last executing test programs: 5.123133872s ago: executing program 1 (id=514): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000540)=0xc) r2 = getegid() keyctl$chown(0x4, 0x0, r1, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x0, 0x4, 0x0, @empty, @private}}}}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r10}]}}}]}, 0x40}}, 0x0) sendto$packet(r8, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r10, 0x1, 0x4, 0x6, @local}, 0x14) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x2010489, &(0x7f0000000340)=ANY=[@ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000,user_i', @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,blksize=0x000']) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 3.42193178s ago: executing program 3 (id=528): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 3.37376855s ago: executing program 3 (id=529): syz_open_dev$tty1(0xc, 0x4, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) mmap(&(0x7f00003c1000/0x4000)=nil, 0x4000, 0x100000c, 0x13, 0xffffffffffffffff, 0xa49d3000) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000040)) 3.292457101s ago: executing program 3 (id=530): ioperm(0x400, 0x7, 0x200000005) ioperm(0x8000, 0x7ff, 0xfffffffffffffff1) 3.232618946s ago: executing program 3 (id=531): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) io_setup(0xffff, &(0x7f0000000340)) 3.062755132s ago: executing program 3 (id=533): socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095000000000000002f81c461b3fea834ceb0e17d802cfb227e656a3698c792bd22555161b0010095448e9f7024b45ffcd2ce278009682dc8f7c867b177ed5bd50b92aedef35b6cd87b56690b4c96f63ab02174911d5e51b76d2c31b8bece7b0f841f393c401d8f51383f0f28d4c00fa2149870f1779f204103dbebff2a0e292b42f01b0bb114fa6e1889a6437285a0c9f00c4245e4d3524af00636736e812558294430bf4b365e0a9c468c9eb4977fb1311404a36503e63d66ddcf9b8e1035383b90de09d000c223ffb7f13639e3ac52b248f92d041959c1f7985eb94aad8c0adf4e8730313d1b02662c6847a9851f40a969486ebbe7bfcb5b28fc7dbe1bb80c4a2c18a53fecc51e51de59049b0400000000000000394000000000000000d27022ca2e6e8190f483d0da08eef67837ed671c2154513111dbc0ee58c70889a1c6306b98300a49147242d3f8a6e4aea9b51d0e182153e1283089c3b42cca072dce78b07806950d2b5fd0b448fdf18269cbe47fae4cedeb356536d94534260fa7d6e6b7aa30d8dd5c8261d4ef52da9f0894bb3993edafc976a143adbe9731dd41d181a9c200000000000000000722d6bea9c421a5e3cee8a113092129714154cc28d52373ba50325730d592cfd68cd128a770f41a34b4a0b9af61eab15e7d0a24a11be157dbaea473ab59af3efaf2f00426803f170d"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd2e}, 0x65) r1 = open(0x0, 0xe0841, 0x28) fcntl$setlease(r1, 0x400, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.003268347s ago: executing program 0 (id=534): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xa0000010}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x50, 0x0, &(0x7f0000000880)=[@exit_looper, @reply_sg={0x40486312, {0x8, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x649}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x67701ee}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) 3.002892707s ago: executing program 1 (id=535): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000005000000000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 2.93734623s ago: executing program 1 (id=536): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x8, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr={{0x18, 0x29, 0x39, {0x5c, 0x0, 0x0, 0x9}}}], 0x18}}], 0x2, 0x0) 2.937187196s ago: executing program 1 (id=537): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1}, 0x20) 2.743648975s ago: executing program 0 (id=538): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010026bd7800fedbdf25e0000002000000000000000000000000640101000000000000000000000000000000000600000000020000003c414c00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000100000000000000000000000000000000000000000000000000000000040000000000000010000000000000000600000000000000990c0000100000000008000000000000de0200000000000000000000b06b6e00000101020000000084010500ac1414aa000000000000000000000000000004d33300000000000000fe8000000000000000000000000000bb000000000000ff00070000000000000000000000fe8000000000000000000000000000aa000000003200"], 0x23c}, 0x1, 0x0, 0x0, 0x24008004}, 0x4c040) 2.74349501s ago: executing program 0 (id=539): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_key={0x1, 0x8}]}, 0x80}, 0x1, 0x7}, 0x0) 2.083367311s ago: executing program 2 (id=543): openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 1.936090573s ago: executing program 1 (id=544): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, 0x0) 1.143386781s ago: executing program 2 (id=545): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in6=@local, 0x4d4, 0x32}, @in=@empty, {0x7, 0x0, 0xfffffffffffffff6, 0x8, 0xa, 0x0, 0x0, 0x3}, {0x703, 0x0, 0x5, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd2c, 0x0, 0x2, 0x1, 0x0, 0x68}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40008c4}, 0x0) 983.401096ms ago: executing program 2 (id=546): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = dup2(r0, r0) r2 = dup2(r0, r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) 983.197938ms ago: executing program 2 (id=547): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000100)=""/57) 936.107042ms ago: executing program 2 (id=548): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101082, 0x0) unshare(0x2020600) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, 0x0) 8.405376ms ago: executing program 2 (id=549): openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x593a, &(0x7f0000000240)=0x0) io_submit(r1, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 8.175214ms ago: executing program 0 (id=550): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept4$nfc_llcp(r0, 0x0, 0x0, 0x80800) 8.071925ms ago: executing program 3 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x1400, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 7.803321ms ago: executing program 1 (id=552): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000210)="01", 0x1) read(r1, &(0x7f0000800000)=""/8, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x11, 0x10, r4, 0x1, 0x0, 0x0, @multicast}, 0x14) 7.657708ms ago: executing program 0 (id=553): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x10) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000008380), 0x400000000000174, 0x4008890) 0s ago: executing program 0 (id=554): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x2, 0x13, 0xff, 0x7, 0x5, 0x0, 0x70bd2d, 0x25dfdbfd, [@sadb_address={0x3, 0x7, 0xff, 0x80, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:4751' (ED25519) to the list of known hosts. [ 59.004938][ T5730] cgroup: Unknown subsys name 'net' [ 59.197194][ T5730] cgroup: Unknown subsys name 'cpuset' [ 59.204427][ T5730] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.559476][ T5730] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.140962][ T5756] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.143764][ T5753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.144311][ T5756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.148786][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.152577][ T5756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.156699][ T5756] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.159860][ T5753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.160228][ T5757] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.164102][ T5760] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.164215][ T5753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.164767][ T5753] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.168210][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.173487][ T5753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.176524][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.179718][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.184556][ T5760] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.185349][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.195899][ T5093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.196984][ T5760] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.199796][ T5093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.001651][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.004917][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.008058][ T5744] bridge_slave_0: entered allmulticast mode [ 67.012573][ T5744] bridge_slave_0: entered promiscuous mode [ 67.058661][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.061990][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.065387][ T5744] bridge_slave_1: entered allmulticast mode [ 67.068822][ T5744] bridge_slave_1: entered promiscuous mode [ 67.083850][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.087351][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.090447][ T5742] bridge_slave_0: entered allmulticast mode [ 67.094804][ T5742] bridge_slave_0: entered promiscuous mode [ 67.100181][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.103278][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.106304][ T5742] bridge_slave_1: entered allmulticast mode [ 67.110329][ T5742] bridge_slave_1: entered promiscuous mode [ 67.192206][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.195234][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.197488][ T5743] bridge_slave_0: entered allmulticast mode [ 67.200146][ T5743] bridge_slave_0: entered promiscuous mode [ 67.204730][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.207494][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.210255][ T5743] bridge_slave_1: entered allmulticast mode [ 67.213663][ T5743] bridge_slave_1: entered promiscuous mode [ 67.278387][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.283944][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.295787][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.303309][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.307407][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.320403][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.324019][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.326459][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.328989][ T5741] bridge_slave_0: entered allmulticast mode [ 67.334468][ T5741] bridge_slave_0: entered promiscuous mode [ 67.363071][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.365519][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.367843][ T5741] bridge_slave_1: entered allmulticast mode [ 67.370823][ T5741] bridge_slave_1: entered promiscuous mode [ 67.409656][ T5744] team0: Port device team_slave_0 added [ 67.421765][ T5743] team0: Port device team_slave_0 added [ 67.427081][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.432601][ T5744] team0: Port device team_slave_1 added [ 67.446873][ T5742] team0: Port device team_slave_0 added [ 67.451062][ T5743] team0: Port device team_slave_1 added [ 67.464684][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.482152][ T5742] team0: Port device team_slave_1 added [ 67.506919][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.509383][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.519291][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.525245][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.528051][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.538661][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.566443][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.569445][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.579812][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.585181][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.587895][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.598193][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.620795][ T5741] team0: Port device team_slave_0 added [ 67.628293][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.631174][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.640766][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.646746][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.649596][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.659324][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.676493][ T5741] team0: Port device team_slave_1 added [ 67.733077][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.735874][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.746056][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.778211][ T5742] hsr_slave_0: entered promiscuous mode [ 67.781791][ T5742] hsr_slave_1: entered promiscuous mode [ 67.786037][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.788497][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.799185][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.817886][ T5744] hsr_slave_0: entered promiscuous mode [ 67.820250][ T5744] hsr_slave_1: entered promiscuous mode [ 67.822931][ T5744] debugfs: 'hsr0' already exists in 'hsr' [ 67.825046][ T5744] Cannot create hsr debugfs directory [ 67.848627][ T5743] hsr_slave_0: entered promiscuous mode [ 67.851614][ T5743] hsr_slave_1: entered promiscuous mode [ 67.854190][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 67.856601][ T5743] Cannot create hsr debugfs directory [ 68.001815][ T5741] hsr_slave_0: entered promiscuous mode [ 68.005800][ T5741] hsr_slave_1: entered promiscuous mode [ 68.008645][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 68.010916][ T5741] Cannot create hsr debugfs directory [ 68.183343][ T64] Bluetooth: hci2: command tx timeout [ 68.262967][ T64] Bluetooth: hci3: command tx timeout [ 68.262979][ T5752] Bluetooth: hci0: command tx timeout [ 68.263469][ T5752] Bluetooth: hci1: command tx timeout [ 68.314413][ T5742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.328335][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.331899][ T5742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.340402][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.344476][ T5742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.353962][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.358555][ T5742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.365769][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.439892][ T5744] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.449567][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.456126][ T5744] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.463386][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.467414][ T5744] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.475374][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.479601][ T5744] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.488104][ T5744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.574778][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.580761][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.585277][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.590056][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.594278][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.602633][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.606549][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.613309][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.695103][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.703984][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.708352][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.713788][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.719860][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.723303][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.730049][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.734746][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.740139][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.791592][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.815055][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.818150][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.833006][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.841214][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.844557][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.886186][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.918706][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.921321][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.933133][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.936032][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.943039][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.001608][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.026621][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.040649][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.043640][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.058196][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.061092][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.089742][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.099878][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.102158][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.121324][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.124502][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.372699][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.426644][ T5742] veth0_vlan: entered promiscuous mode [ 69.433930][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.444570][ T5742] veth1_vlan: entered promiscuous mode [ 69.494047][ T5742] veth0_macvtap: entered promiscuous mode [ 69.499258][ T5744] veth0_vlan: entered promiscuous mode [ 69.515902][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.519985][ T5742] veth1_macvtap: entered promiscuous mode [ 69.535239][ T5744] veth1_vlan: entered promiscuous mode [ 69.558344][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.578834][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.610654][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.636091][ T5744] veth0_macvtap: entered promiscuous mode [ 69.644515][ T5744] veth1_macvtap: entered promiscuous mode [ 69.650334][ T5743] veth0_vlan: entered promiscuous mode [ 69.683927][ T5743] veth1_vlan: entered promiscuous mode [ 69.708457][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.744151][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.752008][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.758461][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.766947][ T5741] veth0_vlan: entered promiscuous mode [ 69.802834][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.815991][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.819539][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.822346][ T5741] veth1_vlan: entered promiscuous mode [ 69.848231][ T5743] veth0_macvtap: entered promiscuous mode [ 69.874240][ T5743] veth1_macvtap: entered promiscuous mode [ 69.892977][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.893538][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.896133][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.911227][ T5742] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.928645][ T5742] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 69.932399][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.932423][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.944334][ T5742] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 69.951189][ T5742] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 69.953780][ T5741] veth0_macvtap: entered promiscuous mode [ 69.961358][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.969341][ T5742] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 69.974561][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.984679][ T5741] veth1_macvtap: entered promiscuous mode qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x198000) [ 70.030117][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.060760][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.083478][ T1126] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 70.089167][ T1126] ata1: failed to read log page 10h (errno=-5) [ 70.091865][ T1126] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 70.097142][ T1126] ata1.00: irq_stat 0x41000008 [ 70.101500][ T1126] ata1.00: failed command: READ FPDMA QUEUED [ 70.105105][ T1126] ata1.00: cmd 60/c0:70:76:89:03/0c:00:00:00:00/40 tag 14 ncq dma 1671168 in [ 70.105105][ T1126] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 70.112437][ T1126] ata1.00: status: { DRDY } [ 70.114916][ T1126] ata1.00: error: { ABRT } [ 70.117802][ T1126] ata1.00: configured for UDMA/100 [ 70.120376][ T1126] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 70.124662][ T1126] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 70.128064][ T1126] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 70.131542][ T1126] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 03 89 76 00 0c c0 00 [ 70.135399][ T1126] I/O error, dev sda, sector 231798 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 2 [ 70.139844][ T1126] ata1: EH complete [ 70.153055][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.174688][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.182159][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.218959][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.222643][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.260556][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.264824][ T5752] Bluetooth: hci2: command tx timeout [ 70.267400][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.271432][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.273412][ T5551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.276428][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.304205][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.307495][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.311279][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.312808][ T5902] jffs2: notice: (5902) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 70.314821][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.314852][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.314877][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.314902][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.314933][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.314964][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.315020][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.338457][ T5902] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5'. [ 70.342587][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.346493][ T5752] Bluetooth: hci1: command tx timeout [ 70.352869][ T64] Bluetooth: hci3: command tx timeout [ 70.354508][ T5093] Bluetooth: hci0: command tx timeout [ 70.374313][ T5551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.426945][ T5905] capability: warning: `syz.1.6' uses 32-bit capabilities (legacy support in use) [ 70.596728][ T5914] usb251xb serial8250: supply vdd not found, using dummy regulator [ 70.609976][ T5914] usb251xb serial8250: hub is put in default configuration. [ 70.613539][ T5914] usb251xb serial8250: Hub probed successfully [ 71.177806][ T5922] random: crng reseeded on system resumption [ 71.306923][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.312100][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.693020][ T5930] uhci_hcd 0000:00:1d.0: remove, state 4 [ 71.695666][ T5930] usb usb1: USB disconnect, device number 1 [ 71.799216][ T5931] binder: 5929:5931 ioctl 400c620e 80000440 returned -22 [ 71.829299][ T5930] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 72.152409][ T5932] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 72.179947][ T5932] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 72.187165][ T5932] uhci_hcd 0000:00:1d.0: detected 2 ports [ 72.202428][ T5932] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 72.265729][ T5932] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 72.269044][ T5932] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 72.276369][ T5932] usb usb1: Product: UHCI Host Controller [ 72.280686][ T5932] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 72.285536][ T5932] usb usb1: SerialNumber: 0000:00:1d.0 [ 72.343617][ T64] Bluetooth: hci2: command tx timeout [ 72.365424][ T5932] hub 1-0:1.0: USB hub found [ 72.423858][ T64] Bluetooth: hci0: command tx timeout [ 72.424087][ T5752] Bluetooth: hci1: command tx timeout [ 72.424151][ T5093] Bluetooth: hci3: command tx timeout [ 72.536792][ T5932] hub 1-0:1.0: 2 ports detected [ 72.628074][ T5941] overlayfs: failed to resolve './file0': -2 [ 72.692946][ T5946] /dev/sg0: Can't lookup blockdev [ 72.923897][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 73.132519][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 73.157554][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 73.228497][ T9] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 73.252803][ T42] audit: type=1326 audit(1786170152.994:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 73.281593][ T42] audit: type=1326 audit(1786170153.024:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.19" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 73.291752][ T42] audit: type=1326 audit(1786170153.034:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 73.300700][ T42] audit: type=1326 audit(1786170153.044:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 73.320469][ T42] audit: type=1326 audit(1786170153.064:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.19" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 73.329433][ T42] audit: type=1326 audit(1786170153.074:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 73.331032][ T9] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 73.339249][ T42] audit: type=1326 audit(1786170153.084:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 73.349650][ T42] audit: type=1326 audit(1786170153.094:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.19" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 73.363142][ T42] audit: type=1326 audit(1786170153.104:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.19" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 73.370381][ T9] usb 8-1: config 14 has no interface number 0 [ 73.374555][ T42] audit: type=1326 audit(1786170153.124:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.1.19" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 73.467301][ T9] usb 8-1: config 14 has no interface number 1 [ 73.477754][ T9] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 73.483532][ T9] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 73.488991][ T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 73.493290][ T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 73.498439][ T9] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 73.504304][ T9] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.509947][ T9] usb 8-1: config 14 interface 57 has no altsetting 0 [ 73.513080][ T9] usb 8-1: config 14 interface 228 has no altsetting 0 [ 73.822583][ T9] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 73.827531][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.830797][ T9] usb 8-1: Product: syz [ 73.832755][ T9] usb 8-1: Manufacturer: syz [ 73.834673][ T9] usb 8-1: SerialNumber: syz [ 74.044156][ T5957] pim6reg: entered allmulticast mode [ 74.098323][ T5956] pim6reg: left allmulticast mode [ 74.262295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 74.356908][ T9] legousbtower 8-1:14.57: interrupt endpoints not found [ 74.416655][ T5963] warning: `syz.1.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.422490][ T5752] Bluetooth: hci2: command tx timeout [ 74.502768][ T5752] Bluetooth: hci3: command tx timeout [ 74.502926][ T64] Bluetooth: hci0: command tx timeout [ 74.503367][ T5093] Bluetooth: hci1: command tx timeout [ 74.634781][ T5969] Zero length message leads to an empty skb [ 74.855217][ T9] legousbtower 8-1:14.228: get version request failed: -71 [ 74.859031][ T9] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -71 [ 74.876538][ T9] usb 8-1: USB disconnect, device number 2 [ 75.012627][ T1037] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 75.087998][ T5976] jffs2: notice: (5976) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 75.100763][ T5976] netlink: 32 bytes leftover after parsing attributes in process `syz.0.26'. [ 75.162569][ T1037] usb 7-1: Using ep0 maxpacket: 32 [ 75.204874][ T1037] usb 7-1: unable to get BOS descriptor or descriptor too short [ 75.219086][ T1037] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 75.219384][ T5981] libceph: resolve '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ £~—1W–쯑ë¨eþxEA®ÁþeSb{~Rð' (ret=-3): failed [ 75.232820][ T1037] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 75.241150][ T1037] usb 7-1: config 14 has no interface number 0 [ 75.247364][ T1037] usb 7-1: config 14 has no interface number 1 [ 75.250504][ T1037] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 75.255560][ T1037] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 75.260302][ T1037] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 75.280431][ T1037] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 75.285436][ T1037] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 75.290369][ T1037] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.296119][ T1037] usb 7-1: config 14 interface 57 has no altsetting 0 [ 75.299286][ T1037] usb 7-1: config 14 interface 228 has no altsetting 0 [ 75.313970][ T1037] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 75.322505][ T1037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.325604][ T1037] usb 7-1: Product: syz [ 75.327387][ T1037] usb 7-1: Manufacturer: syz [ 75.329431][ T1037] usb 7-1: SerialNumber: syz [ 75.628482][ T64] Bluetooth: Unexpected continuation frame (len 4) [ 76.293392][ T1037] legousbtower 7-1:14.57: interrupt endpoints not found [ 76.430745][ T5996] tipc: Started in network mode [ 76.433779][ T5996] tipc: Node identity eaf40470e53c, cluster identity 4711 [ 76.437396][ T5996] tipc: Enabled bearer , priority 0 [ 76.443488][ T5996] syzkaller0: entered promiscuous mode [ 76.445289][ T5996] syzkaller0: entered allmulticast mode [ 76.461572][ T5996] syzkaller0: MTU too low for tipc bearer [ 76.464771][ T5996] tipc: Disabling bearer [ 76.475828][ T1037] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 175.69 build 32768 [ 76.484707][ T1037] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 76.757009][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'. [ 76.787665][ T6006] netlink: 256 bytes leftover after parsing attributes in process `syz.0.37'. [ 76.794789][ T6006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.37'. [ 77.234358][ C2] usb 7-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 77.245924][ T5104] usb 7-1: USB disconnect, device number 2 [ 77.265480][ T5104] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 77.822110][ T6023] Console: switching to colour dummy device 80x25 [ 78.115017][ T6029] uhci_hcd 0000:00:1d.0: remove, state 4 [ 78.122163][ T6029] usb usb1: USB disconnect, device number 1 [ 78.144194][ T6024] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 78.226796][ T6024] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 78.230164][ T6024] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 78.242587][ T6024] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 78.251284][ T6024] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 78.274368][ T6034] binder: 6028:6034 ioctl 400c620e 80000440 returned -22 [ 78.288070][ T6024] pci 0000:00:01.0: Adding to iommu group 1 [ 78.299507][ T6029] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 78.301552][ T6024] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 78.305278][ T6024] pci 0000:00:01.0: vgaarb: bridge control possible [ 78.308077][ T6024] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 78.334080][ T6024] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 78.351164][ T6024] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 78.361344][ T6024] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 78.380734][ T6024] [drm] Found bochs VGA, ID 0xb0c5. [ 78.383162][ T6024] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 78.390549][ T6024] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 78.541900][ T6040] binder: 6032:6040 ioctl 400c620e 80000440 returned -22 [ 78.768688][ T6030] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 78.777596][ T6030] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 78.787383][ T6030] uhci_hcd 0000:00:1d.0: detected 2 ports [ 78.790494][ T6030] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 78.814487][ T6042] binder: 6038:6042 ioctl 400c620e 80000440 returned -22 [ 78.867600][ T6030] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 78.873951][ T6030] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 78.877563][ T6030] usb usb1: Product: UHCI Host Controller [ 78.884504][ T6030] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 78.891344][ T6030] usb usb1: SerialNumber: 0000:00:1d.0 [ 78.941255][ T6030] hub 1-0:1.0: USB hub found [ 78.946324][ T6030] hub 1-0:1.0: 2 ports detected [ 78.977375][ T6033] uhci_hcd 0000:00:1d.0: remove, state 1 [ 78.981653][ T6033] usb usb1: USB disconnect, device number 1 [ 79.134371][ T6033] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 79.265981][ T6035] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 79.276253][ T6035] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 79.283602][ T6035] uhci_hcd 0000:00:1d.0: detected 2 ports [ 79.288364][ T6035] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 79.295497][ T6035] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 79.299198][ T6035] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 79.302612][ T6035] usb usb1: Product: UHCI Host Controller [ 79.305509][ T6035] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 79.308165][ T6035] usb usb1: SerialNumber: 0000:00:1d.0 [ 79.325870][ T6035] hub 1-0:1.0: USB hub found [ 79.329088][ T6035] hub 1-0:1.0: 2 ports detected [ 79.360093][ T6039] uhci_hcd 0000:00:1d.0: remove, state 4 [ 79.363597][ T6039] usb usb1: USB disconnect, device number 1 [ 79.421820][ T6039] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 79.619419][ T6041] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 79.645973][ T6041] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 79.655106][ T6041] uhci_hcd 0000:00:1d.0: detected 2 ports [ 79.661628][ T6041] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 79.667518][ T6041] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 79.672619][ T6041] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 79.681763][ T6041] usb usb1: Product: UHCI Host Controller [ 79.684568][ T6041] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 79.687448][ T6041] usb usb1: SerialNumber: 0000:00:1d.0 [ 79.706952][ T6041] hub 1-0:1.0: USB hub found [ 79.712638][ T6041] hub 1-0:1.0: 2 ports detected [ 80.485314][ T6059] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 81.672432][ T5104] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 81.792552][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 81.842346][ T5104] usb 7-1: Using ep0 maxpacket: 32 [ 81.847574][ T5104] usb 7-1: unable to get BOS descriptor or descriptor too short [ 81.851686][ T5104] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 81.855444][ T5104] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 81.858659][ T5104] usb 7-1: config 14 has no interface number 0 [ 81.861161][ T5104] usb 7-1: config 14 has no interface number 1 [ 81.864151][ T5104] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 81.868368][ T5104] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 81.874008][ T5104] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 81.878740][ T5104] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 81.883562][ T5104] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 81.888222][ T5104] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.893933][ T5104] usb 7-1: config 14 interface 57 has no altsetting 0 [ 81.896828][ T5104] usb 7-1: config 14 interface 228 has no altsetting 0 [ 81.901672][ T5104] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 81.904792][ T5104] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.907450][ T5104] usb 7-1: Product: syz [ 81.908792][ T5104] usb 7-1: Manufacturer: syz [ 81.910370][ T5104] usb 7-1: SerialNumber: syz [ 81.947099][ T29] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 81.951150][ T29] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 81.954755][ T29] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 81.957811][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.974641][ T6084] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 82.028950][ T29] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.412065][ T5104] legousbtower 7-1:14.57: interrupt endpoints not found [ 82.619640][ T6094] tipc: Enabling of bearer rejected, failed to enable media [ 82.779958][ T29] usb 8-1: USB disconnect, device number 3 [ 82.882404][ T5104] legousbtower 7-1:14.228: get version request failed: -71 [ 82.888567][ T5104] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 82.920701][ T5104] usb 7-1: USB disconnect, device number 3 [ 83.108562][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 83.108594][ T42] audit: type=1326 audit(1786170162.854:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.0.63" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 83.131557][ T42] audit: type=1326 audit(1786170162.854:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.0.63" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 83.138602][ T42] audit: type=1326 audit(1786170162.864:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.0.63" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71074eb code=0x7ffc0000 [ 83.147180][ T42] audit: type=1326 audit(1786170162.864:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.0.63" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 83.153883][ T42] audit: type=1326 audit(1786170162.864:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.0.63" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 83.160414][ T42] audit: type=1326 audit(1786170162.864:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.0.63" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 83.167125][ T42] audit: type=1326 audit(1786170162.864:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.0.63" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 83.173917][ T42] audit: type=1326 audit(1786170162.864:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.0.63" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 83.180580][ T42] audit: type=1326 audit(1786170162.864:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.0.63" exe="/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 83.187240][ T42] audit: type=1326 audit(1786170162.874:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.0.63" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 83.638928][ T6116] uhci_hcd 0000:00:1d.0: remove, state 4 [ 83.667902][ T6116] usb usb1: USB disconnect, device number 1 [ 83.836071][ T6122] binder: 6115:6122 ioctl 400c620e 80000440 returned -22 [ 83.863851][ T6124] tipc: Enabling of bearer rejected, failed to enable media [ 83.893000][ T6116] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 84.036824][ T6131] program syz.3.66 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.119631][ T6119] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 84.131616][ T6119] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 84.140486][ T6119] uhci_hcd 0000:00:1d.0: detected 2 ports [ 84.147728][ T6119] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 84.175111][ T6119] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 84.179668][ T6119] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 84.184530][ T6119] usb usb1: Product: UHCI Host Controller [ 84.186881][ T6119] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 84.190425][ T6119] usb usb1: SerialNumber: 0000:00:1d.0 [ 84.229961][ T6119] hub 1-0:1.0: USB hub found [ 84.235063][ T6119] hub 1-0:1.0: 2 ports detected [ 84.310918][ T6134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.69'. [ 85.265484][ T34] cfg80211: failed to load regulatory.db [ 86.483369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 86.727516][ T6147] uhci_hcd 0000:00:1d.0: remove, state 4 [ 86.730008][ T6147] usb usb1: USB disconnect, device number 1 [ 86.822541][ T6147] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 86.900242][ T6151] binder: 6146:6151 ioctl 400c620e 80000440 returned -22 [ 86.933613][ T6143] syz.3.72 (6143): drop_caches: 2 [ 87.271961][ T6161] binder: 6153:6161 ioctl 400c620e 80000440 returned -22 [ 87.323775][ T6150] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 87.330439][ T6150] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 87.334503][ T6150] uhci_hcd 0000:00:1d.0: detected 2 ports [ 87.337203][ T6150] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 87.353768][ T6150] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 87.360858][ T6150] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 87.367345][ T6150] usb usb1: Product: UHCI Host Controller [ 87.371465][ T6150] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 87.375772][ T6150] usb usb1: SerialNumber: 0000:00:1d.0 [ 87.400012][ T6150] hub 1-0:1.0: USB hub found [ 87.407256][ T6150] hub 1-0:1.0: 2 ports detected [ 87.440191][ T6154] uhci_hcd 0000:00:1d.0: remove, state 1 [ 87.443057][ T6154] usb usb1: USB disconnect, device number 1 [ 87.483394][ T6154] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 87.553549][ T6167] x_tables: duplicate underflow at hook 3 [ 87.576125][ T6167] ./bus: Can't lookup blockdev [ 87.776105][ T6157] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 87.786887][ T6157] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 87.792760][ T6157] uhci_hcd 0000:00:1d.0: detected 2 ports [ 87.795711][ T6157] uhci_hcd 0000:00:1d.0: irq 16, io port 0x0000c0e0 [ 87.801121][ T6157] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 87.805629][ T6157] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 87.809103][ T6157] usb usb1: Product: UHCI Host Controller [ 87.811651][ T6157] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 87.814813][ T6157] usb usb1: SerialNumber: 0000:00:1d.0 [ 87.830654][ T6157] hub 1-0:1.0: USB hub found [ 87.834035][ T6157] hub 1-0:1.0: 2 ports detected [ 88.332442][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 88.483184][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 88.487625][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 88.492386][ T9] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 88.496129][ T9] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 88.499650][ T9] usb 7-1: config 14 has no interface number 0 [ 88.502193][ T9] usb 7-1: config 14 has no interface number 1 [ 88.505028][ T9] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 88.508725][ T9] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 88.514330][ T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 88.519177][ T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 88.524355][ T9] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 88.528560][ T9] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.533622][ T9] usb 7-1: config 14 interface 57 has no altsetting 0 [ 88.536006][ T9] usb 7-1: config 14 interface 228 has no altsetting 0 [ 88.540897][ T9] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 88.544728][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.547953][ T9] usb 7-1: Product: syz [ 88.549715][ T9] usb 7-1: Manufacturer: syz [ 88.551715][ T9] usb 7-1: SerialNumber: syz [ 88.985531][ T9] legousbtower 7-1:14.57: interrupt endpoints not found [ 89.296313][ T6197] tipc: Enabled bearer , priority 0 [ 89.299701][ T6197] syzkaller0: entered promiscuous mode [ 89.301548][ T6197] syzkaller0: entered allmulticast mode [ 89.312130][ T6197] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 89.336561][ T6197] syzkaller0: MTU too low for tipc bearer [ 89.338836][ T6197] tipc: Disabling bearer [ 89.503438][ T6200] process 'syz.3.87' launched './file0' with NULL argv: empty string added [ 89.520335][ T9] legousbtower 7-1:14.228: get version request failed: -71 [ 89.528705][ T9] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 89.558158][ T9] usb 7-1: USB disconnect, device number 4 [ 89.735610][ T6189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.785939][ T6207] usb usb8: usbfs: process 6207 (syz.0.90) did not claim interface 0 before use [ 90.152481][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 90.302549][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 90.304955][ T5214] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 90.311166][ T34] usb 8-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 90.318785][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 90.321912][ T34] usb 8-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 90.325618][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.331330][ T34] usb 8-1: config 0 descriptor?? [ 90.379616][ T6217] capability: warning: `syz.1.94' uses deprecated v2 capabilities in a way that may be insecure [ 90.492313][ T5214] usb 7-1: Using ep0 maxpacket: 32 [ 90.496276][ T5214] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.501047][ T5214] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.505539][ T5214] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.509041][ T5214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.517419][ T5214] usb 7-1: config 0 descriptor?? [ 90.526116][ T5214] hub 7-1:0.0: USB hub found [ 90.719506][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 90.723242][ T6230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.732839][ T5214] hub 7-1:0.0: 1 port detected [ 90.739536][ T6230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.755630][ T34] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 90.758777][ T34] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 90.762055][ T34] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 90.765798][ T34] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 90.768708][ T34] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 90.771649][ T34] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x0 [ 90.774876][ T34] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x4 [ 90.777879][ T34] lenovo 0003:17EF:60B5.0002: unknown main item tag 0x6 [ 90.781137][ T34] lenovo 0003:17EF:60B5.0002: reserved main item tag 0xd [ 90.784252][ T34] lenovo 0003:17EF:60B5.0002: reserved main item tag 0xd [ 90.796986][ T34] lenovo 0003:17EF:60B5.0002: hidraw1: USB HID v0.0b Device [HID 17ef:60b5] on usb-dummy_hcd.3-1/input0 [ 90.948836][ T9] usb 8-1: USB disconnect, device number 4 [ 90.963190][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.969854][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.039907][ T6237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.044180][ T6237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.322067][ T5214] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 91.325238][ T5214] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 91.332174][ T5214] usbhid 7-1:0.0: can't add hid device: -71 [ 91.334826][ T5214] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 91.365988][ T5214] usb 7-1: USB disconnect, device number 5 [ 91.649813][ T6245] veth1_to_bond: entered allmulticast mode [ 91.652844][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 91.663154][ T6245] veth1_to_bond (unregistering): left allmulticast mode [ 91.674519][ T6245] bond0: (slave bond_slave_1): Releasing backup interface [ 91.968014][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 91.988293][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 92.234538][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.238971][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.362611][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.514868][ T5551] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.518816][ T5551] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.523119][ T5551] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.526692][ T5551] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.284913][ T6294] netlink: 204 bytes leftover after parsing attributes in process `syz.0.120'. [ 93.918011][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 93.925196][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 94.075625][ T6315] tipc: Started in network mode [ 94.077905][ T6315] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 94.084835][ T6315] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 94.089380][ T6315] tipc: Enabled bearer , priority 10 [ 95.033572][ T1037] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 95.104639][ T34] tipc: Node number set to 1 [ 95.205487][ T1037] usb 7-1: Using ep0 maxpacket: 16 [ 95.212009][ T1037] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.222920][ T1037] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.228724][ T1037] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.232755][ T1037] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.236037][ T1037] usb 7-1: Product: syz [ 95.237946][ T1037] usb 7-1: Manufacturer: syz [ 95.239983][ T1037] usb 7-1: SerialNumber: syz [ 95.258771][ T1037] usb 7-1: 0:2 : does not exist [ 95.471170][ T1037] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 95.514613][ T1037] usb 7-1: USB disconnect, device number 6 [ 95.550230][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.005992][ T6346] binder: 6345:6346 unknown command 0 [ 96.008063][ T6346] binder: 6345:6346 ioctl c0306201 800003c0 returned -22 [ 96.077509][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 96.085328][ T6352] netlink: 28 bytes leftover after parsing attributes in process `syz.2.144'. [ 96.169312][ T6362] netlink: 'syz.1.149': attribute type 2 has an invalid length. [ 97.199958][ T6398] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 97.210834][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 97.491123][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 99.355917][ T6432] : renamed from bond_slave_0 (while UP) [ 99.381909][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 99.381928][ T42] audit: type=1800 audit(2000000002.250:72): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.176" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 99.382075][ T6443] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 99.394517][ T6443] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 99.397297][ T6443] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 99.496544][ T6458] tipc: Can't bind to reserved service type 2 [ 99.885029][ T6484] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 99.887459][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 100.302416][ T34] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 100.463566][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 100.466880][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.470018][ T34] usb 5-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 100.473076][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.479722][ T34] usb 5-1: config 0 descriptor?? [ 100.496831][ T6507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.201'. [ 100.500305][ T6507] netlink: 40 bytes leftover after parsing attributes in process `syz.2.201'. [ 100.748305][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 100.822980][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 100.887384][ T34] hid-generic 0003:0925:8066.0003: unknown main item tag 0x0 [ 100.892438][ T34] hid-generic 0003:0925:8066.0003: unknown main item tag 0x0 [ 100.894786][ T34] hid-generic 0003:0925:8066.0003: unknown main item tag 0x0 [ 100.894792][ T6526] netlink: 140 bytes leftover after parsing attributes in process `syz.1.210'. [ 100.897002][ T34] hid-generic 0003:0925:8066.0003: unknown main item tag 0x0 [ 100.897026][ T34] hid-generic 0003:0925:8066.0003: unknown main item tag 0x0 [ 100.897038][ T34] hid-generic 0003:0925:8066.0003: unknown main item tag 0x0 [ 100.907107][ T34] hid-generic 0003:0925:8066.0003: unbalanced collection at end of report description [ 100.910349][ T34] hid-generic 0003:0925:8066.0003: probe with driver hid-generic failed with error -22 [ 100.939004][ T6529] : renamed from bond_slave_0 (while UP) [ 101.304439][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 101.451481][ T6547] random: crng reseeded on system resumption [ 101.600521][ T24] usb 5-1: USB disconnect, device number 2 [ 102.152324][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 102.314531][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.317914][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.320923][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.324785][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.327469][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.331876][ T10] usb 5-1: config 0 descriptor?? [ 102.523329][ T6590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.236'. [ 102.739447][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.741946][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.744592][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.747473][ T10] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.761579][ T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 103.369364][ T1037] usb 5-1: USB disconnect, device number 3 [ 103.646187][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 103.677973][ T6632] fuse: Bad value for 'fd' [ 103.774017][ T24] usb 8-1: device descriptor read/64, error -71 [ 103.852401][ T1484] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 104.012517][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 104.023950][ T1484] usb 7-1: config index 0 descriptor too short (expected 2075, got 27) [ 104.032290][ T1484] usb 7-1: config 0 has an invalid interface number: 200 but max is 0 [ 104.035206][ T1484] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.038307][ T1484] usb 7-1: config 0 has no interface number 0 [ 104.040240][ T1484] usb 7-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.052329][ T1484] usb 7-1: config 0 interface 200 has no altsetting 0 [ 104.056393][ T1484] usb 7-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 104.059256][ T1484] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.061762][ T1484] usb 7-1: Product: syz [ 104.072267][ T1484] usb 7-1: Manufacturer: syz [ 104.073746][ T1484] usb 7-1: SerialNumber: syz [ 104.076742][ T1484] usb 7-1: config 0 descriptor?? [ 104.152510][ T24] usb 8-1: device descriptor read/64, error -71 [ 104.262587][ T24] usb usb8-port1: attempt power cycle [ 104.285817][ T1484] usbhid 7-1:0.200: couldn't find an input interrupt endpoint [ 104.292850][ T1484] usb 7-1: USB disconnect, device number 7 [ 104.622393][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 104.642999][ T24] usb 8-1: device descriptor read/8, error -71 [ 104.882494][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 104.915600][ T24] usb 8-1: device descriptor read/8, error -71 [ 104.998744][ T6674] netlink: 'syz.2.270': attribute type 1 has an invalid length. [ 105.037232][ T24] usb usb8-port1: unable to enumerate USB device [ 105.820311][ T6689] netlink: 264 bytes leftover after parsing attributes in process `syz.0.276'. [ 105.955996][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 105.959964][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 105.964809][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 105.968738][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 106.262333][ T34] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.322420][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 106.428440][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 106.432563][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.435970][ T34] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.444910][ T34] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.450878][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.457048][ T34] usb 5-1: Product: syz [ 106.458480][ T34] usb 5-1: Manufacturer: syz [ 106.466245][ T34] usb 5-1: SerialNumber: syz [ 106.472314][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 106.480950][ T24] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 106.484928][ T34] usb 5-1: 0:2 : does not exist [ 106.486118][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 106.490587][ T24] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 106.494639][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.503065][ T24] usb 7-1: config 0 descriptor?? [ 106.688251][ T34] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 106.723987][ T34] usb 5-1: USB disconnect, device number 4 [ 106.922796][ T24] sony 0003:054C:0268.0005: unexpected long global item [ 106.925572][ T24] sony 0003:054C:0268.0005: parse failed [ 106.927520][ T24] sony 0003:054C:0268.0005: probe with driver sony failed with error -22 [ 107.119006][ T24] usb 7-1: USB disconnect, device number 8 [ 107.561549][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 107.587445][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 107.630164][ T42] audit: type=1326 audit(2000000009.496:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 107.648309][ T42] audit: type=1326 audit(2000000009.496:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 107.664678][ T42] audit: type=1326 audit(2000000009.496:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.301" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 107.682418][ T42] audit: type=1326 audit(2000000009.496:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 107.696655][ T42] audit: type=1326 audit(2000000009.496:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 107.706656][ T42] audit: type=1326 audit(2000000009.496:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.301" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 107.716427][ T42] audit: type=1326 audit(2000000009.496:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 107.725338][ T42] audit: type=1326 audit(2000000009.496:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 107.734272][ T42] audit: type=1326 audit(2000000009.496:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.301" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 107.743346][ T42] audit: type=1326 audit(2000000009.496:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.1.301" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 107.915789][ T6758] ======================================================= [ 107.915789][ T6758] WARNING: The mand mount option has been deprecated and [ 107.915789][ T6758] and is ignored by this kernel. Remove the mand [ 107.915789][ T6758] option from the mount to silence this warning. [ 107.915789][ T6758] ======================================================= [ 107.936890][ T6758] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 108.904682][ T24] hid_parser_main: 10 callbacks suppressed [ 108.904705][ T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.940576][ T24] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 109.250979][ T6786] netlink: 180 bytes leftover after parsing attributes in process `syz.3.316'. [ 109.254441][ T6788] netlink: 304 bytes leftover after parsing attributes in process `syz.0.317'. [ 109.399353][ T6801] netlink: 'syz.0.323': attribute type 4 has an invalid length. [ 109.401963][ T6801] netlink: 17 bytes leftover after parsing attributes in process `syz.0.323'. [ 109.612646][ T24] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 109.764265][ T24] usb 8-1: not running at top speed; connect to a high speed hub [ 109.769204][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.773747][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.777419][ T24] usb 8-1: config 1 has no interface number 0 [ 109.780074][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 109.787393][ T24] usb 8-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 109.791458][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.795092][ T24] usb 8-1: Product: syz [ 109.796776][ T24] usb 8-1: Manufacturer: syz [ 109.798602][ T24] usb 8-1: SerialNumber: syz [ 109.933243][ T6821] mmap: syz.2.331 (6821) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.073955][ T24] usb 8-1: USB disconnect, device number 9 [ 110.107109][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.578026][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.336'. [ 110.637201][ T6838] netlink: 80 bytes leftover after parsing attributes in process `syz.2.337'. [ 110.680061][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.338'. [ 111.002322][ T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 111.182412][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 111.187097][ T29] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 111.191597][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.196411][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.200263][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 111.205860][ T29] usb 7-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 111.210152][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.225407][ T29] usb 7-1: config 0 descriptor?? [ 111.240278][ T29] usbhid 7-1:0.0: fixing wrong optional hid class descriptors count [ 111.664528][ T29] wacom 0003:056A:00FB.0007: unknown main item tag 0x0 [ 111.666773][ T29] wacom 0003:056A:00FB.0007: unknown main item tag 0x0 [ 111.668966][ T29] wacom 0003:056A:00FB.0007: unknown main item tag 0x0 [ 111.673151][ T29] wacom 0003:056A:00FB.0007: unknown main item tag 0x0 [ 111.675314][ T29] wacom 0003:056A:00FB.0007: unknown main item tag 0x0 [ 111.677466][ T29] wacom 0003:056A:00FB.0007: unknown main item tag 0x0 [ 111.679629][ T29] wacom 0003:056A:00FB.0007: unknown main item tag 0x0 [ 111.681832][ T29] wacom 0003:056A:00FB.0007: unknown main item tag 0x0 [ 111.684357][ T29] wacom 0003:056A:00FB.0007: unknown main item tag 0x0 [ 111.867927][ T1037] usb 7-1: USB disconnect, device number 9 [ 112.714456][ T6874] netlink: 144 bytes leftover after parsing attributes in process `syz.2.350'. [ 112.718004][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 113.512380][ T851] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 113.662330][ T851] usb 5-1: Using ep0 maxpacket: 16 [ 113.666509][ T851] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 113.670281][ T851] usb 5-1: config 0 has no interface number 0 [ 113.673098][ T851] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 113.677221][ T851] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 113.739359][ T851] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 113.742527][ T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.745053][ T851] usb 5-1: Product: syz [ 113.747539][ T851] usb 5-1: Manufacturer: syz [ 113.749026][ T851] usb 5-1: SerialNumber: syz [ 113.753194][ T851] usb 5-1: config 0 descriptor?? [ 113.756347][ T6896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.758662][ T6896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.969421][ T6896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.973031][ T6896] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.179038][ T851] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 114.440392][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.372'. [ 114.786504][ T851] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 114.789788][ T851] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 114.812539][ T851] asix 5-1:0.34: probe with driver asix failed with error -71 [ 114.819419][ T851] usb 5-1: USB disconnect, device number 5 [ 114.895013][ T6942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.378'. [ 114.932535][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 114.935974][ T6944] 9p: Bad value for 'rfdno' [ 115.102975][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 115.108775][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.40 [ 115.112951][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.116286][ T10] usb 8-1: Product: syz [ 115.117981][ T10] usb 8-1: Manufacturer: syz [ 115.119811][ T10] usb 8-1: SerialNumber: syz [ 115.334640][ T10] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 115.355176][ T10] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 115.386394][ T10] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 115.390415][ T10] usb 8-1: USB disconnect, device number 10 [ 115.409407][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.473710][ T6985] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 115.877669][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 116.259687][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 116.422101][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.413'. [ 116.426036][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.413'. [ 116.507634][ T7032] sch_fq: defrate 1015 ignored. [ 116.538141][ T7034] pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 conventional PCI endpoint [ 116.565286][ T7034] pci 0000:00:00.0: Adding to iommu group 0 [ 116.799668][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.423'. [ 117.236787][ T7062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.295375][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 117.762908][ T7080] __nla_validate_parse: 1 callbacks suppressed [ 117.762922][ T7080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.434'. [ 118.539927][ T7077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.543738][ T7077] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.550479][ T7077] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 118.561025][ T7077] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.564411][ T7077] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.568893][ T7077] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 118.572820][ T7077] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.574808][ T7077] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.579242][ T7077] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 118.589003][ T7077] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.591018][ T7077] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 118.612259][ T7077] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.614470][ T7169] netlink: 72 bytes leftover after parsing attributes in process `syz.2.468'. [ 119.727778][ T5551] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 119.784268][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.903339][ T7179] overlayfs: failed to clone lowerpath [ 120.582631][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.584674][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.609512][ T7193] pim6reg: entered allmulticast mode [ 120.618714][ T7193] pim6reg: left allmulticast mode [ 120.663673][ T5752] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.381104][ T7202] netlink: 60 bytes leftover after parsing attributes in process `syz.2.480'. [ 121.617573][ T42] kauditd_printk_skb: 6367 callbacks suppressed [ 121.617586][ T42] audit: type=1326 audit(2000000023.486:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 121.627862][ T42] audit: type=1326 audit(2000000023.496:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 121.638146][ T42] audit: type=1326 audit(2000000023.506:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 121.648060][ T42] audit: type=1326 audit(2000000023.506:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 121.657038][ T42] audit: type=1326 audit(2000000023.506:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 121.666389][ T42] audit: type=1326 audit(2000000023.516:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 121.675804][ T42] audit: type=1326 audit(2000000023.516:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 121.691803][ T42] audit: type=1326 audit(2000000023.526:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 121.711845][ T42] audit: type=1326 audit(2000000023.526:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 121.722427][ T42] audit: type=1326 audit(2000000023.526:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.0.479" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 121.862760][ T5752] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.662501][ T5752] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.664540][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.742323][ T5752] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.772692][ T7278] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 122.798134][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 123.462425][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.944189][ T5752] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.268201][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 124.742822][ T5752] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.742932][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.822544][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.206116][ T7352] netlink: 392 bytes leftover after parsing attributes in process `syz.0.538'. [ 125.706240][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.540'. [ 126.793937][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 127.991864][ T7393] syz.3.551 (7393) used greatest stack depth: 19104 bytes left [ 128.009459][ T7397] ------------[ cut here ]------------ [ 128.012785][ T7397] skb_assert_len [ 128.014336][ T7397] WARNING: ./include/linux/skbuff.h:2753 at __dev_queue_xmit+0x21bc/0x4970, CPU#0: syz.1.552/7397 [ 128.018887][ T7397] Modules linked in: [ 128.021607][ T7397] CPU: 0 UID: 0 PID: 7397 Comm: syz.1.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.025512][ T7397] Tainted: [L]=SOFTLOCKUP [ 128.026860][ T7397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.029927][ T7397] RIP: 0010:__dev_queue_xmit+0x21c3/0x4970 [ 128.031770][ T7397] Code: 41 b8 01 00 00 00 31 d2 31 f6 48 89 df e8 95 7f f8 ff e9 b3 e0 ff ff e8 cb 55 7f f8 48 8d 3d 14 3a a6 07 48 c7 c6 e0 6f 16 8d <67> 48 0f b9 3a 44 0f b6 25 f1 1e 7f 07 31 ff 44 89 e6 e8 b6 4f 7f [ 128.037648][ T7397] RSP: 0018:ffffc900058af820 EFLAGS: 00010287 [ 128.039530][ T7397] RAX: 0000000000000130 RBX: ffff8880141be3c0 RCX: ffffc9000c001000 [ 128.042248][ T7397] RDX: 0000000000080000 RSI: ffffffff8d166fe0 RDI: ffffffff9130a550 [ 128.045049][ T7397] RBP: ffff8880141be3d0 R08: 0000000000000005 R09: 0000000000000000 [ 128.047465][ T7397] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888024775380 [ 128.049870][ T7397] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880141be474 [ 128.052353][ T7397] FS: 0000000000000000(0000) GS:ffff888096bf3000(0063) knlGS:00000000f54bdb40 [ 128.055055][ T7397] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 128.057078][ T7397] CR2: 000000000c2ac29f CR3: 0000000041fdd000 CR4: 0000000000352ef0 [ 128.059603][ T7397] Call Trace: [ 128.060646][ T7397] [ 128.061576][ T7397] ? __alloc_skb+0x4e9/0x710 [ 128.063091][ T7397] ? __alloc_skb+0x5b7/0x710 [ 128.064556][ T7397] ? __pfx___alloc_skb+0x10/0x10 [ 128.066192][ T7397] ? __pfx___dev_queue_xmit+0x10/0x10 [ 128.067922][ T7397] ? sock_alloc_send_pskb+0x751/0x980 [ 128.069635][ T7397] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 128.071472][ T7397] ? packet_parse_headers+0x5ab/0x810 [ 128.073293][ T7397] ? __asan_memset+0x23/0x50 [ 128.074800][ T7397] ? packet_parse_headers+0x5b7/0x810 [ 128.076470][ T7397] ? packet_parse_headers+0x2b4/0x810 [ 128.078129][ T7397] ? __pfx_packet_parse_headers+0x10/0x10 [ 128.079920][ T7397] packet_xmit+0x243/0x310 [ 128.081323][ T7397] packet_sendmsg+0x28d6/0x4eb0 [ 128.082972][ T7397] ? __pfx_packet_sendmsg+0x10/0x10 [ 128.084573][ T7397] ? __might_fault+0xc5/0x140 [ 128.086029][ T7397] ? apparmor_socket_sendmsg+0x15b/0x270 [ 128.087756][ T7397] __sys_sendto+0x48b/0x4e0 [ 128.089146][ T7397] ? __pfx_packet_sendmsg+0x10/0x10 [ 128.090777][ T7397] ? __pfx___sys_sendto+0x10/0x10 [ 128.092436][ T7397] __ia32_sys_sendto+0xdd/0x1b0 [ 128.093922][ T7397] ? __do_fast_syscall_32+0x98/0x970 [ 128.095626][ T7397] ? lockdep_hardirqs_on+0x78/0x100 [ 128.097239][ T7397] __do_fast_syscall_32+0xe7/0x970 [ 128.098857][ T7397] do_fast_syscall_32+0x32/0x70 [ 128.100411][ T7397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.102552][ T7397] RIP: 0023:0xf70cefec [ 128.103858][ T7397] Code: Unable to access opcode bytes at 0xf70cefc2. [ 128.105944][ T7397] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 128.108553][ T7397] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 128.111058][ T7397] RDX: 0000000000000000 RSI: 0000000004000010 RDI: 0000000080000000 [ 128.113623][ T7397] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 128.116101][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.118565][ T7397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.121073][ T7397] [ 128.122067][ T7397] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.124347][ T7397] CPU: 0 UID: 0 PID: 7397 Comm: syz.1.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.127660][ T7397] Tainted: [L]=SOFTLOCKUP [ 128.129025][ T7397] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 128.132220][ T7397] Call Trace: [ 128.133337][ T7397] [ 128.134386][ T7397] dump_stack_lvl+0x100/0x190 [ 128.135935][ T7397] vpanic+0x552/0x970 [ 128.137207][ T7397] ? __pfx_vpanic+0x10/0x10 [ 128.138646][ T7397] panic+0xd1/0xe0 [ 128.139885][ T7397] ? __pfx_panic+0x10/0x10 [ 128.141301][ T7397] check_panic_on_warn.cold+0x19/0x34 [ 128.142989][ T7397] ? __dev_queue_xmit+0x21bc/0x4970 [ 128.144615][ T7397] __warn.cold+0x191/0x318 [ 128.146033][ T7397] __report_bug+0x30f/0x440 [ 128.147497][ T7397] ? __dev_queue_xmit+0x21bc/0x4970 [ 128.149126][ T7397] ? __pfx___report_bug+0x10/0x10 [ 128.150719][ T7397] ? __pfx___skb_flow_dissect+0x10/0x10 [ 128.152471][ T7397] report_bug_entry+0xe1/0x290 [ 128.153976][ T7397] ? __dev_queue_xmit+0x21c3/0x4970 [ 128.155618][ T7397] handle_bug+0x1cd/0x2a0 [ 128.156986][ T7397] exc_invalid_op+0x17/0x50 [ 128.158427][ T7397] asm_exc_invalid_op+0x1a/0x20 [ 128.160059][ T7397] RIP: 0010:__dev_queue_xmit+0x21c3/0x4970 [ 128.161888][ T7397] Code: 41 b8 01 00 00 00 31 d2 31 f6 48 89 df e8 95 7f f8 ff e9 b3 e0 ff ff e8 cb 55 7f f8 48 8d 3d 14 3a a6 07 48 c7 c6 e0 6f 16 8d <67> 48 0f b9 3a 44 0f b6 25 f1 1e 7f 07 31 ff 44 89 e6 e8 b6 4f 7f [ 128.167835][ T7397] RSP: 0018:ffffc900058af820 EFLAGS: 00010287 [ 128.169755][ T7397] RAX: 0000000000000130 RBX: ffff8880141be3c0 RCX: ffffc9000c001000 [ 128.172215][ T7397] RDX: 0000000000080000 RSI: ffffffff8d166fe0 RDI: ffffffff9130a550 [ 128.174677][ T7397] RBP: ffff8880141be3d0 R08: 0000000000000005 R09: 0000000000000000 [ 128.177144][ T7397] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888024775380 [ 128.179604][ T7397] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880141be474 [ 128.182071][ T7397] ? __alloc_skb+0x4e9/0x710 [ 128.183548][ T7397] ? __alloc_skb+0x5b7/0x710 [ 128.185020][ T7397] ? __pfx___alloc_skb+0x10/0x10 [ 128.186582][ T7397] ? __pfx___dev_queue_xmit+0x10/0x10 [ 128.188280][ T7397] ? sock_alloc_send_pskb+0x751/0x980 [ 128.189978][ T7397] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 128.191695][ T7397] ? packet_parse_headers+0x5ab/0x810 [ 128.193380][ T7397] ? __asan_memset+0x23/0x50 [ 128.194850][ T7397] ? packet_parse_headers+0x5b7/0x810 [ 128.196540][ T7397] ? packet_parse_headers+0x2b4/0x810 [ 128.198233][ T7397] ? __pfx_packet_parse_headers+0x10/0x10 [ 128.200052][ T7397] packet_xmit+0x243/0x310 [ 128.201466][ T7397] packet_sendmsg+0x28d6/0x4eb0 [ 128.203051][ T7397] ? __pfx_packet_sendmsg+0x10/0x10 [ 128.204828][ T7397] ? __might_fault+0xc5/0x140 [ 128.206352][ T7397] ? apparmor_socket_sendmsg+0x15b/0x270 [ 128.208122][ T7397] __sys_sendto+0x48b/0x4e0 [ 128.209584][ T7397] ? __pfx_packet_sendmsg+0x10/0x10 [ 128.211293][ T7397] ? __pfx___sys_sendto+0x10/0x10 [ 128.212890][ T7397] __ia32_sys_sendto+0xdd/0x1b0 [ 128.214425][ T7397] ? __do_fast_syscall_32+0x98/0x970 [ 128.216095][ T7397] ? lockdep_hardirqs_on+0x78/0x100 [ 128.217732][ T7397] __do_fast_syscall_32+0xe7/0x970 [ 128.219374][ T7397] do_fast_syscall_32+0x32/0x70 [ 128.220910][ T7397] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.222886][ T7397] RIP: 0023:0xf70cefec [ 128.224180][ T7397] Code: Unable to access opcode bytes at 0xf70cefc2. [ 128.226239][ T7397] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 128.228823][ T7397] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 128.231305][ T7397] RDX: 0000000000000000 RSI: 0000000004000010 RDI: 0000000080000000 [ 128.233755][ T7397] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 128.236224][ T7397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.238683][ T7397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.241171][ T7397] [ 128.242818][ T7397] Kernel Offset: disabled [ 128.244185][ T7397] Rebooting in 86400 seconds..