last executing test programs: 4.339285878s ago: executing program 2 (id=1734): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000200)={0x60, 0xa, 0x1, "10"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.928282494s ago: executing program 1 (id=1741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x7, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.581393763s ago: executing program 1 (id=1742): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) fchown(r0, r2, r3) 3.453394128s ago: executing program 1 (id=1744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0xb, 0xff, 0x7, 0x81, 0x7, 0xae, 0x2, 0x6, 0x4, 0xe, 0x2, 0xff, 0x3, 0x3, 0x9, 0xfa}}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x0, 0xe}) 3.321203253s ago: executing program 0 (id=1746): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000280)={0x5}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="040081000a000600080211000001000006001a01040000000600100063070000080014"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) 3.226523344s ago: executing program 0 (id=1747): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf04000000000000fcff1200000008000300", @ANYRES32=r2, @ANYBLOB="0400130006001200000000000600b500850100000a0006000802110000010000140081000500"], 0x50}}, 0x4000004) 3.207734024s ago: executing program 1 (id=1748): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x14069, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={r1, 0xa9ac}, &(0x7f0000000300)=0x8) 3.091060517s ago: executing program 0 (id=1750): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff, 0x0, "01000000000e65300000000800000200"}) readv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/68, 0x44}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x6) 3.004256156s ago: executing program 3 (id=1753): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+cpu '], 0xb) 2.919316877s ago: executing program 0 (id=1755): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 2.858009783s ago: executing program 3 (id=1756): r0 = fanotify_init(0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x1029, r2, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000240), 0x0, 0x0, 0x0) 2.770775264s ago: executing program 3 (id=1757): r0 = socket(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x8212}) 2.678826908s ago: executing program 3 (id=1758): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x3, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x10004, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x4, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x1, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x0, 0x10000, 0x6, 0x7ffe, 0x8, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x46a7, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.521486513s ago: executing program 3 (id=1759): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0x35, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) writev(r1, &(0x7f0000001840)=[{&(0x7f00000002c0)="b481b14ac275b9bd40d6ac680718ccd5ebb6dfa001186dbe3bde68", 0x1b}], 0x1) 2.22949264s ago: executing program 1 (id=1762): r0 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 2.174412202s ago: executing program 1 (id=1764): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.109472943s ago: executing program 4 (id=1765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000001c0)={0x4, 0x1, 0x3}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0c000000000000f48702"]) 2.04816533s ago: executing program 2 (id=1766): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004"], 0x2e8}}], 0x2, 0x0) 1.954017947s ago: executing program 2 (id=1767): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000240)={r0, &(0x7f0000000080), 0x0}, 0x20) 1.920186964s ago: executing program 4 (id=1768): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x8001, r1, 0x0}]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x44, 0x0, &(0x7f0000000680)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0x14, 0x2}, @fd, @fd={0x66642a85, 0x0, r0}}, 0x0}}], 0x0, 0x0, 0x0}) 1.875939089s ago: executing program 2 (id=1769): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7da8}, 0x8) 1.785941426s ago: executing program 4 (id=1770): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.522216582s ago: executing program 4 (id=1771): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0xa3f}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/27, 0x1b}], 0x1}, 0x5a2}], 0x2, 0x102, 0x0) sendto$inet(r0, &(0x7f0000000380)="d7", 0x1, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 1.298011138s ago: executing program 0 (id=1772): unshare(0x2040400) r0 = semget$private(0x0, 0x5, 0x0) semop(r0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(r0, &(0x7f00000000c0)=[{0x3, 0xa78c, 0x1000}], 0x1) semctl$SETVAL(r0, 0x4, 0x10, 0x0) 979.117696ms ago: executing program 2 (id=1773): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) io_pgetevents(r1, 0x7, 0x7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 637.988321ms ago: executing program 4 (id=1774): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, 0x0}}], 0x1, 0x0) 589.44391ms ago: executing program 4 (id=1775): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 404.344544ms ago: executing program 0 (id=1776): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 25.173543ms ago: executing program 3 (id=1777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be"], 0xfdef) 0s ago: executing program 2 (id=1778): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) kernel console output (not intermixed with test programs): ][ T5820] bridge_slave_0: entered promiscuous mode [ 92.059325][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.066633][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.073805][ T5838] bridge_slave_1: entered allmulticast mode [ 92.081156][ T5838] bridge_slave_1: entered promiscuous mode [ 92.123473][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.131367][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.138891][ T5824] bridge_slave_0: entered allmulticast mode [ 92.147010][ T5824] bridge_slave_0: entered promiscuous mode [ 92.155370][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.162503][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.170326][ T5820] bridge_slave_1: entered allmulticast mode [ 92.177992][ T5820] bridge_slave_1: entered promiscuous mode [ 92.228927][ T5822] team0: Port device team_slave_0 added [ 92.238319][ T5822] team0: Port device team_slave_1 added [ 92.244449][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.251629][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.259677][ T5824] bridge_slave_1: entered allmulticast mode [ 92.267408][ T5824] bridge_slave_1: entered promiscuous mode [ 92.290203][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.302688][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.360307][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.432978][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.459146][ T5838] team0: Port device team_slave_0 added [ 92.471934][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.479212][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.510324][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.525244][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.551011][ T5838] team0: Port device team_slave_1 added [ 92.571280][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.578925][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.605228][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.626746][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.653860][ T5820] team0: Port device team_slave_0 added [ 92.665877][ T5829] Bluetooth: hci2: command tx timeout [ 92.694220][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.701521][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.709614][ T5819] bridge_slave_0: entered allmulticast mode [ 92.717692][ T5819] bridge_slave_0: entered promiscuous mode [ 92.735026][ T5829] Bluetooth: hci3: command tx timeout [ 92.740636][ T5826] Bluetooth: hci0: command tx timeout [ 92.740645][ T5823] Bluetooth: hci1: command tx timeout [ 92.755856][ T5820] team0: Port device team_slave_1 added [ 92.775959][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.783040][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.809238][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.820304][ T5826] Bluetooth: hci4: command tx timeout [ 92.826857][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.834002][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.841898][ T5819] bridge_slave_1: entered allmulticast mode [ 92.849277][ T5819] bridge_slave_1: entered promiscuous mode [ 92.859719][ T5824] team0: Port device team_slave_0 added [ 92.892954][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.900285][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.926699][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.940845][ T5824] team0: Port device team_slave_1 added [ 93.033734][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.041310][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.067508][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.085092][ T5822] hsr_slave_0: entered promiscuous mode [ 93.091645][ T5822] hsr_slave_1: entered promiscuous mode [ 93.116774][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.123752][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.150339][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.164517][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.175044][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.182011][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.209462][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.247191][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.254175][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.280256][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.293541][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.335823][ T5838] hsr_slave_0: entered promiscuous mode [ 93.342318][ T5838] hsr_slave_1: entered promiscuous mode [ 93.348864][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.356683][ T5838] Cannot create hsr debugfs directory [ 93.388086][ T5819] team0: Port device team_slave_0 added [ 93.452590][ T5819] team0: Port device team_slave_1 added [ 93.546364][ T5820] hsr_slave_0: entered promiscuous mode [ 93.552768][ T5820] hsr_slave_1: entered promiscuous mode [ 93.559244][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.566906][ T5820] Cannot create hsr debugfs directory [ 93.608464][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.615500][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.642454][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.656684][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.663670][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.689911][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.761207][ T5824] hsr_slave_0: entered promiscuous mode [ 93.770342][ T5824] hsr_slave_1: entered promiscuous mode [ 93.776724][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.784291][ T5824] Cannot create hsr debugfs directory [ 93.938683][ T5819] hsr_slave_0: entered promiscuous mode [ 93.945794][ T5819] hsr_slave_1: entered promiscuous mode [ 93.951904][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.959913][ T5819] Cannot create hsr debugfs directory [ 94.250632][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.287245][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.326025][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.344014][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.424394][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.437517][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.472079][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.487301][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.567916][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.584798][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.608336][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.620237][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.703977][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.745891][ T5826] Bluetooth: hci2: command tx timeout [ 94.757127][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.783750][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.793910][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.814857][ T5826] Bluetooth: hci3: command tx timeout [ 94.820332][ T5826] Bluetooth: hci0: command tx timeout [ 94.826115][ T5829] Bluetooth: hci1: command tx timeout [ 94.856012][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.895376][ T5826] Bluetooth: hci4: command tx timeout [ 94.904022][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.921657][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.951580][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.961436][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.992905][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.013479][ T1543] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.020782][ T1543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.031871][ T1543] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.039351][ T1543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.080513][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.162418][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.225809][ T4799] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.232967][ T4799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.246939][ T4799] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.254082][ T4799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.354362][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.383254][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.448735][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.477721][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.488866][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.496217][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.539519][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.551697][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.558923][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.580005][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.587236][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.611155][ T1543] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.618350][ T1543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.743150][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.808941][ T1543] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.816248][ T1543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.850182][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.872350][ T1543] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.879850][ T1543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.030334][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.187322][ T5822] veth0_vlan: entered promiscuous mode [ 96.227414][ T5822] veth1_vlan: entered promiscuous mode [ 96.310337][ T5838] veth0_vlan: entered promiscuous mode [ 96.389000][ T5838] veth1_vlan: entered promiscuous mode [ 96.418131][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.433441][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.503372][ T5822] veth0_macvtap: entered promiscuous mode [ 96.544469][ T5838] veth0_macvtap: entered promiscuous mode [ 96.559834][ T5822] veth1_macvtap: entered promiscuous mode [ 96.589495][ T5838] veth1_macvtap: entered promiscuous mode [ 96.689223][ T5824] veth0_vlan: entered promiscuous mode [ 96.706038][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.722283][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.738256][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.771031][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.791251][ T5824] veth1_vlan: entered promiscuous mode [ 96.802265][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.813675][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.825681][ T5826] Bluetooth: hci2: command tx timeout [ 96.831974][ T5822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.840964][ T5822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.850071][ T5822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.878085][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.891701][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.900963][ T5823] Bluetooth: hci1: command tx timeout [ 96.906642][ T5823] Bluetooth: hci3: command tx timeout [ 96.912297][ T5826] Bluetooth: hci0: command tx timeout [ 96.917945][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.926759][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.976392][ T5826] Bluetooth: hci4: command tx timeout [ 97.013364][ T5819] veth0_vlan: entered promiscuous mode [ 97.031219][ T5819] veth1_vlan: entered promiscuous mode [ 97.073599][ T5820] veth0_vlan: entered promiscuous mode [ 97.138544][ T5824] veth0_macvtap: entered promiscuous mode [ 97.171460][ T5824] veth1_macvtap: entered promiscuous mode [ 97.190995][ T5820] veth1_vlan: entered promiscuous mode [ 97.239690][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.258784][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.272125][ T5819] veth0_macvtap: entered promiscuous mode [ 97.304322][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.320308][ T5819] veth1_macvtap: entered promiscuous mode [ 97.326806][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.337908][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.387754][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.402555][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.420502][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.448549][ T1543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.457229][ T1543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.477267][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.486244][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.495690][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.504418][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.521404][ T5820] veth0_macvtap: entered promiscuous mode [ 97.530517][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.533871][ T5820] veth1_macvtap: entered promiscuous mode [ 97.554134][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.554358][ T5819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.579509][ T5819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.588421][ T5819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.597177][ T5819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.675869][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.732139][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.768234][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.801739][ T5820] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.834843][ T5820] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.843604][ T5820] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.879359][ T5820] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.058645][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.078335][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.236447][ T1543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.244323][ T1543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.305680][ T4244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.346738][ T4244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.458795][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.475219][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.693331][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.723083][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.892261][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.896902][ T5826] Bluetooth: hci2: command tx timeout [ 98.937331][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.977142][ T5826] Bluetooth: hci0: command tx timeout [ 98.982636][ T5829] Bluetooth: hci3: command tx timeout [ 98.988338][ T5823] Bluetooth: hci1: command tx timeout [ 99.054920][ T5826] Bluetooth: hci4: command tx timeout [ 99.252553][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.275552][ T5933] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.985148][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.151473][ T24] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 8 [ 100.184962][ T24] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.216880][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 100.236489][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 100.249429][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.263762][ T24] usb 5-1: Product: syz [ 100.271495][ T24] usb 5-1: Manufacturer: syz [ 100.278550][ T24] usb 5-1: SerialNumber: syz [ 100.306101][ T5952] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 100.479714][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.574114][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 3 proto 1 vid 0x0525 pid 0xA4A8 [ 100.847662][ T5872] usb 5-1: USB disconnect, device number 2 [ 100.887733][ T5872] usblp0: removed [ 102.157753][ T6013] netlink: 'syz.4.48': attribute type 13 has an invalid length. [ 102.387868][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.392695][ T6018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.395862][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.496622][ T5871] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.647303][ T6020] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 102.657730][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 102.667389][ T6020] nbd: error processing sock list [ 102.693126][ T5871] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 102.728275][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 102.763610][ T5871] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 102.792440][ T6020] block nbd0: shutting down sockets [ 102.818829][ T5871] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 102.839770][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.855424][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.864762][ T5871] usb 1-1: Product: syz [ 102.879273][ T5871] usb 1-1: Manufacturer: syz [ 102.904889][ T5871] usb 1-1: SerialNumber: syz [ 102.915884][ T6013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.940560][ T5871] usb 1-1: config 0 descriptor?? [ 102.968332][ T5871] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 103.087732][ T30] audit: type=1326 audit(1748283476.670:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6028 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb458e969 code=0x7ffc0000 [ 103.121639][ T30] audit: type=1326 audit(1748283476.700:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6028 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb458e969 code=0x7ffc0000 [ 103.145708][ T30] audit: type=1326 audit(1748283476.700:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6028 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5eb458e969 code=0x7ffc0000 [ 103.182975][ T5871] scsi host1: usb-storage 1-1:0.0 [ 103.257883][ T30] audit: type=1326 audit(1748283476.820:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6028 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb458e969 code=0x7ffc0000 [ 103.334790][ T30] audit: type=1326 audit(1748283476.820:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6028 comm="syz.1.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5eb458e969 code=0x7ffc0000 [ 103.416460][ T5871] usb 1-1: USB disconnect, device number 2 [ 103.478664][ T6013] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.508026][ T6013] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.531496][ T6013] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.549038][ T6013] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.815514][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.58'. [ 104.055845][ T59] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.100282][ T5826] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 104.244695][ T59] usb 3-1: Using ep0 maxpacket: 16 [ 104.286252][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.314789][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.343748][ T59] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 104.381852][ T59] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 104.432240][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.499716][ T59] usb 3-1: config 0 descriptor?? [ 104.925598][ T1538] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.018278][ T59] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 105.094832][ T1538] usb 4-1: Using ep0 maxpacket: 32 [ 105.112725][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 105.155243][ T1538] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 105.161068][ T59] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 105.187244][ T6079] kvm: kvm [6076]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 105.191381][ T1538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.209540][ T59] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 105.254737][ T1538] usb 4-1: config 0 descriptor?? [ 105.327747][ T9] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 105.344750][ T59] usb 3-1: USB disconnect, device number 2 [ 105.377918][ T9] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 105.423743][ T9] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 105.476673][ T9] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 105.713070][ T1538] aureal 0003:0755:2626.0002: unbalanced collection at end of report description [ 105.744173][ T1538] aureal 0003:0755:2626.0002: probe with driver aureal failed with error -22 [ 106.218744][ T1538] usb 4-1: USB disconnect, device number 2 [ 106.697617][ T6116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.705173][ T6116] IPv6: NLM_F_CREATE should be set when creating new route [ 106.712494][ T6116] IPv6: NLM_F_CREATE should be set when creating new route [ 106.719785][ T6116] IPv6: NLM_F_CREATE should be set when creating new route [ 106.964713][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 107.127774][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 107.175528][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.196529][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.244842][ T1538] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.275193][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 107.306148][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.323416][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 107.339186][ T9] usb 2-1: SerialNumber: syz [ 107.412381][ T1538] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 107.444893][ T1538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.466585][ T1538] usb 3-1: config 0 descriptor?? [ 107.482730][ T1538] cp210x 3-1:0.0: cp210x converter detected [ 107.533614][ T6142] kvm: kvm [6140]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x40600 [ 107.598621][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 107.629165][ T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 107.654796][ T9] usb 2-1: USB disconnect, device number 2 [ 107.900738][ T1538] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 107.946109][ T1538] usb 3-1: cp210x converter now attached to ttyUSB0 [ 107.958086][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.125161][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 108.134567][ T5872] usb 1-1: config 0 has no interfaces? [ 108.152055][ T5872] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.172053][ T9] usb 3-1: USB disconnect, device number 3 [ 108.173128][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.196043][ T5872] usb 1-1: Product: syz [ 108.199365][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 108.203774][ T5872] usb 1-1: Manufacturer: syz [ 108.245018][ T5872] usb 1-1: SerialNumber: syz [ 108.255552][ T9] cp210x 3-1:0.0: device disconnected [ 108.301562][ T5872] usb 1-1: config 0 descriptor?? [ 108.571112][ T24] usb 1-1: USB disconnect, device number 3 [ 108.820246][ T30] audit: type=1326 audit(1748283482.400:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6171 comm="syz.2.121" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x0 [ 109.525271][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.662190][ T6198] netlink: 'syz.0.133': attribute type 2 has an invalid length. [ 109.683804][ T6198] netlink: 'syz.0.133': attribute type 2 has an invalid length. [ 109.704868][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 109.766709][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 109.801388][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.839541][ T24] usb 4-1: Product: syz [ 109.880519][ T24] usb 4-1: Manufacturer: syz [ 109.885361][ T24] usb 4-1: SerialNumber: syz [ 109.915550][ T24] usb 4-1: config 0 descriptor?? [ 109.950288][ T24] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 110.204900][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.246028][ T24] gspca_sn9c2028: read1 error -32 [ 110.261956][ T24] gspca_sn9c2028: read1 error -32 [ 110.398995][ T5872] usb 2-1: config 0 has no interfaces? [ 110.425366][ T5872] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.454715][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.464236][ T5872] usb 2-1: SerialNumber: syz [ 110.505710][ T5872] usb 2-1: config 0 descriptor?? [ 110.564304][ T5870] usb 4-1: USB disconnect, device number 3 [ 110.592171][ T6226] team0: Port device virt_wifi0 added [ 110.637305][ T6226] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 110.671872][ T6226] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 110.796350][ T5870] usb 2-1: USB disconnect, device number 3 [ 110.816478][ T6226] syz.2.146 (6226) used greatest stack depth: 20296 bytes left [ 111.501199][ T6248] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 111.788653][ T6257] process 'syz.3.160' launched './file2' with NULL argv: empty string added [ 112.521789][ T6280] batadv_slave_0: entered promiscuous mode [ 112.598204][ T6280] batadv_slave_0: left promiscuous mode [ 113.003594][ T5870] kernel write not supported for file /cpu/0/msr (pid: 5870 comm: kworker/0:3) [ 113.306889][ T6309] warning: `syz.2.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.966899][ T5870] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.168457][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 114.183004][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 114.210588][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 114.247811][ T5870] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 114.291864][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.323973][ T5870] usb 2-1: Product: syz [ 114.340286][ T5870] usb 2-1: Manufacturer: syz [ 114.359001][ T5870] usb 2-1: SerialNumber: syz [ 114.462590][ T5870] usb 2-1: config 0 descriptor?? [ 114.486903][ T5870] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 114.521060][ T5870] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 114.824946][ T6332] block nbd0: server does not support multiple connections per device. [ 114.866568][ T6332] block nbd0: shutting down sockets [ 115.142071][ T5870] em28xx 2-1:0.0: chip ID is em2870 [ 115.203222][ T6342] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.212351][ T6342] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.221554][ T6342] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.230479][ T6342] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.398310][ T1538] usb 2-1: USB disconnect, device number 4 [ 115.436267][ T1538] em28xx 2-1:0.0: Disconnecting em28xx [ 115.459542][ T1538] em28xx 2-1:0.0: Freeing device [ 115.627220][ T6353] Bluetooth: MGMT ver 1.23 [ 115.778081][ T6360] netlink: 252 bytes leftover after parsing attributes in process `syz.4.207'. [ 115.904886][ T5870] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.120120][ T5870] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.165494][ T5870] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 116.178868][ T5870] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.191987][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.237722][ T6357] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.296585][ T5870] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 116.388016][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.584712][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 116.589890][ T24] usb 4-1: USB disconnect, device number 4 [ 116.598888][ T9] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 116.610726][ T9] usb 2-1: config 0 has no interface number 0 [ 116.616982][ T9] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.628176][ T9] usb 2-1: config 0 interface 85 has no altsetting 0 [ 116.638036][ T1538] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.642081][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 116.654892][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.662944][ T9] usb 2-1: Product: syz [ 116.667550][ T9] usb 2-1: Manufacturer: syz [ 116.672228][ T9] usb 2-1: SerialNumber: syz [ 116.680771][ T9] usb 2-1: config 0 descriptor?? [ 116.834664][ T1538] usb 3-1: Using ep0 maxpacket: 32 [ 116.864806][ T1538] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 116.873993][ T1538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.920930][ T1538] usb 3-1: config 0 descriptor?? [ 117.150304][ T1538] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 117.184777][ T1538] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 117.216206][ T1538] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 117.226147][ T1538] usb 3-1: media controller created [ 117.270434][ T1538] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.358431][ T1538] az6027: usb out operation failed. (-71) [ 117.379793][ T1538] az6027: usb out operation failed. (-71) [ 117.390332][ T1538] stb0899_attach: Driver disabled by Kconfig [ 117.406722][ T1538] az6027: no front-end attached [ 117.406722][ T1538] [ 117.422422][ T1538] az6027: usb out operation failed. (-71) [ 117.439579][ T1538] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 117.455549][ T1538] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 117.471875][ T9] appletouch 2-1:0.85: Geyser mode initialized. [ 117.500697][ T1538] dvb-usb: schedule remote query interval to 400 msecs. [ 117.500879][ T9] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input7 [ 117.529731][ T1538] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 117.541467][ C0] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 117.590357][ T1538] usb 3-1: USB disconnect, device number 4 [ 117.755530][ T9] usb 2-1: USB disconnect, device number 5 [ 117.773732][ T1538] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 117.923359][ T9] appletouch 2-1:0.85: input: appletouch disconnected [ 117.997695][ T6407] binder: 6406:6407 ioctl c0306201 200000000100 returned -14 [ 118.195435][ T30] audit: type=1326 audit(1748283491.780:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6415 comm="syz.0.234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc3cb8e969 code=0x0 [ 118.373623][ T6422] 9pnet_virtio: no channels available for device syz [ 118.473037][ T6426] TCP: TCP_TX_DELAY enabled [ 119.824690][ T5870] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.994676][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 120.008008][ T5870] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 120.020874][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.043956][ T5870] usb 3-1: config 0 descriptor?? [ 120.268145][ T5870] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 120.280394][ T6478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.288026][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.305599][ T5870] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 120.323099][ T5870] usb 3-1: media controller created [ 120.388170][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.470844][ T5870] az6027: usb out operation failed. (-71) [ 120.477151][ T5870] az6027: usb out operation failed. (-71) [ 120.503380][ T5870] stb0899_attach: Driver disabled by Kconfig [ 120.509583][ T5931] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.518773][ T5870] az6027: no front-end attached [ 120.518773][ T5870] [ 120.528749][ T5870] az6027: usb out operation failed. (-71) [ 120.534513][ T5870] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 120.567363][ T5870] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 120.588353][ T5870] dvb-usb: schedule remote query interval to 400 msecs. [ 120.600079][ T5870] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 120.628850][ T5870] usb 3-1: USB disconnect, device number 5 [ 120.703123][ T5931] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 120.724319][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.742145][ T5870] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 120.757803][ T5931] usb 2-1: config 0 descriptor?? [ 120.774167][ T5931] cp210x 2-1:0.0: cp210x converter detected [ 120.936220][ T6496] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.192634][ T5931] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 121.223897][ T5931] usb 2-1: cp210x converter now attached to ttyUSB0 [ 121.418301][ T5872] usb 2-1: USB disconnect, device number 6 [ 121.457708][ T5872] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 121.479861][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 121.511210][ T5872] cp210x 2-1:0.0: device disconnected [ 121.512884][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 121.576511][ T6525] bridge0: entered promiscuous mode [ 121.592315][ T6525] macvlan2: entered promiscuous mode [ 122.044730][ T5872] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.235025][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 122.258873][ T5872] usb 3-1: config 0 has no interfaces? [ 122.287420][ T5872] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 122.320004][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 122.374723][ T5872] usb 3-1: Product: syz [ 122.379045][ T5872] usb 3-1: Manufacturer: syz [ 122.398409][ T5872] usb 3-1: config 0 descriptor?? [ 122.756821][ T5872] usb 3-1: USB disconnect, device number 6 [ 124.082895][ T30] audit: type=1326 audit(1748283497.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.1.313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5eb458e969 code=0x0 [ 125.565272][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.749014][ T24] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 125.764737][ T24] usb 5-1: config 0 has no interface number 0 [ 125.771020][ T24] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 125.809499][ T24] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 125.858923][ T6654] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.338'. [ 125.868173][ T24] usb 5-1: config 0 interface 255 has no altsetting 0 [ 125.898691][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 125.944764][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.979004][ T24] usb 5-1: config 0 descriptor?? [ 125.989618][ T24] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 126.203126][ T24] usb 5-1: USB disconnect, device number 3 [ 127.071897][ T6697] Zero length message leads to an empty skb [ 127.343253][ T6705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.471213][ T6719] overlayfs: workdir and upperdir must be separate subtrees [ 127.491041][ T6717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.364'. [ 128.810142][ T6783] netlink: 'syz.1.397': attribute type 5 has an invalid length. [ 128.863042][ T6785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.400'. [ 129.051792][ T6797] team0: Device gtp0 is of different type [ 129.131079][ T30] audit: type=1326 audit(1748283502.710:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8718e969 code=0x7fc00000 [ 129.166190][ T30] audit: type=1326 audit(1748283502.710:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4f8718e969 code=0x7fc00000 [ 129.199038][ T30] audit: type=1326 audit(1748283502.710:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8718e969 code=0x7fc00000 [ 129.228896][ T30] audit: type=1326 audit(1748283502.710:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8718e969 code=0x7fc00000 [ 129.250550][ T5872] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.262192][ T30] audit: type=1326 audit(1748283502.710:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8718e969 code=0x7fc00000 [ 129.291717][ T30] audit: type=1326 audit(1748283502.710:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8718e969 code=0x7fc00000 [ 129.315802][ T30] audit: type=1326 audit(1748283502.710:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8718e969 code=0x7fc00000 [ 129.353749][ T30] audit: type=1326 audit(1748283502.710:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8718e969 code=0x7fc00000 [ 129.400498][ T30] audit: type=1326 audit(1748283502.710:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8718e969 code=0x7fc00000 [ 129.424025][ T30] audit: type=1326 audit(1748283502.710:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6764 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f8718e969 code=0x7fc00000 [ 129.474720][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 129.487937][ T5872] usb 2-1: config 0 has an invalid interface number: 33 but max is 1 [ 129.499876][ T5872] usb 2-1: config 0 has no interface number 1 [ 129.511137][ T5872] usb 2-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 129.531697][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.561130][ T5872] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 129.580728][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.591114][ T5872] usb 2-1: Product: syz [ 129.596130][ T5872] usb 2-1: Manufacturer: syz [ 129.600882][ T5872] usb 2-1: SerialNumber: syz [ 129.609068][ T5872] usb 2-1: config 0 descriptor?? [ 129.633339][ T5872] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 129.838229][ T2340] pvrusb2: Invalid write control endpoint [ 129.840642][ T5872] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 129.852649][ T2340] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 129.882965][ T2340] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 130.034486][ T5872] usb 2-1: USB disconnect, device number 7 [ 130.100846][ T6833] capability: warning: `syz.0.421' uses deprecated v2 capabilities in a way that may be insecure [ 130.331386][ T6845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 130.335851][ T1538] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.378573][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 130.442085][ T6848] bond1 (unregistering): Released all slaves [ 130.499097][ T1538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.537979][ T1538] usb 5-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 130.554970][ T1538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.577185][ T1538] usb 5-1: config 0 descriptor?? [ 130.930273][ T6876] capability: warning: `syz.1.440' uses 32-bit capabilities (legacy support in use) [ 130.965808][ T6876] program syz.1.440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.013545][ T1538] zeroplus 0003:0C12:0005.0003: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.4-1/input0 [ 131.034095][ T1538] zeroplus 0003:0C12:0005.0003: no inputs found [ 131.197703][ T5931] usb 5-1: USB disconnect, device number 4 [ 131.424428][ T6895] bond0: entered promiscuous mode [ 131.450776][ T6895] bond_slave_0: entered promiscuous mode [ 131.463847][ T6895] bond_slave_1: entered promiscuous mode [ 131.483207][ T6895] bond0: left promiscuous mode [ 131.488429][ T6895] bond_slave_0: left promiscuous mode [ 131.514872][ T6895] bond_slave_1: left promiscuous mode [ 131.569076][ T6901] syz.2.453 uses obsolete (PF_INET,SOCK_PACKET) [ 131.866271][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 131.901329][ T6914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.458'. [ 132.733057][ T6940] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.469'. [ 132.821556][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.753418][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 133.764393][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.493'. [ 134.192904][ T7008] netlink: 'syz.4.500': attribute type 1 has an invalid length. [ 134.215666][ T7008] netlink: 'syz.4.500': attribute type 2 has an invalid length. [ 134.428915][ T7019] erofs (device nullb0): cannot find valid erofs superblock [ 134.859391][ T7040] ======================================================= [ 134.859391][ T7040] WARNING: The mand mount option has been deprecated and [ 134.859391][ T7040] and is ignored by this kernel. Remove the mand [ 134.859391][ T7040] option from the mount to silence this warning. [ 134.859391][ T7040] ======================================================= [ 135.085330][ T59] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.212383][ T7048] netlink: 72 bytes leftover after parsing attributes in process `syz.1.519'. [ 135.333251][ T7052] use of bytesused == 0 is deprecated and will be removed in the future, [ 135.349200][ T59] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 135.358654][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.367959][ T59] usb 3-1: Product: syz [ 135.372304][ T59] usb 3-1: Manufacturer: syz [ 135.383338][ T7052] use the actual size instead. [ 135.383901][ T59] usb 3-1: SerialNumber: syz [ 135.452163][ T59] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 135.496568][ T5931] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 135.823508][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 135.872352][ T7061] netlink: 'syz.1.525': attribute type 15 has an invalid length. [ 135.905874][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 135.973513][ T7061] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.982629][ T7061] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.991639][ T7061] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.000452][ T7061] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.336402][ T24] usb 3-1: USB disconnect, device number 7 [ 136.407680][ T7076] netlink: 'syz.4.532': attribute type 10 has an invalid length. [ 136.438667][ T7076] netlink: 40 bytes leftover after parsing attributes in process `syz.4.532'. [ 136.458833][ T7076] team0: entered promiscuous mode [ 136.463969][ T7076] team_slave_0: entered promiscuous mode [ 136.485060][ T7076] team_slave_1: entered promiscuous mode [ 136.491346][ T7076] team0: entered allmulticast mode [ 136.507585][ T7076] team_slave_0: entered allmulticast mode [ 136.519790][ T7076] team_slave_1: entered allmulticast mode [ 136.529431][ T7076] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.539673][ T7076] bridge0: port 3(team0) entered blocking state [ 136.560973][ T7076] bridge0: port 3(team0) entered disabled state [ 136.757566][ T7085] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 136.977498][ T5931] usb 3-1: Service connection timeout for: 256 [ 136.991886][ T5931] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 137.015555][ T5931] ath9k_htc: Failed to initialize the device [ 137.028914][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 137.229740][ T7104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.546'. [ 137.697283][ T7118] sctp: [Deprecated]: syz.1.551 (pid 7118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 137.697283][ T7118] Use struct sctp_sack_info instead [ 138.358219][ T7143] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 142.047904][ T7229] netlink: 'syz.2.605': attribute type 10 has an invalid length. [ 142.074735][ T7229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.605'. [ 142.160267][ T7229] team0: Port device geneve0 added [ 142.249605][ T7038] Set syz1 is full, maxelem 65536 reached [ 142.774144][ T7243] overlayfs: missing 'workdir' [ 143.023703][ T5871] kernel write not supported for file /input/event2 (pid: 5871 comm: kworker/1:4) [ 143.076566][ T7254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.615'. [ 143.488659][ T7268] bridge_slave_0: left allmulticast mode [ 143.494519][ T7268] bridge_slave_0: left promiscuous mode [ 143.515066][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.551581][ T7268] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 143.586289][ T7267] bond0: entered promiscuous mode [ 143.591628][ T7267] bond_slave_0: entered promiscuous mode [ 143.599624][ T7267] bond_slave_1: entered promiscuous mode [ 143.614395][ T7267] batadv0: entered promiscuous mode [ 143.632973][ T7267] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 143.650750][ T7267] bond0: left promiscuous mode [ 143.668830][ T7267] bond_slave_0: left promiscuous mode [ 143.677057][ T7267] bond_slave_1: left promiscuous mode [ 143.689697][ T7267] batadv0: left promiscuous mode [ 143.768828][ T7274] netlink: 'syz.4.622': attribute type 12 has an invalid length. [ 143.784284][ T7274] netlink: 'syz.4.622': attribute type 28 has an invalid length. [ 143.793495][ T7274] netlink: 148 bytes leftover after parsing attributes in process `syz.4.622'. [ 144.046218][ T5826] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 144.095702][ T7295] syz.1.634 (7295) used greatest stack depth: 19048 bytes left [ 144.282198][ T7304] netlink: 96 bytes leftover after parsing attributes in process `syz.0.637'. [ 144.313690][ T7304] netlink: 96 bytes leftover after parsing attributes in process `syz.0.637'. [ 145.655193][ T7340] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 145.692338][ T7341] netlink: 'syz.3.654': attribute type 10 has an invalid length. [ 145.692368][ T7341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.654'. [ 145.692404][ T7341] team0: entered promiscuous mode [ 145.692446][ T7341] team_slave_0: entered promiscuous mode [ 145.692698][ T7341] team_slave_1: entered promiscuous mode [ 145.692872][ T7341] team0: entered allmulticast mode [ 145.692888][ T7341] team_slave_0: entered allmulticast mode [ 145.692903][ T7341] team_slave_1: entered allmulticast mode [ 145.693680][ T7341] bridge0: port 3(team0) entered blocking state [ 145.694323][ T7341] bridge0: port 3(team0) entered disabled state [ 145.713355][ T7341] bridge0: port 3(team0) entered blocking state [ 145.713477][ T7341] bridge0: port 3(team0) entered forwarding state [ 145.829802][ T7343] macsec1: entered promiscuous mode [ 145.829845][ T7343] macvlan1: entered promiscuous mode [ 145.847094][ T7343] macvlan1: left promiscuous mode [ 148.440784][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 148.571777][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 148.571796][ T30] audit: type=1326 audit(1748283523.150:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7412 comm="syz.3.689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6345f8e969 code=0x0 [ 148.916958][ T7428] bond0: entered promiscuous mode [ 148.922245][ T7428] bond_slave_0: entered promiscuous mode [ 148.928843][ T7428] bond_slave_1: entered promiscuous mode [ 148.936949][ T7428] batadv0: entered promiscuous mode [ 148.943540][ T7428] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 148.951976][ T7428] bond0: left promiscuous mode [ 148.956898][ T7428] bond_slave_0: left promiscuous mode [ 148.962686][ T7428] bond_slave_1: left promiscuous mode [ 148.972648][ T7428] batadv0: left promiscuous mode [ 149.161327][ T7437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 149.584747][ T5870] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.691816][ T59] kernel write not supported for file bpf-prog (pid: 59 comm: kworker/0:2) [ 149.714812][ T5871] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.734706][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 149.741810][ T5870] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.763436][ T5870] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.787544][ T5870] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 149.799720][ T5870] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 149.812940][ T5870] usb 3-1: Product: syz [ 149.826795][ T5870] usb 3-1: Manufacturer: syz [ 149.844300][ T5870] hub 3-1:4.0: USB hub found [ 149.879948][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.894478][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.905137][ T5871] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 149.914249][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.934457][ T5871] usb 5-1: config 0 descriptor?? [ 149.948815][ T7478] misc userio: Begin command sent, but we're already running [ 150.050263][ T5870] hub 3-1:4.0: 2 ports detected [ 150.124208][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 150.269413][ T5870] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 150.286607][ T5870] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 150.328391][ T5870] usb 3-1: USB disconnect, device number 8 [ 150.361990][ T5871] elo 0003:04E7:0030.0004: item fetching failed at offset 5/7 [ 150.386313][ T5871] elo 0003:04E7:0030.0004: parse failed [ 150.395323][ T5871] elo 0003:04E7:0030.0004: probe with driver elo failed with error -22 [ 150.570595][ T5870] usb 5-1: USB disconnect, device number 5 [ 151.117069][ T7516] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 151.212893][ T7521] mmap: syz.1.736 (7521) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.625601][ T7542] trusted_key: encrypted_key: keyword 'upd' not recognized [ 151.664586][ T7546] bridge_slave_0: left allmulticast mode [ 151.684457][ T7546] bridge_slave_0: left promiscuous mode [ 151.695157][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.737843][ T7546] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 151.836732][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.902902][ T7557] input: syz0 as /devices/virtual/input/input12 [ 151.909760][ T7559] netlink: 'syz.4.752': attribute type 4 has an invalid length. [ 152.022361][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.053526][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.057035][ T30] audit: type=1400 audit(1748283526.630:42): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7566 comm="syz.1.757" dest=20002 netif=wpan0 [ 152.086760][ T24] usb 3-1: config 0 descriptor?? [ 152.121686][ T24] cp210x 3-1:0.0: cp210x converter detected [ 152.279690][ T7576] netlink: 'syz.4.761': attribute type 9 has an invalid length. [ 152.312355][ T7576] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.761'. [ 152.349313][ T7576] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 152.507286][ T24] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 152.717262][ T24] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 152.734750][ T24] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 152.759256][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 152.788016][ T24] usb 3-1: USB disconnect, device number 9 [ 152.819735][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 152.849056][ T24] cp210x 3-1:0.0: device disconnected [ 153.225660][ T5870] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 153.409168][ T5870] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.432189][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.462888][ T5870] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.487293][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.505503][ T5870] usb 1-1: Product: syz [ 153.514034][ T5870] usb 1-1: Manufacturer: syz [ 153.530123][ T5870] usb 1-1: SerialNumber: syz [ 153.760734][ T5870] usb 1-1: 0:2 : does not exist [ 153.816692][ T5870] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 153.889668][ T5870] usb 1-1: USB disconnect, device number 4 [ 153.896216][ T7660] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 154.305027][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.310337][ T7681] netlink: 'syz.2.812': attribute type 21 has an invalid length. [ 154.323323][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.812'. [ 154.460710][ T7689] sctp: [Deprecated]: syz.0.817 (pid 7689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.460710][ T7689] Use struct sctp_sack_info instead [ 154.485556][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 154.505179][ T10] usb 5-1: config 0 has no interfaces? [ 154.510853][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.530286][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.562924][ T10] usb 5-1: config 0 descriptor?? [ 154.788175][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.806060][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.818105][ T24] usb 5-1: USB disconnect, device number 6 [ 155.200173][ T30] audit: type=1400 audit(1748283529.770:43): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7722 comm="syz.3.832" dest=20002 netif=wpan0 [ 155.297246][ T7729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.875107][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.034732][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 156.054951][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 177, changing to 11 [ 156.077696][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.096285][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.114859][ T10] usb 1-1: Product: syz [ 156.119083][ T10] usb 1-1: Manufacturer: syz [ 156.123706][ T10] usb 1-1: SerialNumber: syz [ 156.215350][ T59] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.384783][ T59] usb 3-1: Using ep0 maxpacket: 16 [ 156.415699][ T59] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.438368][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.452311][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.462925][ T59] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.475976][ T59] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.499740][ T59] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.514882][ T59] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.539775][ T59] usb 3-1: Manufacturer: syz [ 156.557658][ T59] usb 3-1: config 0 descriptor?? [ 156.806475][ T7758] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 156.832141][ T7758] syzkaller0: linktype set to 804 [ 156.904856][ T59] rc_core: IR keymap rc-hauppauge not found [ 156.920793][ T59] Registered IR keymap rc-empty [ 156.929958][ T59] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 156.975134][ T59] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 156.984502][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.997851][ T10] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 157.017391][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.036914][ T59] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 157.051564][ T10] cdc_ncm 1-1:1.0: bind() failure [ 157.064033][ T10] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 157.079556][ T59] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 157.093354][ T10] cdc_ncm 1-1:1.1: bind() failure [ 157.108014][ T59] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.136994][ T10] usb 1-1: USB disconnect, device number 5 [ 157.181511][ T59] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.214777][ T59] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.238750][ T59] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.264835][ T59] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.295053][ T59] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.323449][ T59] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.343105][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'. [ 157.364864][ T59] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.384817][ T59] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.405129][ T59] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 157.426848][ T59] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 157.443896][ T59] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 157.481506][ T59] usb 3-1: USB disconnect, device number 10 [ 158.024478][ T7808] netlink: 'syz.4.871': attribute type 1 has an invalid length. [ 158.071122][ T7808] netlink: 'syz.4.871': attribute type 2 has an invalid length. [ 158.261378][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 158.289132][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 158.298744][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 158.344994][ T1538] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 158.504770][ T1538] usb 3-1: Using ep0 maxpacket: 32 [ 158.522936][ T1538] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 158.544736][ T1538] usb 3-1: config 0 has no interface number 0 [ 158.550916][ T1538] usb 3-1: config 0 interface 12 has no altsetting 0 [ 158.567824][ T7833] program syz.4.884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.581287][ T1538] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 158.607263][ T1538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.624863][ T1538] usb 3-1: Product: syz [ 158.634661][ T1538] usb 3-1: Manufacturer: syz [ 158.639346][ T1538] usb 3-1: SerialNumber: syz [ 158.670833][ T1538] usb 3-1: config 0 descriptor?? [ 159.226050][ T5871] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 159.383728][ T30] audit: type=1326 audit(1748283533.960:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7867 comm="syz.3.899" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6345f8e969 code=0x0 [ 159.438292][ T5871] usb 1-1: config 0 has no interfaces? [ 159.447064][ T5871] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 159.459684][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.476178][ T5871] usb 1-1: config 0 descriptor?? [ 159.531003][ T1538] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 159.545541][ T1538] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 159.564758][ T1538] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 159.576208][ T1538] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 159.601404][ T1538] usb 3-1: USB disconnect, device number 11 [ 159.712531][ T24] usb 1-1: USB disconnect, device number 6 [ 160.016136][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 160.051381][ T7887] netlink: 48 bytes leftover after parsing attributes in process `syz.4.906'. [ 160.443771][ T7907] program syz.2.917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.574468][ T59] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 160.618781][ T59] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 160.632142][ T7913] mkiss: ax0: crc mode is auto. [ 161.164748][ T59] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 161.326732][ T59] usb 1-1: Using ep0 maxpacket: 32 [ 161.344541][ T59] usb 1-1: config 0 has no interfaces? [ 161.365986][ T59] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 161.376875][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.385575][ T59] usb 1-1: Product: syz [ 161.389967][ T59] usb 1-1: Manufacturer: syz [ 161.395164][ T59] usb 1-1: SerialNumber: syz [ 161.403644][ T59] usb 1-1: config 0 descriptor?? [ 161.419091][ T7951] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 161.447946][ T7951] bond1: entered promiscuous mode [ 161.453458][ T7951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.491215][ T7951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.500139][ T7951] bond1: (slave bond2): making interface the new active one [ 161.507620][ T7951] bond2: entered promiscuous mode [ 161.513820][ T7951] bond1: (slave bond2): Enslaving as an active interface with an up link [ 161.617610][ T59] usb 1-1: USB disconnect, device number 7 [ 162.099085][ T7979] @: renamed from vlan0 [ 162.256154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.276153][ T7983] program syz.3.948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.203908][ T8063] netlink: 'syz.2.984': attribute type 34 has an invalid length. [ 164.376406][ T8070] netlink: 'syz.2.988': attribute type 4 has an invalid length. [ 164.663865][ T8085] loop8: detected capacity change from 0 to 8 [ 164.704187][ T8085] Dev loop8: unable to read RDB block 8 [ 164.722972][ T8085] loop8: unable to read partition table [ 164.739548][ T8085] loop8: partition table beyond EOD, truncated [ 164.748083][ T8085] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 164.816196][ T59] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.978100][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.000513][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.018041][ T59] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.036539][ T59] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.047860][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.060461][ T59] usb 4-1: config 0 descriptor?? [ 165.492980][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.500721][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.514379][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.522886][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.540462][ T8112] vivid-000: disconnect [ 165.552877][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.567313][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.575563][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.576178][ T8110] vivid-000: reconnect [ 165.583717][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.597726][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.606096][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.634258][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.642130][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.667454][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.678405][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.689722][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.713675][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.721590][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.729537][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.741909][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.750708][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.792511][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.818970][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.831807][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.839798][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.853767][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.873176][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.884247][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.896906][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.904476][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.933702][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.946105][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.953599][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 165.992908][ T30] audit: type=1800 audit(1748283540.570:45): pid=8126 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1013" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 166.004266][ T8128] ALSA: mixer_oss: invalid OSS volume '' [ 166.021715][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 166.048444][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 166.049858][ T8128] ALSA: mixer_oss: invalid OSS volume 'ALTP' [ 166.064379][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 166.088136][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 166.114028][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 166.138170][ T59] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 166.148407][ T59] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 166.196344][ T59] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 166.232191][ T59] usb 4-1: USB disconnect, device number 5 [ 167.035057][ T8172] input: syz1 as /devices/virtual/input/input14 [ 167.598822][ T8197] program syz.1.1045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.047877][ T1538] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 168.216709][ T1538] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.230674][ T1538] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.258082][ T1538] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 168.274927][ T1538] usb 1-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 168.283304][ T1538] usb 1-1: Manufacturer: syz [ 168.297274][ T1538] usb 1-1: config 0 descriptor?? [ 168.315643][ T1538] hub 1-1:0.0: USB hub found [ 168.494942][ T8244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1065'. [ 168.520759][ T1538] hub 1-1:0.0: 1 port detected [ 168.653131][ T8252] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1070'. [ 168.736423][ T5829] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 168.739350][ T5826] Bluetooth: hci0: command 0x1407 tx timeout [ 168.936991][ T1538] usb 1-1: USB disconnect, device number 8 [ 170.339052][ T8304] batadv0: entered promiscuous mode [ 170.375150][ T8304] macsec1: entered allmulticast mode [ 170.384764][ T8304] batadv0: entered allmulticast mode [ 170.497811][ T8304] batadv0: left allmulticast mode [ 170.503197][ T8304] batadv0: left promiscuous mode [ 170.848566][ T1538] kernel write not supported for file /audio (pid: 1538 comm: kworker/1:2) [ 171.161876][ T8340] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 171.313064][ T30] audit: type=1326 audit(1748283545.890:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8347 comm="syz.0.1110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc3cb8e969 code=0x0 [ 171.333996][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.023090][ T8381] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1126'. [ 172.488764][ T8404] KVM: debugfs: duplicate directory 8404-4 [ 172.523332][ T8408] loop8: detected capacity change from 0 to 7 [ 172.557797][ T8408] Dev loop8: unable to read RDB block 7 [ 172.563538][ T8408] loop8: unable to read partition table [ 172.578358][ T8408] loop8: partition table beyond EOD, truncated [ 172.588400][ T8408] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 173.131145][ T8428] macvlan0: entered promiscuous mode [ 173.143846][ T8428] batadv0: entered promiscuous mode [ 173.157013][ T8428] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 173.171153][ T8428] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 173.304224][ T8434] can0: slcan on ptm0. [ 173.367803][ T8433] can0 (unregistered): slcan off ptm0. [ 174.119731][ T8466] input: syz1 as /devices/virtual/input/input15 [ 174.209284][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 174.237265][ T8469] Bluetooth: hci5: Frame reassembly failed (-84) [ 174.795128][ T5829] Bluetooth: hci4: link tx timeout [ 174.800913][ T5829] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.810637][ T5823] Bluetooth: hci4: link tx timeout [ 174.815983][ T5823] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.823672][ T5823] Bluetooth: hci4: link tx timeout [ 174.829028][ T5823] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.836783][ T5823] Bluetooth: hci4: link tx timeout [ 174.841932][ T5823] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.852071][ T5823] Bluetooth: hci4: link tx timeout [ 174.857767][ T5823] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 174.865879][ T5823] Bluetooth: hci4: link tx timeout [ 174.875228][ T5823] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 175.070679][ T8480] syzkaller1: entered promiscuous mode [ 175.076415][ T8480] syzkaller1: entered allmulticast mode [ 175.234667][ T30] audit: type=1326 audit(1748283549.810:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8483 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efde0d2ab39 code=0x7ffc0000 [ 175.282562][ T30] audit: type=1326 audit(1748283549.810:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8483 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x7ffc0000 [ 175.334265][ T30] audit: type=1326 audit(1748283549.840:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8483 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efde0d2ab39 code=0x7ffc0000 [ 175.374225][ T30] audit: type=1326 audit(1748283549.840:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8483 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efde0d2ab39 code=0x7ffc0000 [ 175.398785][ T30] audit: type=1326 audit(1748283549.840:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8483 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x7ffc0000 [ 175.426426][ T30] audit: type=1326 audit(1748283549.840:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8483 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efde0d2ab39 code=0x7ffc0000 [ 175.447792][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.456251][ T30] audit: type=1326 audit(1748283549.840:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8483 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efde0d2ab39 code=0x7ffc0000 [ 175.525442][ T30] audit: type=1326 audit(1748283549.840:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8483 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x7ffc0000 [ 175.565330][ T30] audit: type=1326 audit(1748283549.840:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8483 comm="syz.2.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efde0d2ab39 code=0x7ffc0000 [ 175.702647][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1180'. [ 176.255024][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 176.256018][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 176.425521][ T8530] kernel read not supported for file /eth0 (pid: 8530 comm: syz.2.1193) [ 176.450014][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 176.450033][ T30] audit: type=1800 audit(1748283551.030:97): pid=8530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1193" name="eth0" dev="mqueue" ino=20479 res=0 errno=0 [ 176.656187][ T8537] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 176.814748][ T5826] Bluetooth: hci4: command 0x0405 tx timeout [ 176.979914][ T8555] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.353249][ T8569] syzkaller1: entered promiscuous mode [ 177.366906][ T8569] syzkaller1: entered allmulticast mode [ 178.904088][ T8610] xt_CT: No such helper "pptp" [ 179.222186][ T8632] geneve2: entered promiscuous mode [ 179.237443][ T8632] geneve2: entered allmulticast mode [ 179.324891][ T1538] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 179.486864][ T1538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.508202][ T1538] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 179.510126][ T8648] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.519634][ T1538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.547495][ T1538] usb 5-1: config 0 descriptor?? [ 179.952576][ T8659] loop2: detected capacity change from 0 to 7 [ 179.965016][ T8659] Dev loop2: unable to read RDB block 7 [ 179.971185][ T1538] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 179.995071][ T8659] loop2: unable to read partition table [ 180.000982][ T8659] loop2: partition table beyond EOD, truncated [ 180.013102][ T1538] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0007/input/input16 [ 180.026264][ T8659] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 180.185185][ T1538] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 180.424738][ T10] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 180.593379][ T59] usb 5-1: USB disconnect, device number 7 [ 180.602135][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 180.605362][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 180.614617][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.652482][ T10] usb 1-1: config 0 descriptor?? [ 180.675081][ T1538] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 180.786707][ T24] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 180.804761][ T24] usb 4-1: config 7 has no interface number 0 [ 180.817301][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 180.836942][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.845962][ T1538] usb 3-1: Using ep0 maxpacket: 32 [ 180.851652][ T24] usb 4-1: Product: syz [ 180.856543][ T24] usb 4-1: Manufacturer: syz [ 180.861449][ T24] usb 4-1: SerialNumber: syz [ 180.868296][ T1538] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 180.878547][ T1538] usb 3-1: config 0 has no interface number 0 [ 180.887205][ T1538] usb 3-1: config 0 interface 184 has no altsetting 0 [ 180.898692][ T1538] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 180.908742][ T1538] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.918063][ T1538] usb 3-1: Product: syz [ 180.922318][ T1538] usb 3-1: Manufacturer: syz [ 180.929047][ T1538] usb 3-1: SerialNumber: syz [ 180.941549][ T1538] usb 3-1: config 0 descriptor?? [ 180.950572][ T1538] smsc75xx v1.0.0 [ 181.568244][ T1538] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 181.581022][ T1538] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 181.691572][ T24] as10x_usb: device has been detected [ 181.699940][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 181.709973][ T10] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 181.729983][ T24] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 181.733061][ T10] usb 1-1: USB disconnect, device number 9 [ 181.765767][ T24] as10x_usb: error during firmware upload part1 [ 181.773405][ T24] Registered device Elgato EyeTV DTT Deluxe [ 181.795089][ T1538] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 181.812052][ T1538] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 181.822042][ T1538] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 181.831912][ T1538] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 181.846899][ T1538] usb 3-1: USB disconnect, device number 12 [ 181.880758][ T59] usb 4-1: USB disconnect, device number 6 [ 181.919908][ T59] Unregistered device Elgato EyeTV DTT Deluxe [ 181.923944][ T59] as10x_usb: device has been disconnected [ 182.962782][ T8737] program syz.3.1286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.269086][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1289'. [ 183.480448][ T8748] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1291'. [ 185.175269][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 185.349098][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 185.370354][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.413517][ T10] usb 5-1: Product: syz [ 185.424500][ T10] usb 5-1: Manufacturer: syz [ 185.432260][ T10] usb 5-1: SerialNumber: syz [ 185.446311][ T10] usb 5-1: config 0 descriptor?? [ 185.522860][ T8826] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 185.565160][ T8824] syzkaller1: entered promiscuous mode [ 185.581136][ T8824] syzkaller1: entered allmulticast mode [ 185.659497][ T10] hso 5-1:0.0: Can't find BULK IN endpoint [ 185.668195][ T10] usb-storage 5-1:0.0: USB Mass Storage device detected [ 185.868249][ T10] usb 5-1: USB disconnect, device number 8 [ 186.185809][ T8854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.312041][ T8862] syzkaller1: entered promiscuous mode [ 186.318716][ T8862] syzkaller1: entered allmulticast mode [ 186.454733][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 186.454774][ T5870] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 186.617050][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 186.641827][ T24] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 186.653267][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.666552][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.669826][ T5870] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 186.682735][ T8856] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 186.696531][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.698571][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.713610][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.750127][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.771243][ T5870] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.788922][ T5870] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.798234][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.822531][ T5870] usb 3-1: config 0 descriptor?? [ 186.929549][ T8883] input: syz1 as /devices/virtual/input/input17 [ 186.929609][ T59] usb 4-1: USB disconnect, device number 7 [ 187.248499][ T5870] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 187.289842][ T5870] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 187.324123][ T5870] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 187.570817][ T24] usb 3-1: USB disconnect, device number 13 [ 187.793551][ T8913] program syz.3.1365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.925333][ T5870] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 188.106705][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.150886][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.195836][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 188.269905][ T5870] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 188.314675][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.355729][ T5870] usb 5-1: config 0 descriptor?? [ 188.389066][ T8929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1372'. [ 188.751964][ T8940] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 188.852614][ T5870] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 188.888413][ T5870] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 188.910832][ T5870] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 189.295129][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 189.318313][ T8955] input: syz0 as /devices/virtual/input/input19 [ 189.328248][ T8955] input: failed to attach handler leds to device input19, error: -6 [ 189.464676][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 189.485908][ T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 189.494178][ T24] usb 4-1: config 0 has no interface number 0 [ 189.512767][ T24] usb 4-1: config 0 interface 184 has no altsetting 0 [ 189.523038][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 189.532758][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.558459][ T24] usb 4-1: Product: syz [ 189.562678][ T24] usb 4-1: Manufacturer: syz [ 189.567465][ T24] usb 4-1: SerialNumber: syz [ 189.583228][ T24] usb 4-1: config 0 descriptor?? [ 189.592079][ T24] smsc75xx v1.0.0 [ 189.700355][ T8964] binder: 8963:8964 ioctl c0306201 2000000003c0 returned -22 [ 190.094296][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'. [ 190.187017][ T47] kernel read not supported for file /sequencer (pid: 47 comm: kworker/1:1) [ 190.210130][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 190.240750][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 190.441783][ T8993] program syz.2.1402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.479783][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 190.497541][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 190.511598][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 190.523211][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 190.537434][ T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 190.549397][ T8995] bond_slave_0: entered promiscuous mode [ 190.555383][ T8995] bond_slave_1: entered promiscuous mode [ 190.568042][ T8995] macsec1: entered promiscuous mode [ 190.573403][ T8995] bond0: entered promiscuous mode [ 190.579186][ T8995] macsec1: entered allmulticast mode [ 190.580735][ T24] usb 4-1: USB disconnect, device number 8 [ 190.584744][ T8995] bond0: entered allmulticast mode [ 190.603895][ T8995] bond_slave_0: entered allmulticast mode [ 190.617353][ T8995] bond_slave_1: entered allmulticast mode [ 190.628121][ T8995] bond0: left allmulticast mode [ 190.633051][ T8995] bond_slave_0: left allmulticast mode [ 190.639955][ T8995] bond_slave_1: left allmulticast mode [ 190.646576][ T8995] bond0: left promiscuous mode [ 190.652248][ T8995] bond_slave_0: left promiscuous mode [ 190.657790][ T8995] bond_slave_1: left promiscuous mode [ 190.811375][ T5829] Bluetooth: hci4: unexpected event for opcode 0x080f [ 190.941362][ T10] usb 5-1: USB disconnect, device number 9 [ 192.114952][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 192.274813][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 192.289694][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.309844][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.332461][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 192.349929][ T10] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 192.366678][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.378110][ T10] usb 3-1: config 0 descriptor?? [ 192.621461][ T9071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1433'. [ 192.706173][ T9073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.799466][ T10] hid (null): unknown global tag 0xd [ 192.830139][ T10] hid (null): unknown global tag 0xc [ 192.844681][ T10] hid (null): unknown global tag 0xc [ 192.876574][ T10] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 192.889866][ T10] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 192.906486][ T10] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 192.927245][ T10] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 192.934391][ T10] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 192.951968][ T10] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 192.963261][ T10] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 192.973189][ T10] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 192.988895][ T10] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 192.996574][ T10] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 193.006561][ T10] cougar 0003:060B:500A.000A: collection stack underflow [ 193.028258][ T10] cougar 0003:060B:500A.000A: item 0 0 0 12 parsing failed [ 193.036925][ T10] cougar 0003:060B:500A.000A: parse failed [ 193.046466][ T10] cougar 0003:060B:500A.000A: probe with driver cougar failed with error -22 [ 193.060765][ T10] usb 3-1: USB disconnect, device number 14 [ 193.407817][ T47] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 193.573517][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.594891][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 193.624673][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 193.644629][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.680094][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.705154][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.717498][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 193.738918][ T47] usb 5-1: config 0 descriptor?? [ 193.755586][ T9084] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 194.202459][ T47] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 194.230847][ T47] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 194.258905][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.261398][ T2340] pvrusb2: request_firmware fatal error with code=-110 [ 194.286278][ T47] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 194.303767][ T2340] pvrusb2: Failure uploading firmware1 [ 194.324719][ T2340] pvrusb2: Device initialization was not successful. [ 194.344640][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 194.359034][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 194.376349][ T2340] pvrusb2: Invalid write control endpoint [ 194.382515][ T5872] pvrusb2: Device being rendered inoperable [ 194.385915][ T2340] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 194.418466][ T2340] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 194.526909][ T5931] usb 5-1: USB disconnect, device number 10 [ 194.816598][ T5829] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 194.825940][ T5829] Bluetooth: hci4: Injecting HCI hardware error event [ 194.834068][ T5829] Bluetooth: hci4: hardware error 0x00 [ 194.942108][ T9118] Bluetooth: hci5: Frame reassembly failed (-84) [ 195.478183][ T9136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1464'. [ 196.974844][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 196.975056][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 196.981957][ T5829] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 197.092374][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1491'. [ 197.456459][ T30] audit: type=1326 audit(1748283572.030:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9205 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x7fc00000 [ 197.506462][ T4244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.507052][ T30] audit: type=1326 audit(1748283572.030:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9205 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efde0d8e969 code=0x7fc00000 [ 197.538929][ T4244] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.599878][ T30] audit: type=1326 audit(1748283572.030:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9205 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x7fc00000 [ 197.644641][ T30] audit: type=1326 audit(1748283572.030:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9205 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x7fc00000 [ 197.686605][ T4244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.695863][ T30] audit: type=1326 audit(1748283572.030:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9205 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x7fc00000 [ 197.714850][ T4244] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.739930][ T30] audit: type=1326 audit(1748283572.030:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9205 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x7fc00000 [ 197.814636][ T30] audit: type=1326 audit(1748283572.030:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9205 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x7fc00000 [ 197.859134][ T30] audit: type=1326 audit(1748283572.030:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9205 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x7fc00000 [ 197.883028][ T4244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.901226][ T30] audit: type=1326 audit(1748283572.030:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9205 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x7fc00000 [ 197.903065][ T4244] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.964852][ T30] audit: type=1326 audit(1748283572.030:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9205 comm="syz.2.1496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde0d8e969 code=0x7fc00000 [ 198.167076][ T4244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.187830][ T9210] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1498'. [ 198.204393][ T4244] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.204869][ T9216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1500'. [ 198.251289][ T9210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1498'. [ 198.382438][ T4244] bridge_slave_1: left promiscuous mode [ 198.396242][ T4244] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.478740][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.489037][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.497606][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.505924][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.514379][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.658086][ T9222] Bluetooth: hci5: Frame reassembly failed (-84) [ 199.313918][ T4244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.339018][ T4244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.360244][ T4244] bond0 (unregistering): Released all slaves [ 200.006208][ T4244] hsr_slave_0: left promiscuous mode [ 200.054692][ T4244] hsr_slave_1: left promiscuous mode [ 200.060922][ T4244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.089819][ T4244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.103948][ T4244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.111746][ T4244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.194310][ T4244] veth1_macvtap: left promiscuous mode [ 200.215368][ T4244] veth0_macvtap: left promiscuous mode [ 200.221138][ T4244] veth1_vlan: left promiscuous mode [ 200.232091][ T4244] veth0_vlan: left promiscuous mode [ 200.412327][ T47] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 200.468812][ T47] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.574743][ T5829] Bluetooth: hci0: command tx timeout [ 200.655588][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 200.659114][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 201.351664][ T4244] team0 (unregistering): Port device team_slave_1 removed [ 201.413801][ T4244] team0 (unregistering): Port device team_slave_0 removed [ 201.539623][ T47] kernel read not supported for file /adsp1 (pid: 47 comm: kworker/1:1) [ 201.892820][ T9285] IPv6: Can't replace route, no match found [ 202.117178][ T9219] chnl_net:caif_netlink_parms(): no params data found [ 202.400974][ T9219] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.414376][ T9219] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.423485][ T9219] bridge_slave_0: entered allmulticast mode [ 202.450060][ T9219] bridge_slave_0: entered promiscuous mode [ 202.537971][ T9219] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.551583][ T9219] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.561185][ T9219] bridge_slave_1: entered allmulticast mode [ 202.573356][ T9219] bridge_slave_1: entered promiscuous mode [ 202.656348][ T5826] Bluetooth: hci0: command tx timeout [ 202.699995][ T9219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.746665][ T9219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.924844][ T9323] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1541'. [ 202.941152][ T9219] team0: Port device team_slave_0 added [ 202.959889][ T9219] team0: Port device team_slave_1 added [ 203.076748][ T9219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.095780][ T9219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.121693][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.164898][ T9219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.189258][ T9219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.203932][ T9219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.251464][ T9219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.455389][ T9219] hsr_slave_0: entered promiscuous mode [ 203.457748][ T9219] hsr_slave_1: entered promiscuous mode [ 203.459759][ T9219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.480623][ T9219] Cannot create hsr debugfs directory [ 203.781623][ T5931] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 203.960674][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 203.968107][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.994915][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1553'. [ 204.010757][ T5931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.022316][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1553'. [ 204.031673][ T5931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.052253][ T5931] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 204.062756][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.105996][ T5931] usb 5-1: config 0 descriptor?? [ 204.505329][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 204.532073][ T5931] microsoft 0003:045E:07DA.000D: unknown main item tag 0x1 [ 204.586772][ T5931] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000D/input/input22 [ 204.661108][ T9219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.677919][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 204.692727][ T5931] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 204.707793][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 204.721543][ T9219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 204.735216][ T5826] Bluetooth: hci0: command tx timeout [ 204.741003][ T24] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 204.761917][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.779361][ T9219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 204.788225][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.806582][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.817980][ T5931] usb 5-1: USB disconnect, device number 11 [ 204.819774][ T24] usb 4-1: Product: syz [ 204.828346][ T24] usb 4-1: Manufacturer: syz [ 204.832971][ T24] usb 4-1: SerialNumber: syz [ 204.848087][ T9219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.010925][ T9219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.063205][ T9219] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.105436][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.112714][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.146246][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.153498][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.261061][ T24] usb 4-1: 0:2 : does not exist [ 205.302670][ T24] usb 4-1: USB disconnect, device number 9 [ 205.661589][ T9219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.861862][ T9219] veth0_vlan: entered promiscuous mode [ 205.905800][ T9219] veth1_vlan: entered promiscuous mode [ 205.967720][ T9219] veth0_macvtap: entered promiscuous mode [ 206.003269][ T9219] veth1_macvtap: entered promiscuous mode [ 206.072450][ T9219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.127239][ T9219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.363289][ T9411] team0 (unregistering): Port device team_slave_0 removed [ 206.410629][ T9411] team0 (unregistering): Port device team_slave_1 removed [ 206.459052][ T9411] team0 (unregistering): Port device virt_wifi0 removed [ 206.517223][ T9411] team0 (unregistering): Port device geneve0 removed [ 206.537695][ T1538] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 206.551000][ T9219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.560084][ T9219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.570151][ T9219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.580071][ T9219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.711625][ T1538] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.725837][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.740714][ T1538] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.753559][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.771980][ T1538] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 206.796885][ T1538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 206.812290][ T1538] usb 5-1: SerialNumber: syz [ 206.818980][ T5826] Bluetooth: hci0: command tx timeout [ 206.841637][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.875916][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.040015][ T1538] usb 5-1: 0:2 : does not exist [ 207.101513][ T1538] usb 5-1: USB disconnect, device number 12 [ 207.585027][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 207.672994][ T9446] netlink: 'syz.2.1592': attribute type 1 has an invalid length. [ 207.701531][ T9446] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1592'. [ 207.748979][ T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.758402][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.800773][ T24] usb 4-1: config 0 descriptor?? [ 207.816030][ T24] cp210x 4-1:0.0: cp210x converter detected [ 208.124682][ T5873] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 208.229306][ T24] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 208.275244][ T24] usb 4-1: cp210x converter now attached to ttyUSB0 [ 208.300047][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 208.352259][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 208.384627][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 208.428371][ T5873] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 208.447844][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.478191][ T5873] usb 3-1: Product: syz [ 208.482507][ T5873] usb 3-1: Manufacturer: syz [ 208.491994][ T24] usb 4-1: USB disconnect, device number 10 [ 208.507940][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.515944][ T5873] usb 3-1: SerialNumber: syz [ 208.527679][ T5873] usb 3-1: config 0 descriptor?? [ 208.533227][ T24] cp210x 4-1:0.0: device disconnected [ 208.539826][ T9454] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 208.547863][ T9454] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 208.562036][ T5873] usb 3-1: ucan: probing device on interface #0 [ 209.232858][ T5873] ucan 3-1:0.0 can0: registered device [ 209.272867][ T9493] loop8: detected capacity change from 0 to 8 [ 209.307692][ T9493] Dev loop8: unable to read RDB block 8 [ 209.324851][ T9493] loop8: unable to read partition table [ 209.330860][ T9493] loop8: partition table beyond EOD, truncated [ 209.392961][ T9493] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 209.416027][ T5873] ucan 3-1:0.0 can0: firmware string: [ 209.648388][ T1538] usb 3-1: USB disconnect, device number 15 [ 210.335630][ T9534] syz_tun: entered promiscuous mode [ 210.378295][ T9534] syz_tun: left promiscuous mode [ 210.644951][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 210.821215][ T24] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 210.833380][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.849436][ T24] usb 3-1: config 0 descriptor?? [ 210.860440][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 211.083802][ T24] gp8psk: usb in 128 operation failed. [ 211.110599][ T24] gp8psk: usb in 137 operation failed. [ 211.136391][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.159092][ T24] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 211.178620][ T24] usb 3-1: media controller created [ 211.271728][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.373051][ T24] gp8psk_fe: Frontend attached [ 211.392886][ T24] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 211.404119][ T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 211.503660][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 211.523867][ T24] gp8psk: found Genpix USB device pID = 203 (hex) [ 211.710554][ T5870] usb 3-1: USB disconnect, device number 16 [ 211.910199][ T5870] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 212.276332][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 212.276350][ T30] audit: type=1326 audit(1748283586.860:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9582 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6345f8e969 code=0x7ffc0000 [ 212.394817][ T30] audit: type=1326 audit(1748283586.860:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9582 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6345f2ab39 code=0x7ffc0000 [ 212.455575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 212.530200][ T30] audit: type=1326 audit(1748283586.860:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9582 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6345f2ab39 code=0x7ffc0000 [ 212.633212][ T30] audit: type=1326 audit(1748283586.860:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9582 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6345f2ab39 code=0x7ffc0000 [ 212.700931][ T30] audit: type=1326 audit(1748283586.860:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9582 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6345f2ab39 code=0x7ffc0000 [ 212.775140][ T30] audit: type=1326 audit(1748283586.860:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9582 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6345f2ab39 code=0x7ffc0000 [ 212.844646][ T30] audit: type=1326 audit(1748283586.860:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9582 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6345f2ab39 code=0x7ffc0000 [ 212.887693][ T1538] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 212.934435][ T30] audit: type=1326 audit(1748283586.860:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9582 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6345f2ab39 code=0x7ffc0000 [ 212.968799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 213.023111][ T30] audit: type=1326 audit(1748283586.860:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9582 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6345f2ab39 code=0x7ffc0000 [ 213.074698][ T1538] usb 1-1: Using ep0 maxpacket: 8 [ 213.103793][ T1538] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 213.115671][ T30] audit: type=1326 audit(1748283586.860:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9582 comm="syz.3.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6345f2ab39 code=0x7ffc0000 [ 213.141634][ T1538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.163243][ T1538] usb 1-1: Product: syz [ 213.172691][ T1538] usb 1-1: Manufacturer: syz [ 213.183968][ T1538] usb 1-1: SerialNumber: syz [ 213.209197][ T1538] usb 1-1: config 0 descriptor?? [ 213.232968][ T1538] gspca_main: sq905-2.14.0 probing 2770:9120 [ 213.718621][ T9628] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 213.736040][ T9627] IPVS: stopping master sync thread 9628 ... [ 213.796010][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1675'. [ 214.019372][ T9640] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 214.095145][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 214.171855][ T9644] input: syz0 as /devices/virtual/input/input23 [ 214.249558][ T1538] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 214.257288][ T1538] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 214.265030][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 214.277509][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 214.288706][ T24] usb 3-1: config 0 has no interface number 0 [ 214.296224][ T1538] usb 1-1: USB disconnect, device number 10 [ 214.303923][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.332121][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 214.362215][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.387343][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.417346][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 214.437702][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.470710][ T24] usb 3-1: config 0 descriptor?? [ 214.490355][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 214.731871][ T24] usb 3-1: USB disconnect, device number 17 [ 214.803842][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 214.897512][ T9668] tun0: tun_chr_ioctl cmd 1074025675 [ 214.902974][ T9668] tun0: persist enabled [ 214.916539][ T9668] tun0: tun_chr_ioctl cmd 1074025675 [ 214.921986][ T9668] tun0: persist disabled [ 215.431372][ T9683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.692101][ T9691] Bluetooth: MGMT ver 1.23 [ 215.713426][ T9691] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 216.260661][ T9717] overlayfs: invalid origin (0000) [ 216.596181][ T9732] Trying to write to read-only block-device nullb0 [ 216.814881][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 216.814942][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 216.815080][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 217.077258][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1725'. [ 217.869139][ T9760] sd 0:0:1:0: device reset [ 218.060370][ T9770] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 218.115428][ T47] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 218.302280][ T47] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 218.313654][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.342153][ T47] usb 3-1: Product: syz [ 218.360171][ T47] usb 3-1: Manufacturer: syz [ 218.377219][ T47] usb 3-1: SerialNumber: syz [ 218.399338][ T47] usb 3-1: config 0 descriptor?? [ 218.833069][ T9788] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1746'. [ 218.949910][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 218.971413][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1747'. [ 219.466303][ T47] usb 3-1: f81604_read: reg: 100f failed: -EPROTO [ 219.492825][ T47] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 219.495176][ T5931] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 219.500878][ T9813] syzkaller1: entered promiscuous mode [ 219.515550][ T47] usb 3-1: USB disconnect, device number 18 [ 219.522435][ T9813] syzkaller1: entered allmulticast mode [ 219.540939][ T47] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 219.597478][ T47] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 219.666674][ T5931] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 219.679874][ T5931] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 219.690569][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 219.702109][ T5931] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 219.715862][ T5931] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 219.732811][ T5931] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 219.748993][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 219.759123][ T5931] usb 1-1: Product: syz [ 219.763739][ T5931] usb 1-1: Manufacturer: syz [ 219.783609][ T5931] cdc_wdm 1-1:1.0: skipping garbage [ 219.794163][ T5931] cdc_wdm 1-1:1.0: skipping garbage [ 219.802803][ T5931] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 219.819123][ T5931] cdc_wdm 1-1:1.0: Unknown control protocol [ 219.824849][ T1538] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 220.025994][ T1538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 220.035100][ T59] usb 1-1: USB disconnect, device number 11 [ 220.044771][ T1538] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 220.054029][ T1538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.079346][ T1538] usb 4-1: config 0 descriptor?? [ 220.094013][ T9822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.532530][ T1538] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 327.244533][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 327.251739][ C0] rcu: (detected by 0, t=10502 jiffies, g=34353, q=260 ncpus=2) [ 327.259488][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294969843-4294959341), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 327.272882][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g34353 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 327.284097][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 327.294080][ C0] rcu: RCU grace-period kthread stack dump: [ 327.299979][ C0] task:rcu_preempt state:R running task stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 327.313607][ C0] Call Trace: [ 327.316903][ C0] [ 327.319860][ C0] __schedule+0x168f/0x4c70 [ 327.324394][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 327.329628][ C0] ? schedule+0x165/0x360 [ 327.333987][ C0] ? __pfx___schedule+0x10/0x10 [ 327.338876][ C0] ? schedule+0x91/0x360 [ 327.343144][ C0] schedule+0x165/0x360 [ 327.347324][ C0] schedule_timeout+0x12b/0x270 [ 327.352196][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 327.357590][ C0] ? __pfx_process_timeout+0x10/0x10 [ 327.362904][ C0] ? prepare_to_swait_event+0x341/0x380 [ 327.368485][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 327.373365][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.378602][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 327.383563][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 327.388868][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 327.394093][ C0] ? finish_swait+0xcd/0x1f0 [ 327.398709][ C0] rcu_gp_kthread+0x99/0x390 [ 327.403337][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 327.408564][ C0] ? __kthread_parkme+0x7b/0x200 [ 327.413531][ C0] ? __kthread_parkme+0x1a1/0x200 [ 327.418579][ C0] kthread+0x711/0x8a0 [ 327.422675][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 327.427891][ C0] ? __pfx_kthread+0x10/0x10 [ 327.432514][ C0] ? __pfx_kthread+0x10/0x10 [ 327.437125][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 327.442347][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.447573][ C0] ? __pfx_kthread+0x10/0x10 [ 327.452182][ C0] ret_from_fork+0x4b/0x80 [ 327.456617][ C0] ? __pfx_kthread+0x10/0x10 [ 327.461228][ C0] ret_from_fork_asm+0x1a/0x30 [ 327.466038][ C0] [ 327.469070][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 327.475424][ C0] Sending NMI from CPU 0 to CPUs 1: [ 327.480661][ C1] NMI backtrace for cpu 1 [ 327.480688][ C1] CPU: 1 UID: 0 PID: 9869 Comm: syz.3.1777 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 327.480708][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.480718][ C1] RIP: 0010:__lock_acquire+0x804/0xd20 [ 327.480763][ C1] Code: de e8 10 e5 48 03 eb c4 44 89 e0 25 ff 1f 00 00 41 c1 ec 03 41 81 e4 00 60 00 00 41 09 c4 4c 89 f1 48 c1 e9 20 89 ca c1 c2 04 <41> 29 cc 44 31 e2 44 01 f1 41 29 d6 89 d6 c1 c6 06 44 31 f6 01 ca [ 327.480778][ C1] RSP: 0018:ffffc90000a08140 EFLAGS: 00000807 [ 327.480793][ C1] RAX: 0000000000000071 RBX: 0000000000000003 RCX: 00000000ffffffff [ 327.480805][ C1] RDX: 00000000ffffffff RSI: ffff88801bf9e568 RDI: ffff88801bf9da00 [ 327.480817][ C1] RBP: ffff88801bf9e4f0 R08: 0000000000000000 R09: 0000000000080000 [ 327.480829][ C1] R10: 0000000000000000 R11: ffffffff81ae5972 R12: 0000000000000071 [ 327.480840][ C1] R13: 0000000000000000 R14: ffffffffffffffff R15: ffff88801bf9e568 [ 327.480852][ C1] FS: 0000000000000000(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 327.480865][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.480877][ C1] CR2: 00007efde1c79f98 CR3: 000000004df9a000 CR4: 00000000003526f0 [ 327.480892][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 327.480902][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 327.480913][ C1] Call Trace: [ 327.480920][ C1] [ 327.480930][ C1] ? __hrtimer_run_queues+0x602/0xc60 [ 327.480962][ C1] lock_acquire+0x120/0x360 [ 327.480992][ C1] ? __hrtimer_run_queues+0x602/0xc60 [ 327.481028][ C1] ? advance_sched+0x9f8/0xc90 [ 327.481052][ C1] ? advance_sched+0x9f8/0xc90 [ 327.481072][ C1] ? advance_sched+0x9f8/0xc90 [ 327.481094][ C1] _raw_spin_lock_irq+0xa2/0xf0 [ 327.481111][ C1] ? __hrtimer_run_queues+0x602/0xc60 [ 327.481135][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 327.481157][ C1] __hrtimer_run_queues+0x602/0xc60 [ 327.481190][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 327.481213][ C1] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 327.481238][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 327.481283][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 327.481305][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 327.481324][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 327.481342][ C1] RIP: 0010:rcu_is_watching+0x60/0xb0 [ 327.481366][ C1] Code: 80 3c 38 00 74 08 4c 89 f7 e8 5c ac 78 00 48 c7 c3 58 cb 73 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 <65> ff 0d 49 87 cb 10 74 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc [ 327.481379][ C1] RSP: 0018:ffffc90000a08670 EFLAGS: 00000246 [ 327.481392][ C1] RAX: 0000000000054fc4 RBX: ffff8880b8932b58 RCX: d47eebc6dc096e00 [ 327.481404][ C1] RDX: ffffc90000a08801 RSI: ffffffff8bc12220 RDI: ffffffff8bc121e0 [ 327.481416][ C1] RBP: dffffc0000000000 R08: ffffc90000a088f0 R09: 0000000000000000 [ 327.481428][ C1] R10: ffffc90000a08818 R11: fffff52000141105 R12: ffffc90000a08900 [ 327.481440][ C1] R13: ffffffff8171ca05 R14: ffffffff8d95cc28 R15: dffffc0000000000 [ 327.481453][ C1] ? unwind_next_frame+0xa5/0x2390 [ 327.481480][ C1] ? unwind_next_frame+0xa5/0x2390 [ 327.481498][ C1] lock_release+0x4b/0x3e0 [ 327.481519][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 327.481537][ C1] ? deref_stack_reg+0x19f/0x230 [ 327.481557][ C1] ? unwind_next_frame+0xa5/0x2390 [ 327.481575][ C1] unwind_next_frame+0x19a9/0x2390 [ 327.481597][ C1] ? unwind_next_frame+0xa5/0x2390 [ 327.481616][ C1] ? stack_trace_save+0x9c/0xe0 [ 327.481634][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 327.481652][ C1] arch_stack_walk+0x11c/0x150 [ 327.481675][ C1] ? save_stack+0xf7/0x1f0 [ 327.481702][ C1] stack_trace_save+0x9c/0xe0 [ 327.481718][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 327.481734][ C1] ? percpu_ref_put+0x19/0x180 [ 327.481759][ C1] save_stack+0xf7/0x1f0 [ 327.481784][ C1] ? __pfx_save_stack+0x10/0x10 [ 327.481814][ C1] ? page_ext_put+0x97/0xc0 [ 327.481841][ C1] __reset_page_owner+0x71/0x1f0 [ 327.481867][ C1] __free_frozen_pages+0xb05/0xcd0 [ 327.481900][ C1] __tlb_remove_table+0x2d2/0x3b0 [ 327.481932][ C1] ? __pfx___tlb_remove_table+0x10/0x10 [ 327.481949][ C1] ? rcu_core+0xc34/0x1710 [ 327.481969][ C1] ? rcu_core+0xc34/0x1710 [ 327.481991][ C1] tlb_remove_table_rcu+0x85/0x100 [ 327.482010][ C1] ? __pfx_tlb_remove_table_rcu+0x10/0x10 [ 327.482027][ C1] ? rcu_core+0xc34/0x1710 [ 327.482046][ C1] rcu_core+0xca5/0x1710 [ 327.482074][ C1] ? __pfx_rcu_core+0x10/0x10 [ 327.482095][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 327.482112][ C1] ? sched_clock_cpu+0x74/0x430 [ 327.482134][ C1] ? ktime_get+0x3e/0x1f0 [ 327.482148][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 327.482163][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 327.482184][ C1] ? __local_bh_disable_ip+0xf1/0x190 [ 327.482207][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 327.482236][ C1] handle_softirqs+0x283/0x870 [ 327.482260][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 327.482285][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 327.482312][ C1] __irq_exit_rcu+0xca/0x1f0 [ 327.482334][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 327.482361][ C1] irq_exit_rcu+0x9/0x30 [ 327.482382][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 327.482400][ C1] [ 327.482405][ C1] [ 327.482410][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 327.482426][ C1] RIP: 0010:exit_mmap+0x516/0xba0 [ 327.482440][ C1] Code: 00 10 00 4d 8d 6f 20 4c 89 e8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 de 62 14 00 4d 8b 6d 00 00 00 10 00 4c 21 ee 31 ff e8 6b 93 b4 ff 49 21 dd 75 07 e8 81 [ 327.482453][ C1] RSP: 0018:ffffc9000bf8f840 EFLAGS: 00000246 [ 327.482466][ C1] RAX: 1ffff11006714ca4 RBX: 0000000000100000 RCX: dffffc0000000000 [ 327.482477][ C1] RDX: 0000000000000000 RSI: ffffffff8e03ae80 RDI: ffff8880338a6500 [ 327.482487][ C1] RBP: ffffc9000bf8f9f8 R08: ffff88801bf9da00 R09: 0000000000000002 [ 327.482499][ C1] R10: 0000000000000406 R11: 0000000000000000 R12: 0000000000001922 [ 327.482508][ C1] R13: 0000000008100073 R14: 0000000000000019 R15: ffff8880338a6500 [ 327.482528][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 327.482541][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 327.482566][ C1] ? __pfx_exit_aio+0x10/0x10 [ 327.482591][ C1] ? uprobe_clear_state+0x274/0x290 [ 327.482607][ C1] ? mm_update_next_owner+0xa7/0x870 [ 327.482626][ C1] __mmput+0x118/0x410 [ 327.482650][ C1] exit_mm+0x1da/0x2c0 [ 327.482668][ C1] ? __pfx_exit_mm+0x10/0x10 [ 327.482685][ C1] ? taskstats_exit+0x43c/0xa30 [ 327.482702][ C1] ? tty_audit_exit+0x153/0x200 [ 327.482719][ C1] do_exit+0x859/0x2550 [ 327.482740][ C1] ? do_raw_spin_lock+0x121/0x290 [ 327.482761][ C1] ? __pfx_do_exit+0x10/0x10 [ 327.482778][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 327.482801][ C1] do_group_exit+0x21c/0x2d0 [ 327.482819][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.482837][ C1] get_signal+0x125e/0x1310 [ 327.482869][ C1] arch_do_signal_or_restart+0x95/0x780 [ 327.482895][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 327.482924][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 327.482947][ C1] syscall_exit_to_user_mode+0x8b/0x120 [ 327.482966][ C1] do_syscall_64+0x103/0x210 [ 327.482987][ C1] ? clear_bhb_loop+0x60/0xb0 [ 327.483004][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.483019][ C1] RIP: 0033:0x7f6345f8e969 [ 327.483035][ C1] Code: Unable to access opcode bytes at 0x7f6345f8e93f. [ 327.483043][ C1] RSP: 002b:00007f6346ebf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 327.483058][ C1] RAX: fffffffffffffe00 RBX: 00007f63461b5fa8 RCX: 00007f6345f8e969 [ 327.483069][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f63461b5fa8 [ 327.483079][ C1] RBP: 00007f63461b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 327.483088][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f63461b5fac [ 327.483097][ C1] R13: 0000000000000000 R14: 00007ffc2cd1c5c0 R15: 00007ffc2cd1c6a8 [ 327.483115][ C1]