last executing test programs: 1m9.535451127s ago: executing program 3 (id=645): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in=@multicast1, 0x0, 0x2}}]}, 0xcc}}, 0x0) 1m9.375535625s ago: executing program 3 (id=647): r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x404, 0x4e23, 0x1}, {0x0, 0x0, 0x0, 0x6cc, 0xa975, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) 1m8.906611375s ago: executing program 3 (id=651): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x10ac, &(0x7f0000000200)={0x0, 0x2, 0x400}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 1m8.703854692s ago: executing program 3 (id=654): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], 0x0, [0x8, 0x4, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x8c}, 0x1, 0x7a00}, 0x0) 1m8.541087235s ago: executing program 3 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x2, 0x0) 1m8.401034564s ago: executing program 3 (id=662): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 53.275162925s ago: executing program 32 (id=662): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_request\x00', r1, 0x0, 0x7f}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 50.164523073s ago: executing program 0 (id=927): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 49.954821417s ago: executing program 0 (id=929): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300), 0xa02, 0x0) r0 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 49.782020814s ago: executing program 0 (id=932): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 49.674163742s ago: executing program 0 (id=933): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 49.603111667s ago: executing program 0 (id=935): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) 49.250185361s ago: executing program 0 (id=939): open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8}) 48.770615326s ago: executing program 33 (id=939): open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8}) 44.385848624s ago: executing program 1 (id=978): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0xa, r2, 0x0, r1}) 44.286838874s ago: executing program 1 (id=979): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e1e, @broadcast}, 0x10) 44.140863134s ago: executing program 1 (id=980): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000300)=""/104, 0x68}], 0x1}, 0x2101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0x6ebf}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 43.970302932s ago: executing program 1 (id=981): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) 43.651713051s ago: executing program 1 (id=982): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x1) 43.515502025s ago: executing program 1 (id=983): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x8000000000000000, 0x12) 28.403284239s ago: executing program 34 (id=983): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000180)=0x8000000000000000, 0x12) 3.438019809s ago: executing program 6 (id=1513): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt(r1, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 3.262015746s ago: executing program 6 (id=1515): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x64, r2, 0x11, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "213e15e458"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x64}, 0x1, 0x0, 0x0, 0x8050}, 0x4) 2.996358326s ago: executing program 6 (id=1518): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) socket$inet6(0xa, 0x3, 0xff) close_range(r0, 0xffffffffffffffff, 0x0) 2.771879823s ago: executing program 6 (id=1521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x9}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000003680), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000000c40)={0x24, r2, 0x1, 0x170bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\''}]}, 0x24}, 0x1, 0x0, 0x0, 0xc084}, 0x40) 2.580046595s ago: executing program 6 (id=1526): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$TCFLSH(r0, 0x400455c8, 0x0) 2.362276815s ago: executing program 2 (id=1527): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[{0x10, 0x84, 0x10000}], 0x10}}], 0x1, 0x400c0) 2.293451633s ago: executing program 2 (id=1528): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r1 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{r1, 0x2401}, {r1, 0x581}], 0x2, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2.007697967s ago: executing program 5 (id=1534): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @private2, 0x400}, 0x1c) listen(r0, 0x100101) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000500)={0xde}, 0x8) accept4(r0, 0x0, 0x0, 0x0) 1.533212626s ago: executing program 4 (id=1538): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 1.404135247s ago: executing program 4 (id=1540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd700000dcdf254400000008000300", @ANYRES32=r3, @ANYBLOB="100070000500010000000000040005000a0018000303030303030000080026"], 0x48}}, 0x4004) 1.338045722s ago: executing program 2 (id=1541): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="0e", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x8000}, &(0x7f0000000040)=0x8) 1.310783837s ago: executing program 4 (id=1542): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x10, 0x1, @thr={0x0, 0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x8, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 1.197980194s ago: executing program 2 (id=1544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000600)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1.142285541s ago: executing program 4 (id=1546): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1.101771689s ago: executing program 5 (id=1547): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 989.632644ms ago: executing program 4 (id=1549): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000480)={0x0, 0x7, 0x5, 0x55, 0x3, 0x80, 0xb, 0x40, 0x40, 0x8, 0x7, 0x9, 0x9, 0x73}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={r1, 0x2}, &(0x7f0000000500)=0x8) 988.832821ms ago: executing program 5 (id=1550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970000303a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 841.413324ms ago: executing program 4 (id=1552): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000980)={r2, 0x4, 0x4, 0x3, 0x6, 0x0, 0x812, 0x7fff, {0x0, @in6={{0xa, 0x4e24, 0x406, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, 0xffffffff, 0x9, 0x9, 0x80000001, 0x5}}, &(0x7f0000000a40)=0xb0) 814.512108ms ago: executing program 7 (id=1553): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x6, 0x9, 0x2, 0xfffffff8, {0x5, 0x8, 0x1ff, 0x5, 0x1, 0x4, 0x4, 0x3, 0x10, 0xde74, 0xc, 0x5, 0xfffffffc, 0x1, "6eee05017756edaba12abb9b6aa3391e7690f4199318cf5e28e62024ab85ead2"}}) 787.638751ms ago: executing program 5 (id=1554): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r0, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 697.950721ms ago: executing program 7 (id=1555): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000027c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002e00)={0x14, 0x1e, 0x51d, 0x70bd27, 0x25dfdbff, "", [@nested={0x4, 0x145}]}, 0x14}], 0x1}, 0x0) 697.68386ms ago: executing program 5 (id=1556): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000b}) 648.597278ms ago: executing program 7 (id=1557): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x8082, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1b) io_setup(0x6, &(0x7f0000001380)=0x0) r2 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) io_submit(r1, 0x2, &(0x7f0000000c00)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0, 0x0, 0x4, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x10, r2, 0x0, 0x0, 0x9a}]) 582.664412ms ago: executing program 5 (id=1558): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x0) 489.570021ms ago: executing program 7 (id=1559): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)='d', 0x1}], 0x1, 0x0, 0x0, 0x20004001}}], 0x1, 0x8000) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 373.094401ms ago: executing program 7 (id=1560): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001d40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 188.852654ms ago: executing program 2 (id=1561): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000", 0x4}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 187.609239ms ago: executing program 6 (id=1562): writev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000c80)="19a316acadc23c5786641b2c2ab7a2ae60a3d5c4bee4041f6f0a301dc15f6d2608b8a91e6a235c2c7cb5c8ce927169ac9f6b536809fc677ca3e11f58c23e19663e3e410ef742b605c076ff862fe86854255cf1d993b1e4bb252669affc0368fe5cb3a6dd53151ad06622a33a4373863eaca32ca3b9600870efd3a6ff9340a2b68bab7a3487ae9b8563aed9af72e4f029a3f021b0e138fe306c61072ee12dd17f3246bb04e5f342b4f1bcfcba7031a9424b725040e30e320a9bc2c674811a1650f6c31bcdb5000744dd44", 0xca}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x7, 0x6, 0x4, '\x00', 0x3}) 97.308142ms ago: executing program 7 (id=1563): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {r1, r2+60000000}}, 0x0) 0s ago: executing program 2 (id=1564): r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8c) mknodat$loop(r1, &(0x7f00000000c0)='./file0\x00', 0x2010, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): .802943][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.810419][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.836773][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.865366][ T5839] team0: Port device team_slave_0 added [ 89.874525][ T5839] team0: Port device team_slave_1 added [ 89.881280][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.888254][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.914293][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.940793][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.947779][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.974279][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.021645][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.028643][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.054991][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.117208][ T5828] hsr_slave_0: entered promiscuous mode [ 90.123727][ T5828] hsr_slave_1: entered promiscuous mode [ 90.130294][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.138060][ T5828] Cannot create hsr debugfs directory [ 90.165079][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.172380][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.198563][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.251859][ T5823] hsr_slave_0: entered promiscuous mode [ 90.258377][ T5823] hsr_slave_1: entered promiscuous mode [ 90.265229][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.273070][ T5823] Cannot create hsr debugfs directory [ 90.286522][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.293873][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.319991][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.432884][ T5836] hsr_slave_0: entered promiscuous mode [ 90.440175][ T5836] hsr_slave_1: entered promiscuous mode [ 90.446518][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.454231][ T5836] Cannot create hsr debugfs directory [ 90.548366][ T5839] hsr_slave_0: entered promiscuous mode [ 90.554873][ T5839] hsr_slave_1: entered promiscuous mode [ 90.561909][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.573873][ T5839] Cannot create hsr debugfs directory [ 91.020747][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.050144][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.089715][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.101796][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.174873][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.205965][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.228868][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.229680][ T5146] Bluetooth: hci1: command tx timeout [ 91.270034][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.305295][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.312858][ T5146] Bluetooth: hci0: command tx timeout [ 91.327400][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.373020][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.386831][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.394204][ T5146] Bluetooth: hci2: command tx timeout [ 91.470314][ T5146] Bluetooth: hci3: command tx timeout [ 91.478497][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.500356][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.515339][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.552478][ T5146] Bluetooth: hci4: command tx timeout [ 91.552910][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.657653][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.666636][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.705413][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.717666][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.731282][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.782337][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.812241][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.819578][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.862967][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.870126][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.957131][ T24] cfg80211: failed to load regulatory.db [ 92.028455][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.063137][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.091442][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.138033][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.201614][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.208754][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.232132][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.264116][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.271335][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.294682][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.301979][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.321980][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.347627][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.354915][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.391361][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.398510][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.432835][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.440073][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.497939][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.519692][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.543388][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.595972][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.644727][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.651926][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.716540][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.723841][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.791205][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.847581][ T5833] veth0_vlan: entered promiscuous mode [ 92.927382][ T5833] veth1_vlan: entered promiscuous mode [ 93.027138][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.171958][ T5833] veth0_macvtap: entered promiscuous mode [ 93.244045][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.273454][ T5833] veth1_macvtap: entered promiscuous mode [ 93.312298][ T5146] Bluetooth: hci1: command tx timeout [ 93.368385][ T5828] veth0_vlan: entered promiscuous mode [ 93.389679][ T5146] Bluetooth: hci0: command tx timeout [ 93.428255][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.449849][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.469558][ T5146] Bluetooth: hci2: command tx timeout [ 93.487440][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.500781][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.510695][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.519938][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.528671][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.544691][ T5823] veth0_vlan: entered promiscuous mode [ 93.556503][ T5828] veth1_vlan: entered promiscuous mode [ 93.559373][ T5146] Bluetooth: hci3: command tx timeout [ 93.581473][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.598712][ T5823] veth1_vlan: entered promiscuous mode [ 93.631061][ T5146] Bluetooth: hci4: command tx timeout [ 93.678382][ T5828] veth0_macvtap: entered promiscuous mode [ 93.764023][ T5828] veth1_macvtap: entered promiscuous mode [ 93.795288][ T5836] veth0_vlan: entered promiscuous mode [ 93.845399][ T5836] veth1_vlan: entered promiscuous mode [ 93.885512][ T5823] veth0_macvtap: entered promiscuous mode [ 93.902082][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.925508][ T5823] veth1_macvtap: entered promiscuous mode [ 93.940258][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.997740][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.013998][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.024179][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.035414][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.058510][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.083634][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.092170][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.102071][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.162987][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.172900][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.183164][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.192332][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.214785][ T5836] veth0_macvtap: entered promiscuous mode [ 94.231656][ T5836] veth1_macvtap: entered promiscuous mode [ 94.270123][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.281372][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.356991][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.427287][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.445142][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.464261][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.476425][ T5839] veth0_vlan: entered promiscuous mode [ 94.486353][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.574159][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.584679][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.594559][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.605234][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.628400][ T5839] veth1_vlan: entered promiscuous mode [ 94.675304][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.695926][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.730285][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.742629][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.816022][ T5839] veth0_macvtap: entered promiscuous mode [ 94.879538][ T5839] veth1_macvtap: entered promiscuous mode [ 94.907714][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.910549][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.990355][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.124095][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.142237][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.185702][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.233651][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.272247][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.291487][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.323032][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.359112][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.389831][ T5146] Bluetooth: hci1: command tx timeout [ 95.440908][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.440933][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.469741][ T5146] Bluetooth: hci0: command tx timeout [ 95.549429][ T5146] Bluetooth: hci2: command tx timeout [ 95.622798][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.639426][ T5146] Bluetooth: hci3: command tx timeout [ 95.665249][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.731496][ T5146] Bluetooth: hci4: command tx timeout [ 95.942735][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.966826][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.169487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.189520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.199099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 97.207969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.219429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 97.436625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.459600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.600126][ T5879] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.634438][ T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.790712][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 97.809529][ T5879] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 97.844345][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.900042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.939785][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 97.947577][ T44] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 97.963026][ T5879] pvrusb2: Hardware description: Terratec Grabster AV400 [ 98.000628][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.042217][ T5879] pvrusb2: ********** [ 98.059134][ T5879] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 98.074104][ T44] pvrusb2: Hardware description: Terratec Grabster AV400 [ 98.112741][ T44] pvrusb2: ********** [ 98.112835][ T5879] pvrusb2: Important functionality might not be entirely working. [ 98.124743][ T44] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 98.124763][ T44] pvrusb2: Important functionality might not be entirely working. [ 98.124773][ T44] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 98.124785][ T44] pvrusb2: ********** [ 98.217646][ T5879] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 98.284696][ T5879] pvrusb2: ********** [ 98.310027][ T2347] pvrusb2: Invalid write control endpoint [ 98.319278][ T44] usb 4-1: USB disconnect, device number 2 [ 98.326510][ T44] pvrusb2: Device being rendered inoperable [ 98.524399][ T5834] usb 5-1: USB disconnect, device number 2 [ 98.548718][ T2347] pvrusb2: Invalid write control endpoint [ 98.579908][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 98.609374][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 98.620204][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 98.649433][ T2347] pvrusb2: Device being rendered inoperable [ 98.656589][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 98.682137][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 98.712029][ T2347] pvrusb2: Attached sub-driver cx25840 [ 98.717647][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 98.758309][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 99.358953][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26'. [ 99.519306][ T5905] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.717286][ T5905] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 99.745580][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.772558][ T5905] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 99.798915][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.837601][ T5905] usb 4-1: Product: syz [ 99.850326][ T5905] usb 4-1: Manufacturer: syz [ 99.859259][ T5905] usb 4-1: SerialNumber: syz [ 99.869953][ T6021] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 99.882702][ T5905] usb 4-1: config 0 descriptor?? [ 99.898952][ T6021] netlink: 212 bytes leftover after parsing attributes in process `syz.1.31'. [ 99.901849][ T6022] netlink: 'syz.2.30': attribute type 10 has an invalid length. [ 99.921141][ T5905] usb 4-1: selecting invalid altsetting 0 [ 99.942335][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.942800][ T6021] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 100.013752][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.057415][ T6022] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 100.111944][ C1] Illegal XDP return value 16128 on prog (id 4) dev batadv_slave_0, expect packet loss! [ 100.184959][ T5931] usb 4-1: USB disconnect, device number 3 [ 100.261763][ T6030] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.316309][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 100.319893][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 100.647394][ T6043] bridge0: entered allmulticast mode [ 101.326941][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.50'. [ 101.579495][ T5834] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.773614][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 101.792540][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.819453][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.829718][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.859524][ T5834] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 101.901348][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.970056][ T5834] usb 5-1: config 0 descriptor?? [ 101.983768][ T5834] hub 5-1:0.0: USB hub found [ 102.196772][ T5834] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 102.409587][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.417388][ T6095] capability: warning: `syz.3.64' uses deprecated v2 capabilities in a way that may be insecure [ 102.602432][ T44] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 102.632852][ T44] usb 3-1: config 0 has no interface number 0 [ 102.644495][ T44] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 102.659425][ T5834] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 102.679396][ T44] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 102.708945][ T5834] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 102.729400][ T44] usb 3-1: config 0 interface 255 has no altsetting 0 [ 102.730205][ T5931] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.736246][ T44] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 102.794130][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.813493][ T44] usb 3-1: config 0 descriptor?? [ 102.832303][ T44] ums-realtek 3-1:0.255: USB Mass Storage device detected [ 102.921093][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 102.949401][ T5834] usb 5-1: USB disconnect, device number 3 [ 102.952279][ T5931] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 102.961885][ T6100] fido_id[6100]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 103.005468][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.051676][ T5931] pvrusb2: Hardware description: Terratec Grabster AV400 [ 103.071883][ T5931] pvrusb2: ********** [ 103.075940][ T5931] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 103.098788][ T5834] usb 3-1: USB disconnect, device number 2 [ 103.116931][ T5931] pvrusb2: Important functionality might not be entirely working. [ 103.125530][ T5879] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.158283][ T5931] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 103.179493][ T5931] pvrusb2: ********** [ 103.241221][ T2347] pvrusb2: Invalid write control endpoint [ 103.244727][ T5931] usb 1-1: USB disconnect, device number 2 [ 103.289496][ T5879] usb 2-1: Using ep0 maxpacket: 8 [ 103.310714][ T5879] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 103.328112][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.362753][ T2347] pvrusb2: Invalid write control endpoint [ 103.368213][ T5879] pvrusb2: Hardware description: Terratec Grabster AV400 [ 103.376203][ T5879] pvrusb2: ********** [ 103.380342][ T5879] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 103.394433][ T5879] pvrusb2: Important functionality might not be entirely working. [ 103.400660][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 103.408546][ T5879] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 103.424605][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 103.437394][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 103.448835][ T2347] pvrusb2: Device being rendered inoperable [ 103.457399][ T5879] pvrusb2: ********** [ 103.460768][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 103.468943][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 103.525528][ T2347] pvrusb2: Attached sub-driver cx25840 [ 103.534975][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 103.571402][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 103.603662][ T2347] pvrusb2: Invalid write control endpoint [ 103.806316][ T2347] pvrusb2: Invalid write control endpoint [ 103.823397][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 103.841095][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 103.857293][ T5879] usb 2-1: USB disconnect, device number 2 [ 103.866528][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 103.908897][ T2347] pvrusb2: Device being rendered inoperable [ 103.936797][ T2347] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 103.957951][ T2347] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 103.990033][ T2347] pvrusb2: Attached sub-driver cx25840 [ 104.007101][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 104.024469][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 104.415789][ T6133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.630491][ T6144] netlink: 'syz.3.84': attribute type 1 has an invalid length. [ 104.638139][ T6144] netlink: 144 bytes leftover after parsing attributes in process `syz.3.84'. [ 104.661899][ T6144] netlink: 36 bytes leftover after parsing attributes in process `syz.3.84'. [ 104.717202][ T6146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.966962][ T6155] warning: `syz.0.89' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.270629][ T6164] xt_cgroup: invalid path, errno=-2 [ 106.049535][ T5834] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.131002][ T6181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 106.249967][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 106.278895][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.308743][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.355204][ T5834] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 106.381890][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.423589][ T5834] usb 2-1: config 0 descriptor?? [ 106.871322][ T5834] lua 0003:1E7D:2C2E.0002: report_id 0 is invalid [ 106.898190][ T5834] lua 0003:1E7D:2C2E.0002: item 0 4 1 8 parsing failed [ 106.916871][ T5834] lua 0003:1E7D:2C2E.0002: parse failed [ 106.947237][ T5834] lua 0003:1E7D:2C2E.0002: probe with driver lua failed with error -22 [ 107.058364][ T5834] usb 2-1: USB disconnect, device number 3 [ 107.389573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.801837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.450854][ T44] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.662063][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.690450][ T44] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 108.750176][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.862485][ T44] usb 1-1: config 0 descriptor?? [ 108.935239][ T6242] capability: warning: `syz.1.126' uses 32-bit capabilities (legacy support in use) [ 109.334147][ T44] lg-g15 0003:046D:C222.0003: unbalanced collection at end of report description [ 109.366612][ T44] lg-g15 0003:046D:C222.0003: probe with driver lg-g15 failed with error -22 [ 109.396540][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 109.559250][ T44] usb 1-1: USB disconnect, device number 3 [ 109.565728][ T6256] netlink: 'syz.3.133': attribute type 2 has an invalid length. [ 109.607508][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 109.693093][ T6260] loop6: detected capacity change from 0 to 524287999 [ 109.856758][ T6265] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.137'. [ 109.899822][ T6265] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 110.891437][ T6288] netlink: 277 bytes leftover after parsing attributes in process `syz.3.147'. [ 111.543060][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.718019][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 111.743584][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34456, setting to 1024 [ 111.771380][ T44] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 111.792703][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.843606][ T44] usb 4-1: config 0 descriptor?? [ 111.873475][ T6303] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.288192][ T6320] serio: Serial port ptm0 [ 112.315409][ T44] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 112.354267][ T44] cm6533_jd 0003:0D8C:0022.0004: item fetching failed at offset 4/5 [ 112.389937][ T44] cm6533_jd 0003:0D8C:0022.0004: parse failed [ 112.428429][ T44] cm6533_jd 0003:0D8C:0022.0004: probe with driver cm6533_jd failed with error -22 [ 112.555602][ T44] usb 4-1: USB disconnect, device number 4 [ 112.697843][ T6331] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 112.763358][ T6334] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 112.779131][ T6331] netlink: 'syz.1.164': attribute type 2 has an invalid length. [ 112.826067][ T6334] netlink: 'syz.1.164': attribute type 2 has an invalid length. [ 113.710184][ T6365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 114.049165][ T44] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.057288][ T6378] binder: 6375:6378 ioctl 40046205 0 returned -22 [ 114.249240][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 114.264087][ T44] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 114.286557][ T44] usb 5-1: config 0 has no interface number 0 [ 114.305344][ T44] usb 5-1: config 0 interface 184 has no altsetting 0 [ 114.338567][ T44] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 114.349086][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.373615][ T44] usb 5-1: Product: syz [ 114.393422][ T44] usb 5-1: Manufacturer: syz [ 114.403719][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 114.405054][ T44] usb 5-1: SerialNumber: syz [ 114.446623][ T44] usb 5-1: config 0 descriptor?? [ 114.461914][ T44] smsc75xx v1.0.0 [ 114.473430][ T44] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 114.500022][ T44] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 114.720179][ T44] usb 5-1: USB disconnect, device number 4 [ 115.044269][ T6408] random: crng reseeded on system resumption [ 115.093601][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 115.430100][ T6421] netlink: 'syz.4.206': attribute type 9 has an invalid length. [ 115.437829][ T6421] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.206'. [ 115.439530][ T6423] random: crng reseeded on system resumption [ 115.525418][ T6423] Restarting kernel threads ... [ 115.559677][ T6423] Done restarting kernel threads. [ 116.013953][ T6434] overlayfs: workdir and upperdir must be separate subtrees [ 117.100341][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 117.188310][ T6470] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 117.272071][ T6470] syzkaller1: linktype set to 32 [ 117.780226][ T6479] block nbd2: NBD_DISCONNECT [ 119.187219][ T6465] syz.0.226 (6465): drop_caches: 1 [ 119.889577][ T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.108225][ T44] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 120.141022][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.151924][ T44] usb 1-1: Product: syz [ 120.156507][ T44] usb 1-1: Manufacturer: syz [ 120.162166][ T44] usb 1-1: SerialNumber: syz [ 120.170350][ T44] usb 1-1: config 0 descriptor?? [ 120.195929][ T44] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 120.845548][ T30] audit: type=1326 audit(1749266855.035:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc0b8e929 code=0x7ffc0000 [ 120.916363][ T30] audit: type=1326 audit(1749266855.035:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc0b8e929 code=0x7ffc0000 [ 120.998708][ T30] audit: type=1326 audit(1749266855.035:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febc0b8e929 code=0x7ffc0000 [ 120.998788][ T30] audit: type=1326 audit(1749266855.035:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc0b8e929 code=0x7ffc0000 [ 120.998832][ T30] audit: type=1326 audit(1749266855.035:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7febc0b8e929 code=0x7ffc0000 [ 120.998874][ T30] audit: type=1326 audit(1749266855.035:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6550 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febc0b8e929 code=0x7ffc0000 [ 121.012802][ T44] gspca_sunplus: reg_r err -71 [ 121.012902][ T44] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 121.018603][ T44] usb 1-1: USB disconnect, device number 4 [ 121.148950][ T6559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.331871][ T6561] vlan2: entered allmulticast mode [ 121.332179][ T6561] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 122.041272][ T5834] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 122.065171][ T6581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.221314][ T5834] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 122.247853][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.271633][ T5834] usb 5-1: config 0 descriptor?? [ 122.356237][ T6591] process 'syz.2.283' launched './file0' with NULL argv: empty string added [ 122.518111][ T5834] kaweth 5-1:0.0: Firmware present in device. [ 122.640316][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 122.696773][ T5834] kaweth 5-1:0.0: Statistics collection: 0 [ 122.703632][ T5834] kaweth 5-1:0.0: Multicast filter limit: 0 [ 122.711190][ T5834] kaweth 5-1:0.0: MTU: 0 [ 122.721452][ T5834] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 123.099201][ T5834] kaweth 5-1:0.0: Error setting SOFS wait [ 123.110607][ T5834] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 123.139616][ T5834] usb 5-1: USB disconnect, device number 5 [ 123.763739][ T6621] netlink: 'syz.0.292': attribute type 3 has an invalid length. [ 123.801152][ T6621] netlink: 'syz.0.292': attribute type 3 has an invalid length. [ 124.669519][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 126.119231][ T5834] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.309550][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 126.331781][ T5834] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 126.370592][ T5834] usb 4-1: config 0 has no interface number 0 [ 126.392333][ T5834] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 126.405427][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.427403][ T5834] usb 4-1: Product: syz [ 126.458630][ T5834] usb 4-1: Manufacturer: syz [ 126.482771][ T5834] usb 4-1: SerialNumber: syz [ 126.509406][ T5834] usb 4-1: config 0 descriptor?? [ 126.533550][ T5834] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 126.778442][ T5834] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 126.847836][ T5834] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 127.197894][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 127.199556][ T5955] usb 4-1: USB disconnect, device number 5 [ 127.305033][ T5955] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 127.389942][ T5955] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 127.440487][ T5955] quatech2 4-1:0.51: device disconnected [ 127.583384][ T6730] tap0: tun_chr_ioctl cmd 1074025677 [ 127.597313][ T6730] tap0: linktype set to 825 [ 127.916869][ T6740] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.335'. [ 128.515686][ T6759] bond0: entered promiscuous mode [ 128.533520][ T6759] bond_slave_0: entered promiscuous mode [ 128.540938][ T6759] bond_slave_1: entered promiscuous mode [ 128.572885][ T6759] bond0: left promiscuous mode [ 128.583046][ T6759] bond_slave_0: left promiscuous mode [ 128.604859][ T6759] bond_slave_1: left promiscuous mode [ 128.726318][ T6769] input: syz1 as /devices/virtual/input/input5 [ 128.870348][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.987903][ T6773] ======================================================= [ 128.987903][ T6773] WARNING: The mand mount option has been deprecated and [ 128.987903][ T6773] and is ignored by this kernel. Remove the mand [ 128.987903][ T6773] option from the mount to silence this warning. [ 128.987903][ T6773] ======================================================= [ 129.075574][ T6777] netlink: 'syz.1.349': attribute type 8 has an invalid length. [ 129.083715][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 129.102480][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 129.107287][ T6773] omfs: Invalid superblock (0) [ 129.123536][ T44] usb 1-1: config 0 has no interfaces? [ 129.141065][ T44] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 129.179153][ T44] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 129.201866][ T44] usb 1-1: Product: syz [ 129.206790][ T44] usb 1-1: Manufacturer: syz [ 129.269093][ T44] usb 1-1: config 0 descriptor?? [ 130.005808][ T5879] usb 1-1: USB disconnect, device number 5 [ 130.485300][ T6816] bridge0: entered promiscuous mode [ 130.514799][ T6819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.540125][ T6816] macvlan2: entered promiscuous mode [ 130.969195][ T2155] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.185951][ T2155] usb 1-1: Using ep0 maxpacket: 16 [ 131.225316][ T2155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.256785][ T2155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.288451][ T2155] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 131.339635][ T2155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.394510][ T2155] usb 1-1: config 0 descriptor?? [ 131.869704][ T2155] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 131.938779][ T6853] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 132.039438][ T2155] corsair 0003:1B1C:1B02.0005: Failed to get K90 initial state (error -71). [ 132.074710][ T2155] usb 1-1: USB disconnect, device number 6 [ 132.228187][ T6854] fido_id[6854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 132.362439][ T5955] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 132.567757][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.597487][ T5955] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 132.655858][ T5955] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 132.689218][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.740433][ T5955] usb 5-1: config 0 descriptor?? [ 132.743490][ T6869] overlay: filesystem on ./bus not supported [ 132.917409][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.931077][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.948321][ T5830] Bluetooth: hci4: link tx timeout [ 132.958690][ T5830] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.143000][ T5146] Bluetooth: hci4: link tx timeout [ 133.148954][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.239167][ T5955] corsair-psu 0003:1B1C:1C07.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1c07] on usb-dummy_hcd.4-1/input0 [ 133.349169][ T5955] corsair-psu 0003:1B1C:1C07.0006: unable to initialize device (-38) [ 133.417544][ T5955] corsair-psu 0003:1B1C:1C07.0006: probe with driver corsair-psu failed with error -38 [ 133.494368][ T5955] usb 5-1: USB disconnect, device number 6 [ 134.035986][ T5955] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 134.084658][ T5955] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 134.304562][ T5879] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.489243][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 134.501123][ T5879] usb 3-1: config 0 has no interfaces? [ 134.509774][ T5879] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 134.518884][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.579443][ T5879] usb 3-1: Product: syz [ 134.583698][ T5879] usb 3-1: Manufacturer: syz [ 134.604582][ T5879] usb 3-1: SerialNumber: syz [ 134.647060][ T5879] usb 3-1: config 0 descriptor?? [ 134.764808][ T5146] Bluetooth: hci4: link tx timeout [ 134.770607][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 134.878775][ T44] usb 3-1: USB disconnect, device number 3 [ 134.888090][ T6926] netlink: 20 bytes leftover after parsing attributes in process `syz.1.417'. [ 134.999409][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 135.559765][ T30] audit: type=1326 audit(1749266869.765:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6940 comm="syz.1.423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e3778e929 code=0x0 [ 137.360921][ T6998] netlink: 'syz.4.449': attribute type 1 has an invalid length. [ 137.424559][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 137.456062][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 137.544009][ T7004] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.553593][ T7004] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.562424][ T7004] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.571265][ T7004] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.690976][ T7004] Zero length message leads to an empty skb [ 138.045106][ T7022] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 138.673747][ T7037] loop8: detected capacity change from 0 to 1 [ 138.701353][ T7037] Dev loop8: unable to read RDB block 1 [ 138.707125][ T7037] loop8: unable to read partition table [ 138.759374][ T7037] loop8: partition table beyond EOD, truncated [ 138.799163][ T7037] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 139.152049][ T7051] netlink: 'syz.3.470': attribute type 18 has an invalid length. [ 139.292378][ T7057] syzkaller0: tun_chr_ioctl cmd 1074025692 [ 139.805846][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 139.831963][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.0.479'. [ 140.456287][ T7098] netlink: 312 bytes leftover after parsing attributes in process `syz.4.488'. [ 140.751912][ T7107] tun0: tun_chr_ioctl cmd 1074025678 [ 140.775006][ T7107] tun0: group set to 0 [ 141.579199][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'. [ 141.720862][ T7144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.873414][ T7149] netlink: 104 bytes leftover after parsing attributes in process `syz.0.505'. [ 142.119825][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.508'. [ 142.629092][ T44] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 142.834238][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 142.850022][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.884768][ T44] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 142.919713][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.959816][ T44] usb 1-1: config 0 descriptor?? [ 143.382411][ T44] logitech 0003:046D:C20E.0008: rdesc size test failed for formula gp [ 143.413915][ T44] logitech 0003:046D:C20E.0008: unbalanced delimiter at end of report description [ 143.460277][ T44] logitech 0003:046D:C20E.0008: parse failed [ 143.476621][ T44] logitech 0003:046D:C20E.0008: probe with driver logitech failed with error -22 [ 143.608435][ T5834] usb 1-1: USB disconnect, device number 7 [ 143.979301][ T44] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 144.189555][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 144.196994][ T44] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 144.235267][ T44] usb 3-1: config 0 has no interface number 0 [ 144.261321][ T44] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 144.279702][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.287789][ T44] usb 3-1: Product: syz [ 144.319062][ T44] usb 3-1: Manufacturer: syz [ 144.323731][ T44] usb 3-1: SerialNumber: syz [ 144.372580][ T44] usb 3-1: config 0 descriptor?? [ 144.414990][ T44] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 144.614243][ T44] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 144.656094][ T44] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 144.959835][ T7242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.060127][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 145.069702][ T5834] usb 3-1: USB disconnect, device number 4 [ 145.101605][ T5834] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 145.161364][ T5834] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 145.184004][ T5834] quatech2 3-1:0.51: device disconnected [ 145.700444][ T5879] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.880034][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 145.901320][ T5879] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 145.930975][ T5879] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 145.950713][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.958781][ T5879] usb 1-1: Product: syz [ 145.984513][ T5879] usb 1-1: Manufacturer: syz [ 146.004821][ T5879] usb 1-1: SerialNumber: syz [ 146.038454][ T5879] usb 1-1: config 0 descriptor?? [ 146.058439][ T7258] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.074981][ T5879] hub 1-1:0.0: bad descriptor, ignoring hub [ 146.089159][ T5879] hub 1-1:0.0: probe with driver hub failed with error -5 [ 146.113426][ T5879] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 146.420162][ T5834] usb 1-1: USB disconnect, device number 8 [ 146.420182][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 147.204294][ T7310] netlink: 'syz.3.576': attribute type 6 has an invalid length. [ 147.408750][ T7318] @: renamed from vlan0 (while UP) [ 148.129935][ T5931] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.237160][ T7349] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 148.329090][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 148.336421][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.347969][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.379142][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 148.399118][ T5931] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 148.408239][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.459760][ T5931] usb 4-1: config 0 descriptor?? [ 148.881420][ T5931] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 148.947418][ T5931] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 148.999319][ T5931] microsoft 0003:045E:07DA.0009: no inputs found [ 149.005735][ T5931] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 149.119630][ T5931] usb 4-1: USB disconnect, device number 6 [ 149.166626][ T7361] fido_id[7361]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 149.979208][ T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 150.149318][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 150.159173][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 150.191130][ T44] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 150.221477][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.262009][ T44] usb 4-1: config 0 descriptor?? [ 150.435895][ T30] audit: type=1326 audit(1749266884.635:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3778e929 code=0x7ffc0000 [ 150.496939][ T30] audit: type=1326 audit(1749266884.635:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3778e929 code=0x7ffc0000 [ 150.574002][ T30] audit: type=1326 audit(1749266884.695:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e3778e929 code=0x7ffc0000 [ 150.633142][ T30] audit: type=1326 audit(1749266884.695:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3778e929 code=0x7ffc0000 [ 150.660416][ T30] audit: type=1326 audit(1749266884.715:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e3778e929 code=0x7ffc0000 [ 150.754856][ T30] audit: type=1326 audit(1749266884.745:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e3778e929 code=0x7ffc0000 [ 150.835559][ T30] audit: type=1326 audit(1749266884.745:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e377858e7 code=0x7ffc0000 [ 150.861999][ T30] audit: type=1326 audit(1749266884.745:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e3772ab19 code=0x7ffc0000 [ 150.917609][ T44] usbhid 4-1:0.0: can't add hid device: -71 [ 150.931767][ T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 150.964730][ T44] usb 4-1: USB disconnect, device number 7 [ 151.072800][ T30] audit: type=1326 audit(1749266884.745:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e377858e7 code=0x7ffc0000 [ 151.144039][ T30] audit: type=1326 audit(1749266884.745:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7394 comm="syz.1.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e3772ab19 code=0x7ffc0000 [ 151.695353][ T7420] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 151.729374][ T7420] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 152.009307][ T5834] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 152.169256][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 152.186803][ T5834] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 152.198935][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.228261][ T5834] usb 2-1: config 0 descriptor?? [ 152.325278][ T7447] netlink: 'syz.3.639': attribute type 10 has an invalid length. [ 152.340284][ T7447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.639'. [ 152.385109][ T7447] team0: Port device geneve0 added [ 152.462906][ T5834] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 152.495454][ T5834] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 152.529624][ T5834] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 152.545818][ T5834] usb 2-1: media controller created [ 152.612477][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.683482][ T5834] az6027: usb out operation failed. (-71) [ 152.704578][ T5834] az6027: usb out operation failed. (-71) [ 152.717209][ T5834] stb0899_attach: Driver disabled by Kconfig [ 152.733174][ T5834] az6027: no front-end attached [ 152.733174][ T5834] [ 152.745438][ T5834] az6027: usb out operation failed. (-71) [ 152.773027][ T5834] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 152.787379][ T5834] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 152.969583][ T5931] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.977960][ T5834] dvb-usb: schedule remote query interval to 400 msecs. [ 152.987789][ T5834] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 153.012452][ T5834] usb 2-1: USB disconnect, device number 4 [ 153.125526][ T5834] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 153.129455][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 153.212524][ T5931] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 153.224018][ T5931] usb 5-1: config 0 has no interface number 0 [ 153.236441][ T5931] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 153.246707][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.255237][ T5931] usb 5-1: Product: syz [ 153.259919][ T5931] usb 5-1: Manufacturer: syz [ 153.264559][ T5931] usb 5-1: SerialNumber: syz [ 153.274081][ T5931] usb 5-1: config 0 descriptor?? [ 153.282506][ T5931] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 153.504168][ T5931] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 153.545955][ T5931] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 153.934396][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 153.943869][ T5955] usb 5-1: USB disconnect, device number 7 [ 153.960089][ T5955] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 153.981795][ T5955] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 154.000851][ T5955] quatech2 5-1:0.51: device disconnected [ 154.040347][ T5931] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 154.194920][ T5931] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 154.208143][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.234433][ T5931] usb 3-1: Product: syz [ 154.297602][ T5931] usb 3-1: Manufacturer: syz [ 154.303952][ T5931] usb 3-1: SerialNumber: syz [ 154.314476][ T5931] usb 3-1: config 0 descriptor?? [ 154.323714][ T5931] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 005 [ 154.645698][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.674'. [ 154.743714][ T5931] (null): failure reading functionality [ 154.755911][ T5931] i2c i2c-1: connected i2c-tiny-usb device [ 154.809887][ T1089] tipc: Subscription rejected, illegal request [ 154.974344][ T5955] usb 3-1: USB disconnect, device number 5 [ 155.529759][ T7553] vxcan0: tx address claim with dest, not broadcast [ 155.740303][ T44] kernel read not supported for file /usbmon9 (pid: 44 comm: kworker/1:1) [ 156.168091][ T7581] netlink: 'syz.4.700': attribute type 21 has an invalid length. [ 157.621506][ T7641] sctp: [Deprecated]: syz.4.728 (pid 7641) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.621506][ T7641] Use struct sctp_sack_info instead [ 157.719123][ T5834] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 157.795708][ T7650] tap0: tun_chr_ioctl cmd 1074025673 [ 157.879799][ T5834] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.898973][ T5834] usb 2-1: not running at top speed; connect to a high speed hub [ 157.911804][ T5834] usb 2-1: config 5 has an invalid interface number: 246 but max is 0 [ 157.921111][ T5834] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 157.935104][ T5834] usb 2-1: config 5 has no interface number 0 [ 157.945331][ T5834] usb 2-1: config 5 interface 246 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 157.956879][ T5834] usb 2-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 157.971468][ T5834] usb 2-1: config 5 interface 246 has no altsetting 0 [ 157.981679][ T5834] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 157.991914][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.000465][ T5834] usb 2-1: Product: syz [ 158.005886][ T5834] usb 2-1: Manufacturer: syz [ 158.010624][ T5834] usb 2-1: SerialNumber: syz [ 158.189546][ T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 158.248069][ T1116] usb 2-1: Failed to submit usb control message: -71 [ 158.248485][ T5834] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 158.263739][ T5834] usb 2-1: USB disconnect, device number 5 [ 158.270166][ T1116] usb 2-1: unable to send the bmi data to the device: -71 [ 158.277854][ T1116] usb 2-1: unable to get target info from device [ 158.292723][ T1116] usb 2-1: could not get target info (-71) [ 158.303140][ T1116] usb 2-1: could not probe fw (-71) [ 158.375027][ T44] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 158.385504][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.394728][ T44] usb 5-1: Product: syz [ 158.401451][ T44] usb 5-1: Manufacturer: syz [ 158.406189][ T44] usb 5-1: SerialNumber: syz [ 158.418963][ T44] usb 5-1: config 0 descriptor?? [ 158.436759][ T44] ch341 5-1:0.0: ch341-uart converter detected [ 158.819189][ T5931] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.990028][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 159.010320][ T5931] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 159.029079][ T5931] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.042565][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.071136][ T5931] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.089405][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.097458][ T5931] usb 1-1: Product: syz [ 159.105789][ T5931] usb 1-1: Manufacturer: syz [ 159.111313][ T5931] usb 1-1: SerialNumber: syz [ 159.258618][ T44] usb 5-1: failed to send control message: -71 [ 159.265024][ T44] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 159.294965][ T44] usb 5-1: USB disconnect, device number 8 [ 159.313336][ T44] ch341 5-1:0.0: device disconnected [ 159.389109][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 159.529298][ T5931] usb 1-1: 0:2 : does not exist [ 159.584780][ T7707] netlink: 40 bytes leftover after parsing attributes in process `syz.1.758'. [ 159.594326][ T7707] sch_fq: defrate 0 ignored. [ 159.599239][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 159.749630][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 159.757506][ T5879] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 159.778365][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.826077][ T5879] pvrusb2: Hardware description: Terratec Grabster AV400 [ 159.833693][ T5879] pvrusb2: ********** [ 159.837760][ T5879] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 159.849499][ T5879] pvrusb2: Important functionality might not be entirely working. [ 159.857404][ T5879] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 159.868931][ T5879] pvrusb2: ********** [ 159.936756][ T5931] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 159.968946][ T5931] usb 1-1: USB disconnect, device number 9 [ 160.040798][ T2347] pvrusb2: Invalid write control endpoint [ 160.079102][ T2155] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 160.134387][ T2347] pvrusb2: Invalid write control endpoint [ 160.147165][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 160.158822][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 160.168951][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 160.187906][ T2347] pvrusb2: Device being rendered inoperable [ 160.195961][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 160.208357][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 160.217140][ T2347] pvrusb2: Attached sub-driver cx25840 [ 160.227204][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 160.240286][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 160.254242][ T2155] usb 2-1: Using ep0 maxpacket: 32 [ 160.262851][ T2155] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 160.276420][ T7699] pvrusb2: Attempted to execute control transfer when device not ok [ 160.285548][ T2155] usb 2-1: config 0 has no interface number 0 [ 160.299918][ T44] usb 3-1: USB disconnect, device number 6 [ 160.310239][ T2155] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 160.328887][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.342621][ T2155] usb 2-1: Product: syz [ 160.354913][ T2155] usb 2-1: Manufacturer: syz [ 160.363144][ T2155] usb 2-1: SerialNumber: syz [ 160.371381][ T2155] usb 2-1: config 0 descriptor?? [ 160.384692][ T2155] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 160.604726][ T2155] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 160.643042][ T2155] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 160.821647][ T7713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.872533][ T7713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.178375][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 161.191874][ T5931] usb 2-1: USB disconnect, device number 6 [ 161.202369][ T5931] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 161.225579][ T5931] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 161.261918][ T5931] quatech2 2-1:0.51: device disconnected [ 161.275782][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.776'. [ 161.657676][ T7768] mmap: syz.4.786 (7768) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 161.691038][ T7769] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 162.198939][ T7791] Bluetooth: MGMT ver 1.23 [ 163.180352][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.819'. [ 163.222839][ T7838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.819'. [ 163.607375][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.829'. [ 163.717641][ T7865] openvswitch: netlink: Multiple metadata blocks provided [ 163.892246][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 163.892266][ T30] audit: type=1326 audit(1749266902.097:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.0.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f0b8e929 code=0x7ffc0000 [ 163.919800][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.956064][ T30] audit: type=1326 audit(1749266902.097:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.0.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f0b8e929 code=0x7ffc0000 [ 163.978001][ T30] audit: type=1326 audit(1749266902.097:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.0.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fa8f0b8e929 code=0x7ffc0000 [ 164.034125][ T30] audit: type=1326 audit(1749266902.097:94): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.0.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f0b8e929 code=0x7ffc0000 [ 164.055812][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.065835][ T30] audit: type=1326 audit(1749266902.097:95): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7871 comm="syz.0.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f0b8e929 code=0x7ffc0000 [ 164.087524][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.539322][ T2155] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 164.711886][ T2155] usb 3-1: config 0 has no interfaces? [ 164.717796][ T2155] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.730090][ T2155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.749732][ T2155] usb 3-1: config 0 descriptor?? [ 164.980311][ T2155] usb 3-1: USB disconnect, device number 7 [ 165.589898][ T7939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 165.780352][ T30] audit: type=1326 audit(1749266903.977:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.2.865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cc7d8e929 code=0x0 [ 165.914244][ T7957] macvlan2: entered allmulticast mode [ 165.920877][ T7957] veth1_vlan: entered allmulticast mode [ 165.931829][ T7957] veth1_vlan: left allmulticast mode [ 166.194205][ T5830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 166.569193][ T2155] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.743243][ T2155] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 166.769087][ T2155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.777165][ T2155] usb 1-1: Product: syz [ 166.783871][ T2155] usb 1-1: Manufacturer: syz [ 166.788566][ T2155] usb 1-1: SerialNumber: syz [ 166.801943][ T2155] usb 1-1: config 0 descriptor?? [ 167.428723][ T8017] netlink: 'syz.4.883': attribute type 1 has an invalid length. [ 167.436636][ T8017] netlink: 144 bytes leftover after parsing attributes in process `syz.4.883'. [ 167.449232][ T8017] netlink: 28 bytes leftover after parsing attributes in process `syz.4.883'. [ 167.617313][ T2155] usb 1-1: Firmware version (0.0) predates our first public release. [ 167.625680][ T2155] usb 1-1: Please update to version 0.2 or newer [ 167.664521][ T2155] usb 1-1: USB disconnect, device number 10 [ 167.769810][ T5931] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 167.809158][ T5834] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 167.920796][ T5931] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.934819][ T5931] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.944766][ T5931] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.959049][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.960616][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 167.975474][ T5834] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 167.979405][ T8019] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.984150][ T5834] usb 3-1: config 0 has no interface number 0 [ 167.998036][ T5931] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.000835][ T5834] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 168.015323][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=229, SerialNumber=2 [ 168.023880][ T5834] usb 3-1: Product: syz [ 168.028459][ T5834] usb 3-1: Manufacturer: syz [ 168.033592][ T5834] usb 3-1: SerialNumber: syz [ 168.041379][ T5834] usb 3-1: config 0 descriptor?? [ 168.051002][ T5834] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 168.260136][ T44] usb 5-1: USB disconnect, device number 9 [ 168.285302][ T5834] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 168.339389][ T5834] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 168.520553][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 168.722015][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 168.723286][ T5931] usb 3-1: USB disconnect, device number 8 [ 168.783274][ T5931] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 168.798087][ T5931] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 168.811345][ T5931] quatech2 3-1:0.51: device disconnected [ 169.452274][ T5905] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 169.587689][ T8057] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 169.621568][ T5905] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 169.641220][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.666679][ T5905] usb 5-1: config 0 descriptor?? [ 169.686569][ T5905] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 169.746656][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.759405][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.777902][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.794547][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.804229][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.891490][ T5905] gp8psk: usb in 128 operation failed. [ 169.934375][ T5905] gp8psk: usb in 137 operation failed. [ 169.959059][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.993676][ T5905] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 170.057015][ T5905] usb 5-1: media controller created [ 170.165148][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.214820][ T5905] gp8psk_fe: Frontend attached [ 170.221644][ T5905] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 170.233333][ T5905] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 170.314385][ T5905] gp8psk: usb in 138 operation failed. [ 170.330862][ T5905] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 170.360380][ T5905] gp8psk: found Genpix USB device pID = 203 (hex) [ 170.391422][ T5905] usb 5-1: USB disconnect, device number 10 [ 170.430970][ T8058] chnl_net:caif_netlink_parms(): no params data found [ 170.547244][ T5905] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 170.598658][ T8078] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 170.802769][ T8058] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.819876][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.837521][ T8058] bridge_slave_0: entered allmulticast mode [ 170.871063][ T8058] bridge_slave_0: entered promiscuous mode [ 170.883670][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.899195][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.906610][ T8058] bridge_slave_1: entered allmulticast mode [ 170.928609][ T8058] bridge_slave_1: entered promiscuous mode [ 171.064257][ T8058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.102668][ T8095] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 171.119016][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.128076][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.152326][ T8095] bridge0: entered allmulticast mode [ 171.177666][ T8058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.360997][ T8058] team0: Port device team_slave_0 added [ 171.401304][ T8058] team0: Port device team_slave_1 added [ 171.426795][ T8107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.474181][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.512857][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.544254][ T8058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.563533][ T8058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.570820][ T8058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.619108][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.633987][ T8058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.789519][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 171.801586][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.817870][ T8058] hsr_slave_0: entered promiscuous mode [ 171.823485][ T44] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 171.831097][ T44] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 171.860385][ T8058] hsr_slave_1: entered promiscuous mode [ 171.869171][ T5146] Bluetooth: hci5: command tx timeout [ 171.872384][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 171.876343][ T8058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.909068][ T8058] Cannot create hsr debugfs directory [ 171.916061][ T44] usb 2-1: Product: syz [ 171.924385][ T44] usb 2-1: Manufacturer: syz [ 171.947901][ T44] usb 2-1: SerialNumber: syz [ 172.000237][ T44] usb 2-1: config 0 descriptor?? [ 172.255154][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.928'. [ 172.293835][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.928'. [ 172.334687][ T44] usb 2-1: USB disconnect, device number 7 [ 172.428380][ T8058] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.449253][ T8058] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.463289][ T8058] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.486768][ T8058] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 172.622906][ T8147] netlink: 104 bytes leftover after parsing attributes in process `syz.4.934'. [ 172.649184][ T5879] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 172.736855][ T8058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.802996][ T8058] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.814171][ T5879] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.839219][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 172.854038][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.856156][ T5879] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 172.862417][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.888792][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.889226][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.896005][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.950169][ T5879] usb 3-1: config 0 descriptor?? [ 173.142235][ T3013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.266825][ T3013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.365997][ T3013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.398301][ T5879] corsair-cpro 0003:1B1C:1D00.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.2-1/input0 [ 173.498740][ T5879] corsair-cpro 0003:1B1C:1D00.000A: probe with driver corsair-cpro failed with error -38 [ 173.540637][ T3013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.628748][ T5879] usb 3-1: USB disconnect, device number 9 [ 173.748113][ T8058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.959087][ T5146] Bluetooth: hci5: command tx timeout [ 173.992033][ T3013] bridge_slave_1: left allmulticast mode [ 174.039080][ T3013] bridge_slave_1: left promiscuous mode [ 174.060698][ T3013] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.110616][ T8173] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 174.124985][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 174.134140][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 174.142785][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 174.182498][ T3013] bridge_slave_0: left allmulticast mode [ 174.188215][ T3013] bridge_slave_0: left promiscuous mode [ 174.195498][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 174.219736][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.243840][ T3013] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.553064][ T8183] netlink: 5 bytes leftover after parsing attributes in process `syz.4.948'. [ 174.573841][ T8183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.982953][ T3013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.998831][ T3013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.016110][ T3013] bond0 (unregistering): Released all slaves [ 175.139107][ T5905] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 175.322371][ T5905] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 175.331511][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.343852][ T5905] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 175.353189][ T5905] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 175.362186][ T5905] usb 2-1: Manufacturer: syz [ 175.370132][ T5905] usb 2-1: config 0 descriptor?? [ 175.519258][ T5905] rc_core: IR keymap rc-hauppauge not found [ 175.525237][ T5905] Registered IR keymap rc-empty [ 175.548706][ T5905] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 175.595205][ T5905] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 175.617552][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 175.620483][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 175.645475][ T5905] usb 2-1: USB disconnect, device number 8 [ 175.733827][ T8058] veth0_vlan: entered promiscuous mode [ 175.788422][ T3013] hsr_slave_0: left promiscuous mode [ 175.807059][ T3013] hsr_slave_1: left promiscuous mode [ 175.815025][ T3013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.830048][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.838609][ T3013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.846254][ T3013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.900793][ T3013] veth1_macvtap: left promiscuous mode [ 175.907087][ T3013] veth0_macvtap: left promiscuous mode [ 175.913574][ T3013] veth1_vlan: left promiscuous mode [ 175.922926][ T3013] veth0_vlan: left promiscuous mode [ 176.029179][ T5830] Bluetooth: hci5: command tx timeout [ 176.207628][ T8221] trusted_key: syz.4.964 sent an empty control message without MSG_MORE. [ 176.269408][ T5830] Bluetooth: hci3: command tx timeout [ 176.908964][ T3013] team0 (unregistering): Port device team_slave_1 removed [ 176.978234][ T3013] team0 (unregistering): Port device team_slave_0 removed [ 177.219309][ T44] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 177.399049][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 177.408569][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.422728][ T8058] veth1_vlan: entered promiscuous mode [ 177.447102][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.469060][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 177.484761][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.498026][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.521813][ T44] usb 3-1: config 0 descriptor?? [ 177.699832][ T8058] veth0_macvtap: entered promiscuous mode [ 177.717969][ T8058] veth1_macvtap: entered promiscuous mode [ 177.789859][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.825562][ T8256] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 177.852679][ T5834] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 177.860898][ T8058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.902985][ T8058] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.922238][ T8058] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.942433][ T8058] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.960257][ T8058] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.965847][ T44] microsoft 0003:045E:07DA.000B: unknown main item tag 0x1 [ 177.981221][ T44] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 177.998307][ T44] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 178.022434][ T8174] chnl_net:caif_netlink_parms(): no params data found [ 178.032969][ T44] microsoft 0003:045E:07DA.000B: no inputs found [ 178.044304][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 178.073734][ T44] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 178.095080][ T5834] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 178.109339][ T5830] Bluetooth: hci5: command tx timeout [ 178.120875][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.129597][ T5834] usb 5-1: Product: syz [ 178.133812][ T5834] usb 5-1: Manufacturer: syz [ 178.138445][ T5834] usb 5-1: SerialNumber: syz [ 178.146838][ T5834] usb 5-1: config 0 descriptor?? [ 178.180238][ T44] usb 3-1: USB disconnect, device number 10 [ 178.350658][ T5830] Bluetooth: hci3: command tx timeout [ 178.385350][ T5834] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 178.516532][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.540319][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.556119][ T8174] bridge_slave_0: entered allmulticast mode [ 178.568527][ T8174] bridge_slave_0: entered promiscuous mode [ 178.601546][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.612173][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.620436][ T8174] bridge_slave_1: entered allmulticast mode [ 178.628788][ T8174] bridge_slave_1: entered promiscuous mode [ 178.750329][ T8174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.767976][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.785279][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.796946][ T8174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.803635][ T5834] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 178.825299][ T5834] usb 5-1: USB disconnect, device number 11 [ 178.836137][ T8279] netlink: 11 bytes leftover after parsing attributes in process `syz.2.984'. [ 178.905141][ T8174] team0: Port device team_slave_0 added [ 178.917351][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.931011][ T8174] team0: Port device team_slave_1 added [ 178.938760][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.999531][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.006552][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.043380][ T8174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.063639][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.077735][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.108682][ T8174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.211518][ T8174] hsr_slave_0: entered promiscuous mode [ 179.218468][ T8174] hsr_slave_1: entered promiscuous mode [ 179.232620][ T8174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.244398][ T8174] Cannot create hsr debugfs directory [ 179.612576][ T8174] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 179.628308][ T8174] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 179.635483][ T24] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 179.663226][ T8174] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 179.684568][ T8174] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 179.792869][ T24] usb 3-1: config 0 has no interfaces? [ 179.798726][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.829212][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.916172][ T8174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.929789][ T24] usb 3-1: config 0 descriptor?? [ 179.958270][ T8174] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.984568][ T3013] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.991804][ T3013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.010458][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.017696][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.185920][ T5931] usb 3-1: USB disconnect, device number 11 [ 180.308927][ T8174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.429628][ T5830] Bluetooth: hci3: command tx timeout [ 180.684141][ T8174] veth0_vlan: entered promiscuous mode [ 180.696081][ T8174] veth1_vlan: entered promiscuous mode [ 180.741527][ T8174] veth0_macvtap: entered promiscuous mode [ 180.754096][ T8174] veth1_macvtap: entered promiscuous mode [ 180.786096][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.799784][ T5931] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 180.818622][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.841518][ T8174] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.850519][ T8174] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.863356][ T8174] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.878691][ T8174] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.970771][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 180.993169][ T5931] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 181.012768][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.045318][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.065453][ T5931] pvrusb2: Hardware description: Terratec Grabster AV400 [ 181.071554][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.080251][ T5931] pvrusb2: ********** [ 181.084294][ T5931] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 181.121329][ T5931] pvrusb2: Important functionality might not be entirely working. [ 181.140259][ T5931] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 181.169576][ T5931] pvrusb2: ********** [ 181.192432][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.210468][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.266583][ T2347] pvrusb2: Invalid write control endpoint [ 181.386027][ T2347] pvrusb2: Invalid write control endpoint [ 181.399827][ T8340] bpf: Bad value for 'uid' [ 181.409095][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 181.438770][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 181.453678][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 181.486200][ T2347] pvrusb2: Device being rendered inoperable [ 181.494825][ T8321] pvrusb2: Attempted to execute control transfer when device not ok [ 181.520963][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 181.529305][ T5879] usb 6-1: USB disconnect, device number 2 [ 181.538394][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 181.559742][ T2347] pvrusb2: Attached sub-driver cx25840 [ 181.565272][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 181.595512][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 181.733133][ T5931] kernel write not supported for file /snd/midiC2D0 (pid: 5931 comm: kworker/0:6) [ 181.979688][ T30] audit: type=1804 audit(1749266920.177:97): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1013" name="/newroot/5/bus" dev="tmpfs" ino=44 res=1 errno=0 [ 182.321240][ T8377] loop6: detected capacity change from 0 to 524287999 [ 182.336592][ T8377] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.353648][ T8377] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.362111][ T8377] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.370971][ T8377] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.379102][ T8377] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.387208][ T8377] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.395819][ T8377] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.404030][ T8377] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.412583][ T8377] ldm_validate_partition_table(): Disk read failed. [ 182.419831][ T8377] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.427786][ T8377] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.437741][ T8377] Dev loop6: unable to read RDB block 0 [ 182.445226][ T8377] loop6: unable to read partition table [ 182.451826][ T8377] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 182.499673][ T5905] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 182.501209][ T8383] pim6reg: entered allmulticast mode [ 182.513177][ T5830] Bluetooth: hci3: command tx timeout [ 182.526529][ T8382] pim6reg: left allmulticast mode [ 182.679351][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 182.693784][ T5905] usb 6-1: config 0 has no interfaces? [ 182.714095][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 182.737726][ T5905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 182.768729][ T5905] usb 6-1: Manufacturer: syz [ 182.807353][ T5905] usb 6-1: config 0 descriptor?? [ 183.085821][ T5879] usb 6-1: USB disconnect, device number 3 [ 183.247187][ T8408] loop4: detected capacity change from 0 to 524255232 [ 183.299156][ T8408] Invalid logical block size (3) [ 183.586983][ T8419] input: syz0 as /devices/virtual/input/input11 [ 184.018125][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 184.028027][ T8433] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1045'. [ 184.037228][ T8433] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1045'. [ 184.046961][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 184.621628][ T8453] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1054'. [ 184.627940][ T8454] loop6: detected capacity change from 0 to 524287999 [ 184.957874][ T8467] input: syz1 as /devices/virtual/input/input12 [ 187.502443][ T8568] cifs: Unknown parameter 'mode' [ 188.539968][ T8617] netlink: 'syz.5.1130': attribute type 1 has an invalid length. [ 188.566065][ T8617] netlink: 'syz.5.1130': attribute type 4 has an invalid length. [ 188.593512][ T8617] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1130'. [ 189.815637][ T8670] netlink: 'syz.4.1155': attribute type 14 has an invalid length. [ 190.992769][ T8718] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1175'. [ 191.013849][ T8718] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1175'. [ 191.057146][ T5830] Bluetooth: hci4: link tx timeout [ 191.062434][ T5830] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 191.849956][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1180'. [ 192.359320][ T5879] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 192.370249][ T5825] kernel write not supported for file /zero (pid: 5825 comm: kworker/1:3) [ 192.419308][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 192.472091][ T5931] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 192.519101][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 192.534206][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.550255][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.560529][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.574378][ T5879] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.579402][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 192.583929][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.602541][ T5879] usb 3-1: config 0 descriptor?? [ 192.617712][ T24] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 192.627211][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.635672][ T24] usb 6-1: Product: syz [ 192.640148][ T24] usb 6-1: Manufacturer: syz [ 192.644789][ T24] usb 6-1: SerialNumber: syz [ 192.650416][ T5931] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 192.654340][ T24] r8152-cfgselector 6-1: Unknown version 0x0000 [ 192.666236][ T24] r8152-cfgselector 6-1: config 0 descriptor?? [ 192.667426][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.705506][ T5931] usb 7-1: config 0 descriptor?? [ 192.718136][ T5931] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 192.898823][ T24] r8152-cfgselector 6-1: Needed 2 retries to read version [ 192.912712][ T24] r8152-cfgselector 6-1: Unknown version 0x0000 [ 192.919608][ T24] r8152-cfgselector 6-1: bad CDC descriptors [ 192.933996][ T5931] gp8psk: usb in 128 operation failed. [ 192.940719][ T5931] gp8psk: usb in 137 operation failed. [ 192.947156][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.958910][ T5931] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 192.967691][ T5931] usb 7-1: media controller created [ 192.996760][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.019768][ T5879] microsoft 0003:045E:07DA.000C: unknown main item tag 0x6 [ 193.027059][ T5879] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.039496][ T5931] gp8psk_fe: Frontend attached [ 193.044376][ T5931] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 193.052415][ T5879] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.059982][ T5931] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 193.071867][ T5879] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 193.079720][ T5879] microsoft 0003:045E:07DA.000C: report is too long [ 193.086394][ T5879] microsoft 0003:045E:07DA.000C: item 0 4 0 9 parsing failed [ 193.110744][ T5879] microsoft 0003:045E:07DA.000C: parse failed [ 193.116998][ T5879] microsoft 0003:045E:07DA.000C: probe with driver microsoft failed with error -22 [ 193.149354][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 193.183106][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 193.191572][ T5931] gp8psk: usb in 138 operation failed. [ 193.200619][ T5931] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 193.215019][ T5931] gp8psk: found Genpix USB device pID = 203 (hex) [ 193.228933][ T5931] usb 7-1: USB disconnect, device number 2 [ 193.337605][ T5825] usb 3-1: USB disconnect, device number 12 [ 193.358772][ T5931] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 193.377951][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.397472][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.412417][ T44] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 193.424502][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.437569][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.445837][ T24] usb 5-1: SerialNumber: syz [ 193.667374][ T24] usb 5-1: 0:2 : does not exist [ 193.745954][ T24] usb 5-1: USB disconnect, device number 12 [ 194.139224][ T5931] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 194.301171][ T8798] veth1_macvtap: left promiscuous mode [ 194.332234][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 194.343277][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 194.361454][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.367803][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.389333][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 194.469251][ T5931] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 194.489239][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.497342][ T5931] usb 6-1: Product: syz [ 194.541807][ T5931] usb 6-1: Manufacturer: syz [ 194.546491][ T5931] usb 6-1: SerialNumber: syz [ 194.578013][ T5931] usb 6-1: config 0 descriptor?? [ 194.869558][ T5931] appledisplay 6-1:0.0: Error while getting initial brightness: -110 [ 194.920874][ T5931] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110 [ 194.970057][ T5146] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.992864][ T5146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 195.001399][ T5146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 195.010654][ T5146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 195.018433][ T5146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 195.247197][ T8825] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1211'. [ 195.529227][ T10] usb 6-1: USB disconnect, device number 5 [ 196.133871][ T8816] chnl_net:caif_netlink_parms(): no params data found [ 196.211746][ T8854] serio: Serial port ttynull [ 196.465384][ T8816] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.473330][ T8816] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.482415][ T8816] bridge_slave_0: entered allmulticast mode [ 196.506529][ T8866] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1222'. [ 196.516966][ T8816] bridge_slave_0: entered promiscuous mode [ 196.534115][ T8816] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.548328][ T8816] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.570950][ T8816] bridge_slave_1: entered allmulticast mode [ 196.596510][ T8816] bridge_slave_1: entered promiscuous mode [ 196.731308][ T8816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.758510][ T8816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.958794][ T8816] team0: Port device team_slave_0 added [ 196.997227][ T8816] team0: Port device team_slave_1 added [ 197.069610][ T5146] Bluetooth: hci6: command tx timeout [ 197.305404][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.341353][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.429145][ T8816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.461501][ T8816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.468514][ T8816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.569084][ T8816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.849287][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 198.009181][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 198.034995][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.120691][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 198.150141][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.177517][ T8816] hsr_slave_0: entered promiscuous mode [ 198.185551][ T10] usb 7-1: config 0 descriptor?? [ 198.207791][ T8816] hsr_slave_1: entered promiscuous mode [ 198.221812][ T8816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.252875][ T8816] Cannot create hsr debugfs directory [ 198.669567][ T10] logitech-djreceiver 0003:046D:C513.000D: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.6-1/input0 [ 198.872299][ T10] usb 7-1: USB disconnect, device number 3 [ 198.938463][ T8927] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 199.034055][ T8816] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 199.088682][ T8816] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 199.140324][ T8816] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 199.152718][ T5146] Bluetooth: hci6: command tx timeout [ 199.185001][ T8816] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 199.441803][ T8816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.506892][ T8816] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.579995][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.587238][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.663237][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.670528][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.033536][ T8973] input: syz0 as /devices/virtual/input/input13 [ 200.130238][ T8979] overlayfs: missing 'workdir' [ 200.349808][ T44] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 200.529299][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 200.555698][ T44] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 200.560118][ T8816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.582979][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.612211][ T44] usb 5-1: Product: syz [ 200.633340][ T44] usb 5-1: Manufacturer: syz [ 200.659217][ T44] usb 5-1: SerialNumber: syz [ 200.685621][ T44] usb 5-1: config 0 descriptor?? [ 200.727231][ T44] gspca_main: se401-2.14.0 probing 047d:5003 [ 201.145783][ T44] gspca_se401: Too many frame sizes [ 201.232973][ T5146] Bluetooth: hci6: command tx timeout [ 201.360559][ T5892] usb 5-1: USB disconnect, device number 13 [ 201.390200][ T5825] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 201.529119][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 201.536094][ T8816] veth0_vlan: entered promiscuous mode [ 201.551239][ T5825] usb 7-1: Using ep0 maxpacket: 16 [ 201.565854][ T8816] veth1_vlan: entered promiscuous mode [ 201.583274][ T5825] usb 7-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=7f.76 [ 201.608069][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.629504][ T5825] usb 7-1: Product: syz [ 201.633744][ T5825] usb 7-1: Manufacturer: syz [ 201.638384][ T5825] usb 7-1: SerialNumber: syz [ 201.655351][ T8816] veth0_macvtap: entered promiscuous mode [ 201.666565][ T5825] usb 7-1: config 0 descriptor?? [ 201.677123][ T8816] veth1_macvtap: entered promiscuous mode [ 201.710048][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 201.717989][ T24] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 201.727289][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.735247][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.760334][ T24] usb 6-1: config 0 descriptor?? [ 201.767551][ T8816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.802220][ T8816] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.814044][ T8816] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.823749][ T8816] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.832947][ T8816] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.899219][ T5825] usb 7-1: ignoring: not an USB2CAN converter [ 201.989243][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 202.004964][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.044235][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 202.057542][ T24] usb 6-1: media controller created [ 202.099105][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.114097][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.136196][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.186768][ T9022] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 202.216811][ T24] az6027: usb out operation failed. (-71) [ 202.227981][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.237779][ T24] az6027: usb out operation failed. (-71) [ 202.244585][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.244833][ T24] stb0899_attach: Driver disabled by Kconfig [ 202.261210][ T24] az6027: no front-end attached [ 202.261210][ T24] [ 202.280662][ T24] az6027: usb out operation failed. (-71) [ 202.286618][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 202.306523][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14 [ 202.331025][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 202.338885][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 202.370618][ T24] usb 6-1: USB disconnect, device number 6 [ 202.465001][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 202.598679][ T10] usb 7-1: USB disconnect, device number 4 [ 203.219267][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 203.311954][ T5146] Bluetooth: hci6: command tx timeout [ 203.403688][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 203.430022][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.462569][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.514068][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.554490][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.585104][ T10] usb 6-1: Product: syz [ 203.599178][ T10] usb 6-1: Manufacturer: syz [ 203.620396][ T10] usb 6-1: SerialNumber: syz [ 203.889379][ T10] usb 6-1: 0:2 : does not exist [ 203.960907][ T10] usb 6-1: USB disconnect, device number 7 [ 204.781226][ T9115] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.1310'. [ 205.289129][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 205.309881][ T5931] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 205.465857][ T24] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 205.471221][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 205.489057][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.497265][ T5931] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 205.497296][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.510816][ T5931] usb 6-1: config 0 descriptor?? [ 205.532947][ T5931] gspca_main: sunplus-2.14.0 probing 041e:400b [ 205.550336][ T24] usb 7-1: config 0 descriptor?? [ 205.562985][ T24] cp210x 7-1:0.0: cp210x converter detected [ 205.968216][ T24] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 206.005284][ T24] usb 7-1: cp210x converter now attached to ttyUSB0 [ 206.122247][ T30] audit: type=1326 audit(1749266944.327:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9148 comm="syz.4.1325" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97f298e929 code=0x0 [ 206.213732][ T5879] usb 7-1: USB disconnect, device number 5 [ 206.228827][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 206.252507][ T5879] cp210x 7-1:0.0: device disconnected [ 206.366739][ T5931] gspca_sunplus: reg_r err -71 [ 206.372640][ T5931] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 206.382562][ T5931] usb 6-1: USB disconnect, device number 8 [ 207.369142][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 207.542024][ T24] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.548222][ T13] Bluetooth: hci7: Frame reassembly failed (-84) [ 207.562908][ T24] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 207.573218][ T9193] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 207.581402][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.619176][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.646143][ T9174] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 207.653911][ T44] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 207.681701][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.813807][ T44] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.831350][ T44] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.850045][ T44] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 207.865747][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 207.884265][ T44] usb 7-1: SerialNumber: syz [ 207.893802][ T9200] xt_hashlimit: size too large, truncated to 1048576 [ 207.940116][ T24] usb 6-1: USB disconnect, device number 9 [ 207.960531][ T9202] : renamed from bridge_slave_0 (while UP) [ 208.112300][ T44] usb 7-1: 0:2 : does not exist [ 208.176533][ T44] usb 7-1: USB disconnect, device number 6 [ 208.347013][ T30] audit: type=1326 audit(1749266946.547:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9207 comm="syz.7.1351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b39b8e929 code=0x0 [ 208.582995][ T9212] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1352'. [ 208.597423][ T9212] gretap0: entered promiscuous mode [ 208.634266][ T9213] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1352'. [ 208.661759][ T9213] 0{X: renamed from gretap0 [ 208.704424][ T9213] 0{X: left promiscuous mode [ 208.726100][ T9213] 0{X: entered allmulticast mode [ 208.736335][ T9213] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 209.161004][ T9235] syzkaller1: entered promiscuous mode [ 209.166811][ T9235] syzkaller1: entered allmulticast mode [ 209.549612][ T5146] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 210.279135][ T5905] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 210.309058][ T5931] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 210.463175][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 210.471503][ T5905] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 210.480196][ T5905] usb 5-1: config 0 has no interface number 0 [ 210.488003][ T5931] usb 6-1: config 0 has an invalid interface number: 224 but max is 0 [ 210.519174][ T5931] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.537663][ T5931] usb 6-1: config 0 has no interface number 0 [ 210.550807][ T5931] usb 6-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 210.560252][ T5905] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 210.571183][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.582583][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.591028][ T5931] usb 6-1: Product: syz [ 210.595316][ T5931] usb 6-1: Manufacturer: syz [ 210.600030][ T5905] usb 5-1: Product: syz [ 210.609146][ T5931] usb 6-1: SerialNumber: syz [ 210.615211][ T5905] usb 5-1: Manufacturer: syz [ 210.627283][ T5905] usb 5-1: SerialNumber: syz [ 210.633067][ T5931] usb 6-1: config 0 descriptor?? [ 210.645129][ T5905] usb 5-1: config 0 descriptor?? [ 210.653071][ T5931] ldusb 6-1:0.224: Interrupt in endpoint not found [ 210.678495][ T5905] smsc95xx v2.0.0 [ 210.740154][ T9284] netlink: 788 bytes leftover after parsing attributes in process `syz.6.1385'. [ 210.857100][ T5931] usb 6-1: USB disconnect, device number 10 [ 211.094686][ T9292] bridge0: entered promiscuous mode [ 211.100808][ T5905] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 211.112557][ T9292] macvlan2: entered promiscuous mode [ 211.121074][ T5905] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 211.145170][ T9292] macvlan3: entered promiscuous mode [ 211.557135][ T5905] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 211.571112][ T9305] overlayfs: failed to clone upperpath [ 211.590175][ T5905] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 211.622193][ T5905] usb 5-1: USB disconnect, device number 14 [ 211.796886][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 211.804009][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 211.810131][ T5826] Bluetooth: hci2: command 0x0406 tx timeout [ 212.136415][ T9327] loop6: detected capacity change from 0 to 63 [ 212.173203][ T9327] buffer_io_error: 6 callbacks suppressed [ 212.173223][ T9327] Buffer I/O error on dev loop6, logical block 0, async page read [ 212.214719][ T9327] Buffer I/O error on dev loop6, logical block 1, async page read [ 212.232431][ T9327] Buffer I/O error on dev loop6, logical block 2, async page read [ 212.258840][ T9327] Buffer I/O error on dev loop6, logical block 3, async page read [ 212.267586][ T9333] syz.6.1407 uses obsolete (PF_INET,SOCK_PACKET) [ 212.284530][ T9327] Buffer I/O error on dev loop6, logical block 0, async page read [ 212.334572][ T9327] Buffer I/O error on dev loop6, logical block 1, async page read [ 212.354371][ T9327] Buffer I/O error on dev loop6, logical block 2, async page read [ 212.368749][ T9327] Buffer I/O error on dev loop6, logical block 3, async page read [ 212.381570][ T9327] Buffer I/O error on dev loop6, logical block 0, async page read [ 212.395233][ T9327] Buffer I/O error on dev loop6, logical block 1, async page read [ 213.059464][ T5905] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 213.250168][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 213.268478][ T5905] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 213.293447][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.320366][ T5905] usb 5-1: config 0 descriptor?? [ 213.332137][ T5905] gspca_main: sunplus-2.14.0 probing 041e:400b [ 214.137385][ T5905] gspca_sunplus: reg_w_riv err -71 [ 214.144962][ T5905] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 214.161061][ T5905] usb 5-1: USB disconnect, device number 15 [ 214.249288][ T5825] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 214.409310][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 214.439265][ T5825] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 214.448712][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.468847][ T5825] usb 6-1: Product: syz [ 214.473431][ T5825] usb 6-1: Manufacturer: syz [ 214.478066][ T5825] usb 6-1: SerialNumber: syz [ 214.502461][ T5825] usb 6-1: config 0 descriptor?? [ 214.521725][ T5825] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 214.993454][ T9447] openvswitch: netlink: IPv4 tun info is not correct [ 215.065318][ T24] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 215.110421][ T24] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.436632][ T9462] syzkaller1: entered promiscuous mode [ 215.459160][ T9462] syzkaller1: entered allmulticast mode [ 215.556681][ T44] usb 6-1: USB disconnect, device number 11 [ 216.753304][ T9497] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1482'. [ 216.753342][ T9497] netlink: 'syz.5.1482': attribute type 7 has an invalid length. [ 216.753359][ T9497] netlink: 'syz.5.1482': attribute type 8 has an invalid length. [ 216.753373][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1482'. [ 216.791144][ T9497] erspan0: entered promiscuous mode [ 216.792412][ T9497] 0{X: entered promiscuous mode [ 216.829789][ T9497] erspan0: left promiscuous mode [ 216.831333][ T9497] 0{X: left promiscuous mode [ 217.244005][ T9517] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1490'. [ 217.253340][ T9517] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1490'. [ 217.272444][ T9520] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1491'. [ 217.349247][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 217.532319][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 217.557548][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.585166][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.605416][ T10] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 217.620399][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.630586][ T9531] vxcan3: entered allmulticast mode [ 217.670039][ T10] usb 6-1: Product: syz [ 217.674304][ T10] usb 6-1: Manufacturer: syz [ 217.707172][ T10] usb 6-1: SerialNumber: syz [ 217.728667][ T10] usb 6-1: config 0 descriptor?? [ 217.952333][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 217.966446][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 217.990733][ T10] usb 6-1: USB disconnect, device number 12 [ 218.024924][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1503'. [ 219.115039][ T9571] "syz.4.1510" (9571) uses obsolete ecb(arc4) skcipher [ 219.533498][ T9602] veth0_to_bond: entered promiscuous mode [ 219.545689][ T9602] veth0_to_bond: left promiscuous mode [ 219.676528][ T9605] 9pnet: p9_errstr2errno: server reported unknown error @ [ 220.275268][ T30] audit: type=1326 audit(1749266958.477:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9621 comm="syz.7.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b39b8e929 code=0x7fc00000 [ 220.311583][ T30] audit: type=1326 audit(1749266958.477:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9621 comm="syz.7.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b39b8e929 code=0x7fc00000 [ 220.365107][ T30] audit: type=1326 audit(1749266958.477:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9621 comm="syz.7.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b39b8e929 code=0x7fc00000 [ 220.415618][ T30] audit: type=1326 audit(1749266958.477:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9621 comm="syz.7.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b39b8e929 code=0x7fc00000 [ 220.442019][ T30] audit: type=1326 audit(1749266958.477:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9621 comm="syz.7.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b39b8e929 code=0x7fc00000 [ 220.474617][ T30] audit: type=1326 audit(1749266958.477:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9621 comm="syz.7.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b39b8e929 code=0x7fc00000 [ 220.501892][ T30] audit: type=1326 audit(1749266958.477:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9621 comm="syz.7.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b39b8e929 code=0x7fc00000 [ 220.523482][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.530299][ T30] audit: type=1326 audit(1749266958.477:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9621 comm="syz.7.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b39b8e929 code=0x7fc00000 [ 220.562413][ T30] audit: type=1326 audit(1749266958.477:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9621 comm="syz.7.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b39b8e929 code=0x7fc00000 [ 220.621587][ T30] audit: type=1326 audit(1749266958.477:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9621 comm="syz.7.1533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b39b8e929 code=0x7fc00000 [ 220.643177][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.837452][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 221.880414][ T5831] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 327.328942][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 327.336011][ C0] rcu: 1-...!: (1 GPs behind) idle=bbdc/1/0x4000000000000000 softirq=37535/37536 fqs=0 [ 327.346771][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9686/1:b..l [ 327.354734][ C0] rcu: (detected by 0, t=10506 jiffies, g=33041, q=237 ncpus=2) [ 327.362496][ C0] Sending NMI from CPU 0 to CPUs 1: [ 327.362536][ C1] NMI backtrace for cpu 1 [ 327.362568][ C1] CPU: 1 UID: 0 PID: 9677 Comm: syz.5.1558 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 327.362589][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.362602][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 327.362633][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 64 d9 f8 0b 48 89 de 5b e9 23 84 56 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 a0 99 92 65 8b 15 48 55 [ 327.362648][ C1] RSP: 0018:ffffc90000a08c68 EFLAGS: 00000002 [ 327.362662][ C1] RAX: ffffffff897e79bb RBX: 0000000000000001 RCX: 0000000000010000 [ 327.362674][ C1] RDX: ffff888035903c00 RSI: 0000000000000001 RDI: 0000000000000000 [ 327.362685][ C1] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 327.362695][ C1] R10: dffffc0000000000 R11: fffff5200014117c R12: ffff888029e2c340 [ 327.362707][ C1] R13: ffff888029e2c000 R14: dffffc0000000000 R15: ffff88805a07b800 [ 327.362720][ C1] FS: 0000000000000000(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 327.362734][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 327.362746][ C1] CR2: 00007f5cc8c7df98 CR3: 0000000030fea000 CR4: 00000000003526f0 [ 327.362761][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 327.362771][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 327.362782][ C1] Call Trace: [ 327.362793][ C1] [ 327.362801][ C1] advance_sched+0x178/0xc90 [ 327.362829][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 327.362854][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 327.362883][ C1] ? __pfx_advance_sched+0x10/0x10 [ 327.362904][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 327.362942][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 327.362965][ C1] ? read_tsc+0x9/0x20 [ 327.362989][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 327.363029][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 327.363057][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 327.363083][ C1] [ 327.363089][ C1] [ 327.363097][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 327.363121][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 327.363144][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 2b 7b fb 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 327.363158][ C1] RSP: 0018:ffffc900176474b8 EFLAGS: 00000206 [ 327.363172][ C1] RAX: 1330e3be72c49f00 RBX: 0000000000000000 RCX: 1330e3be72c49f00 [ 327.363184][ C1] RDX: 0000000000000000 RSI: ffffffff8db59968 RDI: ffffffff8be1afc0 [ 327.363203][ C1] RBP: ffffffff822cc52a R08: 0000000000000000 R09: ffffffff822cc52a [ 327.363215][ C1] R10: dffffc0000000000 R11: fffff94000392251 R12: 0000000000000002 [ 327.363226][ C1] R13: ffffffff8e13f120 R14: 0000000000000000 R15: 0000000000000246 [ 327.363240][ C1] ? pfn_valid+0xba/0x490 [ 327.363269][ C1] ? pfn_valid+0xba/0x490 [ 327.363300][ C1] ? __folio_rmap_sanity_checks+0x30d/0x700 [ 327.363318][ C1] ? pfn_valid+0xba/0x490 [ 327.363346][ C1] pfn_valid+0xd6/0x490 [ 327.363367][ C1] ? pfn_valid+0xba/0x490 [ 327.363389][ C1] page_table_check_clear+0x21/0x700 [ 327.363411][ C1] ? vm_normal_page+0xb7/0x230 [ 327.363437][ C1] unmap_page_range+0x3249/0x41c0 [ 327.363497][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 327.363529][ C1] ? unmap_vmas+0x144/0x580 [ 327.363556][ C1] unmap_vmas+0x399/0x580 [ 327.363586][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 327.363626][ C1] exit_mmap+0x248/0xb50 [ 327.363648][ C1] ? uprobe_clear_state+0x20f/0x290 [ 327.363672][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 327.363691][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 327.363715][ C1] ? __pfx_exit_aio+0x10/0x10 [ 327.363746][ C1] ? uprobe_clear_state+0x274/0x290 [ 327.363766][ C1] ? mm_update_next_owner+0xa7/0x870 [ 327.363787][ C1] __mmput+0x118/0x420 [ 327.363813][ C1] exit_mm+0x1da/0x2c0 [ 327.363832][ C1] ? __pfx_exit_mm+0x10/0x10 [ 327.363852][ C1] ? rcu_is_watching+0x15/0xb0 [ 327.363878][ C1] do_exit+0x640/0x22e0 [ 327.363900][ C1] ? preempt_schedule_common+0x83/0xd0 [ 327.363924][ C1] ? preempt_schedule+0xae/0xc0 [ 327.363946][ C1] ? __pfx_do_exit+0x10/0x10 [ 327.363968][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 327.363993][ C1] do_group_exit+0x21c/0x2d0 [ 327.364015][ C1] __x64_sys_exit_group+0x3f/0x40 [ 327.364034][ C1] x64_sys_call+0x21ba/0x21c0 [ 327.364050][ C1] do_syscall_64+0xfa/0x3b0 [ 327.364065][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 327.364090][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.364107][ C1] ? clear_bhb_loop+0x60/0xb0 [ 327.364127][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.364144][ C1] RIP: 0033:0x7ff21518e929 [ 327.364158][ C1] Code: Unable to access opcode bytes at 0x7ff21518e8ff. [ 327.364167][ C1] RSP: 002b:00007ffda0eab6f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 327.364183][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff21518e929 [ 327.364195][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 327.364205][ C1] RBP: 00007ffda0eab75c R08: 00000005a0eab7ef R09: 00000000000927c0 [ 327.364217][ C1] R10: 0000000000003fbc R11: 0000000000000246 R12: 000000000000005e [ 327.364228][ C1] R13: 00000000000927c0 R14: 0000000000036153 R15: 00007ffda0eab7b0 [ 327.364249][ C1] [ 327.364525][ C0] task:syz.6.1562 state:R running task stack:26856 pid:9686 tgid:9686 ppid:8174 task_flags:0x40004c flags:0x00004000 [ 327.906273][ C0] Call Trace: [ 327.909579][ C0] [ 327.912543][ C0] __schedule+0x16a2/0x4cb0 [ 327.917101][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 327.923038][ C0] ? preempt_schedule_common+0x83/0xd0 [ 327.928540][ C0] ? __pfx___schedule+0x10/0x10 [ 327.933464][ C0] ? preempt_schedule+0xae/0xc0 [ 327.938353][ C0] preempt_schedule_common+0x83/0xd0 [ 327.943679][ C0] preempt_schedule+0xae/0xc0 [ 327.948390][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 327.953795][ C0] ? __folio_rmap_sanity_checks+0x30d/0x700 [ 327.959727][ C0] preempt_schedule_thunk+0x16/0x30 [ 327.964961][ C0] _raw_spin_unlock+0x3f/0x50 [ 327.969669][ C0] unmap_page_range+0x3842/0x41c0 [ 327.974796][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 327.980221][ C0] ? unmap_vmas+0x144/0x580 [ 327.984869][ C0] unmap_vmas+0x399/0x580 [ 327.989259][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 327.994197][ C0] exit_mmap+0x248/0xb50 [ 327.998478][ C0] ? uprobe_clear_state+0x20f/0x290 [ 328.003713][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 328.008510][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 328.014187][ C0] ? __pfx_exit_aio+0x10/0x10 [ 328.018909][ C0] ? uprobe_clear_state+0x274/0x290 [ 328.024157][ C0] ? mm_update_next_owner+0xa7/0x870 [ 328.029489][ C0] __mmput+0x118/0x420 [ 328.033625][ C0] exit_mm+0x1da/0x2c0 [ 328.037733][ C0] ? __pfx_exit_mm+0x10/0x10 [ 328.042379][ C0] ? rcu_is_watching+0x15/0xb0 [ 328.047191][ C0] do_exit+0x640/0x22e0 [ 328.051384][ C0] ? preempt_schedule_common+0x83/0xd0 [ 328.056884][ C0] ? preempt_schedule+0xae/0xc0 [ 328.061770][ C0] ? __pfx_do_exit+0x10/0x10 [ 328.066398][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 328.071825][ C0] do_group_exit+0x21c/0x2d0 [ 328.076452][ C0] __x64_sys_exit_group+0x3f/0x40 [ 328.081509][ C0] x64_sys_call+0x21ba/0x21c0 [ 328.086211][ C0] do_syscall_64+0xfa/0x3b0 [ 328.090749][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.095982][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.102080][ C0] ? clear_bhb_loop+0x60/0xb0 [ 328.106786][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.112708][ C0] RIP: 0033:0x7f4bdf58e929 [ 328.117148][ C0] RSP: 002b:00007ffcaa3fa908 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 328.125610][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4bdf58e929 [ 328.133618][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 328.141630][ C0] RBP: 00007ffcaa3fa96c R08: 00000005aa3fa9ff R09: 00000000000927c0 [ 328.149628][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000088 [ 328.157712][ C0] R13: 00000000000927c0 R14: 0000000000035a6f R15: 00007ffcaa3fa9c0 [ 328.165733][ C0] [ 328.168779][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g33041 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 328.180085][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 328.190082][ C0] rcu: RCU grace-period kthread stack dump: [ 328.196007][ C0] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 328.209559][ C0] Call Trace: [ 328.212867][ C0] [ 328.215828][ C0] __schedule+0x16a2/0x4cb0 [ 328.220388][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 328.225632][ C0] ? schedule+0x165/0x360 [ 328.230005][ C0] ? __lock_acquire+0xab9/0xd20 [ 328.234893][ C0] ? __pfx___schedule+0x10/0x10 [ 328.239804][ C0] ? schedule+0x91/0x360 [ 328.244096][ C0] schedule+0x165/0x360 [ 328.248313][ C0] schedule_timeout+0x12b/0x270 [ 328.253234][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 328.258664][ C0] ? __pfx_process_timeout+0x10/0x10 [ 328.263994][ C0] ? prepare_to_swait_event+0x341/0x380 [ 328.269602][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 328.274519][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 328.279501][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.284742][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 328.290060][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 328.295307][ C0] ? finish_swait+0xcd/0x1f0 [ 328.300141][ C0] rcu_gp_kthread+0x99/0x390 [ 328.304783][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 328.310036][ C0] ? __kthread_parkme+0x7b/0x200 [ 328.315026][ C0] ? __kthread_parkme+0x1a1/0x200 [ 328.320107][ C0] kthread+0x70e/0x8a0 [ 328.324218][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 328.329543][ C0] ? __pfx_kthread+0x10/0x10 [ 328.334168][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.339403][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.344636][ C0] ? __pfx_kthread+0x10/0x10 [ 328.349274][ C0] ret_from_fork+0x3f9/0x770 [ 328.353908][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 328.359062][ C0] ? __switch_to_asm+0x39/0x70 [ 328.363851][ C0] ? __switch_to_asm+0x33/0x70 [ 328.368643][ C0] ? __pfx_kthread+0x10/0x10 [ 328.373272][ C0] ret_from_fork_asm+0x1a/0x30 [ 328.378098][ C0] [ 328.381153][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 328.387510][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-syzkaller-13526-g7a912d04415b #0 PREEMPT(full) [ 328.399180][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.409272][ C0] Workqueue: events_unbound toggle_allocation_gate [ 328.415819][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 328.422006][ C0] Code: 08 a0 99 92 65 8b 15 48 55 d9 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 3c 16 00 00 00 74 2c 8b 91 18 16 00 00 <83> fa 02 75 21 48 8b 91 20 16 00 00 48 8b 32 48 8d 7e 01 8b 89 1c [ 328.441642][ C0] RSP: 0018:ffffc90000117698 EFLAGS: 00000246 [ 328.447827][ C0] RAX: ffffffff81b4d6f0 RBX: ffff8880b863c9c0 RCX: ffff88801d295a00 [ 328.455825][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 328.463821][ C0] RBP: ffffc90000117800 R08: ffffffff8f9fe8f7 R09: 1ffffffff1f3fd1e [ 328.471815][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fd1f R12: 1ffff110170e825d [ 328.479815][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b87412e8 [ 328.487901][ C0] FS: 0000000000000000(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 328.496852][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.503457][ C0] CR2: 0000001b2fe1fffc CR3: 000000000df38000 CR4: 00000000003526f0 [ 328.511458][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 328.519449][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 328.527447][ C0] Call Trace: [ 328.530746][ C0] [ 328.533697][ C0] smp_call_function_many_cond+0xf80/0x12d0 [ 328.539651][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 328.546011][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 328.551408][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 328.557513][ C0] ? __pfx___text_poke+0x10/0x10 [ 328.562471][ C0] ? rcu_is_watching+0x15/0xb0 [ 328.567269][ C0] ? trace_contention_end+0x39/0x120 [ 328.572586][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 328.577633][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 328.582813][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 328.588649][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 328.593701][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 328.599977][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 328.606278][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 328.612288][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 328.618210][ C0] static_key_enable+0x1a/0x20 [ 328.623001][ C0] toggle_allocation_gate+0xad/0x240 [ 328.628318][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 328.634256][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 328.640016][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 328.645772][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 328.651527][ C0] process_scheduled_works+0xade/0x17b0 [ 328.657140][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 328.663176][ C0] worker_thread+0x8a0/0xda0 [ 328.667838][ C0] kthread+0x70e/0x8a0 [ 328.671938][ C0] ? __pfx_worker_thread+0x10/0x10 [ 328.677084][ C0] ? __pfx_kthread+0x10/0x10 [ 328.681701][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.686932][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.692162][ C0] ? __pfx_kthread+0x10/0x10 [ 328.696809][ C0] ret_from_fork+0x3f9/0x770 [ 328.701453][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 328.706617][ C0] ? __switch_to_asm+0x39/0x70 [ 328.711417][ C0] ? __switch_to_asm+0x33/0x70 [ 328.716207][ C0] ? __pfx_kthread+0x10/0x10 [ 328.720833][ C0] ret_from_fork_asm+0x1a/0x30 [ 328.725642][ C0]