last executing test programs: 2.336217432s ago: executing program 0 (id=430): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x16, 0x5, 0x1, 0x5, 0x0, 0xffffffff, 0x7fffffff}}, {0x4}}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.934429506s ago: executing program 0 (id=433): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0xd8, 0x6, 0x8}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}], 0x38) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000980)) 1.81339643s ago: executing program 3 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_FLAGS={0x8, 0x8, 0x600}]}, 0x28}}, 0x0) 1.755415681s ago: executing program 2 (id=436): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe43, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r0}, 0x10) memfd_secret(0x0) 1.672996593s ago: executing program 0 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x8, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000000c0)={0x500, 0x4b0, 0x500, 0x0, 0x0, 0x6, 0xf, 0x2, {0x7, 0x0, 0x1}, {0x1ff, 0x7}, {0x7, 0x200}, {0x10000, 0x800, 0x1}, 0x1, 0x90, 0x9, 0x1ff, 0x0, 0xfffffffc, 0x7, 0x3d, 0x4, 0x9, 0x8, 0x5, 0x4, 0x200, 0x0, 0x6}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000100), 0x0}, 0x20) 1.585981229s ago: executing program 3 (id=440): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.564078978s ago: executing program 2 (id=441): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9b04}}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000100021040200"/20, @ANYRES32=r1, @ANYBLOB="f900000000000000240012800c0001006d6163766c616e00140002800800010010000000080003"], 0x4c}}, 0x0) 1.432621114s ago: executing program 3 (id=443): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff5000/0x3000)=nil, 0x3000, &(0x7f0000000040)='}\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0xdcdfeeb0) 1.403907003s ago: executing program 4 (id=444): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(ghash-generic)\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x0) 1.384059167s ago: executing program 2 (id=445): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)='\b-~', 0x3}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="8000000000000000170100000200000069000000be2602b4f86bb41899deb31ed15dac8d02c7f601755aedd7f5a98776b959e4a235a8c1c1007ba9fcc1b31a5d68030e04008c2495d7bc91e83ae8eaeca56fedc84caa506e34bbf9884ffa577043c1e83607c5e62f67ac70c940e3c19b91dee61939a341820974c449b5000000180000000000000017010000030000000100000000000000180000000000000017010000040000003c7700000000000018000000000000001701000004000000020000000000000018000000000000001701000002000000000000000000000018000000000000001701000003000000010000000000000018"], 0x110, 0x8050}, 0x8801) 1.268232504s ago: executing program 0 (id=446): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.243780656s ago: executing program 3 (id=447): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) r1 = syz_io_uring_setup(0x2029, &(0x7f0000000240)={0x0, 0xcc9f, 0x10100, 0x0, 0x382}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd=r0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0, 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 1.190697322s ago: executing program 2 (id=448): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="e4d63740a973e36530c9580aefccbbb81ac03bf51ed866370402522185191f5ed3916381dd02a0b0151fcdac7b770fbee07a7f97ba6ff90008a5ad5fc5f6aa16e87939797f5d73e572a7125cdc8835beba75", 0x52}, {&(0x7f0000000d00)="d728791a30c513f18772c69b8b9ff2c850fe5ce247f56ceba7faa4cfb33dcf55cc547f7642f26745574945734f8419", 0x2f}], 0x2}}], 0x1, 0x0) 1.076095286s ago: executing program 1 (id=449): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x48, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0xb}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}]]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1.04412575s ago: executing program 4 (id=450): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.005302574s ago: executing program 3 (id=451): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020011000200040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000090e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 976.210118ms ago: executing program 2 (id=452): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001800)='fd/3\x00') write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 871.825895ms ago: executing program 1 (id=453): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0xb, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 754.512173ms ago: executing program 3 (id=454): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000180)=0x5, 0x4) 692.788921ms ago: executing program 4 (id=455): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xa87, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 691.837788ms ago: executing program 1 (id=456): r0 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000840), &(0x7f0000000880)={'fscrypt:', @desc2}, &(0x7f00000008c0)={0x0, "ed426d436179868323920a5adc54a31b3a64a11b7374298d6245e8c488f527db189552c04e929ebde52f12a666c99a8d8493c5dca674a46be2fb61d699aee7af", 0x39}, 0x48, r0) add_key(&(0x7f00000009c0)='cifs.idmap\x00', &(0x7f0000000a00)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$read(0xb, r0, &(0x7f0000000a80)=""/4, 0x4) 537.337045ms ago: executing program 1 (id=457): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = syz_io_uring_setup(0x1ade, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x12) 536.441297ms ago: executing program 4 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x9, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000200), 0x0}, 0x20) 391.839559ms ago: executing program 4 (id=459): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="8b881420", 0x4}], 0x1}}], 0x1, 0x4000815) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 323.740877ms ago: executing program 1 (id=460): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0xe3d08660d3cd4684}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 239.103941ms ago: executing program 0 (id=461): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003b0007010000000000000000017c0040040000000c00018006000600800a0000090002"], 0x30}}, 0xc000) 193.413054ms ago: executing program 1 (id=462): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x5f, &(0x7f0000000900)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)='P', 0x1}]) 178.808871ms ago: executing program 4 (id=463): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600040001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b", 0x33}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe45) 6.971629ms ago: executing program 2 (id=464): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x6}) 0s ago: executing program 0 (id=465): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. [ 56.963999][ T5809] cgroup: Unknown subsys name 'net' [ 57.116228][ T5809] cgroup: Unknown subsys name 'cpuset' [ 57.123968][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.360091][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.136363][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.160246][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.167866][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.184113][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.194352][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.202413][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.210343][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.215986][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.217442][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.225429][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.235834][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.239879][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.246146][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.252866][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.267690][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.267850][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.276072][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.283073][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.290444][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.295706][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.304141][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.312031][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.318403][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.325512][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.331495][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.345021][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.354338][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.373136][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.380441][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.399534][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.769600][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 62.837815][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 62.959719][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 63.016621][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 63.047489][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.054803][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.062156][ T5820] bridge_slave_0: entered allmulticast mode [ 63.069415][ T5820] bridge_slave_0: entered promiscuous mode [ 63.107719][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.115095][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.122291][ T5820] bridge_slave_1: entered allmulticast mode [ 63.129108][ T5820] bridge_slave_1: entered promiscuous mode [ 63.139102][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 63.207260][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.214839][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.221962][ T5822] bridge_slave_0: entered allmulticast mode [ 63.228870][ T5822] bridge_slave_0: entered promiscuous mode [ 63.274523][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.281678][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.289299][ T5822] bridge_slave_1: entered allmulticast mode [ 63.296681][ T5822] bridge_slave_1: entered promiscuous mode [ 63.305635][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.317475][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.326859][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.337125][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.344433][ T5825] bridge_slave_0: entered allmulticast mode [ 63.351132][ T5825] bridge_slave_0: entered promiscuous mode [ 63.398218][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.405565][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.412696][ T5825] bridge_slave_1: entered allmulticast mode [ 63.419518][ T5825] bridge_slave_1: entered promiscuous mode [ 63.448980][ T5820] team0: Port device team_slave_0 added [ 63.461395][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.469127][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.476661][ T5826] bridge_slave_0: entered allmulticast mode [ 63.483925][ T5826] bridge_slave_0: entered promiscuous mode [ 63.498728][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.510522][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.521484][ T5820] team0: Port device team_slave_1 added [ 63.539980][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.549322][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.556767][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.563966][ T5826] bridge_slave_1: entered allmulticast mode [ 63.570494][ T5826] bridge_slave_1: entered promiscuous mode [ 63.586466][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.594544][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.601665][ T5819] bridge_slave_0: entered allmulticast mode [ 63.608420][ T5819] bridge_slave_0: entered promiscuous mode [ 63.631890][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.649911][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.657313][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.665040][ T5819] bridge_slave_1: entered allmulticast mode [ 63.671588][ T5819] bridge_slave_1: entered promiscuous mode [ 63.689750][ T5822] team0: Port device team_slave_0 added [ 63.713890][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.727305][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.752157][ T5822] team0: Port device team_slave_1 added [ 63.766593][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.773884][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.800590][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.844018][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.857271][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.873950][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.880916][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.910022][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.924551][ T5825] team0: Port device team_slave_0 added [ 63.932673][ T5826] team0: Port device team_slave_0 added [ 63.945394][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.952353][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.978529][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.996988][ T5825] team0: Port device team_slave_1 added [ 64.005776][ T5826] team0: Port device team_slave_1 added [ 64.017848][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.024986][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.051613][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.086740][ T5819] team0: Port device team_slave_0 added [ 64.126245][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.133531][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.159593][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.174342][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.181299][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.207290][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.220343][ T5819] team0: Port device team_slave_1 added [ 64.235008][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.241984][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.268567][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.291206][ T5820] hsr_slave_0: entered promiscuous mode [ 64.297430][ T5820] hsr_slave_1: entered promiscuous mode [ 64.317931][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.325335][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.351449][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.366424][ T5822] hsr_slave_0: entered promiscuous mode [ 64.372707][ T5822] hsr_slave_1: entered promiscuous mode [ 64.378893][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.387000][ T5822] Cannot create hsr debugfs directory [ 64.424036][ T5838] Bluetooth: hci0: command tx timeout [ 64.424040][ T5835] Bluetooth: hci1: command tx timeout [ 64.433219][ T5840] Bluetooth: hci4: command tx timeout [ 64.436501][ T5835] Bluetooth: hci3: command tx timeout [ 64.447423][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.454650][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.480669][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.493532][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.500489][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.526510][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.537117][ T5835] Bluetooth: hci2: command tx timeout [ 64.576078][ T5825] hsr_slave_0: entered promiscuous mode [ 64.582238][ T5825] hsr_slave_1: entered promiscuous mode [ 64.592130][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.599789][ T5825] Cannot create hsr debugfs directory [ 64.681338][ T5826] hsr_slave_0: entered promiscuous mode [ 64.688380][ T5826] hsr_slave_1: entered promiscuous mode [ 64.694780][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.702341][ T5826] Cannot create hsr debugfs directory [ 64.757502][ T5819] hsr_slave_0: entered promiscuous mode [ 64.766567][ T5819] hsr_slave_1: entered promiscuous mode [ 64.772379][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.780007][ T5819] Cannot create hsr debugfs directory [ 65.021944][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.040771][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.054271][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.065057][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.091186][ T5820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.105192][ T5820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.115868][ T5820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.144334][ T5820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.181516][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.205341][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.216274][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.227264][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.306461][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.315445][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.336414][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.347630][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.380990][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.440695][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.454642][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.467527][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.477163][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.501099][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.543002][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.550358][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.562770][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.589572][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.596695][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.612471][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.674271][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.690264][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.707298][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.714495][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.738045][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.745188][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.781278][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.788454][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.801228][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.808341][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.831209][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.900497][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.942967][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.975667][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.997476][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.004646][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.022469][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.029635][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.065694][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.114975][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.191024][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.198185][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.238919][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.246082][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.269574][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.304227][ T5826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.315229][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.334657][ T5822] veth0_vlan: entered promiscuous mode [ 66.347059][ T5822] veth1_vlan: entered promiscuous mode [ 66.452180][ T5822] veth0_macvtap: entered promiscuous mode [ 66.502090][ T5820] veth0_vlan: entered promiscuous mode [ 66.504391][ T5835] Bluetooth: hci3: command tx timeout [ 66.510726][ T5840] Bluetooth: hci0: command tx timeout [ 66.513013][ T5838] Bluetooth: hci4: command tx timeout [ 66.518915][ T53] Bluetooth: hci1: command tx timeout [ 66.544114][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.553837][ T5822] veth1_macvtap: entered promiscuous mode [ 66.571949][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.583903][ T5840] Bluetooth: hci2: command tx timeout [ 66.599523][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.617539][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.636430][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.661307][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.670750][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.681661][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.697008][ T5820] veth1_vlan: entered promiscuous mode [ 66.808045][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.849789][ T5825] veth0_vlan: entered promiscuous mode [ 66.882950][ T5820] veth0_macvtap: entered promiscuous mode [ 66.896121][ T5825] veth1_vlan: entered promiscuous mode [ 66.934829][ T5820] veth1_macvtap: entered promiscuous mode [ 66.952346][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.965920][ T5825] veth0_macvtap: entered promiscuous mode [ 66.976870][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.015804][ T5825] veth1_macvtap: entered promiscuous mode [ 67.031131][ T5826] veth0_vlan: entered promiscuous mode [ 67.045733][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.056946][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.071443][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.082166][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.100238][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.105830][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.119132][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.134667][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.146967][ T5826] veth1_vlan: entered promiscuous mode [ 67.161569][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.172455][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.182772][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.194074][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.206210][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.219297][ T5820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.228552][ T5820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.247186][ T5820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.256319][ T5820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.280783][ T5819] veth0_vlan: entered promiscuous mode [ 67.289644][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.290213][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.301424][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.326882][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.337707][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.348488][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.368772][ T5819] veth1_vlan: entered promiscuous mode [ 67.385874][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.406107][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.418698][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.430112][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.450426][ T5826] veth0_macvtap: entered promiscuous mode [ 67.492357][ T5826] veth1_macvtap: entered promiscuous mode [ 67.586690][ T5819] veth0_macvtap: entered promiscuous mode [ 67.604325][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.615144][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.632366][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.644390][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.661389][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.672569][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.690121][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.706751][ T5819] veth1_macvtap: entered promiscuous mode [ 67.719252][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.736099][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.749849][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.769021][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.782000][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.802493][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.821108][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.862075][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.871439][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.880389][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.889226][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.941948][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.945343][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.962251][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.972663][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.975890][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.984586][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.000449][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.011365][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.022972][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.035087][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.059893][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.105261][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.119207][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.129566][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.141663][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.151859][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.162772][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.174468][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.185306][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.197055][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.229898][ T5819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.240806][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.250570][ T5819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.260010][ T5819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.272826][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.291985][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.371257][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.383278][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.451559][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.470944][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.516362][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.516572][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.549365][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.549717][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.583808][ T5840] Bluetooth: hci0: command tx timeout [ 68.589305][ T53] Bluetooth: hci1: command tx timeout [ 68.589332][ T5838] Bluetooth: hci4: command tx timeout [ 68.594803][ T53] Bluetooth: hci3: command tx timeout [ 68.665165][ T53] Bluetooth: hci2: command tx timeout [ 68.694472][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.702334][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.742571][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.759178][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.118162][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.477212][ T5942] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 69.769865][ T5951] ALSA: mixer_oss: invalid OSS volume '·' [ 69.827809][ T5958] bond0: entered promiscuous mode [ 69.843254][ T5958] bond_slave_0: entered promiscuous mode [ 69.849136][ T5958] bond_slave_1: entered promiscuous mode [ 69.877789][ T5961] process 'syz.1.20' launched './file0' with NULL argv: empty string added [ 69.888365][ T5958] batadv0: entered promiscuous mode [ 69.952160][ T5958] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 70.121704][ T5968] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 70.334045][ T5972] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.665692][ T53] Bluetooth: hci3: command tx timeout [ 70.671159][ T53] Bluetooth: hci0: command tx timeout [ 70.673785][ T5840] Bluetooth: hci4: command tx timeout [ 70.676768][ T53] Bluetooth: hci1: command tx timeout [ 70.743857][ T53] Bluetooth: hci2: command tx timeout [ 70.851041][ T5877] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.942795][ T5998] netlink: 'syz.2.37': attribute type 11 has an invalid length. [ 71.071025][ T5877] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 71.090619][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.124598][ T5877] usb 5-1: config 0 descriptor?? [ 71.634074][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.639234][ T6026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 71.640544][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.857056][ T6030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.923616][ T6030] warning: `syz.2.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 71.952345][ T5877] usb 5-1: Cannot set autoneg [ 71.967099][ T5877] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 72.015057][ T5877] usb 5-1: USB disconnect, device number 2 [ 72.232647][ T5917] kernel write not supported for file /snd/seq (pid: 5917 comm: kworker/0:8) [ 72.763443][ T5877] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.935915][ T6069] team_slave_0: entered promiscuous mode [ 72.941855][ T6069] team_slave_1: entered promiscuous mode [ 72.955501][ T5877] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 72.976563][ T5877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.004080][ T5877] usb 4-1: config 0 has no interface number 0 [ 73.010572][ T6069] macvlan2: entered promiscuous mode [ 73.022276][ T6069] team0: entered promiscuous mode [ 73.027856][ T5877] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 73.050304][ T6069] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 73.062488][ T5877] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.098163][ T6069] bridge0: port 3(macvlan2) entered blocking state [ 73.105912][ T6069] bridge0: port 3(macvlan2) entered disabled state [ 73.114722][ T6069] macvlan2: entered allmulticast mode [ 73.114862][ T5877] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 73.129841][ T6069] team0: entered allmulticast mode [ 73.135308][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.145243][ T5877] usb 4-1: Product: syz [ 73.149430][ T5877] usb 4-1: Manufacturer: syz [ 73.154170][ T6069] team_slave_0: entered allmulticast mode [ 73.160189][ T5877] usb 4-1: SerialNumber: syz [ 73.164941][ T6069] team_slave_1: entered allmulticast mode [ 73.175111][ T5877] usb 4-1: config 0 descriptor?? [ 73.189189][ T6069] bridge0: port 3(macvlan2) entered blocking state [ 73.196009][ T6069] bridge0: port 3(macvlan2) entered forwarding state [ 73.265412][ T29] audit: type=1326 audit(1738928974.425:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2fd8cde9 code=0x7ffc0000 [ 73.286589][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.347328][ T29] audit: type=1326 audit(1738928974.445:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2fd8cde9 code=0x7ffc0000 [ 73.429787][ T29] audit: type=1326 audit(1738928974.445:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2fd8cde9 code=0x7ffc0000 [ 73.502670][ T29] audit: type=1326 audit(1738928974.445:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2fd8cde9 code=0x7ffc0000 [ 73.523827][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.574586][ T29] audit: type=1326 audit(1738928974.445:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fda2fd8cde9 code=0x7ffc0000 [ 73.611501][ T29] audit: type=1326 audit(1738928974.445:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2fd8cde9 code=0x7ffc0000 [ 73.644415][ T29] audit: type=1326 audit(1738928974.445:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6082 comm="syz.1.76" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda2fd8cde9 code=0x7ffc0000 [ 73.817054][ T5877] usb 4-1: USB disconnect, device number 2 [ 74.803545][ T5876] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 74.970285][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 74.979234][ T5876] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.989327][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.996081][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.00 [ 75.005377][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.019529][ T5876] usb 2-1: config 0 descriptor?? [ 75.183280][ T974] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.380590][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 75.391050][ T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 75.410738][ T974] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 75.422928][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.446991][ T974] usb 1-1: config 0 descriptor?? [ 75.472042][ T5876] apple 0003:05AC:0304.0001: unexpected long global item [ 75.482760][ T5876] apple 0003:05AC:0304.0001: parse failed [ 75.492659][ T5876] apple 0003:05AC:0304.0001: probe with driver apple failed with error -22 [ 75.533214][ T5877] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.660588][ T974] ath6kl: Failed to submit usb control message: -71 [ 75.661135][ T8] usb 2-1: USB disconnect, device number 2 [ 75.673107][ T974] ath6kl: unable to send the bmi data to the device: -71 [ 75.689489][ T974] ath6kl: Unable to send get target info: -71 [ 75.717223][ T5877] usb 4-1: Using ep0 maxpacket: 8 [ 75.717541][ T974] ath6kl: Failed to init ath6kl core: -71 [ 75.736665][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 75.762205][ T974] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 75.776044][ T5877] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 75.797689][ T5877] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 75.814931][ T974] usb 1-1: USB disconnect, device number 2 [ 75.847296][ T5877] usb 4-1: config 1 interface 0 has no altsetting 0 [ 75.895149][ T5877] usb 4-1: string descriptor 0 read error: -22 [ 75.901429][ T5877] usb 4-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 75.926480][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.952542][ T6141] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 76.271986][ T5876] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 76.380236][ T5877] appletouch 4-1:1.0: Geyser mode initialized. [ 76.400142][ T5877] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 76.448140][ T5876] usb 3-1: Using ep0 maxpacket: 8 [ 76.467972][ T5876] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.498458][ T5876] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.518822][ T5876] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.548964][ T5876] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.584832][ T5876] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.595902][ T5875] usb 4-1: USB disconnect, device number 3 [ 76.599270][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.601770][ C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 76.655428][ T5875] appletouch 4-1:1.0: input: appletouch disconnected [ 76.829821][ T5876] usb 3-1: GET_CAPABILITIES returned 0 [ 76.852819][ T5876] usbtmc 3-1:16.0: can't read capabilities [ 77.084666][ T8] usb 3-1: USB disconnect, device number 2 [ 77.369099][ T6192] mkiss: ax0: crc mode is auto. [ 77.490241][ T6197] capability: warning: `syz.0.128' uses 32-bit capabilities (legacy support in use) [ 77.576492][ T6195] Falling back ldisc for ttyS3. [ 77.599656][ T6199] netlink: 'syz.3.129': attribute type 37 has an invalid length. [ 77.741102][ T6203] hpfs: Bad magic ... probably not HPFS [ 78.542574][ T6235] netlink: 48 bytes leftover after parsing attributes in process `syz.1.145'. [ 79.007183][ T6251] block device autoloading is deprecated and will be removed. [ 79.233302][ T5875] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.427992][ T5875] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 79.442920][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.457256][ T5875] usb 5-1: Product: syz [ 79.481197][ T5875] usb 5-1: Manufacturer: syz [ 79.493118][ T5875] usb 5-1: SerialNumber: syz [ 79.510215][ T5875] usb 5-1: config 0 descriptor?? [ 79.527575][ T5875] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 003 [ 79.932068][ T5875] (null): failure reading functionality [ 79.966895][ T5875] i2c i2c-1: connected i2c-tiny-usb device [ 80.160455][ T5877] usb 5-1: USB disconnect, device number 3 [ 80.215825][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 80.242431][ T6288] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 80.260060][ T6288] bridge0: port 3(batadv1) entered blocking state [ 80.270598][ T6288] bridge0: port 3(batadv1) entered disabled state [ 80.282067][ T6288] batadv1: entered allmulticast mode [ 80.291905][ T6288] batadv1: entered promiscuous mode [ 80.301429][ T6288] bridge0: port 3(batadv1) entered blocking state [ 80.308019][ T6288] bridge0: port 3(batadv1) entered forwarding state [ 80.733241][ T2911] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 80.742757][ T2911] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 80.846505][ T974] kernel write not supported for file /sequencer (pid: 974 comm: kworker/1:2) [ 81.829296][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 81.869172][ T977] cfg80211: failed to load regulatory.db [ 82.040383][ T6341] netlink: 260 bytes leftover after parsing attributes in process `syz.3.195'. [ 82.093218][ T5876] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.273276][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 82.289360][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.330178][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.348739][ T5876] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 82.373234][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.418899][ T5876] usb 1-1: config 0 descriptor?? [ 82.463246][ T974] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.623104][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 82.650026][ T974] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 82.669392][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.705330][ T974] usb 2-1: Product: syz [ 82.710170][ T974] usb 2-1: Manufacturer: syz [ 82.715199][ T974] usb 2-1: SerialNumber: syz [ 82.722613][ T974] usb 2-1: config 0 descriptor?? [ 82.736681][ T974] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 82.881062][ T5876] wacom 0003:056A:00D0.0002: unknown main item tag 0x0 [ 82.888372][ T5876] wacom 0003:056A:00D0.0002: unknown main item tag 0x0 [ 82.922109][ T5876] wacom 0003:056A:00D0.0002: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 82.939480][ T5876] wacom 0003:056A:00D0.0002: hidraw0: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0 [ 82.977699][ T5876] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.0002/input/input7 [ 83.028786][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 83.105416][ T5876] usb 1-1: USB disconnect, device number 3 [ 83.554948][ T974] gspca_stk1135: reg_w 0x5 err -71 [ 83.561163][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 83.587117][ T974] gspca_stk1135: Sensor write failed [ 83.592474][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 83.617916][ T974] gspca_stk1135: Sensor write failed [ 83.633202][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 83.639615][ T974] gspca_stk1135: Sensor read failed [ 83.670034][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 83.693087][ T974] gspca_stk1135: Sensor read failed [ 83.698327][ T974] gspca_stk1135: Detected sensor type unknown (0x0) [ 83.753257][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 83.759642][ T974] gspca_stk1135: Sensor read failed [ 83.803107][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 83.836832][ T974] gspca_stk1135: Sensor read failed [ 83.842119][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 83.885143][ T974] gspca_stk1135: Sensor write failed [ 83.890527][ T974] gspca_stk1135: serial bus timeout: status=0x00 [ 83.945125][ T974] gspca_stk1135: Sensor write failed [ 83.950702][ T974] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 83.990484][ T974] usb 2-1: USB disconnect, device number 3 [ 84.104783][ T5907] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.144873][ T29] audit: type=1326 audit(1738928985.245:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e318cde9 code=0x7ffc0000 [ 84.245949][ T29] audit: type=1326 audit(1738928985.245:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e318cde9 code=0x7ffc0000 [ 84.300005][ T6379] netlink: 112 bytes leftover after parsing attributes in process `syz.1.213'. [ 84.317532][ T29] audit: type=1326 audit(1738928985.245:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e318cde9 code=0x7ffc0000 [ 84.367056][ T5907] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.377437][ T5907] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.397791][ T29] audit: type=1326 audit(1738928985.245:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e318cde9 code=0x7ffc0000 [ 84.431001][ T5907] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 84.447497][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 84.466701][ T5907] usb 1-1: SerialNumber: syz [ 84.483229][ T29] audit: type=1326 audit(1738928985.245:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0e318cde9 code=0x7ffc0000 [ 84.554577][ T29] audit: type=1326 audit(1738928985.245:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e318cde9 code=0x7ffc0000 [ 84.618963][ T29] audit: type=1326 audit(1738928985.245:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0e3183da7 code=0x7ffc0000 [ 84.708516][ T5907] usb 1-1: 0:2 : does not exist [ 84.714783][ T29] audit: type=1326 audit(1738928985.245:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0e3128fb9 code=0x7ffc0000 [ 84.756116][ T6391] dummy0: entered promiscuous mode [ 84.758736][ T5907] usb 1-1: USB disconnect, device number 4 [ 84.767691][ T29] audit: type=1326 audit(1738928985.245:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd0e3183da7 code=0x7ffc0000 [ 84.838524][ T29] audit: type=1326 audit(1738928985.245:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.3.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd0e3128fb9 code=0x7ffc0000 [ 84.985239][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.495929][ T6327] Set syz1 is full, maxelem 65536 reached [ 86.047937][ T6436] IPVS: persistence engine module ip_vs_pe_ not found [ 86.713179][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 86.751200][ T6431] mmap: syz.2.231 (6431) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.929888][ T6476] tap0: tun_chr_ioctl cmd 1074025677 [ 86.954113][ T6476] tap0: linktype set to 804 [ 86.983312][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 86.998775][ T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 87.021760][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.049629][ T25] usb 4-1: Product: syz [ 87.059747][ T25] usb 4-1: Manufacturer: syz [ 87.077530][ T25] usb 4-1: SerialNumber: syz [ 87.100794][ T25] r8152-cfgselector 4-1: Unknown version 0x0000 [ 87.116503][ T25] r8152-cfgselector 4-1: config 0 descriptor?? [ 87.403193][ T25] r8152-cfgselector 4-1: Needed 2 retries to read version [ 87.410437][ T25] r8152-cfgselector 4-1: Unknown version 0x5cf0 [ 87.417637][ T5907] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.465089][ T25] r8152-cfgselector 4-1: bad CDC descriptors [ 87.470925][ T6488] syz_tun: entered allmulticast mode [ 87.490414][ T6487] syz_tun: left allmulticast mode [ 87.516766][ T6490] ptrace attach of "./syz-executor exec"[5826] was attempted by ""[6490] [ 87.613154][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 87.616357][ T5875] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 87.627160][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.661576][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.687914][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 87.731481][ T5907] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 87.769516][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.780108][ T5907] usb 5-1: config 0 descriptor?? [ 87.954667][ T6504] netlink: 4272 bytes leftover after parsing attributes in process `syz.0.255'. [ 88.144271][ T6510] ======================================================= [ 88.144271][ T6510] WARNING: The mand mount option has been deprecated and [ 88.144271][ T6510] and is ignored by this kernel. Remove the mand [ 88.144271][ T6510] option from the mount to silence this warning. [ 88.144271][ T6510] ======================================================= [ 88.233536][ T5907] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input10 [ 88.331406][ T5907] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 88.452893][ T5917] usb 5-1: USB disconnect, device number 4 [ 88.734623][ T974] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.932243][ T974] usb 3-1: config 0 has an invalid interface number: 116 but max is 0 [ 88.951160][ T974] usb 3-1: config 0 has no interface number 0 [ 89.003362][ T974] usb 3-1: too many endpoints for config 0 interface 116 altsetting 114: 105, using maximum allowed: 30 [ 89.025931][ T974] usb 3-1: config 0 interface 116 altsetting 114 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 89.078330][ T974] usb 3-1: config 0 interface 116 has no altsetting 0 [ 89.099244][ T974] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 89.127321][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.149843][ T974] usb 3-1: config 0 descriptor?? [ 89.174540][ T974] cp210x 3-1:0.116: cp210x converter detected [ 89.285280][ T6540] kvm: user requested TSC rate below hardware speed [ 89.589333][ T974] cp210x 3-1:0.116: failed to get vendor val 0x000e size 3: -71 [ 89.610962][ T974] usb 3-1: cp210x converter now attached to ttyUSB0 [ 89.646151][ T974] usb 3-1: USB disconnect, device number 3 [ 89.669667][ T974] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 89.696361][ T974] cp210x 3-1:0.116: device disconnected [ 90.041602][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 90.041620][ T29] audit: type=1326 audit(1738928991.185:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6561 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80578cde9 code=0x7ffc0000 [ 90.122553][ T29] audit: type=1326 audit(1738928991.185:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6561 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80578cde9 code=0x7ffc0000 [ 90.196268][ T29] audit: type=1326 audit(1738928991.215:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6561 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fd80578cde9 code=0x7ffc0000 [ 90.217581][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.323136][ T29] audit: type=1326 audit(1738928991.215:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6561 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80578cde9 code=0x7ffc0000 [ 90.397862][ T29] audit: type=1326 audit(1738928991.215:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6561 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80578cde9 code=0x7ffc0000 [ 90.499544][ T974] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 90.507925][ T29] audit: type=1326 audit(1738928991.215:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6561 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd80578cde9 code=0x7ffc0000 [ 90.539579][ T974] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 90.568508][ T974] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 90.593500][ T29] audit: type=1326 audit(1738928991.215:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6561 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80578cde9 code=0x7ffc0000 [ 90.614822][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.676834][ T29] audit: type=1326 audit(1738928991.215:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6561 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fd80578cde9 code=0x7ffc0000 [ 90.698165][ C1] vkms_vblank_simulate: vblank timer overrun [ 90.821098][ T29] audit: type=1326 audit(1738928991.215:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6561 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80578cde9 code=0x7ffc0000 [ 91.253885][ T5875] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.412749][ T6614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.305'. [ 91.454490][ T5875] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 91.474381][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.527737][ T5875] usb 4-1: config 0 descriptor?? [ 91.552618][ T5875] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 91.771671][ T5875] gp8psk: usb in 128 operation failed. [ 91.790719][ T5875] gp8psk: usb in 137 operation failed. [ 91.798164][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 91.816758][ T5875] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 91.836712][ T5875] usb 4-1: media controller created [ 91.889965][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.086942][ T5875] gp8psk_fe: Frontend attached [ 92.092250][ T5875] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 92.122101][ T5875] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 92.308139][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 92.467625][ T5875] gp8psk: usb in 137 operation failed. [ 92.473212][ T5875] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 92.527668][ T5875] gp8psk: found Genpix USB device pID = 203 (hex) [ 92.554242][ T5875] usb 4-1: USB disconnect, device number 5 [ 92.593624][ T6644] Zero length message leads to an empty skb [ 92.735582][ T5875] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 93.184699][ T29] audit: type=1326 audit(1738928994.335:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6668 comm="syz.1.331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2fd8cde9 code=0x0 [ 93.570884][ T6683] lo: entered promiscuous mode [ 93.580832][ T6683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.825633][ T6694] 9pnet_virtio: no channels available for device syz [ 93.900873][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 93.927397][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 94.713905][ T6732] netem: unknown loss type 0 [ 94.728983][ T6732] netem: change failed [ 94.885926][ T6734] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 95.074380][ T6742] Bluetooth: MGMT ver 1.23 [ 95.805258][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 95.821164][ T6777] netlink: 'syz.2.380': attribute type 21 has an invalid length. [ 95.825352][ T6779] netlink: 'syz.3.381': attribute type 1 has an invalid length. [ 95.845046][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 96.732197][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 96.953478][ T977] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.144994][ T11] wlan1: Trigger new scan to find an IBSS to join [ 97.159040][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 97.169335][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.188706][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.201198][ T977] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 97.263397][ T977] usb 2-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 97.272481][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.292938][ T977] usb 2-1: config 0 descriptor?? [ 97.542996][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.561977][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.777106][ T977] hid-generic 0003:045E:9994.0005: unknown main item tag 0x0 [ 97.792562][ T977] hid-generic 0003:045E:9994.0005: unknown main item tag 0x0 [ 97.801088][ T977] hid-generic 0003:045E:9994.0005: unknown main item tag 0x0 [ 97.818804][ T977] hid-generic 0003:045E:9994.0005: unknown main item tag 0x0 [ 97.827830][ T977] hid-generic 0003:045E:9994.0005: unknown main item tag 0x0 [ 97.842313][ T977] hid-generic 0003:045E:9994.0005: unknown main item tag 0x0 [ 97.852455][ T977] hid-generic 0003:045E:9994.0005: unknown main item tag 0x0 [ 97.881598][ T977] hid-generic 0003:045E:9994.0005: unknown main item tag 0x0 [ 97.889274][ T977] hid-generic 0003:045E:9994.0005: unbalanced collection at end of report description [ 97.902391][ T977] hid-generic 0003:045E:9994.0005: probe with driver hid-generic failed with error -22 [ 97.952614][ T6845] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 98.025937][ T977] usb 2-1: USB disconnect, device number 4 [ 98.109847][ T6849] program syz.4.411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.363203][ T977] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.532057][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 98.569868][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 98.600001][ T977] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 98.629567][ T977] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5B, changing to 0xB [ 98.654234][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 62104, setting to 1024 [ 98.677538][ T977] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 98.707219][ T977] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=9e.7e [ 98.720307][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.737476][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.420'. [ 98.758982][ T977] usb 5-1: Product: syz [ 98.773205][ T977] usb 5-1: Manufacturer: syz [ 98.777841][ T977] usb 5-1: SerialNumber: syz [ 98.789396][ T6870] capability: warning: `syz.0.421' uses deprecated v2 capabilities in a way that may be insecure [ 98.812423][ T977] usb 5-1: config 0 descriptor?? [ 98.821059][ T6849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.839711][ T977] usbtest 5-1:0.0: couldn't get endpoints, -22 [ 98.871412][ T977] usbtest 5-1:0.0: probe with driver usbtest failed with error -22 [ 98.946722][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 98.946739][ T29] audit: type=1326 audit(1738929256.102:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6871 comm="syz.2.422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b15b8cde9 code=0x0 [ 99.112052][ T977] usb 5-1: USB disconnect, device number 5 [ 99.167827][ T5197] udevd[5197]: worker [5831] terminated by signal 33 (Unknown signal 33) [ 99.223472][ T5197] udevd[5197]: worker [5831] failed while handling '/devices/virtual/block/loop1' [ 100.081520][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 100.104305][ T2911] wlan1: Trigger new scan to find an IBSS to join [ 100.693258][ T29] audit: type=1326 audit(1738929257.842:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6938 comm="syz.2.452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2b15b8cde9 code=0x0 [ 100.714038][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.455991][ T6965] netlink: 'syz.0.461': attribute type 2 has an invalid length. [ 101.492192][ T6969] C: renamed from team_slave_0 (while UP) [ 101.530726][ T6969] netlink: 'syz.4.463': attribute type 1 has an invalid length. [ 101.573913][ T6969] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.663091][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 206.670165][ C1] rcu: 0-...!: (0 ticks this GP) idle=05cc/1/0x4000000000000000 softirq=17232/17232 fqs=1 [ 206.681036][ C1] rcu: (detected by 1, t=10502 jiffies, g=13665, q=214 ncpus=2) [ 206.688777][ C1] Sending NMI from CPU 1 to CPUs 0: [ 206.688817][ C0] NMI backtrace for cpu 0 [ 206.688841][ C0] CPU: 0 UID: 0 PID: 6973 Comm: syz.0.465 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 206.688857][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 206.688867][ C0] RIP: 0010:lock_release+0x258/0xa30 [ 206.688900][ C0] Code: 84 c0 0f 85 78 05 00 00 8b 06 85 c0 0f 84 2e 02 00 00 48 89 34 24 48 89 54 24 08 48 89 5c 24 28 4c 89 64 24 10 48 89 44 24 38 <8d> 58 ff 4d 8d b5 f0 0a 00 00 4c 63 eb 41 83 fd 31 0f 83 16 06 00 [ 206.688911][ C0] RSP: 0018:ffffc90000007a40 EFLAGS: 00000002 [ 206.688931][ C0] RAX: 0000000000000002 RBX: 0000000000000046 RCX: ffffc90000007a03 [ 206.688941][ C0] RDX: 1ffff92000000f58 RSI: ffff88802feae4e8 RDI: ffffffff8c5fb600 [ 206.688952][ C0] RBP: ffffc90000007b70 R08: ffffffff901a2877 R09: 1ffffffff203450e [ 206.688963][ C0] R10: dffffc0000000000 R11: fffffbfff203450f R12: 1ffff92000000f54 [ 206.688974][ C0] R13: ffff88802feada00 R14: ffffffff9a5af988 R15: dffffc0000000000 [ 206.688986][ C0] FS: 000055558d8b2500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 206.688998][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.689008][ C0] CR2: 000055558d8c5588 CR3: 00000000352b4000 CR4: 00000000003526f0 [ 206.689021][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 206.689029][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 206.689039][ C0] Call Trace: [ 206.689045][ C0] [ 206.689052][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 206.689071][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 206.689091][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 206.689113][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 206.689133][ C0] ? nmi_handle+0x14f/0x5a0 [ 206.689153][ C0] ? nmi_handle+0x2a/0x5a0 [ 206.689173][ C0] ? lock_release+0x258/0xa30 [ 206.689190][ C0] ? default_do_nmi+0x63/0x160 [ 206.689205][ C0] ? exc_nmi+0x123/0x1f0 [ 206.689218][ C0] ? end_repeat_nmi+0xf/0x53 [ 206.689243][ C0] ? lock_release+0x258/0xa30 [ 206.689261][ C0] ? lock_release+0x258/0xa30 [ 206.689279][ C0] ? lock_release+0x258/0xa30 [ 206.689297][ C0] [ 206.689301][ C0] [ 206.689309][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 206.689325][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 206.689340][ C0] ? __pfx_lock_release+0x10/0x10 [ 206.689362][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 206.689381][ C0] _raw_spin_unlock_irqrestore+0x79/0x140 [ 206.689398][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 206.689419][ C0] debug_object_deactivate+0x2d5/0x390 [ 206.689436][ C0] ? advance_sched+0xa02/0xca0 [ 206.689451][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 206.689473][ C0] debug_deactivate+0x1b/0x220 [ 206.689496][ C0] __hrtimer_run_queues+0x305/0xd30 [ 206.689523][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 206.689543][ C0] ? sched_clock+0x4a/0x70 [ 206.689563][ C0] ? read_tsc+0x9/0x20 [ 206.689577][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 206.689597][ C0] hrtimer_interrupt+0x403/0xa40 [ 206.689626][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 206.689648][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 206.689666][ C0] [ 206.689671][ C0] [ 206.689676][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.689697][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x90 [ 206.689716][ C0] Code: 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 0c 25 00 d5 03 00 65 8b 05 50 72 44 7e 25 00 01 ff 00 74 [ 206.689727][ C0] RSP: 0018:ffffc9001af37898 EFLAGS: 00000246 [ 206.689740][ C0] RAX: 1ffffd40001a3511 RBX: 0000000000000000 RCX: dffffc0000000000 [ 206.689750][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 206.689758][ C0] RBP: ffffc9001af37978 R08: ffffffff817eebe2 R09: 1ffffffff203450e [ 206.689770][ C0] R10: dffffc0000000000 R11: fffffbfff203450f R12: 0000000000000018 [ 206.689780][ C0] R13: ffffea0000d1a880 R14: ffffea0000d1a888 R15: ffffc9001af37900 [ 206.689793][ C0] ? account_kernel_stack+0x142/0x3f0 [ 206.689819][ C0] account_kernel_stack+0x142/0x3f0 [ 206.689841][ C0] ? __pfx_account_kernel_stack+0x10/0x10 [ 206.689862][ C0] ? percpu_ref_get_many+0x19/0x140 [ 206.689881][ C0] ? __memcg_kmem_charge_page+0xdb/0x1d0 [ 206.689904][ C0] ? memcg_charge_kernel_stack+0x4b0/0x550 [ 206.689923][ C0] dup_task_struct+0x2cf/0x8c0 [ 206.689940][ C0] copy_process+0x5d1/0x3d50 [ 206.689958][ C0] ? __pfx___might_resched+0x10/0x10 [ 206.689974][ C0] ? __might_fault+0xaa/0x120 [ 206.689996][ C0] ? __pfx_lock_release+0x10/0x10 [ 206.690016][ C0] ? __pfx_copy_process+0x10/0x10 [ 206.690031][ C0] ? __might_fault+0xc6/0x120 [ 206.690053][ C0] ? __asan_memset+0x23/0x50 [ 206.690076][ C0] kernel_clone+0x223/0x870 [ 206.690094][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 206.690116][ C0] __se_sys_clone3+0x2d8/0x360 [ 206.690138][ C0] ? __pfx___se_sys_clone3+0x10/0x10 [ 206.690165][ C0] ? do_syscall_64+0x100/0x230 [ 206.690186][ C0] ? do_syscall_64+0xb6/0x230 [ 206.690205][ C0] do_syscall_64+0xf3/0x230 [ 206.690224][ C0] ? clear_bhb_loop+0x35/0x90 [ 206.690246][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.690265][ C0] RIP: 0033:0x7f0a841c1649 [ 206.690282][ C0] Code: ae 08 00 48 8d 3d dc ae 08 00 e8 e2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 206.690293][ C0] RSP: 002b:00007ffcda285ca8 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 206.690308][ C0] RAX: ffffffffffffffda RBX: 00007f0a84143a30 RCX: 00007f0a841c1649 [ 206.690318][ C0] RDX: 00007f0a84143a30 RSI: 0000000000000058 RDI: 00007ffcda285cf0 [ 206.690328][ C0] RBP: 00007f0a850146c0 R08: 00007f0a850146c0 R09: 00007ffcda285dd7 [ 206.690338][ C0] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 206.690348][ C0] R13: 000000000000000b R14: 00007ffcda285cf0 R15: 00007ffcda285dd8 [ 206.690364][ C0] [ 206.690806][ C1] rcu: rcu_preempt kthread starved for 10495 jiffies! g13665 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 207.286887][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 207.296871][ C1] rcu: RCU grace-period kthread stack dump: [ 207.302766][ C1] task:rcu_preempt state:R running task stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 207.316276][ C1] Call Trace: [ 207.319559][ C1] [ 207.322499][ C1] __schedule+0x18bc/0x4c40 [ 207.327029][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 207.332947][ C1] ? __pfx___schedule+0x10/0x10 [ 207.337809][ C1] ? __pfx_lock_release+0x10/0x10 [ 207.342852][ C1] ? __pfx___mod_timer+0x10/0x10 [ 207.347798][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.354139][ C1] ? schedule+0x90/0x320 [ 207.358387][ C1] schedule+0x14b/0x320 [ 207.362555][ C1] schedule_timeout+0x15a/0x290 [ 207.367414][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 207.372792][ C1] ? __pfx_process_timeout+0x10/0x10 [ 207.378098][ C1] ? prepare_to_swait_event+0x330/0x350 [ 207.383666][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 207.388531][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 207.393754][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 207.399658][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 207.404978][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 207.410885][ C1] ? finish_swait+0xd4/0x1e0 [ 207.415487][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 207.420702][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 207.425304][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 207.430515][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 207.436422][ C1] ? __kthread_parkme+0x169/0x1d0 [ 207.441461][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 207.446677][ C1] kthread+0x7a9/0x920 [ 207.450753][ C1] ? __pfx_kthread+0x10/0x10 [ 207.455354][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 207.460564][ C1] ? __pfx_kthread+0x10/0x10 [ 207.465162][ C1] ? __pfx_kthread+0x10/0x10 [ 207.469763][ C1] ? __pfx_kthread+0x10/0x10 [ 207.474360][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 207.479562][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 207.484768][ C1] ? __pfx_kthread+0x10/0x10 [ 207.489367][ C1] ret_from_fork+0x4b/0x80 [ 207.493790][ C1] ? __pfx_kthread+0x10/0x10 [ 207.498389][ C1] ret_from_fork_asm+0x1a/0x30 [ 207.503172][ C1] [ 207.506193][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 207.512523][ C1] CPU: 1 UID: 0 PID: 6969 Comm: syz.4.463 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 207.523110][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 207.533167][ C1] RIP: 0010:smp_call_function_many_cond+0x1ba4/0x2d30 [ 207.539946][ C1] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 b0 e8 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 60 e4 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 207.559554][ C1] RSP: 0018:ffffc9001bbf7400 EFLAGS: 00000293 [ 207.565630][ C1] RAX: ffffffff81b37985 RBX: 1ffff110170c8c75 RCX: ffff88802f11da00 [ 207.573608][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 207.581583][ C1] RBP: ffffc9001bbf7600 R08: ffffffff81b37950 R09: 1ffffffff285870e [ 207.589560][ C1] R10: dffffc0000000000 R11: fffffbfff285870f R12: ffff8880b873f9c8 [ 207.597538][ C1] R13: ffff8880b86463a8 R14: ffff8880b873f9c0 R15: 0000000000000000 [ 207.605518][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 207.614449][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.621042][ C1] CR2: 0000001b2fa1eff8 CR3: 0000000057b5a000 CR4: 00000000003526f0 [ 207.629022][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.637000][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.644972][ C1] Call Trace: [ 207.648255][ C1] [ 207.651104][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 207.657451][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 207.663148][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 207.668977][ C1] ? cgroup_rstat_updated+0x13b/0xc30 [ 207.674373][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 207.680631][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 207.686028][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 207.691683][ C1] ? update_process_times+0x242/0x2f0 [ 207.697066][ C1] ? tick_nohz_handler+0x37c/0x500 [ 207.702186][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 207.707658][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 207.713061][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 207.718793][ C1] ? sched_clock+0x4a/0x70 [ 207.723226][ C1] ? read_tsc+0x9/0x20 [ 207.727306][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 207.733402][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 207.738546][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 207.744713][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 207.750561][ C1] [ 207.753496][ C1] [ 207.756432][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 207.762603][ C1] ? smp_call_function_many_cond+0x1b90/0x2d30 [ 207.768782][ C1] ? smp_call_function_many_cond+0x1bc5/0x2d30 [ 207.774950][ C1] ? smp_call_function_many_cond+0x1ba4/0x2d30 [ 207.781119][ C1] ? tlb_remove_table+0xf4/0x550 [ 207.786076][ C1] ? free_pgd_range+0xd57/0xdd0 [ 207.790953][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 207.797299][ C1] ? __pfx_free_pgd_range+0x10/0x10 [ 207.802507][ C1] ? rcu_is_watching+0x15/0xb0 [ 207.807285][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 207.812499][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 207.817627][ C1] flush_tlb_mm_range+0x42d/0x710 [ 207.822671][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 207.828238][ C1] ? __pfx_free_pgtables+0x10/0x10 [ 207.833371][ C1] tlb_flush_mmu+0x1aa/0x680 [ 207.837967][ C1] ? __pfx_down_write+0x10/0x10 [ 207.842835][ C1] tlb_finish_mmu+0xd4/0x200 [ 207.847434][ C1] exit_mmap+0x52a/0xd40 [ 207.851698][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 207.856507][ C1] ? __pfx_exit_aio+0x10/0x10 [ 207.861218][ C1] ? uprobe_clear_state+0x271/0x290 [ 207.866425][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 207.871724][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 207.876932][ C1] __mmput+0x115/0x410 [ 207.881019][ C1] exit_mm+0x220/0x310 [ 207.885100][ C1] ? __pfx_exit_mm+0x10/0x10 [ 207.889700][ C1] ? taskstats_exit+0x326/0xa60 [ 207.894564][ C1] do_exit+0x9ad/0x28e0 [ 207.898736][ C1] ? __pfx_do_exit+0x10/0x10 [ 207.903335][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 207.908716][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 207.914708][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 207.921044][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 207.926172][ C1] do_group_exit+0x207/0x2c0 [ 207.930769][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 207.935973][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 207.941182][ C1] get_signal+0x16b2/0x1750 [ 207.945712][ C1] ? __pfx_get_signal+0x10/0x10 [ 207.950587][ C1] arch_do_signal_or_restart+0x96/0x860 [ 207.956143][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 207.962306][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 207.968311][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 207.974044][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 207.979603][ C1] do_syscall_64+0x100/0x230 [ 207.984202][ C1] ? clear_bhb_loop+0x35/0x90 [ 207.988899][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.994801][ C1] RIP: 0033:0x7fd80578cde9 [ 207.999225][ C1] Code: Unable to access opcode bytes at 0x7fd80578cdbf. [ 208.006245][ C1] RSP: 002b:00007fd8066820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 208.014668][ C1] RAX: fffffffffffffe00 RBX: 00007fd8059a5fa8 RCX: 00007fd80578cde9 [ 208.022649][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd8059a5fa8 [ 208.030622][ C1] RBP: 00007fd8059a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 208.038599][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd8059a5fac [ 208.046571][ C1] R13: 0000000000000000 R14: 00007ffc11b23500 R15: 00007ffc11b235e8 [ 208.054559][ C1] [ 208.057981][ C1] vkms_vblank_simulate: vblank timer overrun