disconnect device [ 119.277510][ T59] usb 4-1: config 0 descriptor?? [ 119.283671][ T199] vhci_hcd: stop threads [ 119.287945][ T199] vhci_hcd: release socket [ 119.297765][ T199] vhci_hcd: disconnect device [ 119.318849][ T199] vhci_hcd: stop threads [ 119.323705][ T199] vhci_hcd: release socket [ 119.328476][ T199] vhci_hcd: disconnect device [ 119.338855][ T199] vhci_hcd: stop threads [ 119.343562][ T199] vhci_hcd: release socket [ 119.348310][ T199] vhci_hcd: disconnect device [ 119.430627][ T5878] usb usb34-port1: unable to enumerate USB device [ 119.907415][ T6112] netlink: 52 bytes leftover after parsing attributes in process `syz.3.37'. [ 120.176410][ T5878] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.550363][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 121.744156][ T59] kaweth 4-1:0.235: Firmware present in device. [ 121.766986][ T59] kaweth 4-1:0.235: Error reading configuration (-71), no net device created [ 121.840025][ T59] kaweth 4-1:0.235: probe with driver kaweth failed with error -5 [ 121.859761][ T59] usb 4-1: USB disconnect, device number 4 [ 122.304392][ T1224] vhci_hcd: vhci_device speed not set [ 122.421678][ T6146] binder: 6136:6146 ioctl 4018620d 0 returned -22 [ 123.339515][ T6152] Bluetooth: MGMT ver 1.23 [ 125.523105][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.571854][ T5878] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 125.605339][ T5878] usb 2-1: can't read configurations, error -71 [ 125.765202][ T24] usb usb36-port1: attempt power cycle [ 128.226371][ T24] usb usb36-port1: unable to enumerate USB device [ 128.258908][ T6171] lo speed is unknown, defaulting to 1000 [ 128.264921][ T6171] lo speed is unknown, defaulting to 1000 [ 128.279370][ T6169] x_tables: duplicate underflow at hook 1 [ 128.289191][ T6171] lo speed is unknown, defaulting to 1000 [ 128.298970][ T6171] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 128.312854][ T6171] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 128.368903][ T6171] lo speed is unknown, defaulting to 1000 [ 128.378707][ T6171] lo speed is unknown, defaulting to 1000 [ 128.386403][ T6171] lo speed is unknown, defaulting to 1000 [ 128.393964][ T6171] lo speed is unknown, defaulting to 1000 [ 128.401528][ T6171] lo speed is unknown, defaulting to 1000 [ 128.445758][ T6171] lo speed is unknown, defaulting to 1000 [ 131.609745][ T6186] netlink: 'syz.1.58': attribute type 21 has an invalid length. [ 132.160200][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.807258][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.879217][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.499974][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 134.938992][ T9] usb 1-1: device descriptor read/all, error -71 [ 135.234900][ T6210] IPv6: Can't replace route, no match found [ 135.570059][ T6212] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.879655][ T6218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 136.909191][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.807179][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 138.159499][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.187687][ T9] usb 1-1: config 0 descriptor?? [ 138.220047][ T9] cp210x 1-1:0.0: cp210x converter detected [ 138.256901][ T5878] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.299005][ T6239] syz.2.67 uses obsolete (PF_INET,SOCK_PACKET) [ 138.449112][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 138.451313][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 138.467255][ T5878] usb 2-1: config 255 has an invalid interface number: 47 but max is 0 [ 138.468863][ T9] cp210x 1-1:0.0: querying part number failed [ 138.476151][ T5878] usb 2-1: config 255 has no interface number 0 [ 138.626554][ T5878] usb 2-1: config 255 interface 47 has no altsetting 0 [ 138.847549][ T6243] IPv6: Can't replace route, no match found [ 138.915743][ T5878] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 138.934856][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.963964][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 138.983592][ T5878] usb 2-1: Product: syz [ 139.003823][ T5878] usb 2-1: Manufacturer: syz [ 139.017852][ T9] usb 1-1: USB disconnect, device number 4 [ 139.035838][ T5878] usb 2-1: SerialNumber: syz [ 139.077155][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 139.130773][ T9] cp210x 1-1:0.0: device disconnected [ 139.315212][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 139.554505][ T5878] legousbtower 2-1:255.47: interrupt endpoints not found [ 140.159586][ T5878] usb 2-1: USB disconnect, device number 4 [ 140.386609][ T6266] netlink: 'syz.0.74': attribute type 4 has an invalid length. [ 140.801006][ T6268] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 140.870731][ T6274] syz.2.75 (6274): /proc/6274/oom_adj is deprecated, please use /proc/6274/oom_score_adj instead. [ 141.110220][ T5880] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.220318][ T6279] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.77'. [ 141.443774][ T5880] usb 1-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 141.548575][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.598144][ T5880] usb 1-1: Product: syz [ 141.618127][ T5880] usb 1-1: Manufacturer: syz [ 141.637838][ T5880] usb 1-1: SerialNumber: syz [ 141.723016][ T6275] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 142.000194][ T6292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.80'. [ 142.096326][ T5880] gspca_main: pac207-2.14.0 probing 093a:2476 [ 142.158132][ T5880] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 142.191837][ T5880] usb 1-1: Found UVC 0.00 device syz (093a:2476) [ 142.198265][ T5880] usb 1-1: No valid video chain found. [ 142.255829][ T5880] usb 1-1: USB disconnect, device number 5 [ 142.281383][ T6289] could not allocate digest TFM handle sha384-arm [ 142.314061][ T6305] fuse: Unknown parameter 'LLfd' [ 142.493122][ T6307] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.541636][ T6312] tipc: Started in network mode [ 142.546770][ T6312] tipc: Node identity ac14140f, cluster identity 4711 [ 142.555056][ T6312] tipc: New replicast peer: 127.0.0.1 [ 142.561891][ T6312] tipc: Enabled bearer , priority 10 [ 142.864333][ T6317] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.919335][ T5936] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.093221][ T5936] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 143.142754][ T5936] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.169378][ T5936] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 143.201456][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.244350][ T5936] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.277077][ T5936] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 143.303908][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.333875][ T5936] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.347885][ T5936] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 143.378088][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.423807][ T5936] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.460784][ T5936] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 143.548650][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.612818][ T5936] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.659422][ T5936] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 143.680319][ T5880] tipc: Node number set to 2886997007 [ 143.699383][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.749295][ T5936] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.758155][ T5936] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 143.782550][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.820239][ T5936] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 143.831373][ T5936] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 143.847173][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.952923][ T5936] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 144.190305][ T5936] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 144.203326][ T5936] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.885916][ T5936] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.899291][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.907749][ T5936] usb 5-1: Product: syz [ 144.913607][ T5936] usb 5-1: Manufacturer: syz [ 144.918238][ T5936] usb 5-1: SerialNumber: syz [ 145.910135][ T5936] usb 5-1: 0:2 : does not exist [ 146.275821][ T5936] usb 5-1: USB disconnect, device number 2 [ 148.090979][ T6358] geneve0: entered allmulticast mode [ 148.242283][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 148.274007][ T30] audit: type=1326 audit(1747413179.009:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6368 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 148.306933][ T6107] udevd[6107]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.399712][ T30] audit: type=1326 audit(1747413179.009:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6368 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 148.443120][ T6369] erspan0: entered allmulticast mode [ 148.520391][ T6372] netlink: 56 bytes leftover after parsing attributes in process `syz.4.102'. [ 148.540080][ T30] audit: type=1326 audit(1747413179.009:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6368 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 148.602948][ T30] audit: type=1326 audit(1747413179.009:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6368 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 148.622458][ T6376] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 148.656205][ T30] audit: type=1326 audit(1747413179.009:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6368 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 148.709420][ T30] audit: type=1326 audit(1747413179.009:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6368 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 148.838754][ T30] audit: type=1326 audit(1747413179.009:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6368 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 148.861965][ T30] audit: type=1326 audit(1747413179.009:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6368 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 148.885596][ T30] audit: type=1326 audit(1747413179.009:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6368 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 148.907694][ T30] audit: type=1326 audit(1747413179.009:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6368 comm="syz.1.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 149.225345][ T6383] IPv6: Can't replace route, no match found [ 150.639127][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 151.987151][ T6411] syz.2.112: attempt to access beyond end of device [ 151.987151][ T6411] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 152.016671][ T6411] XFS (nbd2): SB validate failed with error -5. [ 153.418257][ T5929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.700937][ T6442] netlink: 'syz.4.117': attribute type 3 has an invalid length. [ 153.708720][ T6442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.117'. [ 154.179510][ T5878] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 154.389335][ T5878] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 154.415701][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.440747][ T5929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.482332][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.514142][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 154.547713][ T6453] overlayfs: failed to resolve './file1': -2 [ 154.560223][ T5878] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 154.583011][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.617737][ T5878] usb 2-1: config 0 descriptor?? [ 154.774093][ T5929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.789227][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 154.840586][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.861109][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.880181][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.909168][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.918061][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.982295][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.988047][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.082405][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.108524][ T24] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 155.203282][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.208426][ T5929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.224237][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.459209][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.460960][ T24] usb 1-1: config 0 descriptor?? [ 155.670447][ T6457] IPv6: Can't replace route, no match found [ 155.753840][ T6437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.815648][ T6437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.037108][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.046716][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.060500][ T5929] bridge_slave_1: left allmulticast mode [ 156.066638][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.084419][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.099671][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.111083][ T5929] bridge_slave_1: left promiscuous mode [ 156.154008][ T5878] holtek_kbd 0003:04D9:A055.0001: unbalanced collection at end of report description [ 156.171751][ T5929] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.205501][ T5878] holtek_kbd 0003:04D9:A055.0001: probe with driver holtek_kbd failed with error -22 [ 156.225769][ T5929] bridge_slave_0: left allmulticast mode [ 156.259608][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 156.265669][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 156.284158][ T5929] bridge_slave_0: left promiscuous mode [ 156.303058][ T5929] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.332189][ T24] usb 1-1: USB disconnect, device number 6 [ 157.501698][ T5879] usb 2-1: USB disconnect, device number 5 [ 158.171003][ T6495] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.180948][ T6495] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 158.190803][ T6495] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 158.198618][ T6495] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 158.752450][ T5826] Bluetooth: hci3: command tx timeout [ 158.992431][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 158.992449][ T30] audit: type=1804 audit(1747413189.729:80): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.131" name="/newroot/27/file0" dev="tmpfs" ino=160 res=1 errno=0 [ 159.023141][ T6502] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 159.042378][ T6502] ref_ctr decrement failed for inode: 0xa0 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88806a991400 [ 159.119111][ T6502] uprobe: syz.1.131:6502 failed to unregister, leaking uprobe [ 159.581205][ T5878] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.581413][ T6508] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 159.595358][ T6508] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 159.657391][ T6508] vhci_hcd vhci_hcd.0: Device attached [ 159.665965][ T6513] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 159.672611][ T6513] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.720949][ T6516] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 159.743170][ T6513] vhci_hcd vhci_hcd.0: Device attached [ 159.761413][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.773235][ T6508] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 159.779854][ T6508] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 159.789155][ T6508] vhci_hcd vhci_hcd.0: Device attached [ 159.801874][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.803466][ T6508] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 159.818583][ T6508] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 159.826271][ T59] vhci_hcd: vhci_device speed not set [ 159.826315][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.835536][ T5878] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 159.839975][ T6508] vhci_hcd vhci_hcd.0: Device attached [ 159.876860][ T6513] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(23) [ 159.883539][ T6513] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 159.891688][ T5878] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 159.903436][ T6513] vhci_hcd vhci_hcd.0: Device attached [ 159.906553][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.943005][ T5878] usb 3-1: config 0 descriptor?? [ 159.944983][ T6508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 159.949362][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 159.965023][ T59] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 159.992310][ T6508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 160.006576][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 160.012362][ T6508] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 160.030530][ T24] usb 2-1: config 0 has no interfaces? [ 160.037424][ T6508] vhci_hcd vhci_hcd.0: port 0 already used [ 160.062190][ T24] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 160.071997][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.077507][ T6521] vhci_hcd: connection closed [ 160.088247][ T6511] vhci_hcd: connection reset by peer [ 160.090861][ T24] usb 2-1: Product: syz [ 160.094708][ T6514] vhci_hcd: connection closed [ 160.098271][ T24] usb 2-1: Manufacturer: syz [ 160.098291][ T24] usb 2-1: SerialNumber: syz [ 160.102670][ T6517] vhci_hcd: connection closed [ 160.121107][ T6519] vhci_hcd: connection closed [ 160.123457][ T24] usb 2-1: config 0 descriptor?? [ 160.139348][ T1105] vhci_hcd: stop threads [ 160.142990][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.144105][ T1105] vhci_hcd: release socket [ 160.158008][ T1105] vhci_hcd: disconnect device [ 160.164995][ T1105] vhci_hcd: stop threads [ 160.170598][ T1105] vhci_hcd: release socket [ 160.175480][ T1105] vhci_hcd: disconnect device [ 160.182471][ T1105] vhci_hcd: stop threads [ 160.186783][ T1105] vhci_hcd: release socket [ 160.187452][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.192048][ T1105] vhci_hcd: disconnect device [ 160.206612][ T1105] vhci_hcd: stop threads [ 160.207811][ T5929] bond0 (unregistering): Released all slaves [ 160.211028][ T1105] vhci_hcd: release socket [ 160.211119][ T1105] vhci_hcd: disconnect device [ 160.214157][ T1105] vhci_hcd: stop threads [ 160.240621][ T6492] IPv6: Can't replace route, no match found [ 160.272729][ T1105] vhci_hcd: release socket [ 160.279820][ T1105] vhci_hcd: disconnect device [ 160.377330][ T5936] usb 2-1: USB disconnect, device number 6 [ 160.379569][ T6462] lo speed is unknown, defaulting to 1000 [ 160.420380][ T24] usb 3-1: USB disconnect, device number 3 [ 160.799300][ T5826] Bluetooth: hci3: command tx timeout [ 161.753416][ T6539] vivid-000: ================= START STATUS ================= [ 161.788801][ T6539] vivid-000: Generate PTS: true [ 162.659791][ T6539] vivid-000: Generate SCR: true [ 162.664747][ T6539] tpg source WxH: 640x360 (Y'CbCr) [ 162.671363][ T6539] tpg field: 1 [ 162.674776][ T6539] tpg crop: (0,0)/640x360 [ 162.681880][ T6539] tpg compose: (0,0)/640x360 [ 162.686535][ T6539] tpg colorspace: 8 [ 162.691333][ T6539] tpg transfer function: 0/0 [ 162.696031][ T6539] tpg Y'CbCr encoding: 0/0 [ 162.703669][ T6539] tpg quantization: 0/0 [ 162.707960][ T6539] tpg RGB range: 0/2 [ 162.725393][ T6535] IPv6: Can't replace route, no match found [ 162.779454][ T6539] vivid-000: ================== END STATUS ================== [ 162.925085][ T5826] Bluetooth: hci3: command tx timeout [ 163.170034][ T6555] Invalid option length (272) for dns_resolver key [ 163.782690][ T6572] Invalid ELF header magic: != ELF [ 164.375397][ T5929] hsr_slave_0: left promiscuous mode [ 164.421113][ T5929] hsr_slave_1: left promiscuous mode [ 164.451080][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.959348][ T5826] Bluetooth: hci3: command tx timeout [ 165.096637][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.109099][ T59] vhci_hcd: vhci_device speed not set [ 165.426197][ T5929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.434154][ T5929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.444912][ T6583] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 165.451602][ T6583] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 165.462267][ T6583] vhci_hcd vhci_hcd.0: Device attached [ 165.491096][ T6583] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 165.497745][ T6583] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 165.513875][ T5929] veth1_macvtap: left promiscuous mode [ 165.526586][ T6583] vhci_hcd vhci_hcd.0: Device attached [ 165.540504][ T6589] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.543951][ T5929] veth0_macvtap: left promiscuous mode [ 165.573449][ T5929] veth1_vlan: left promiscuous mode [ 165.581215][ T5929] veth0_vlan: left promiscuous mode [ 165.587021][ T6583] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 165.593642][ T6583] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.604087][ T6583] vhci_hcd vhci_hcd.0: Device attached [ 165.634018][ T6583] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 165.640654][ T6583] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.650341][ T5878] vhci_hcd: vhci_device speed not set [ 165.679384][ T6583] vhci_hcd vhci_hcd.0: Device attached [ 165.696196][ T6589] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(23) [ 165.702839][ T6589] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 165.719164][ T6589] vhci_hcd vhci_hcd.0: Device attached [ 165.729465][ T5878] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 165.748731][ T6583] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.780096][ T6583] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.797965][ T6583] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.827068][ T6583] vhci_hcd vhci_hcd.0: port 0 already used [ 165.900174][ T6596] vhci_hcd: connection closed [ 165.900431][ T36] vhci_hcd: stop threads [ 165.913265][ T6590] vhci_hcd: connection closed [ 165.914423][ T6593] vhci_hcd: connection closed [ 165.919300][ T6587] vhci_hcd: connection closed [ 165.922829][ T36] vhci_hcd: release socket [ 165.926343][ T6584] vhci_hcd: connection reset by peer [ 165.940365][ T36] vhci_hcd: disconnect device [ 165.950706][ T36] vhci_hcd: stop threads [ 165.955040][ T36] vhci_hcd: release socket [ 165.964017][ T36] vhci_hcd: disconnect device [ 165.974735][ T36] vhci_hcd: stop threads [ 165.980460][ T36] vhci_hcd: release socket [ 165.989450][ T36] vhci_hcd: disconnect device [ 165.997121][ T36] vhci_hcd: stop threads [ 166.009365][ T36] vhci_hcd: release socket [ 166.023257][ T36] vhci_hcd: disconnect device [ 166.033101][ T36] vhci_hcd: stop threads [ 166.039371][ T36] vhci_hcd: release socket [ 166.043953][ T36] vhci_hcd: disconnect device [ 166.379025][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 166.387784][ T5929] team0 (unregistering): Port device team_slave_1 removed [ 166.441027][ T5929] team0 (unregistering): Port device team_slave_0 removed [ 166.543057][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.607680][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.658862][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 166.668247][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.750283][ T24] usb 3-1: config 0 descriptor?? [ 166.970481][ T9] usb usb42-port1: attempt power cycle [ 167.151727][ T6608] netlink: 'syz.1.146': attribute type 2 has an invalid length. [ 167.968179][ T9] usb usb42-port1: unable to enumerate USB device [ 168.092078][ T6566] IPv6: Can't replace route, no match found [ 168.438019][ T24] usb 3-1: USB disconnect, device number 4 [ 168.662017][ T6619] capability: warning: `syz.4.147' uses deprecated v2 capabilities in a way that may be insecure [ 169.325662][ T6462] chnl_net:caif_netlink_parms(): no params data found [ 170.276661][ T6637] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 170.283343][ T6637] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 170.325252][ T6636] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.153'. [ 170.337809][ T6637] vhci_hcd vhci_hcd.0: Device attached [ 170.356440][ T6648] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 170.363104][ T6648] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 170.383916][ T6645] IPv6: Can't replace route, no match found [ 170.424438][ T6637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.457637][ T6648] vhci_hcd vhci_hcd.0: Device attached [ 170.510032][ T24] vhci_hcd: vhci_device speed not set [ 170.549034][ T1224] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.549463][ T6637] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(17) [ 170.563436][ T6637] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 170.591644][ T24] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 170.624800][ T6637] vhci_hcd vhci_hcd.0: Device attached [ 170.668752][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.681330][ T6637] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 170.687969][ T6637] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 170.698647][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.789323][ T6462] bridge_slave_0: entered allmulticast mode [ 170.797117][ T6462] bridge_slave_0: entered promiscuous mode [ 170.804132][ T6637] vhci_hcd vhci_hcd.0: Device attached [ 170.825028][ T6648] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 170.831671][ T6648] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 170.850489][ T6648] vhci_hcd vhci_hcd.0: Device attached [ 170.853784][ T6666] erofs (device nullb0): cannot find valid erofs superblock [ 170.857213][ T6637] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 170.890876][ T5878] vhci_hcd: vhci_device speed not set [ 171.526676][ T1224] usb 2-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 171.536027][ T1224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.544475][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.554377][ T1224] usb 2-1: Product: syz [ 171.558577][ T1224] usb 2-1: Manufacturer: syz [ 171.561400][ T6669] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 171.579155][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.586422][ T6462] bridge_slave_1: entered allmulticast mode [ 171.641207][ T6462] bridge_slave_1: entered promiscuous mode [ 171.684001][ T1224] usb 2-1: SerialNumber: syz [ 172.465314][ T6637] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(28) [ 172.471965][ T6637] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 172.535891][ T6637] vhci_hcd vhci_hcd.0: Device attached [ 172.552855][ T6673] vhci_hcd: connection closed [ 172.554039][ T36] vhci_hcd: stop threads [ 172.582307][ T6664] vhci_hcd: connection closed [ 172.591516][ T6657] vhci_hcd: connection closed [ 172.597591][ T6661] vhci_hcd: connection closed [ 172.598709][ T1224] usb 2-1: config 0 descriptor?? [ 172.618991][ T6651] vhci_hcd: connection closed [ 172.620144][ T36] vhci_hcd: release socket [ 172.629006][ T6641] vhci_hcd: connection reset by peer [ 172.682800][ T36] vhci_hcd: disconnect device [ 172.723223][ T36] vhci_hcd: stop threads [ 172.727496][ T36] vhci_hcd: release socket [ 172.744323][ T36] vhci_hcd: disconnect device [ 172.754121][ T36] vhci_hcd: stop threads [ 172.758395][ T36] vhci_hcd: release socket [ 172.775609][ T6462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.812931][ T36] vhci_hcd: disconnect device [ 172.843423][ T6462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.850952][ T36] vhci_hcd: stop threads [ 172.872045][ T36] vhci_hcd: release socket [ 172.888296][ T36] vhci_hcd: disconnect device [ 172.907972][ T36] vhci_hcd: stop threads [ 173.081957][ T36] vhci_hcd: release socket [ 173.086539][ T36] vhci_hcd: disconnect device [ 173.104344][ T36] vhci_hcd: stop threads [ 173.109061][ T36] vhci_hcd: release socket [ 173.129360][ T36] vhci_hcd: disconnect device [ 173.790567][ T5917] usb usb36-port1: attempt power cycle [ 175.259962][ T5917] usb usb36-port1: unable to enumerate USB device [ 175.508461][ T6462] team0: Port device team_slave_0 added [ 175.519186][ T1224] usb 2-1: USB disconnect, device number 7 [ 175.567095][ T6462] team0: Port device team_slave_1 added [ 175.629185][ T5917] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.723247][ T6699] mkiss: ax0: crc mode is auto. [ 175.771213][ T24] vhci_hcd: vhci_device speed not set [ 175.781290][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.781320][ T5917] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 175.781355][ T5917] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 175.781372][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.788508][ T5917] usb 3-1: config 0 descriptor?? [ 175.885577][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.885598][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.885639][ T6462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.887711][ T6462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.887727][ T6462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.887766][ T6462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.174861][ T6462] hsr_slave_0: entered promiscuous mode [ 176.175993][ T6462] hsr_slave_1: entered promiscuous mode [ 176.178775][ T6462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.178819][ T6462] Cannot create hsr debugfs directory [ 176.184245][ T6711] netlink: 104 bytes leftover after parsing attributes in process `syz.0.166'. [ 176.433581][ T6716] IPv6: Can't replace route, no match found [ 176.924322][ T6733] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 176.930985][ T6733] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 176.959827][ T6733] vhci_hcd vhci_hcd.0: Device attached [ 177.018413][ T6735] x_tables: duplicate underflow at hook 1 [ 177.034574][ T5879] usb usb34-port1: attempt power cycle [ 177.043865][ T6739] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 177.050500][ T6739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 177.066403][ T6739] vhci_hcd vhci_hcd.0: Device attached [ 177.092843][ T6462] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 177.104256][ T6462] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 177.115216][ T6733] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.241697][ T59] usb 3-1: USB disconnect, device number 5 [ 177.252052][ T6733] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 177.258708][ T6733] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 177.269092][ T6462] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.271088][ T6733] vhci_hcd vhci_hcd.0: Device attached [ 177.315930][ T6739] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 177.316872][ T6462] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.322559][ T6739] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 177.381662][ T6739] vhci_hcd vhci_hcd.0: Device attached [ 177.440074][ T6739] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.454998][ T6733] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(20) [ 177.461656][ T6733] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 177.476783][ T6739] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 177.590095][ T5879] usb 34-1: SetAddress Request (9) to port 0 [ 177.623820][ T6733] vhci_hcd vhci_hcd.0: Device attached [ 177.630698][ T5879] usb 34-1: new SuperSpeed USB device number 9 using vhci_hcd [ 177.828331][ T6761] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(31) [ 177.834997][ T6761] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 177.953076][ T6761] vhci_hcd vhci_hcd.0: Device attached [ 178.573630][ T6462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.608452][ T6752] vhci_hcd: connection reset by peer [ 178.614844][ T6740] vhci_hcd: connection closed [ 178.615110][ T1105] vhci_hcd: stop threads [ 178.615365][ T6744] vhci_hcd: connection closed [ 178.620039][ T6746] vhci_hcd: connection closed [ 178.632830][ T6736] vhci_hcd: connection closed [ 178.680821][ T1105] vhci_hcd: release socket [ 178.742126][ T6774] FAULT_INJECTION: forcing a failure. [ 178.742126][ T6774] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 178.756987][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz.4.177 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 178.757018][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.757038][ T6774] Call Trace: [ 178.757051][ T6774] [ 178.757063][ T6774] dump_stack_lvl+0x189/0x250 [ 178.757101][ T6774] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.757121][ T6774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.757142][ T6774] ? __pfx__printk+0x10/0x10 [ 178.757166][ T6774] ? __might_fault+0xb0/0x130 [ 178.757197][ T6774] should_fail_ex+0x414/0x560 [ 178.757217][ T6774] _copy_to_user+0x31/0xb0 [ 178.757240][ T6774] simple_read_from_buffer+0xe1/0x170 [ 178.757266][ T6774] proc_fail_nth_read+0x1df/0x250 [ 178.757288][ T6774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.757307][ T6774] ? rw_verify_area+0x258/0x650 [ 178.757327][ T6774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.757344][ T6774] vfs_read+0x200/0x980 [ 178.757381][ T6774] ? __pfx___mutex_lock+0x10/0x10 [ 178.757414][ T6774] ? __pfx_vfs_read+0x10/0x10 [ 178.757435][ T6774] ? __fget_files+0x2a/0x420 [ 178.757452][ T6774] ? __fget_files+0x3a0/0x420 [ 178.757464][ T6774] ? __fget_files+0x2a/0x420 [ 178.757484][ T6774] ksys_read+0x145/0x250 [ 178.757503][ T6774] ? rcu_is_watching+0x15/0xb0 [ 178.757527][ T6774] ? __pfx_ksys_read+0x10/0x10 [ 178.757551][ T6774] ? do_syscall_64+0xba/0x210 [ 178.757573][ T6774] do_syscall_64+0xf6/0x210 [ 178.757592][ T6774] ? asm_sysvec_call_function_single+0x1a/0x20 [ 178.757607][ T6774] ? clear_bhb_loop+0x60/0xb0 [ 178.757625][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.757639][ T6774] RIP: 0033:0x7f4cb6b8d37c [ 178.757661][ T6774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.757673][ T6774] RSP: 002b:00007f4cb7a6e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.757689][ T6774] RAX: ffffffffffffffda RBX: 00007f4cb6db6080 RCX: 00007f4cb6b8d37c [ 178.757700][ T6774] RDX: 000000000000000f RSI: 00007f4cb7a6e0a0 RDI: 0000000000000006 [ 178.757709][ T6774] RBP: 00007f4cb7a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 178.757717][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.757725][ T6774] R13: 0000000000000000 R14: 00007f4cb6db6080 R15: 00007ffe1fdd2998 [ 178.757747][ T6774] [ 178.760549][ T6462] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.778140][ T1105] vhci_hcd: disconnect device [ 179.460117][ T5933] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.467378][ T5933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.520647][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.527851][ T6209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.553500][ T1105] vhci_hcd: stop threads [ 179.640901][ T1105] vhci_hcd: release socket [ 179.666197][ T1105] vhci_hcd: disconnect device [ 179.683831][ T1105] vhci_hcd: stop threads [ 179.720903][ T1105] vhci_hcd: release socket [ 179.742321][ T1105] vhci_hcd: disconnect device [ 179.758217][ T1105] vhci_hcd: stop threads [ 179.777629][ T1105] vhci_hcd: release socket [ 179.787819][ T1105] vhci_hcd: disconnect device [ 179.805895][ T1105] vhci_hcd: stop threads [ 179.821263][ T1105] vhci_hcd: release socket [ 179.830756][ T1105] vhci_hcd: disconnect device [ 180.918107][ T6789] cgroup: fork rejected by pids controller in /syz1 [ 181.005071][ T6762] vhci_hcd: connection closed [ 181.576422][ T1105] vhci_hcd: stop threads [ 181.688300][ T1105] vhci_hcd: release socket [ 181.751883][ T1105] vhci_hcd: disconnect device [ 184.151403][ T5879] usb 34-1: device descriptor read/8, error -110 [ 184.309466][ T5879] usb usb34-port1: unable to enumerate USB device [ 184.385764][ T24] vhci_hcd: vhci_device speed not set [ 184.449967][ T5878] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 184.633010][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.687446][ T5878] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 184.756526][ T5878] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 184.791035][ T8676] delete_channel: no stack [ 184.804495][ T8676] delete_channel: no stack [ 184.845730][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.041752][ T5878] usb 1-1: config 0 descriptor?? [ 185.763299][ T6462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.864916][ T1224] usb 1-1: USB disconnect, device number 7 [ 186.382522][ T8703] netlink: 'syz.4.189': attribute type 1 has an invalid length. [ 187.109981][ T8711] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 187.116653][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 187.149628][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 187.196960][ T8711] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 187.203616][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.277878][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 187.502179][ T8722] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 187.652421][ T8711] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(16) [ 187.659082][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 187.894025][ T8722] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 187.900711][ T8722] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 188.003431][ T24] vhci_hcd: vhci_device speed not set [ 188.114157][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 188.134471][ T8722] vhci_hcd vhci_hcd.0: Device attached [ 188.172169][ T24] usb 33-1: new full-speed USB device number 5 using vhci_hcd [ 188.216823][ T8729] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(23) [ 188.223484][ T8729] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 188.364156][ T8711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 188.399949][ T6462] veth0_vlan: entered promiscuous mode [ 188.408138][ T8711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 188.594425][ T6462] veth1_vlan: entered promiscuous mode [ 188.610340][ T8729] vhci_hcd vhci_hcd.0: Device attached [ 188.767423][ T8741] Invalid ELF header magic: != ELF [ 189.758350][ T8711] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(31) [ 189.765018][ T8711] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 189.789596][ T6462] veth0_macvtap: entered promiscuous mode [ 189.797775][ T8711] vhci_hcd vhci_hcd.0: Device attached [ 189.806109][ T6462] veth1_macvtap: entered promiscuous mode [ 189.834115][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.857707][ T6462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.867211][ T8725] vhci_hcd: connection closed [ 189.869301][ T8731] vhci_hcd: connection closed [ 189.879670][ T13] vhci_hcd: stop threads [ 189.893105][ T8713] vhci_hcd: connection reset by peer [ 189.898695][ T8723] vhci_hcd: connection closed [ 189.898980][ T8717] vhci_hcd: connection closed [ 189.923379][ T13] vhci_hcd: release socket [ 189.950958][ T13] vhci_hcd: disconnect device [ 189.956173][ T13] vhci_hcd: stop threads [ 189.967209][ T13] vhci_hcd: release socket [ 189.967315][ T6462] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.998454][ T13] vhci_hcd: disconnect device [ 190.014154][ T13] vhci_hcd: stop threads [ 190.037942][ T13] vhci_hcd: release socket [ 190.047039][ T13] vhci_hcd: disconnect device [ 190.055827][ T6462] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.075284][ T13] vhci_hcd: stop threads [ 190.088484][ T6462] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.098731][ T13] vhci_hcd: release socket [ 190.114094][ T13] vhci_hcd: disconnect device [ 190.125855][ T6462] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.213163][ T13] vhci_hcd: stop threads [ 190.217631][ T13] vhci_hcd: release socket [ 190.223897][ T13] vhci_hcd: disconnect device [ 190.328435][ T8751] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 190.336985][ T8751] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 190.346532][ T8751] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 190.354454][ T8751] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 191.129736][ T8740] vhci_hcd: connection closed [ 191.131866][ T199] vhci_hcd: stop threads [ 191.389020][ T199] vhci_hcd: release socket [ 191.394297][ T199] vhci_hcd: disconnect device [ 191.402089][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'. [ 192.093498][ T8755] geneve2: entered promiscuous mode [ 192.129938][ T8755] geneve2: entered allmulticast mode [ 192.310299][ T1224] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 192.372954][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.422472][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.521442][ T1224] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.537534][ T1224] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 192.571410][ T6209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.581032][ T1224] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 192.601987][ T6209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.619756][ T5880] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 192.632025][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.687334][ T1224] usb 3-1: config 0 descriptor?? [ 192.819458][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 193.499654][ T24] vhci_hcd: vhci_device speed not set [ 193.632868][ T5880] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 193.657394][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 193.668068][ T5880] usb 5-1: Product: syz [ 193.673086][ T5880] usb 5-1: Manufacturer: syz [ 193.678253][ T5880] usb 5-1: SerialNumber: syz [ 193.787055][ T5880] usb 5-1: config 0 descriptor?? [ 194.298262][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.304716][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.305355][ T1224] usb 3-1: USB disconnect, device number 6 [ 194.403552][ T5880] gspca_main: sq905-2.14.0 probing 2770:9120 [ 194.828641][ T8790] x_tables: duplicate underflow at hook 1 [ 195.607558][ T5880] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 195.619037][ T5880] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 195.640641][ T5880] usb 5-1: USB disconnect, device number 3 [ 195.810705][ T5936] usb usb34-port1: attempt power cycle [ 196.936466][ T5936] usb usb34-port1: unable to enumerate USB device [ 197.060921][ T8815] geneve2: entered promiscuous mode [ 197.084952][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 197.480967][ T5936] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 197.510005][ T8815] geneve2: entered allmulticast mode [ 197.644407][ T5936] usb 1-1: device descriptor read/64, error -71 [ 198.124756][ T8832] netlink: 'syz.1.213': attribute type 24 has an invalid length. [ 198.183705][ T5936] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 198.869802][ T5936] usb 1-1: device descriptor read/64, error -71 [ 198.980307][ T5936] usb usb1-port1: attempt power cycle [ 199.349426][ T24] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 199.359075][ T5936] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 199.412898][ T5936] usb 1-1: device descriptor read/8, error -71 [ 199.538173][ T24] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 199.568051][ T24] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 199.590387][ T24] usb 2-1: config 0 has no interface number 0 [ 199.596543][ T24] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 199.847158][ T5936] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 200.173018][ T8853] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 200.737416][ T24] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 200.761131][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 200.942689][ T5936] usb 1-1: device descriptor read/8, error -71 [ 200.949022][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.965560][ T24] usb 2-1: config 0 descriptor?? [ 201.059710][ T5936] usb usb1-port1: unable to enumerate USB device [ 201.519081][ T5839] Bluetooth: hci0: command 0x1407 tx timeout [ 201.578992][ T5826] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 202.011167][ T24] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input6 [ 202.109436][ T24] input: failed to attach handler kbd to device input6, error: -5 [ 203.302125][ T24] usb 2-1: USB disconnect, device number 8 [ 207.174919][ T8921] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 208.939597][ T30] audit: type=1326 audit(1747413239.659:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8936 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 209.138268][ T8944] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 209.216107][ T30] audit: type=1326 audit(1747413239.659:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8936 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 209.238308][ T30] audit: type=1326 audit(1747413239.669:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8936 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 209.266498][ T30] audit: type=1326 audit(1747413239.669:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8936 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 209.300414][ T8942] ip6tnl1: entered promiscuous mode [ 209.305664][ T8942] ip6tnl1: entered allmulticast mode [ 209.329059][ T8944] CIFS mount error: No usable UNC path provided in device string! [ 209.329059][ T8944] [ 209.359369][ T30] audit: type=1326 audit(1747413239.669:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8936 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b378e969 code=0x7ffc0000 [ 209.394401][ T8944] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 209.459770][ T8944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.653214][ T5917] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 213.012318][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 213.022402][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 213.828789][ T8976] x_tables: duplicate underflow at hook 1 [ 214.829094][ T8984] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 216.279346][ T5880] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 216.492517][ T5880] usb 5-1: device descriptor read/64, error -71 [ 216.705266][ T9013] overlayfs: missing 'lowerdir' [ 216.826324][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 216.826341][ T5130] Bluetooth: hci2: command 0x0406 tx timeout [ 216.833885][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 216.838750][ T5830] Bluetooth: hci0: command 0x1407 tx timeout [ 216.866849][ T9014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.254'. [ 217.247901][ T5880] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 217.429031][ T5880] usb 5-1: device descriptor read/64, error -71 [ 217.523274][ T9020] openvswitch: netlink: IP tunnel dst address not specified [ 218.169610][ T5880] usb usb5-port1: attempt power cycle [ 219.792362][ T30] audit: type=1326 audit(1747413250.529:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9035 comm="syz.5.260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2276b8e969 code=0x0 [ 222.775307][ T9055] evm: overlay not supported [ 223.427872][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 223.853355][ T9077] mmap: syz.5.269 (9077) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 227.112273][ T5886] IPVS: starting estimator thread 0... [ 227.768417][ T9121] IPVS: using max 28 ests per chain, 67200 per kthread [ 228.008612][ T9132] nfs4: Unknown parameter 'H"㍢f5X:d [ 228.008612][ T9132] n"pm-wSY2E4 ۡx\x$Q#cʷhz/hmO>mLcm^' [ 228.087392][ T9139] FAULT_INJECTION: forcing a failure. [ 228.087392][ T9139] name failslab, interval 1, probability 0, space 0, times 0 [ 228.150700][ T9139] CPU: 1 UID: 0 PID: 9139 Comm: syz.1.283 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(full) [ 228.150730][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.150741][ T9139] Call Trace: [ 228.150749][ T9139] [ 228.150758][ T9139] dump_stack_lvl+0x189/0x250 [ 228.150793][ T9139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.150819][ T9139] ? __pfx__printk+0x10/0x10 [ 228.150857][ T9139] ? __pfx___might_resched+0x10/0x10 [ 228.150904][ T9139] ? fs_reclaim_acquire+0x7d/0x100 [ 228.150933][ T9139] should_fail_ex+0x414/0x560 [ 228.150961][ T9139] should_failslab+0xa8/0x100 [ 228.150983][ T9139] __kmalloc_cache_noprof+0x70/0x3d0 [ 228.151015][ T9139] ? netlbl_mgmt_add_common+0x6a1/0x13b0 [ 228.151059][ T9139] netlbl_mgmt_add_common+0x6a1/0x13b0 [ 228.151106][ T9139] netlbl_mgmt_add+0x2ae/0x340 [ 228.151139][ T9139] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 228.151172][ T9139] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 228.151214][ T9139] genl_family_rcv_msg_doit+0x212/0x300 [ 228.151255][ T9139] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 228.151301][ T9139] ? bpf_lsm_capable+0x9/0x20 [ 228.151329][ T9139] ? security_capable+0x7e/0x2e0 [ 228.151365][ T9139] genl_rcv_msg+0x60e/0x790 [ 228.151414][ T9139] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.151442][ T9139] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 228.151485][ T9139] netlink_rcv_skb+0x219/0x490 [ 228.151509][ T9139] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.151539][ T9139] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.151586][ T9139] ? down_read+0x1ad/0x2e0 [ 228.151616][ T9139] genl_rcv+0x28/0x40 [ 228.151643][ T9139] netlink_unicast+0x75b/0x8d0 [ 228.151675][ T9139] netlink_sendmsg+0x805/0xb30 [ 228.151696][ T9139] ? is_bpf_text_address+0x26/0x2b0 [ 228.151736][ T9139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.151768][ T9139] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.151789][ T9139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.151813][ T9139] __sock_sendmsg+0x219/0x270 [ 228.151837][ T9139] ____sys_sendmsg+0x505/0x830 [ 228.151870][ T9139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.151907][ T9139] ? import_iovec+0x74/0xa0 [ 228.151938][ T9139] ___sys_sendmsg+0x21f/0x2a0 [ 228.151968][ T9139] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.152034][ T9139] ? __fget_files+0x2a/0x420 [ 228.152058][ T9139] ? __fget_files+0x3a0/0x420 [ 228.152087][ T9139] __x64_sys_sendmsg+0x19b/0x260 [ 228.152117][ T9139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.152162][ T9139] ? do_syscall_64+0xba/0x210 [ 228.152193][ T9139] do_syscall_64+0xf6/0x210 [ 228.152220][ T9139] ? clear_bhb_loop+0x60/0xb0 [ 228.152245][ T9139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.152264][ T9139] RIP: 0033:0x7ff9b378e969 [ 228.152280][ T9139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.152297][ T9139] RSP: 002b:00007ff9b4574038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.152317][ T9139] RAX: ffffffffffffffda RBX: 00007ff9b39b5fa0 RCX: 00007ff9b378e969 [ 228.152331][ T9139] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000004 [ 228.152343][ T9139] RBP: 00007ff9b4574090 R08: 0000000000000000 R09: 0000000000000000 [ 228.152355][ T9139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.152366][ T9139] R13: 0000000000000000 R14: 00007ff9b39b5fa0 R15: 00007fffcc03ae18 [ 228.152397][ T9139] [ 228.595470][ T9146] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 228.595470][ T9146] The task syz.5.284 (9146) triggered the difference, watch for misbehavior. [ 229.702041][ T9153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.286'. [ 229.729360][ T9153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.286'. [ 229.980002][ T5190] udevd[5190]: worker [6107] terminated by signal 33 (Unknown signal 33) [ 229.988691][ T5190] udevd[5190]: worker [6107] failed while handling '/devices/virtual/block/loop1' [ 230.851999][ T9169] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 231.252391][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 231.459707][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 231.478776][ T9] usb 5-1: config 8 has an invalid interface number: 39 but max is 0 [ 231.496192][ T9] usb 5-1: config 8 has no interface number 0 [ 231.505960][ T9] usb 5-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 231.528166][ T9] usb 5-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 231.540265][ T9192] IPVS: set_ctl: invalid protocol: 115 224.0.0.1:20002 [ 231.546273][ T9] usb 5-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 231.571425][ T9] usb 5-1: config 8 interface 39 has no altsetting 0 [ 231.593101][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 231.681747][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.681779][ T9] usb 5-1: Product: syz [ 231.681803][ T9] usb 5-1: Manufacturer: syz [ 231.681819][ T9] usb 5-1: SerialNumber: syz [ 233.242939][ T9] ipheth 5-1:8.39: ipheth_enable_ncm: usb_control_msg: 0 [ 233.374768][ T9] ipheth 5-1:8.39: Apple iPhone USB Ethernet device attached [ 233.465968][ T9] usb 5-1: USB disconnect, device number 7 [ 233.638375][ T9] ipheth 5-1:8.39: Apple iPhone USB Ethernet now disconnected [ 234.149157][ T5880] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 235.163821][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 235.677823][ T5880] usb 3-1: config 0 has no interfaces? [ 235.760786][ T5880] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.906011][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.216413][ T9234] trusted_key: encrypted_key: master key parameter 'use:syz' is invalid [ 237.110578][ T5880] usb 3-1: config 0 descriptor?? [ 237.214406][ T5880] usb 3-1: can't set config #0, error -71 [ 237.246069][ T5880] usb 3-1: USB disconnect, device number 7 [ 238.543070][ T9260] bridge1: entered promiscuous mode [ 239.670346][ T9269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.313'. [ 242.483334][ T5838] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 243.171621][ T9304] fuse: Unknown parameter 'fp7C 0b e8 18 91 c8 ff 48 8b 3c 24 48 c7 c6 00 10 74 8b e8 38 a6 0d [ 306.145529][T10418] RSP: 0018:ffffc90004b8f3e0 EFLAGS: 00010246 [ 306.151707][T10418] RAX: 998732eaca47cf00 RBX: ffffea0001ac0b80 RCX: 998732eaca47cf00 [ 306.159698][T10418] RDX: 0000000000000000 RSI: ffffffff8d922c9b RDI: ffff88807f820000 [ 306.167684][T10418] RBP: ffffc90004b8f518 R08: 0000000000000003 R09: 0000000000000004 [ 306.175658][T10418] R10: dffffc0000000000 R11: fffffbfff1bba944 R12: dffffc0000000000 [ 306.183637][T10418] R13: 1ffffd4000358171 R14: ffffea0001ac0b98 R15: ffffea0001ac0b88 [ 306.191622][T10418] FS: 00007f227792a6c0(0000) GS:ffff8881260f9000(0000) knlGS:0000000000000000 [ 306.200637][T10418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.207219][T10418] CR2: 0000200000001b94 CR3: 000000005cf2a000 CR4: 00000000003526f0 [ 306.215195][T10418] Call Trace: [ 306.218481][T10418] [ 306.221443][T10418] ? __pfx_filemap_fault+0x10/0x10 [ 306.226559][T10418] ? __handle_mm_fault+0x280a/0x5380 [ 306.231855][T10418] __do_fault+0x135/0x390 [ 306.236196][T10418] __handle_mm_fault+0x363e/0x5380 [ 306.241359][T10418] ? __pfx___handle_mm_fault+0x10/0x10 [ 306.246837][T10418] ? find_vma+0xe7/0x160 [ 306.251083][T10418] ? __pfx_find_vma+0x10/0x10 [ 306.255755][T10418] handle_mm_fault+0x2d5/0x7f0 [ 306.260521][T10418] do_user_addr_fault+0x764/0x1390 [ 306.265648][T10418] exc_page_fault+0x68/0x110 [ 306.270250][T10418] asm_exc_page_fault+0x26/0x30 [ 306.275096][T10418] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 306.280837][T10418] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 306.300456][T10418] RSP: 0018:ffffc90004b8f998 EFLAGS: 00050202 [ 306.306553][T10418] RAX: 00007ffffffff001 RBX: 0000000000000001 RCX: 0000000000000001 [ 306.314522][T10418] RDX: 0000000000000001 RSI: 0000200000001b94 RDI: ffff888033bb48d4 [ 306.322516][T10418] RBP: 000000000000d72c R08: ffff888033bb48d4 R09: 1ffff1100677691a [ 306.330492][T10418] R10: dffffc0000000000 R11: ffffed100677691b R12: 0000000000000000 [ 306.338464][T10418] R13: 0000000000000001 R14: ffff888033bb48d4 R15: 0000200000001b94 [ 306.346453][T10418] _copy_from_user+0x7a/0xb0 [ 306.351078][T10418] snd_rawmidi_kernel_write1+0x3ab/0x650 [ 306.356753][T10418] snd_rawmidi_write+0x5ad/0xbd0 [ 306.361741][T10418] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 306.367225][T10418] ? __pfx_default_wake_function+0x10/0x10 [ 306.373054][T10418] ? __import_iovec+0x40e/0x7f0 [ 306.377917][T10418] ? bpf_lsm_file_permission+0x9/0x20 [ 306.383318][T10418] ? security_file_permission+0x75/0x290 [ 306.388978][T10418] ? rw_verify_area+0x258/0x650 [ 306.393856][T10418] vfs_writev+0x4a2/0x9a0 [ 306.398195][T10418] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 306.403668][T10418] ? __pfx_vfs_writev+0x10/0x10 [ 306.408577][T10418] ? __fget_files+0x2a/0x420 [ 306.413170][T10418] ? __fget_files+0x3a0/0x420 [ 306.417845][T10418] ? __fget_files+0x2a/0x420 [ 306.422437][T10418] do_writev+0x14d/0x2d0 [ 306.426691][T10418] ? __pfx_do_writev+0x10/0x10 [ 306.431498][T10418] ? do_syscall_64+0xba/0x210 [ 306.436183][T10418] do_syscall_64+0xf6/0x210 [ 306.440719][T10418] ? clear_bhb_loop+0x60/0xb0 [ 306.445398][T10418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.451311][T10418] RIP: 0033:0x7f2276b8e969 [ 306.455727][T10418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.475358][T10418] RSP: 002b:00007f227792a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 306.483786][T10418] RAX: ffffffffffffffda RBX: 00007f2276db5fa0 RCX: 00007f2276b8e969 [ 306.491776][T10418] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 306.499778][T10418] RBP: 00007f2276c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 306.507785][T10418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.515790][T10418] R13: 0000000000000000 R14: 00007f2276db5fa0 R15: 00007ffca5598ed8 [ 306.523800][T10418] [ 306.526846][T10418] Modules linked in: [ 306.533099][T10418] ---[ end trace 0000000000000000 ]--- [ 306.538596][T10418] RIP: 0010:filemap_fault+0x1181/0x1200 [ 306.544189][T10418] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 b9 64 28 00 e9 81 fc ff ff e8 2f 91 c8 ff 48 89 df 48 c7 c6 80 09 74 8b e8 50 a6 0d 00 90 <0f> 0b e8 18 91 c8 ff 48 8b 3c 24 48 c7 c6 00 10 74 8b e8 38 a6 0d [ 306.564398][T10418] RSP: 0018:ffffc90004b8f3e0 EFLAGS: 00010246 [ 306.570529][T10418] RAX: 998732eaca47cf00 RBX: ffffea0001ac0b80 RCX: 998732eaca47cf00 [ 306.578557][T10418] RDX: 0000000000000000 RSI: ffffffff8d922c9b RDI: ffff88807f820000 [ 306.586578][T10418] RBP: ffffc90004b8f518 R08: 0000000000000003 R09: 0000000000000004 [ 306.594609][T10418] R10: dffffc0000000000 R11: fffffbfff1bba944 R12: dffffc0000000000 [ 306.602725][T10418] R13: 1ffffd4000358171 R14: ffffea0001ac0b98 R15: ffffea0001ac0b88 [ 306.610755][T10418] FS: 00007f227792a6c0(0000) GS:ffff8881260f9000(0000) knlGS:0000000000000000 [ 306.619735][T10418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.626348][T10418] CR2: 0000200000001b94 CR3: 000000005cf2a000 CR4: 00000000003526f0 [ 306.634386][T10418] Kernel panic - not syncing: Fatal exception [ 306.640915][T10418] Kernel Offset: disabled [ 306.645242][T10418] Rebooting in 86400 seconds..