last executing test programs: 2m21.042768865s ago: executing program 0 (id=2006): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) 2m20.642629172s ago: executing program 0 (id=2010): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0x1) 2m20.557187121s ago: executing program 0 (id=2012): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x11, r0, 0x23d40000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x8b7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4107, 0x100b}, 0x7ffffffe}], 0x1, 0x40002020, 0x0) 2m20.360091114s ago: executing program 0 (id=2014): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 2m20.110004517s ago: executing program 0 (id=2018): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x66842, 0x6010461ec2d2257d) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000340)='./file0\x00', 0x203) r2 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x4}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2m18.29583605s ago: executing program 2 (id=2026): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000280)={0xf7ffffffffffff7f, 0x5b81, 0xc2, 0xa27, 0x2, 0x9, 0x80000000000, 0x0, 0x404}) 2m18.199700619s ago: executing program 0 (id=2027): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6", 0xd}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af6757123", 0x1b}, {&(0x7f0000000580)="9f72594b895f71e832f1e535e6acce5e84caae161b5cbd296184344d3b3c", 0x1e}, {&(0x7f0000000c80)="c9730cacd7b487a5f1fcc788b619537a38659735adddc726f5ecaecf0aa9c274da3cbb81e6046b8a074da0f6b8de7cdbfca3fcc3aefb575f2dbcda57099dee80c1e643d5d5f9ec324389e08eb574325c84cc6f7aea615f276493371794259767cef9bb46e5da3cdbd7323c6bebfe6728f5d55d430cdf724552cafc99", 0x7c}], 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) dup2(0xffffffffffffffff, r0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="c8100b8210e864858a792e43", 0xc}], 0x1}}], 0x1, 0x2604082c) 2m18.098808209s ago: executing program 2 (id=2030): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280", 0x13}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)=""/6, 0x6}, {&(0x7f0000001080)=""/27, 0x1b}], 0x2}}], 0x1, 0x40000000, 0x0) 2m17.685987906s ago: executing program 32 (id=2027): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6", 0xd}, {&(0x7f0000000ec0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af6757123", 0x1b}, {&(0x7f0000000580)="9f72594b895f71e832f1e535e6acce5e84caae161b5cbd296184344d3b3c", 0x1e}, {&(0x7f0000000c80)="c9730cacd7b487a5f1fcc788b619537a38659735adddc726f5ecaecf0aa9c274da3cbb81e6046b8a074da0f6b8de7cdbfca3fcc3aefb575f2dbcda57099dee80c1e643d5d5f9ec324389e08eb574325c84cc6f7aea615f276493371794259767cef9bb46e5da3cdbd7323c6bebfe6728f5d55d430cdf724552cafc99", 0x7c}], 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) dup2(0xffffffffffffffff, r0) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="c8100b8210e864858a792e43", 0xc}], 0x1}}], 0x1, 0x2604082c) 2m17.671751367s ago: executing program 2 (id=2033): r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x441, 0x4800001a, r1, 0x0) fanotify_mark(r0, 0x1, 0x20, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) 2m17.430214826s ago: executing program 2 (id=2044): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)) 2m16.917031702s ago: executing program 2 (id=2039): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r1, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) 2m15.512802727s ago: executing program 2 (id=2051): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/83, 0xfedb}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x60000253) 2m14.882170975s ago: executing program 33 (id=2051): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/83, 0xfedb}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x60000253) 7.561566432s ago: executing program 3 (id=2919): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.677510943s ago: executing program 1 (id=2937): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x9) 4.103197841s ago: executing program 1 (id=2940): r0 = syz_io_uring_setup(0x95, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x20102, 0x0, 0x28}, &(0x7f0000000500)='./file0\x00', 0x18, 0x0, 0x0, {0x0, r3}}) setreuid(0x0, 0x0) io_uring_enter(r0, 0x4536, 0x6aaf, 0x0, 0x0, 0x0) 3.577905055s ago: executing program 1 (id=2943): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x100, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x61, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0xb, 0x0, 0x0, @fd=r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x834) 3.145966587s ago: executing program 1 (id=2947): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 2.147813695s ago: executing program 5 (id=2955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d", 0x5, 0x805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}], 0x1, 0x22, 0x0) 1.909873289s ago: executing program 5 (id=2958): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x90) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000400), 0x8, 0x10001) 1.323961536s ago: executing program 3 (id=2961): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.30020445s ago: executing program 6 (id=2962): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 1.069040659s ago: executing program 3 (id=2963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000000000000000000002000000010000000000000000000000000000009188e9"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.068676149s ago: executing program 6 (id=2964): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.068084034s ago: executing program 4 (id=2965): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 979.771493ms ago: executing program 1 (id=2966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000740)="e8700e444d50a969ffe44067006127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a61da0d50f5cb1ece9ead340900000000000000157653c5e892962c80f1140000000000006b8a21501f94c1568b13756b66f74f46cf801704d2da8b96", 0x83}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/95, 0x5f}, {&(0x7f0000000200)=""/68, 0x44}], 0x2}, 0x40002101) 964.83988ms ago: executing program 5 (id=2967): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 888.507267ms ago: executing program 4 (id=2968): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) 846.859199ms ago: executing program 6 (id=2969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31832abd70000000000019000000180001801400020065727370616e30"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 778.823953ms ago: executing program 5 (id=2970): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_256={{0x304}, "e9bb07f400", "7d376431316d2e069b245c4113b4a67cde08bf5fa87e53dda73856be09fd4e45", "68faa2b5", "ffffffffffffffff"}, 0x38) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20}, 0x8040) 763.677457ms ago: executing program 4 (id=2971): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 734.851402ms ago: executing program 1 (id=2972): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f40000000000"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 596.961233ms ago: executing program 6 (id=2973): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="fe", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x2000) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/55, 0x37}], 0x1}}], 0x2, 0x0, 0x0) 572.287213ms ago: executing program 5 (id=2974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x1000, 0x7, 0xffffdf}, &(0x7f0000000380), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, 0x0, 0x0) 532.925588ms ago: executing program 3 (id=2975): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x6) 532.183309ms ago: executing program 4 (id=2976): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 363.099944ms ago: executing program 6 (id=2977): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 349.828091ms ago: executing program 4 (id=2978): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) 310.569029ms ago: executing program 5 (id=2979): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70600000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 239.595815ms ago: executing program 3 (id=2980): r0 = socket(0x1, 0x3, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000040)={0x77359400}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001f00)=""/169, 0xa9}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) 27.065745ms ago: executing program 6 (id=2981): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x8, 0x4) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/17, 0x11}, 0x2c}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f0000000300)={0xa, 0x4e20, 0xfffffffe, @mcast1}, 0x1c) 26.447007ms ago: executing program 3 (id=2982): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2daa00000000000079100800000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) unshare(0x4020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000000)=0x6}) 0s ago: executing program 4 (id=2983): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x2010008, 0x4, 0x0, 0x0, 0x1}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x100, 0x801, 0x0) kernel console output (not intermixed with test programs): oduct=2001, bcdDevice=10.00 [ 256.284202][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.284223][ T5999] usb 3-1: Product: syz [ 256.284238][ T5999] usb 3-1: Manufacturer: syz [ 256.284253][ T5999] usb 3-1: SerialNumber: syz [ 256.343911][ T5999] usb 3-1: config 0 descriptor?? [ 256.364247][ T5999] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 256.367345][ T5999] usb 3-1: Detected FT-X [ 256.555611][ T5999] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 256.978045][ T5999] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 257.178633][ T44] usb 3-1: USB disconnect, device number 22 [ 257.309399][ T9324] input: syz1 as /devices/virtual/input/input27 [ 257.340227][ T44] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 257.340723][ T44] ftdi_sio 3-1:0.0: device disconnected [ 258.129974][ T9348] input: syz1 as /devices/virtual/input/input28 [ 258.328066][ T5999] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 258.501040][ T5999] usb 2-1: Using ep0 maxpacket: 32 [ 258.513050][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.513084][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.513125][ T5999] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.513149][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.567928][ T5999] usb 2-1: config 0 descriptor?? [ 258.585509][ T5999] hub 2-1:0.0: USB hub found [ 258.641841][ T5913] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 258.641879][ T5913] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 258.641967][ T5913] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 258.641994][ T5913] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 258.642020][ T5913] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 258.642046][ T5913] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 258.642128][ T5913] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 258.642154][ T5913] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 258.642180][ T5913] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 258.642206][ T5913] hid-generic 0003:0004:0000.001F: unknown main item tag 0x0 [ 258.764671][ T5913] hid-generic 0003:0004:0000.001F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 258.795645][ T5999] hub 2-1:0.0: 1 port detected [ 259.408287][ T5999] hub 2-1:0.0: activate --> -90 [ 259.437276][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1398'. [ 259.810017][ T5999] usb 2-1-port1: cannot reset (err = -71) [ 259.810568][ T5999] usb 2-1-port1: cannot reset (err = -71) [ 259.810610][ T5999] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 259.811010][ T5933] usb 2-1: USB disconnect, device number 14 [ 259.811099][ T5999] usb 2-1-port1: cannot disable (err = -71) [ 259.811408][ T5999] usb 2-1-port1: attempt power cycle [ 261.072174][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.120192][ T9413] sctp: [Deprecated]: syz.4.1414 (pid 9413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.120192][ T9413] Use struct sctp_sack_info instead [ 261.877911][ T5999] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 262.037914][ T5999] usb 3-1: Using ep0 maxpacket: 32 [ 262.043484][ T5999] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 262.043512][ T5999] usb 3-1: config 0 has no interface number 0 [ 262.043574][ T5999] usb 3-1: config 0 interface 184 has no altsetting 0 [ 262.047235][ T5999] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 262.047263][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.047284][ T5999] usb 3-1: Product: syz [ 262.047300][ T5999] usb 3-1: Manufacturer: syz [ 262.047314][ T5999] usb 3-1: SerialNumber: syz [ 262.128128][ T5999] usb 3-1: config 0 descriptor?? [ 262.134094][ T5999] smsc75xx v1.0.0 [ 262.211918][ T9430] Bluetooth: hci0: too big key_count value 39401 [ 263.179888][ T5999] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 263.381135][ T5999] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 263.381167][ T5999] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 263.381188][ T5999] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 263.381212][ T5999] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 263.381510][ T5999] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 263.418535][ T5999] usb 3-1: USB disconnect, device number 23 [ 264.073202][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 264.073221][ T38] audit: type=1326 audit(1758188656.528:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 264.106266][ T38] audit: type=1326 audit(1758188656.528:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 264.106326][ T38] audit: type=1326 audit(1758188656.528:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 264.106375][ T38] audit: type=1326 audit(1758188656.528:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 264.106423][ T38] audit: type=1326 audit(1758188656.528:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 264.106470][ T38] audit: type=1326 audit(1758188656.548:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 264.106517][ T38] audit: type=1326 audit(1758188656.558:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 264.106576][ T38] audit: type=1326 audit(1758188656.558:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9464 comm="syz.3.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 264.548057][ T44] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 264.697896][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 264.700595][ T44] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 264.700624][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.737211][ T44] usb 4-1: config 0 descriptor?? [ 264.752706][ T44] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 264.867934][ T5933] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 265.037961][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 265.046835][ T5933] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 265.046861][ T5933] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 265.046883][ T5933] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 265.046906][ T5933] usb 2-1: config 1 has no interface number 1 [ 265.047032][ T5933] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 265.047078][ T5933] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 640, setting to 64 [ 265.115911][ T5933] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.116009][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.116032][ T5933] usb 2-1: Product: syz [ 265.116047][ T5933] usb 2-1: Manufacturer: syz [ 265.116063][ T5933] usb 2-1: SerialNumber: syz [ 265.445142][ T5933] usb 2-1: USB disconnect, device number 19 [ 266.018074][ T44] gspca_vc032x: reg_w err -71 [ 266.018104][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018116][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018124][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018134][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018143][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018153][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018161][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018170][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018179][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018188][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018197][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018206][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018215][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018224][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018233][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018242][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018250][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018259][ T44] gspca_vc032x: I2c Bus Busy Wait 00 [ 266.018268][ T44] gspca_vc032x: Unknown sensor... [ 266.018358][ T44] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 266.022703][ T44] usb 4-1: USB disconnect, device number 21 [ 267.547192][ T38] audit: type=1800 audit(1758188659.998:203): pid=9544 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1469" name="nullb0" dev="tmpfs" ino=406 res=0 errno=0 [ 268.167898][ T5913] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 268.308594][ T9560] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1477'. [ 268.328076][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 268.341376][ T5913] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 268.341406][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.341432][ T5913] usb 4-1: Product: syz [ 268.341449][ T5913] usb 4-1: Manufacturer: syz [ 268.341466][ T5913] usb 4-1: SerialNumber: syz [ 268.394978][ T5913] r8152-cfgselector 4-1: Unknown version 0x0000 [ 268.627643][ T5913] r8152-cfgselector 4-1: Unknown version 0x7cf0 [ 268.632946][ T5913] r8152-cfgselector 4-1: bad CDC descriptors [ 268.837830][ T44] r8152-cfgselector 4-1: USB disconnect, device number 22 [ 269.835097][ T38] audit: type=1804 audit(1758188662.228:204): pid=9577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1481" name="bus" dev="ramfs" ino=24722 res=1 errno=0 [ 270.090528][ T9581] ceph: No mds server is up or the cluster is laggy [ 271.118211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 271.118420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 271.118717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 271.119053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 271.723309][ T9609] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 271.972948][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 271.972973][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 271.972999][ T9613] netlink: 'syz.0.1496': attribute type 7 has an invalid length. [ 272.107158][ T3599] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.109503][ T3599] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.109553][ T3599] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.109594][ T3599] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.111413][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 272.111435][ T9613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 272.111463][ T9613] netlink: 'syz.0.1496': attribute type 7 has an invalid length. [ 272.647997][ T5999] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 272.649117][ T9621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1500'. [ 272.649153][ T9621] netlink: 'syz.0.1500': attribute type 7 has an invalid length. [ 272.649167][ T9621] netlink: 'syz.0.1500': attribute type 8 has an invalid length. [ 272.649180][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 272.800437][ T5999] usb 3-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 272.800467][ T5999] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.802549][ T5999] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 272.802577][ T5999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 272.802599][ T5999] usb 3-1: SerialNumber: syz [ 273.055805][ T5999] usb 3-1: 0:2 : does not exist [ 273.165882][ T5999] usb 3-1: USB disconnect, device number 24 [ 273.580185][ T9639] netlink: 208252 bytes leftover after parsing attributes in process `syz.4.1506'. [ 273.580464][ T9639] netlink: 'syz.4.1506': attribute type 1 has an invalid length. [ 273.580482][ T9639] netlink: 'syz.4.1506': attribute type 2 has an invalid length. [ 273.580499][ T9639] netlink: 'syz.4.1506': attribute type 3 has an invalid length. [ 273.580513][ T9639] netlink: 'syz.4.1506': attribute type 4 has an invalid length. [ 273.869311][ T38] audit: type=1326 audit(1758188666.328:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75ffeba9 code=0x7ffc0000 [ 273.869372][ T38] audit: type=1326 audit(1758188666.328:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75ffeba9 code=0x7ffc0000 [ 273.899656][ T38] audit: type=1326 audit(1758188666.358:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7eff75ffeba9 code=0x7ffc0000 [ 273.899721][ T38] audit: type=1326 audit(1758188666.358:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75ffeba9 code=0x7ffc0000 [ 273.899775][ T38] audit: type=1326 audit(1758188666.358:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75ffeba9 code=0x7ffc0000 [ 273.917816][ T38] audit: type=1326 audit(1758188666.368:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7eff75ffeba9 code=0x7ffc0000 [ 273.917886][ T38] audit: type=1326 audit(1758188666.368:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75ffeba9 code=0x7ffc0000 [ 273.921208][ T38] audit: type=1326 audit(1758188666.378:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff75ffeba9 code=0x7ffc0000 [ 273.921286][ T38] audit: type=1326 audit(1758188666.378:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9644 comm="syz.2.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7eff75ffeba9 code=0x7ffc0000 [ 275.231471][ T5999] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 275.259163][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1518'. [ 275.380620][ T5999] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 275.380685][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.382239][ T5999] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 275.382267][ T5999] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 275.382288][ T5999] usb 4-1: Manufacturer: syz [ 275.430091][ T5999] usb 4-1: config 0 descriptor?? [ 275.677850][ T5999] rc_core: IR keymap rc-hauppauge not found [ 275.677874][ T5999] Registered IR keymap rc-empty [ 275.679553][ T5999] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 275.682845][ T5999] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 275.734883][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 275.863449][ T9689] loop2: detected capacity change from 0 to 7 [ 275.888413][ T44] usb 4-1: USB disconnect, device number 23 [ 275.894034][ T9689] Dev loop2: unable to read RDB block 7 [ 275.894066][ T9689] loop2: AHDI p1 p2 p3 [ 275.894096][ T9689] loop2: partition table partially beyond EOD, truncated [ 275.894216][ T9689] loop2: p1 start 1601398130 is beyond EOD, truncated [ 275.894235][ T9689] loop2: p2 start 1702059890 is beyond EOD, truncated [ 276.738579][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 276.738615][ T9722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1541'. [ 276.808691][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 276.808723][ T9722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1541'. [ 276.925627][ T9725] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 277.012287][ T9721] veth3: entered promiscuous mode [ 277.012564][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.013897][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.014042][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.014092][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.630546][ T5933] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 277.790382][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.790418][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.790442][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 277.790488][ T5933] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 277.790513][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.821648][ T5933] usb 3-1: config 0 descriptor?? [ 277.901370][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036bc6800: rx timeout, send abort [ 277.948082][ T5847] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 278.097905][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 278.112844][ T5847] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 278.113004][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.113030][ T5847] usb 4-1: Product: syz [ 278.113112][ T5847] usb 4-1: Manufacturer: syz [ 278.113130][ T5847] usb 4-1: SerialNumber: syz [ 278.130652][ T5847] usb 4-1: config 0 descriptor?? [ 278.283247][ T5933] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 278.364047][ T5847] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 278.402698][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036bc6800: abort rx timeout. Force session deactivation [ 278.405018][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036bc6000: rx timeout, send abort [ 278.571025][ T5847] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 278.604918][ T5847] usb 4-1: USB disconnect, device number 24 [ 278.905071][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036bc6000: abort rx timeout. Force session deactivation [ 279.466154][ T9767] netlink: 'syz.4.1560': attribute type 4 has an invalid length. [ 279.622244][ C1] plantronics 0003:047F:FFFF.0020: usb_submit_urb(ctrl) failed: -1 [ 279.675193][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036bc7000: rx timeout, send abort [ 280.175279][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888036bc7000: abort rx timeout. Force session deactivation [ 280.401049][ T5847] usb 3-1: USB disconnect, device number 25 [ 281.537905][ T5913] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 281.693143][ T5913] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 281.693175][ T5913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 281.718449][ T5913] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.718483][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 281.718506][ T5913] usb 4-1: Product: syz [ 281.718521][ T5913] usb 4-1: Manufacturer: syz [ 281.718537][ T5913] usb 4-1: SerialNumber: syz [ 281.760365][ T5913] usb 4-1: config 0 descriptor?? [ 281.796521][ T5913] usb 4-1: selecting invalid altsetting 0 [ 282.064517][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 282.094268][ T5961] usb 4-1: USB disconnect, device number 25 [ 282.360298][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 283.028089][ T5999] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 283.098605][ T9849] hsr0: entered promiscuous mode [ 283.099500][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 283.135447][ T9849] hsr_slave_0: left promiscuous mode [ 283.169180][ T9849] hsr_slave_1: left promiscuous mode [ 283.191541][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.191578][ T5999] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.191630][ T5999] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 283.191656][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.201182][ T5999] usb 1-1: config 0 descriptor?? [ 283.312854][ T9849] hsr0 (unregistering): left promiscuous mode [ 283.714808][ T5999] cm6533_jd 0003:0D8C:0022.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 284.424350][ T9888] syzkaller1: entered promiscuous mode [ 284.424381][ T9888] syzkaller1: entered allmulticast mode [ 284.474833][ T9891] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1613'. [ 284.521126][ T5847] usb 1-1: USB disconnect, device number 16 [ 284.990028][ T9901] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 285.471351][ T9911] netlink: 'syz.0.1622': attribute type 4 has an invalid length. [ 285.471378][ T9911] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1622'. [ 287.215932][ T5854] Process accounting resumed [ 287.645084][ T9966] fuse: Bad value for 'fd' [ 287.791989][ T9969] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 289.225723][ T9996] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.225764][ T9996] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.865999][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 289.866018][ T38] audit: type=1326 audit(1758188682.318:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e9408ada9 code=0x7ffc0000 [ 289.866705][ T38] audit: type=1326 audit(1758188682.318:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 289.867309][ T38] audit: type=1326 audit(1758188682.318:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 289.868115][ T38] audit: type=1326 audit(1758188682.318:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 289.868849][ T38] audit: type=1326 audit(1758188682.328:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 289.869462][ T38] audit: type=1326 audit(1758188682.328:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 289.870180][ T38] audit: type=1326 audit(1758188682.328:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 289.870687][ T38] audit: type=1326 audit(1758188682.328:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 289.871230][ T38] audit: type=1326 audit(1758188682.328:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 289.871984][ T38] audit: type=1326 audit(1758188682.328:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10012 comm="syz.3.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e9408ada9 code=0x7ffc0000 [ 291.128024][ T5847] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 291.277836][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 291.296373][ T5847] usb 4-1: config 0 has no interfaces? [ 291.300041][ T5847] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 291.300075][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.300105][ T5847] usb 4-1: Product: syz [ 291.300121][ T5847] usb 4-1: Manufacturer: syz [ 291.300137][ T5847] usb 4-1: SerialNumber: syz [ 291.340632][ T5847] usb 4-1: config 0 descriptor?? [ 291.552868][ T5847] usb 4-1: USB disconnect, device number 26 [ 292.049861][T10065] block nbd0: NBD_DISCONNECT [ 292.051685][T10065] block nbd0: Send disconnect failed -107 [ 292.071499][T10064] block nbd0: Disconnected due to user request. [ 292.071523][T10064] block nbd0: shutting down sockets [ 292.561186][T10078] ptrace attach of "./syz-executor exec"[10080] was attempted by "./syz-executor exec"[10078] [ 294.940720][T10144] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 295.067984][ T5847] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 295.226275][ T5847] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 295.226311][ T5847] usb 1-1: config 0 interface 0 has no altsetting 0 [ 295.231567][ T5847] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 295.231598][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 295.231621][ T5847] usb 1-1: Product: syz [ 295.231636][ T5847] usb 1-1: Manufacturer: syz [ 295.231651][ T5847] usb 1-1: SerialNumber: syz [ 295.283208][ T5847] usb 1-1: config 0 descriptor?? [ 295.297105][ T5847] usb 1-1: selecting invalid altsetting 0 [ 295.322628][T10152] loop4: detected capacity change from 0 to 7 [ 295.329754][T10152] Dev loop4: unable to read RDB block 7 [ 295.329822][T10152] loop4: unable to read partition table [ 295.330083][T10152] loop4: partition table beyond EOD, truncated [ 295.330103][T10152] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 295.590396][ T44] usb 1-1: USB disconnect, device number 17 [ 296.077827][ T5913] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 296.096689][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1727'. [ 296.227902][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 296.230382][ T5913] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 296.230463][ T5913] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.230488][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.230514][ T5913] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.230539][ T5913] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.230585][ T5913] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 296.230609][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.531408][ T5913] usb 4-1: usb_control_msg returned -32 [ 296.531454][ T5913] usbtmc 4-1:16.0: can't read capabilities [ 296.678001][T10178] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 296.680195][T10178] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 298.891492][ T5913] usb 4-1: USB disconnect, device number 27 [ 298.957893][ T5999] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 299.108784][ T5999] usb 3-1: Using ep0 maxpacket: 16 [ 299.115641][ T5999] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.115709][ T5999] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 299.115734][ T5999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.178442][ T5999] usb 3-1: config 0 descriptor?? [ 299.194256][ T5999] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 301.750031][ T5192] bcm5974 3-1:0.0: could not read from device [ 301.827637][ T5999] usb 3-1: USB disconnect, device number 26 [ 302.557918][ T5999] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 302.714267][ T5999] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 302.714326][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.715907][ T5999] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 302.715940][ T5999] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 302.715968][ T5999] usb 4-1: Manufacturer: syz [ 302.779312][ T5999] usb 4-1: config 0 descriptor?? [ 302.897975][ T5999] rc_core: IR keymap rc-hauppauge not found [ 302.897997][ T5999] Registered IR keymap rc-empty [ 302.899705][ T5999] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 302.902878][ T5999] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 303.025257][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 303.051116][ T44] usb 4-1: USB disconnect, device number 28 [ 303.636647][T10319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1791'. [ 303.636670][T10319] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1791'. [ 303.637079][T10319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1791'. [ 303.861036][ T6006] kernel read not supported for file /admmidi2 (pid: 6006 comm: kworker/0:11) [ 304.238991][T10334] syzkaller1: entered promiscuous mode [ 304.239021][T10334] syzkaller1: entered allmulticast mode [ 304.638637][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'. [ 305.138158][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 305.263857][T10357] input: syz1 as /devices/virtual/input/input32 [ 305.493810][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1809'. [ 305.610312][ T38] kauditd_printk_skb: 138 callbacks suppressed [ 305.610332][ T38] audit: type=1326 audit(1758188698.068:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10338 comm="syz.3.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7fc00000 [ 306.310070][T10383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.453155][T10426] : entered promiscuous mode [ 309.168849][T10448] Bluetooth: hci0: invalid length 4, exp 2 for type 15 [ 309.232155][T10450] netlink: 'syz.3.1844': attribute type 1 has an invalid length. [ 309.232198][T10450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.976118][T10468] netlink: 'syz.1.1852': attribute type 1 has an invalid length. [ 310.084245][T10468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.241618][T10474] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 310.266637][T10474] bond1: (slave batadv1): making interface the new active one [ 310.292874][T10474] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 310.661832][T10492] syz.1.1862 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 310.883090][T10499] netlink: 'syz.4.1866': attribute type 29 has an invalid length. [ 310.895974][T10499] netlink: 'syz.4.1866': attribute type 29 has an invalid length. [ 310.930938][T10499] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1866'. [ 310.934870][T10499] unsupported nla_type 66 [ 311.457978][ T6006] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 311.504975][T10520] netlink: 'syz.1.1875': attribute type 3 has an invalid length. [ 311.505001][T10520] netlink: 'syz.1.1875': attribute type 6 has an invalid length. [ 311.505017][T10520] netlink: 'syz.1.1875': attribute type 8 has an invalid length. [ 311.505031][T10520] netlink: 'syz.1.1875': attribute type 10 has an invalid length. [ 311.505046][T10520] netlink: 'syz.1.1875': attribute type 11 has an invalid length. [ 311.505061][T10520] netlink: 198236 bytes leftover after parsing attributes in process `syz.1.1875'. [ 311.623136][ T6006] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 311.623164][ T6006] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 311.623183][ T6006] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 311.623233][ T6006] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 311.623260][ T6006] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 311.678803][ T6006] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 311.678837][ T6006] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 311.678859][ T6006] usb 3-1: Product: syz [ 311.678874][ T6006] usb 3-1: Manufacturer: syz [ 311.725312][ T6006] cdc_wdm 3-1:1.0: skipping garbage [ 311.725332][ T6006] cdc_wdm 3-1:1.0: skipping garbage [ 311.761269][ T6006] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 311.761291][ T6006] cdc_wdm 3-1:1.0: Unknown control protocol [ 312.181637][ T5847] usb 3-1: USB disconnect, device number 27 [ 312.578169][T10538] hsr0: entered allmulticast mode [ 312.578193][T10538] hsr_slave_0: entered allmulticast mode [ 312.578219][T10538] hsr_slave_1: entered allmulticast mode [ 312.637905][T10538] hsr_slave_0: left promiscuous mode [ 312.691004][T10538] hsr_slave_1: left promiscuous mode [ 312.841116][T10538] hsr0 (unregistering): left allmulticast mode [ 314.857410][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1901'. [ 316.147922][ T38] audit: type=1326 audit(1758188708.598:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10621 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 316.148331][ T38] audit: type=1326 audit(1758188708.608:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10621 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 316.149240][ T38] audit: type=1326 audit(1758188708.608:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10621 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 316.149520][ T38] audit: type=1326 audit(1758188708.608:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10621 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 316.149779][ T38] audit: type=1326 audit(1758188708.608:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10621 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 316.150641][ T38] audit: type=1326 audit(1758188708.608:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10621 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 316.154131][ T38] audit: type=1326 audit(1758188708.608:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10621 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 316.154416][ T38] audit: type=1326 audit(1758188708.608:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10621 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc134cd510 code=0x7ffc0000 [ 316.155055][ T38] audit: type=1326 audit(1758188708.608:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10621 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efc134cd510 code=0x7ffc0000 [ 316.155637][ T38] audit: type=1326 audit(1758188708.608:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10621 comm="syz.1.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 316.690287][T10635] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.467887][ T5847] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 317.621062][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 317.623756][ T5847] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.623778][ T5847] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.630886][ T5847] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.630916][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.630938][ T5847] usb 4-1: Product: syz [ 317.630954][ T5847] usb 4-1: Manufacturer: syz [ 317.630970][ T5847] usb 4-1: SerialNumber: syz [ 317.877469][ T5847] usb 4-1: 0:2 : does not exist [ 317.893093][ T5847] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 317.939526][ T5847] usb 4-1: USB disconnect, device number 29 [ 318.064612][T10673] veth1_to_bond: entered allmulticast mode [ 318.064895][T10673] veth1_to_bond: entered promiscuous mode [ 318.065774][T10672] veth1_to_bond: left promiscuous mode [ 318.065905][T10672] veth1_to_bond: left allmulticast mode [ 318.068036][ T44] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 318.068225][ T5961] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 318.087992][ T5853] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 318.217879][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 318.218054][ T5961] usb 2-1: Using ep0 maxpacket: 8 [ 318.220881][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.220928][ T44] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 318.220951][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.226069][ T5961] usb 2-1: config 0 has an invalid interface number: 38 but max is 0 [ 318.226097][ T5961] usb 2-1: config 0 has no interface number 0 [ 318.226131][ T5961] usb 2-1: config 0 interface 38 has no altsetting 0 [ 318.229759][ T5961] usb 2-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 318.229790][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.229814][ T5961] usb 2-1: Product: syz [ 318.229831][ T5961] usb 2-1: Manufacturer: syz [ 318.229847][ T5961] usb 2-1: SerialNumber: syz [ 318.237105][ T44] usb 3-1: config 0 descriptor?? [ 318.241298][ T5961] usb 2-1: config 0 descriptor?? [ 318.250481][ T5961] usb-storage 2-1:0.38: USB Mass Storage device detected [ 318.475874][ T5999] usb 2-1: USB disconnect, device number 20 [ 318.680404][ T44] hid_parser_main: 8 callbacks suppressed [ 318.680441][ T44] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 318.680470][ T44] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 318.680495][ T44] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 318.680519][ T44] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 318.680543][ T44] mcp2221 0003:04D8:00DD.0022: unknown main item tag 0x0 [ 318.681525][ T44] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 318.790566][T10688] 9pnet_fd: Insufficient options for proto=fd [ 319.702662][ T44] usb 3-1: USB disconnect, device number 28 [ 320.111861][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1967'. [ 320.149370][T10738] veth1_macvtap: left promiscuous mode [ 321.200827][ T5999] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 321.370595][ T5999] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 321.370628][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.370649][ T5999] usb 3-1: Product: syz [ 321.370664][ T5999] usb 3-1: Manufacturer: syz [ 321.370679][ T5999] usb 3-1: SerialNumber: syz [ 321.413807][ T5999] usb 3-1: config 0 descriptor?? [ 322.443119][T10778] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1984'. [ 322.509994][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.531507][T10780] overlayfs: failed to clone upperpath [ 322.589976][T10781] overlayfs: failed to clone upperpath [ 322.649618][ T5999] usb 3-1: f81604_read: reg: 100e failed: -EPROTO [ 322.707507][ T5999] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 322.723881][ T5999] usb 3-1: USB disconnect, device number 29 [ 322.817614][ T5999] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 322.977294][ T5999] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 324.648984][T10838] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 325.613520][T10873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2021'. [ 325.615589][T10873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2021'. [ 325.887943][ T5825] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 326.054434][ T5825] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 326.054463][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.075831][ T5825] usb 4-1: config 0 descriptor?? [ 326.148157][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 326.148240][ T38] audit: type=1326 audit(1758188718.588:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10870 comm="syz.4.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faaafb5ada9 code=0x7ffc0000 [ 326.148353][ T38] audit: type=1326 audit(1758188718.588:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10870 comm="syz.4.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaafbbeba9 code=0x7ffc0000 [ 326.148403][ T38] audit: type=1326 audit(1758188718.588:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10870 comm="syz.4.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaafbbeba9 code=0x7ffc0000 [ 326.148629][ T38] audit: type=1326 audit(1758188718.588:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10870 comm="syz.4.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaafbbeba9 code=0x7ffc0000 [ 326.148681][ T38] audit: type=1326 audit(1758188718.588:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10870 comm="syz.4.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaafbbeba9 code=0x7ffc0000 [ 326.148873][ T38] audit: type=1326 audit(1758188718.588:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10870 comm="syz.4.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faaafb5ada9 code=0x7ffc0000 [ 326.149029][ T38] audit: type=1326 audit(1758188718.588:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10870 comm="syz.4.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faaafb5ada9 code=0x7ffc0000 [ 326.149124][ T38] audit: type=1326 audit(1758188718.588:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10870 comm="syz.4.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaafbbeba9 code=0x7ffc0000 [ 326.149330][ T38] audit: type=1326 audit(1758188718.588:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10870 comm="syz.4.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faaafb5ada9 code=0x7ffc0000 [ 326.149487][ T38] audit: type=1326 audit(1758188718.588:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10870 comm="syz.4.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaafbbeba9 code=0x7ffc0000 [ 327.408982][ T5825] usb 4-1: Cannot set autoneg [ 327.409267][ T5825] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 327.464535][ T5825] usb 4-1: USB disconnect, device number 30 [ 327.693584][ T3652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.693623][ T3652] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.587302][ T3652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.587341][ T3652] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.674517][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 328.683836][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 328.695094][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 328.696405][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 328.713380][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.747906][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 328.751210][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 328.751577][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 328.752574][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 328.753179][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.350531][ T3652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.350569][ T3652] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.688629][ T3652] bridge_slave_1: left allmulticast mode [ 330.696757][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.810099][ T5853] Bluetooth: hci1: command tx timeout [ 330.890408][ T3652] bridge_slave_0: left allmulticast mode [ 330.890442][ T3652] bridge_slave_0: left promiscuous mode [ 330.890730][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.349468][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.371234][ T5860] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.372659][ T5860] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.374367][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.375118][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.422429][ T44] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 331.574176][ T44] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.574229][ T44] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 331.603076][ T44] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.603106][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.603128][ T44] usb 2-1: Product: syz [ 331.603144][ T44] usb 2-1: Manufacturer: syz [ 331.603159][ T44] usb 2-1: SerialNumber: syz [ 331.649245][ T44] cdc_mbim 2-1:1.0: skipping garbage [ 331.876910][T10959] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 332.513412][T10959] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 332.516449][ T44] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 332.516471][ T44] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 332.749470][ T44] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 332.764860][ T44] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 332.802830][ T44] wwan wwan0: port wwan0mbim0 attached [ 332.888178][ T5853] Bluetooth: hci1: command tx timeout [ 333.449722][ T5853] Bluetooth: hci2: command tx timeout [ 333.662088][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2067'. [ 334.296138][T10996] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2074'. [ 334.968440][ T5853] Bluetooth: hci1: command tx timeout [ 334.970019][ T3652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.058885][ T3652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.150206][ T3652] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 335.207562][ T3652] bond0 (unregistering): Released all slaves [ 335.291931][T10978] veth0: entered promiscuous mode [ 335.299436][ T44] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 16:1e:72:31:ac:f4 [ 335.320938][ T44] usb 2-1: USB disconnect, device number 21 [ 335.323496][ T44] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 335.527869][ T5853] Bluetooth: hci2: command tx timeout [ 335.761344][ T3652] tipc: Disabling bearer [ 335.767159][ T3652] tipc: Left network mode [ 335.767571][T10917] chnl_net:caif_netlink_parms(): no params data found [ 335.852928][ T44] wwan wwan0: port wwan0mbim0 disconnected [ 337.028806][T11032] tls_set_device_offload: netdev not found [ 337.048608][ T5853] Bluetooth: hci1: command tx timeout [ 337.467888][ T5913] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 337.508109][T10917] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.508259][T10917] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.508491][T10917] bridge_slave_0: entered allmulticast mode [ 337.511609][T10917] bridge_slave_0: entered promiscuous mode [ 337.532304][T10917] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.532617][T10917] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.532837][T10917] bridge_slave_1: entered allmulticast mode [ 337.536870][T10917] bridge_slave_1: entered promiscuous mode [ 337.608053][ T5853] Bluetooth: hci2: command tx timeout [ 337.630822][ T5913] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.634038][ T5913] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.634065][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.634085][ T5913] usb 2-1: Product: syz [ 337.634098][ T5913] usb 2-1: Manufacturer: syz [ 337.634112][ T5913] usb 2-1: SerialNumber: syz [ 337.724978][ T3652] hsr_slave_0: left promiscuous mode [ 337.759754][ T3652] hsr_slave_1: left promiscuous mode [ 337.760957][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.761060][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.825034][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.825071][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.986705][ T3652] veth0_macvtap: left promiscuous mode [ 337.988185][ T3652] veth1_vlan: left promiscuous mode [ 337.988679][ T3652] veth0_vlan: left promiscuous mode [ 338.719517][ T5913] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 338.719548][ T5913] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 339.608082][ T5999] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 339.687894][ T5853] Bluetooth: hci2: command tx timeout [ 339.757877][ T5999] usb 4-1: Using ep0 maxpacket: 16 [ 339.765786][ T5999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.765820][ T5999] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.765865][ T5999] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.765888][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.827473][ T5999] usb 4-1: config 0 descriptor?? [ 340.264141][ T5999] HID 045e:07da: Invalid code 65791 type 1 [ 340.277437][ T5999] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0023/input/input33 [ 340.309067][ T5999] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 341.109168][ T5999] usb 4-1: USB disconnect, device number 31 [ 341.418995][ T3652] team0 (unregistering): Port device team_slave_1 removed [ 341.652769][ T3652] team0 (unregistering): Port device team_slave_0 removed [ 344.126350][ T5913] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 344.152177][ T5913] usb 2-1: USB disconnect, device number 22 [ 344.154527][ T5913] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 344.357339][T11072] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 344.620979][T10917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.649486][T10917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.089270][T10917] team0: Port device team_slave_0 added [ 345.110552][T10917] team0: Port device team_slave_1 added [ 345.287914][ T5913] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 345.472904][ T5913] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 345.472936][ T5913] usb 2-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 345.472957][ T5913] usb 2-1: Product: syz [ 345.472971][ T5913] usb 2-1: Manufacturer: syz [ 345.472986][ T5913] usb 2-1: SerialNumber: syz [ 345.480948][ T5913] usb 2-1: config 0 descriptor?? [ 345.494501][ T5913] ch341 2-1:0.0: ch341-uart converter detected [ 345.606069][T10917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.606087][T10917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.606118][T10917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.700475][T10917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.700494][T10917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.700522][T10917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.855361][ T3652] IPVS: stop unused estimator thread 0... [ 346.252514][T10917] hsr_slave_0: entered promiscuous mode [ 346.256763][T10917] hsr_slave_1: entered promiscuous mode [ 346.258678][T10917] debugfs: 'hsr0' already exists in 'hsr' [ 346.258779][T10917] Cannot create hsr debugfs directory [ 346.268095][T10965] chnl_net:caif_netlink_parms(): no params data found [ 346.710799][ T5913] ch341-uart ttyUSB0: failed to read break control: -71 [ 346.710858][ T5913] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 346.724493][ T5913] usb 2-1: USB disconnect, device number 23 [ 346.727102][ T5913] ch341 2-1:0.0: device disconnected [ 347.334814][ T3652] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.337421][ T3652] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.343310][T11127] netlink: 'syz.1.2128': attribute type 4 has an invalid length. [ 347.343332][T11127] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.2128'. [ 347.845407][ T38] kauditd_printk_skb: 80 callbacks suppressed [ 347.845426][ T38] audit: type=1326 audit(347.392:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11141 comm="syz.4.2134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaafbbeba9 code=0x0 [ 347.885340][ T3652] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.885369][ T3652] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.888009][ T5854] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 347.951676][T10965] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.951907][T10965] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.952114][T10965] bridge_slave_0: entered allmulticast mode [ 347.955468][T10965] bridge_slave_0: entered promiscuous mode [ 347.989535][T10965] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.989760][T10965] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.989975][T10965] bridge_slave_1: entered allmulticast mode [ 347.993792][T10965] bridge_slave_1: entered promiscuous mode [ 348.037913][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 348.040403][ T5854] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 348.040428][ T5854] usb 4-1: config 0 has no interface number 0 [ 348.040476][ T5854] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 348.043859][ T5854] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 348.043887][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.043908][ T5854] usb 4-1: Product: syz [ 348.043923][ T5854] usb 4-1: Manufacturer: syz [ 348.043938][ T5854] usb 4-1: SerialNumber: syz [ 348.056752][ T5854] usb 4-1: config 0 descriptor?? [ 348.074665][ T5854] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 348.074713][ T5854] em28xx 4-1:0.132: Video interface 132 found: [ 348.351475][ T3652] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.351515][ T3652] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.477997][ T5854] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 348.550992][T10965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.608196][ T3652] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.608237][ T3652] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.671542][T10965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.075585][T10965] team0: Port device team_slave_0 added [ 349.092246][ T5854] em28xx 4-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 349.092277][ T5854] em28xx 4-1:0.132: failed to read eeprom (err=-5) [ 349.092321][ T5854] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 349.104636][T10965] team0: Port device team_slave_1 added [ 349.151160][ T5854] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 349.151189][ T5854] em28xx 4-1:0.132: analog set to bulk mode. [ 349.183651][ T6006] em28xx 4-1:0.132: Registering V4L2 extension [ 349.225407][ T5854] usb 4-1: USB disconnect, device number 32 [ 349.234173][ T5854] em28xx 4-1:0.132: Disconnecting em28xx [ 349.608836][ T6006] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 349.608862][ T6006] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 349.608877][ T6006] em28xx 4-1:0.132: No AC97 audio processor [ 349.642639][ T6006] usb 4-1: Decoder not found [ 349.642663][ T6006] em28xx 4-1:0.132: failed to create media graph [ 349.642754][ T6006] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 349.734146][T10965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.734163][T10965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.734190][T10965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.806027][ T6006] em28xx 4-1:0.132: Remote control support is not available for this card. [ 349.810648][ T5854] em28xx 4-1:0.132: Closing input extension [ 349.946442][ T5854] em28xx 4-1:0.132: Freeing device [ 350.014907][T10965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.014927][T10965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.014968][T10965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.099752][T11171] netlink: 'syz.3.2145': attribute type 21 has an invalid length. [ 350.099775][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 350.358094][T11171] netlink: 'syz.3.2145': attribute type 21 has an invalid length. [ 350.358118][T11171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 350.361461][T11175] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2147'. [ 350.364931][ T3625] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.495600][ T3625] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.731302][ T3625] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.737889][T10917] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 350.961295][ T3625] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.999868][T10917] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 351.085056][T10965] hsr_slave_0: entered promiscuous mode [ 351.089902][T10965] hsr_slave_1: entered promiscuous mode [ 351.092441][T10965] debugfs: 'hsr0' already exists in 'hsr' [ 351.092473][T10965] Cannot create hsr debugfs directory [ 351.095270][T10917] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 351.167356][ T3652] bridge_slave_1: left allmulticast mode [ 351.167391][ T3652] bridge_slave_1: left promiscuous mode [ 351.168180][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.222253][ T3652] bridge_slave_0: left allmulticast mode [ 351.222289][ T3652] bridge_slave_0: left promiscuous mode [ 351.222670][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.834678][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2154'. [ 352.358013][ T5934] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 352.527884][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 352.535168][ T5934] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 352.535195][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.535214][ T5934] usb 4-1: Product: syz [ 352.535229][ T5934] usb 4-1: Manufacturer: syz [ 352.535242][ T5934] usb 4-1: SerialNumber: syz [ 352.551386][ T5934] usb 4-1: config 0 descriptor?? [ 352.557321][ T5934] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 353.631824][ T5934] usb 4-1: USB disconnect, device number 33 [ 354.268567][ T3652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.429152][ T3652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.503447][ T3652] bond0 (unregistering): Released all slaves [ 354.616604][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2170'. [ 354.617088][T10917] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 355.119129][ T3652] tipc: Disabling bearer [ 355.119351][ T3652] tipc: Left network mode [ 357.767241][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.767277][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.824310][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.824345][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.962049][ T3652] veth1_macvtap: left promiscuous mode [ 357.963455][ T3652] veth1_vlan: left promiscuous mode [ 357.963672][ T3652] veth0_vlan: left promiscuous mode [ 361.438657][ T3652] team0 (unregistering): Port device team_slave_1 removed [ 361.748848][ T3652] team0 (unregistering): Port device team_slave_0 removed [ 364.236377][T11325] netlink: 'syz.4.2210': attribute type 13 has an invalid length. [ 364.236403][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 364.267875][T10965] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 364.350381][T11325] netlink: 'syz.4.2210': attribute type 13 has an invalid length. [ 364.350404][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2210'. [ 364.449206][T10965] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 364.495571][ T3220] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.516333][ T3660] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.523045][T10965] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 364.602485][ T3660] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.604152][T10965] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 364.670438][ T3660] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.841476][ T38] audit: type=1326 audit(364.392:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11352 comm="syz.1.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 364.841532][ T38] audit: type=1326 audit(364.392:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11352 comm="syz.1.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 364.841613][ T38] audit: type=1326 audit(364.392:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11352 comm="syz.1.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 364.841685][ T38] audit: type=1326 audit(364.392:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11352 comm="syz.1.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 364.841731][ T38] audit: type=1326 audit(364.392:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11352 comm="syz.1.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 364.844783][ T38] audit: type=1326 audit(364.392:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11352 comm="syz.1.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 364.944990][T10917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.049516][T11355] netlink: 'syz.3.2219': attribute type 1 has an invalid length. [ 365.049539][T11355] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2219'. [ 365.049556][T11355] netlink: 'syz.3.2219': attribute type 2 has an invalid length. [ 365.049583][T11355] netlink: 'syz.3.2219': attribute type 1 has an invalid length. [ 365.096637][T10917] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.206474][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.209033][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.308396][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.308566][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.689960][T11364] block nbd3: NBD_DISCONNECT [ 365.693220][T11364] block nbd3: Send disconnect failed -22 [ 365.693797][T11364] block nbd3: Disconnected due to user request. [ 365.693816][T11364] block nbd3: shutting down sockets [ 365.759749][T10965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.764523][ T3652] IPVS: stop unused estimator thread 0... [ 365.873120][T10965] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.920348][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.920516][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.004849][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.007239][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.541076][T11371] syz.1.2226 (11371): drop_caches: 2 [ 366.547853][ T5825] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 366.640624][T10917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.713119][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 366.715925][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.715956][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.715980][ T5825] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 366.716037][ T5825] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 366.716061][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.763705][ T5825] usb 4-1: config 0 descriptor?? [ 367.216358][ T5825] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 367.216396][ T5825] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 367.216431][ T5825] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 367.216457][ T5825] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 367.216484][ T5825] shield 0003:0955:7214.0024: unknown main item tag 0x0 [ 367.247035][ T5825] input: HID 0955:7214 Haptics as /devices/virtual/input/input34 [ 367.355039][T10965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.365652][ T5825] shield 0003:0955:7214.0024: Registered Thunderstrike controller [ 367.366720][ T5825] shield 0003:0955:7214.0024: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 367.434038][ T5825] usb 4-1: USB disconnect, device number 34 [ 367.434250][ T44] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 367.434323][ T44] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 367.434399][ T44] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 367.434468][ T44] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 367.764532][T10917] veth0_vlan: entered promiscuous mode [ 367.801220][T10917] veth1_vlan: entered promiscuous mode [ 367.902146][T10917] veth0_macvtap: entered promiscuous mode [ 367.924843][T10917] veth1_macvtap: entered promiscuous mode [ 367.974699][T10917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.010945][T10917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.085344][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.094561][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.095086][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.095140][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.333769][T11413] Bluetooth: hci0: unsupported parameter 32780 [ 368.333790][T11413] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 368.413661][T10965] veth0_vlan: entered promiscuous mode [ 368.583643][T10965] veth1_vlan: entered promiscuous mode [ 368.699414][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.699437][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.909938][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.909960][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.044795][T10965] veth0_macvtap: entered promiscuous mode [ 369.079524][T10965] veth1_macvtap: entered promiscuous mode [ 369.180447][T10965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.244271][T10965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.278452][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.278733][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.278793][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.278834][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.593564][ T5934] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 369.719683][ T3652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.719705][ T3652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.743105][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 369.745459][ T5934] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 369.745490][ T5934] usb 2-1: config 0 has no interface number 0 [ 369.745534][ T5934] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 369.745561][ T5934] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 48 [ 369.790426][ T5934] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 369.790463][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.790482][ T5934] usb 2-1: Product: syz [ 369.790495][ T5934] usb 2-1: Manufacturer: syz [ 369.790509][ T5934] usb 2-1: SerialNumber: syz [ 369.829513][ T5934] usb 2-1: config 0 descriptor?? [ 369.832461][T11428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.832625][T11428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.855258][ T5934] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.061222][ T3652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.061245][ T3652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.102514][ T5933] usb 2-1: USB disconnect, device number 24 [ 370.395592][T11441] pim6reg1: entered promiscuous mode [ 370.395620][T11441] pim6reg1: entered allmulticast mode [ 370.492609][T11447] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 371.091266][ T38] audit: type=1326 audit(370.642:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11467 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dacdeba9 code=0x7ffc0000 [ 371.091342][ T38] audit: type=1326 audit(370.642:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11467 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dacdeba9 code=0x7ffc0000 [ 371.096096][ T38] audit: type=1326 audit(370.642:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11467 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f94dacdeba9 code=0x7ffc0000 [ 371.096856][ T38] audit: type=1326 audit(370.642:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11467 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dacdeba9 code=0x7ffc0000 [ 371.097257][ T38] audit: type=1326 audit(370.642:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11467 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f94dacdeba9 code=0x7ffc0000 [ 371.296948][ T38] audit: type=1326 audit(370.642:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11467 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dacdeba9 code=0x7ffc0000 [ 371.297288][ T38] audit: type=1326 audit(370.842:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11467 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f94dacdeba9 code=0x7ffc0000 [ 371.297625][ T38] audit: type=1326 audit(370.842:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11467 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94dacdeba9 code=0x7ffc0000 [ 371.336255][ T38] audit: type=1326 audit(370.882:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11467 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f94dacd5b67 code=0x7ffc0000 [ 371.336571][ T38] audit: type=1326 audit(370.882:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11467 comm="syz.6.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f94dac7ada9 code=0x7ffc0000 [ 371.797892][ T5999] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 371.947882][ T5999] usb 4-1: Using ep0 maxpacket: 16 [ 371.956030][ T5999] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 371.980029][ T5999] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 371.980060][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.980081][ T5999] usb 4-1: Product: syz [ 371.980096][ T5999] usb 4-1: Manufacturer: syz [ 371.980118][ T5999] usb 4-1: SerialNumber: syz [ 372.029944][ T5999] usb 4-1: config 0 descriptor?? [ 372.036123][ T5999] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 372.058186][ T5999] usb 4-1: Detected FT232R [ 372.363011][ T5999] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 372.445133][ T5933] libceph: connect (1)[c::]:6789 error -101 [ 372.445817][ T5933] libceph: mon0 (1)[c::]:6789 connect error [ 372.461725][ T5933] libceph: connect (1)[c::]:6789 error -101 [ 372.461962][ T5933] libceph: mon0 (1)[c::]:6789 connect error [ 372.611425][ T5999] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 372.712158][ T5933] libceph: connect (1)[c::]:6789 error -101 [ 372.712406][ T5933] libceph: mon0 (1)[c::]:6789 connect error [ 372.719848][ T5933] libceph: connect (1)[c::]:6789 error -101 [ 372.720238][ T5933] libceph: mon0 (1)[c::]:6789 connect error [ 372.800016][ T5854] usb 4-1: USB disconnect, device number 35 [ 372.948036][ T5854] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 372.948742][ T5854] ftdi_sio 4-1:0.0: device disconnected [ 372.959304][T11488] ceph: No mds server is up or the cluster is laggy [ 372.981270][T11481] ceph: No mds server is up or the cluster is laggy [ 374.037871][ T5934] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 374.131101][T11521] netlink: 'syz.5.2278': attribute type 10 has an invalid length. [ 374.212781][ T5934] usb 2-1: config 0 interface 0 has no altsetting 0 [ 374.212824][ T5934] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 374.212850][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.247388][ T5934] usb 2-1: config 0 descriptor?? [ 374.352490][T11521] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 374.548832][T11523] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 374.648001][ T5854] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 374.680240][ T5934] zeroplus 0003:0C12:0005.0025: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.1-1/input0 [ 374.680275][ T5934] zeroplus 0003:0C12:0005.0025: no inputs found [ 374.797880][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 374.800689][ T5854] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 374.800719][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.832458][ T5854] usb 4-1: config 0 descriptor?? [ 374.853567][ T5854] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 374.927946][ T5933] usb 2-1: USB disconnect, device number 25 [ 375.822154][T11548] nbd: socks must be embedded in a SOCK_ITEM attr [ 375.861030][T11548] block nbd0: shutting down sockets [ 376.065563][ T5854] gspca_sonixj: reg_w1 err -71 [ 376.083328][ T5854] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 376.109949][ T5854] usb 4-1: USB disconnect, device number 36 [ 376.227918][ T6006] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 376.381366][ T6006] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 376.381461][ T6006] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 376.411336][ T6006] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.411368][ T6006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.411390][ T6006] usb 7-1: Product: syz [ 376.411407][ T6006] usb 7-1: Manufacturer: syz [ 376.411422][ T6006] usb 7-1: SerialNumber: syz [ 377.498486][ T6006] cdc_ncm 7-1:1.0: bind() failure [ 377.532044][ T6006] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 377.532097][ T6006] cdc_ncm 7-1:1.1: bind() failure [ 377.708745][ T5961] usb 7-1: USB disconnect, device number 2 [ 379.518577][T11606] netlink: 'syz.1.2312': attribute type 1 has an invalid length. [ 379.658782][T11606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.955053][T11609] bond2: (slave veth3): Enslaving as an active interface with a down link [ 380.358955][T11613] KVM: debugfs: duplicate directory 11613-4 [ 380.523690][T11589] kexec: Could not allocate control_code_buffer [ 381.967735][ T5933] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 382.132648][ T5933] usb 6-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 382.132682][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.142594][ T5933] usb 6-1: config 0 descriptor?? [ 382.172642][ T5933] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 382.712438][T11649] syz.4.2330 (11649) used greatest stack depth: 16632 bytes left [ 382.824093][ T5933] pwc: recv_control_msg error -32 req 02 val 2b00 [ 382.842050][ T5933] pwc: recv_control_msg error -32 req 02 val 2700 [ 383.044792][ T5933] pwc: recv_control_msg error -71 req 02 val 2c00 [ 383.045471][ T5933] pwc: recv_control_msg error -71 req 04 val 1000 [ 383.045960][ T5933] pwc: recv_control_msg error -71 req 04 val 1300 [ 383.046443][ T5933] pwc: recv_control_msg error -71 req 04 val 1400 [ 383.046926][ T5933] pwc: recv_control_msg error -71 req 02 val 2000 [ 383.047486][ T5933] pwc: recv_control_msg error -71 req 02 val 2100 [ 383.049593][ T5933] pwc: recv_control_msg error -71 req 06 val 0600 [ 383.052925][ T5933] pwc: recv_control_msg error -71 req 04 val 1500 [ 383.055343][ T5933] pwc: recv_control_msg error -71 req 02 val 2500 [ 383.055891][ T5933] pwc: recv_control_msg error -71 req 02 val 2400 [ 383.058072][ T5933] pwc: recv_control_msg error -71 req 02 val 2600 [ 383.060417][ T5933] pwc: recv_control_msg error -71 req 02 val 2900 [ 383.060986][ T5933] pwc: recv_control_msg error -71 req 02 val 2800 [ 383.062684][ T5933] pwc: recv_control_msg error -71 req 04 val 1100 [ 383.063834][ T5933] pwc: recv_control_msg error -71 req 04 val 1200 [ 383.085947][ T5933] pwc: Registered as video103. [ 383.122078][ T5933] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36 [ 383.156610][ T5933] usb 6-1: USB disconnect, device number 2 [ 383.627132][T11681] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.627171][T11681] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.790951][T11681] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.790986][T11681] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.949518][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.989528][T11681] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.989568][T11681] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.167407][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2350'. [ 384.184491][T11681] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.184530][T11681] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.518918][T11706] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2355'. [ 384.730525][ T3660] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.730562][ T3660] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.833888][ T81] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.833921][ T81] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.933837][ T3220] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.933869][ T3220] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.011298][ T3660] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.011345][ T3660] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.537901][ T5934] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 385.654285][T11732] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 385.707805][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 385.715708][ T5934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.715774][ T5934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.797901][ T5934] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.797926][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.797941][ T5934] usb 4-1: Product: syz [ 385.797951][ T5934] usb 4-1: Manufacturer: syz [ 385.797961][ T5934] usb 4-1: SerialNumber: syz [ 386.076291][ T5934] usb 4-1: 0:2 : does not exist [ 386.216287][ T5934] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 386.324775][ T5934] usb 4-1: USB disconnect, device number 37 [ 386.843416][T11747] netlink: 'syz.1.2370': attribute type 2 has an invalid length. [ 386.843441][T11747] netlink: 'syz.1.2370': attribute type 1 has an invalid length. [ 386.843453][T11747] netlink: 'syz.1.2370': attribute type 8 has an invalid length. [ 386.843468][T11747] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2370'. [ 386.929166][T11749] netlink: 'syz.3.2371': attribute type 12 has an invalid length. [ 386.929190][T11749] netlink: 'syz.3.2371': attribute type 29 has an invalid length. [ 386.929213][T11749] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2371'. [ 386.929260][T11749] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 386.929274][T11749] netlink: 'syz.3.2371': attribute type 2 has an invalid length. [ 387.093495][T11756] netlink: 'syz.5.2374': attribute type 12 has an invalid length. [ 387.093522][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2374'. [ 387.134518][T11756] netlink: 'syz.5.2374': attribute type 12 has an invalid length. [ 387.134541][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2374'. [ 387.157886][ T3652] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.158369][ T3652] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.158429][ T3652] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.158467][ T3652] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.297259][T11761] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.2377'. [ 387.450781][T11766] netlink: 'syz.1.2380': attribute type 1 has an invalid length. [ 387.450805][T11766] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2380'. [ 387.637556][T11776] overlay: filesystem on ./bus not supported [ 388.677890][ T5933] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 388.842007][ T5933] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 388.843091][ T5933] usb 6-1: config 0 has no interface number 0 [ 388.843131][ T5933] usb 6-1: config 0 interface 29 has no altsetting 0 [ 388.854915][ T5933] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 388.854945][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.854968][ T5933] usb 6-1: Product: syz [ 388.854984][ T5933] usb 6-1: Manufacturer: syz [ 388.854999][ T5933] usb 6-1: SerialNumber: syz [ 388.911610][ T5933] usb 6-1: config 0 descriptor?? [ 389.280345][T11812] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 389.907006][ T5933] peak_usb 6-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 389.907039][ T5933] peak_usb 6-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 390.134118][ T5933] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 390.168087][ T5933] usb 6-1: USB disconnect, device number 3 [ 390.517771][ T5825] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 390.655361][T11850] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2413'. [ 390.671534][ T5825] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 390.671564][ T5825] usb 4-1: config 0 interface 0 has no altsetting 0 [ 390.791349][ T5825] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 390.791382][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 390.791404][ T5825] usb 4-1: Product: syz [ 390.791416][ T5825] usb 4-1: Manufacturer: syz [ 390.791429][ T5825] usb 4-1: SerialNumber: syz [ 390.881655][ T5825] usb 4-1: config 0 descriptor?? [ 390.924542][ T5825] usb 4-1: selecting invalid altsetting 0 [ 391.149523][ T5825] usb 4-1: USB disconnect, device number 38 [ 391.350332][T11862] loop8: detected capacity change from 0 to 7 [ 391.353338][T11862] Dev loop8: unable to read RDB block 7 [ 391.353383][T11862] loop8: unable to read partition table [ 391.353624][T11862] loop8: partition table beyond EOD, truncated [ 391.353645][T11862] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 393.020615][T11879] input: syz0 as /devices/virtual/input/input37 [ 393.668386][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.668571][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.668706][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.668845][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.668968][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.669102][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.669271][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.669410][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.669547][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.669678][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.669809][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.669931][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.670069][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.670473][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.670658][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.670832][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.670980][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.671131][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.671299][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.671451][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.671607][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.671775][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.671933][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.672114][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.672283][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.672449][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.672642][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.672813][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.672976][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.673419][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 393.673587][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 394.570033][T11898] validate_nla: 3 callbacks suppressed [ 394.570054][T11898] netlink: 'syz.1.2434': attribute type 1 has an invalid length. [ 394.570070][T11898] netlink: 'syz.1.2434': attribute type 4 has an invalid length. [ 394.570084][T11898] netlink: 15130 bytes leftover after parsing attributes in process `syz.1.2434'. [ 394.783875][T11903] vlan2: entered allmulticast mode [ 394.783901][T11903] dummy0: entered allmulticast mode [ 394.924296][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036ca2c00: rx timeout, send abort [ 395.198145][ T5961] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 395.357833][ T5961] usb 2-1: Using ep0 maxpacket: 8 [ 395.358744][ T5961] usb 2-1: too many configurations: 120, using maximum allowed: 8 [ 395.408818][ T5961] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 395.408949][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 395.408971][ T5961] usb 2-1: Product: syz [ 395.408987][ T5961] usb 2-1: Manufacturer: syz [ 395.409002][ T5961] usb 2-1: SerialNumber: syz [ 395.424462][ C0] vcan0: j1939_tp_rxtimer: 0xffff888036ca2c00: abort rx timeout. Force session deactivation [ 395.472724][ T5961] usb 2-1: config 0 descriptor?? [ 395.493470][ T5961] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 395.494796][ T5961] usb 2-1: setting power ON [ 395.495423][ T5961] dvb-usb: bulk message failed: -22 (2/0) [ 395.536607][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 395.537499][ T5961] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 395.537559][ T5961] usb 2-1: media controller created [ 395.598163][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 395.631793][ T5961] usb 2-1: selecting invalid altsetting 6 [ 395.631817][ T5961] usb 2-1: digital interface selection failed (-22) [ 395.631834][ T5961] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 395.636568][ T5961] usb 2-1: setting power OFF [ 395.636752][ T5961] dvb-usb: bulk message failed: -22 (2/0) [ 395.636772][ T5961] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 395.636785][ T5961] (NULL device *): no alternate interface [ 395.701775][T11906] dvb-usb: bulk message failed: -22 (3/0) [ 395.701805][T11906] dvb-usb: bulk message failed: -22 (3/0) [ 395.704920][T11906] dvb-usb: bulk message failed: -22 (4/0) [ 395.776660][ T5961] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 395.791053][ T5961] usb 2-1: USB disconnect, device number 26 [ 395.961962][T11930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2448'. [ 396.455397][ T6006] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 396.503651][ T6006] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 398.185895][ T38] kauditd_printk_skb: 161 callbacks suppressed [ 398.185915][ T38] audit: type=1326 audit(653.731:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11979 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 398.185967][ T38] audit: type=1326 audit(653.731:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11979 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 398.187461][ T38] audit: type=1326 audit(653.731:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11979 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 398.189001][ T38] audit: type=1326 audit(653.741:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11979 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 398.189060][ T38] audit: type=1326 audit(653.741:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11979 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 398.189112][ T38] audit: type=1326 audit(653.741:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11979 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 398.189172][ T38] audit: type=1326 audit(653.741:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11979 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 398.193938][ T38] audit: type=1326 audit(653.741:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11979 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 398.193991][ T38] audit: type=1326 audit(653.741:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11979 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 398.198728][ T38] audit: type=1326 audit(653.751:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11979 comm="syz.3.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e940eeba9 code=0x7ffc0000 [ 399.897815][ T6006] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 400.047867][ T6006] usb 7-1: Using ep0 maxpacket: 16 [ 400.050582][ T6006] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.050636][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.050665][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 400.050687][ T6006] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 400.050712][ T6006] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.052254][ T6006] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 400.052281][ T6006] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 400.052302][ T6006] usb 7-1: Manufacturer: syz [ 400.082338][ T6006] usb 7-1: config 0 descriptor?? [ 400.537765][ T6006] rc_core: IR keymap rc-hauppauge not found [ 400.537786][ T6006] Registered IR keymap rc-empty [ 400.537937][ T6006] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 400.557980][ T6006] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 400.588880][ T6006] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 400.592207][ T6006] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input38 [ 400.638131][ T6006] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 400.660823][ T6006] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 400.678140][ T6006] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 400.704337][ T6006] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 400.717973][ T6006] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 400.738882][ T6006] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 400.757842][ T6006] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 400.781264][ T6006] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 400.798865][ T6006] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 400.818267][ T6006] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 400.852215][ T5934] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 400.903929][ T6006] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 400.903955][ T6006] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 400.996970][ T6006] usb 7-1: USB disconnect, device number 3 [ 401.001511][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 401.040413][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.040450][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.040491][ T5934] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 401.040515][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.137561][ T5934] usb 2-1: config 0 descriptor?? [ 402.199167][ T5934] letsketch 0003:6161:4D15.0027: Device info: ఁ [ 402.439373][ T5934] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 402.439465][ T5934] letsketch 0003:6161:4D15.0027: probe with driver letsketch failed with error -71 [ 402.453459][ T5934] usb 2-1: USB disconnect, device number 27 [ 403.617801][ T5825] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 403.791110][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 403.795715][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 403.795746][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 403.826677][ T5825] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 403.826706][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.826727][ T5825] usb 6-1: Product: syz [ 403.826741][ T5825] usb 6-1: Manufacturer: syz [ 403.826755][ T5825] usb 6-1: SerialNumber: syz [ 403.864724][ T5825] usb 6-1: config 0 descriptor?? [ 403.885867][ T5825] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 403.885904][ T5825] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 403.982160][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2510'. [ 403.982184][T12084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2510'. [ 404.530255][ T5825] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 404.547984][ T5825] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 404.631099][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2516'. [ 404.751310][ T5825] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 404.751340][ T5825] em28xx 6-1:0.0: No AC97 audio processor [ 404.773702][ T5825] usb 6-1: USB disconnect, device number 4 [ 404.776329][ T5825] em28xx 6-1:0.0: Disconnecting em28xx [ 404.793984][ T5825] em28xx 6-1:0.0: Freeing device [ 405.417383][T12112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 406.799945][T12130] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 408.248231][ T5860] Bluetooth: hci5: command 0x1003 tx timeout [ 408.264330][ T5853] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 408.541081][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888026b3d800: rx timeout, send abort [ 409.041177][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888026b3d800: abort rx timeout. Force session deactivation [ 410.650850][ T6006] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 410.834838][ T6006] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 410.834867][ T6006] usb 7-1: config 0 has no interface number 0 [ 410.834915][ T6006] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.834943][ T6006] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.834985][ T6006] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 410.835009][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.870747][ T6006] usb 7-1: config 0 descriptor?? [ 411.059957][T12217] overlayfs: failed to resolve './file1/file0': -2 [ 411.422667][ T6006] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.0028/input/input39 [ 411.756598][ T6006] holtek_kbd 0003:04D9:A055.0028: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1 [ 411.898386][ T6006] usb 7-1: USB disconnect, device number 4 [ 413.507256][T12275] all: renamed from bridge_slave_0 (while UP) [ 413.777812][ T5825] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 413.913306][T12286] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 413.937768][ T5825] usb 4-1: Using ep0 maxpacket: 8 [ 413.943432][ T5825] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 413.943458][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.943478][ T5825] usb 4-1: Product: syz [ 413.943491][ T5825] usb 4-1: Manufacturer: syz [ 413.943505][ T5825] usb 4-1: SerialNumber: syz [ 413.960700][T12286] infiniband sL2: RDMA CMA: cma_listen_on_dev, error -98 [ 414.000117][ T5825] usb 4-1: config 0 descriptor?? [ 414.025867][ T5825] gspca_main: se401-2.14.0 probing 047d:5003 [ 414.090733][T12297] netlink: 'syz.6.2605': attribute type 1 has an invalid length. [ 414.304333][T12297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.389047][T12300] bond1: (slave geneve2): making interface the new active one [ 414.403636][T12300] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 414.415347][ T5825] gspca_se401: ExtraFeatures: 64 [ 414.415364][ T5825] gspca_se401: Too many frame sizes [ 414.634678][ T5933] usb 4-1: USB disconnect, device number 39 [ 415.072584][T12303] overlayfs: statfs failed on './file0' [ 415.243721][T12325] netlink: 14528 bytes leftover after parsing attributes in process `syz.5.2615'. [ 415.267911][ T6006] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 415.431252][ T6006] usb 7-1: Using ep0 maxpacket: 8 [ 415.441555][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 415.441596][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.441624][ T6006] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.441652][ T6006] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 415.441678][ T6006] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 415.441725][ T6006] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 415.441753][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.490977][ T6006] usb 7-1: config 0 descriptor?? [ 415.730910][ T5853] Bluetooth: hci5: urb ffff88823bffcf40 submission failed (90) [ 415.785099][ T5933] usb 7-1: USB disconnect, device number 5 [ 416.115575][T12343] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2623'. [ 416.893363][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 416.893384][ T38] audit: type=1326 audit(672.441:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12356 comm="syz.3.2629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e940eeba9 code=0x0 [ 417.639145][T12369] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2633'. [ 418.763500][T12395] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 418.851254][T12400] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 418.851284][T12400] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 419.107855][ T5933] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 419.266127][ T5933] usb 7-1: config 0 interface 0 has no altsetting 0 [ 419.266173][ T5933] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 419.266199][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.294079][ T5933] usb 7-1: config 0 descriptor?? [ 419.720016][ T5933] hid-udraw 0003:20D6:CB17.0029: unknown main item tag 0x0 [ 419.720059][ T5933] hid-udraw 0003:20D6:CB17.0029: item fetching failed at offset 4/5 [ 419.727479][ T5933] hid-udraw 0003:20D6:CB17.0029: parse failed [ 419.727604][ T5933] hid-udraw 0003:20D6:CB17.0029: probe with driver hid-udraw failed with error -22 [ 419.918517][ T6006] usb 7-1: USB disconnect, device number 6 [ 419.977785][T12423] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 419.985919][T12422] IPVS: stopping master sync thread 12423 ... [ 421.177787][ T5825] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 421.370353][ T5825] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 421.370425][ T5825] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 421.370458][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 421.370487][ T5825] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 421.370517][ T5825] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.370562][ T5825] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.370586][ T5825] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.392938][ T5825] usb 7-1: config 0 descriptor?? [ 421.397335][T12441] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 421.836597][ T5825] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 421.836636][ T5825] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 421.836666][ T5825] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 421.836694][ T5825] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 421.836722][ T5825] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 421.836750][ T5825] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 421.898145][ T5825] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 422.127119][ T5825] usb 7-1: USB disconnect, device number 7 [ 422.142217][T12451] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2665'. [ 422.366604][T12453] netlink: 'syz.4.2666': attribute type 4 has an invalid length. [ 423.598402][T12474] pim6reg1: entered promiscuous mode [ 423.598441][T12474] pim6reg1: entered allmulticast mode [ 425.408931][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2687'. [ 425.408949][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2687'. [ 426.760628][T12522] syzkaller1: entered promiscuous mode [ 426.760661][T12522] syzkaller1: entered allmulticast mode [ 426.963625][T12525] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2699'. [ 427.181463][T12525] 0{X: renamed from gretap0 (while UP) [ 427.205330][T12525] 0{X: entered allmulticast mode [ 427.205854][T12525] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 427.501831][T12534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 428.667302][T12571] kernel read not supported for file /!seih,iPlNnuxselinux (pid: 12571 comm: syz.3.2717) [ 428.680171][ T38] audit: type=1800 audit(684.211:673): pid=12571 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2717" name=217365F769682C1769AC50E66C4E6E757873656C696E7578 dev="mqueue" ino=40106 res=0 errno=0 [ 429.589083][T12591] 9pnet_fd: p9_fd_create_unix (12591): problem connecting socket: ./file0: -111 [ 430.113608][T12597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.195238][T12597] bond0: (slave rose0): Enslaving as an active interface with an up link [ 431.388380][ T5825] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 431.548009][T12635] netlink: 'syz.5.2740': attribute type 4 has an invalid length. [ 431.573884][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.573955][ T5825] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 431.573981][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.593653][ T5825] usb 4-1: config 0 descriptor?? [ 431.603676][T12637] netlink: 'syz.5.2740': attribute type 4 has an invalid length. [ 431.637591][ T5825] pwc: Askey VC010 type 2 USB webcam detected. [ 432.247917][ T5825] pwc: recv_control_msg error -32 req 02 val 2b00 [ 432.251077][ T5825] pwc: recv_control_msg error -32 req 02 val 2700 [ 432.251799][ T5825] pwc: recv_control_msg error -32 req 02 val 2c00 [ 432.717888][ T5825] pwc: recv_control_msg error -71 req 04 val 1300 [ 432.727870][ T5825] pwc: recv_control_msg error -71 req 04 val 1400 [ 432.728419][ T5825] pwc: recv_control_msg error -71 req 02 val 2000 [ 432.728903][ T5825] pwc: recv_control_msg error -71 req 02 val 2100 [ 432.737790][ T5825] pwc: recv_control_msg error -71 req 04 val 1500 [ 432.738368][ T5825] pwc: recv_control_msg error -71 req 02 val 2500 [ 432.738957][ T5825] pwc: recv_control_msg error -71 req 02 val 2400 [ 432.739472][ T5825] pwc: recv_control_msg error -71 req 02 val 2600 [ 432.745077][ T5825] pwc: recv_control_msg error -71 req 02 val 2900 [ 432.745600][ T5825] pwc: recv_control_msg error -71 req 02 val 2800 [ 432.748188][ T5825] pwc: recv_control_msg error -71 req 04 val 1100 [ 432.748777][ T5825] pwc: recv_control_msg error -71 req 04 val 1200 [ 432.781314][ T5825] pwc: Registered as video103. [ 432.822691][ T5825] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input40 [ 432.877757][ T5825] usb 4-1: USB disconnect, device number 40 [ 433.039304][T12660] netlink: 'syz.5.2748': attribute type 1 has an invalid length. [ 433.163412][T12660] bond1: entered promiscuous mode [ 433.164560][T12660] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.373598][T12662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 433.374140][T12662] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 433.374161][T12662] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 433.409959][T12662] bond1: (slave vxcan3): making interface the new active one [ 433.409982][T12662] vxcan3: entered promiscuous mode [ 433.412320][T12662] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 433.696526][T12673] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2753'. [ 434.538008][ T6006] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 434.690695][ T6006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.690732][ T6006] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.690762][ T6006] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 434.690807][ T6006] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 434.690831][ T6006] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.750415][ T6006] usb 2-1: config 0 descriptor?? [ 435.246282][ T6006] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 435.802088][ T5825] usb 2-1: USB disconnect, device number 28 [ 436.347793][T12732] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 437.404034][T12753] 9pnet_fd: Insufficient options for proto=fd [ 438.196168][T12765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.382275][T12791] netlink: 'syz.5.2789': attribute type 3 has an invalid length. [ 440.382300][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2789'. [ 440.922234][T12809] random: crng reseeded on system resumption [ 441.192577][ C1] vkms_vblank_simulate: vblank timer overrun [ 441.887959][T12829] syzkaller1: entered promiscuous mode [ 441.887992][T12829] syzkaller1: entered allmulticast mode [ 444.025935][T12858] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.045252][T12858] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 444.180503][T12860] loop2: detected capacity change from 0 to 7 [ 444.195385][T12860] Dev loop2: unable to read RDB block 7 [ 444.195440][T12860] loop2: unable to read partition table [ 444.195698][T12860] loop2: partition table beyond EOD, truncated [ 444.195744][T12860] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 444.886987][T12873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.373009][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.777853][ T5934] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 445.821358][T12904] netlink: 'syz.4.2839': attribute type 4 has an invalid length. [ 445.828593][T12904] netlink: 'syz.4.2839': attribute type 4 has an invalid length. [ 445.930966][ T5934] usb 7-1: Using ep0 maxpacket: 16 [ 445.944542][ T5934] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.944602][ T5934] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 445.944626][ T5934] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.955819][ T5934] usb 7-1: config 0 descriptor?? [ 446.396581][ T5934] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 446.827514][ T5825] usb 7-1: USB disconnect, device number 8 [ 447.336428][T12938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.474033][ T38] audit: type=1326 audit(703.021:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12942 comm="syz.4.2857" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaafbbeba9 code=0x0 [ 447.623612][T12947] bond0: (slave bond_slave_0): Releasing backup interface [ 447.781617][T12947] bond0: (slave bond_slave_1): Releasing backup interface [ 447.918036][T12947] team0: Port device team_slave_1 removed [ 447.919356][T12947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.919390][T12947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.007061][T12947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.007098][T12947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.178709][T12947] bond1: (slave batadv1): Releasing active interface [ 448.292092][T12947] bond2: (slave veth3): Releasing active interface [ 448.318607][T12959] netlink: 'syz.3.2864': attribute type 1 has an invalid length. [ 448.593277][T12959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.693848][T12961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.694378][T12961] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 448.720774][T12961] bond1: (slave vcan1): Error -95 calling set_mac_address [ 448.877833][ T6006] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 449.038180][ T6006] usb 7-1: Using ep0 maxpacket: 16 [ 449.070934][ T6006] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.070972][ T6006] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.070996][ T6006] usb 7-1: config 0 interface 0 has no altsetting 0 [ 449.071040][ T6006] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 449.071065][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.230458][ T6006] usb 7-1: config 0 descriptor?? [ 449.911117][ T6006] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 449.911161][ T6006] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 449.911190][ T6006] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 449.911217][ T6006] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 449.911245][ T6006] nzxt-smart2 0003:1E71:2009.002D: unknown main item tag 0x0 [ 450.086305][ T6006] nzxt-smart2 0003:1E71:2009.002D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 450.235550][ T6006] usb 7-1: USB disconnect, device number 9 [ 451.700291][ T38] audit: type=1326 audit(707.251:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13026 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc1346ada9 code=0x7ffc0000 [ 451.700348][ T38] audit: type=1326 audit(707.251:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13026 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 451.700652][ T38] audit: type=1326 audit(707.251:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13026 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 451.706335][ T38] audit: type=1326 audit(707.251:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13026 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc1346ada9 code=0x7ffc0000 [ 451.907805][ T38] audit: type=1326 audit(707.251:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13026 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 451.955776][ T38] audit: type=1326 audit(707.251:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13026 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 451.955840][ T38] audit: type=1326 audit(707.291:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13026 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc1346ada9 code=0x7ffc0000 [ 451.955890][ T38] audit: type=1326 audit(707.291:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13026 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc134ceba9 code=0x7ffc0000 [ 451.955939][ T38] audit: type=1326 audit(707.291:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13026 comm="syz.1.2888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc1346ada9 code=0x7ffc0000 [ 452.525234][T13040] netlink: 'syz.1.2891': attribute type 30 has an invalid length. [ 452.576577][ T5860] Bluetooth: hci1: command 0x0406 tx timeout [ 456.711287][T13099] block device autoloading is deprecated and will be removed. [ 457.017209][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2916'. [ 457.017248][T13109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2916'. [ 457.144166][T13109] bridge0: port 3(vlan2) entered blocking state [ 457.156075][T13109] bridge0: port 3(vlan2) entered disabled state [ 457.156383][T13109] vlan2: entered allmulticast mode [ 457.156402][T13109] bridge0: entered allmulticast mode [ 457.270550][T13109] vlan2: left allmulticast mode [ 457.270574][T13109] bridge0: left allmulticast mode [ 457.601086][T13113] input: syz0 as /devices/virtual/input/input41 [ 457.773401][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 458.647861][ T5847] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 458.797756][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 458.800485][ T5847] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 458.800511][ T5847] usb 2-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config [ 458.800531][ T5847] usb 2-1: config 226 has 0 interfaces, different from the descriptor's value: 2 [ 458.818473][ T5847] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 458.818503][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.818525][ T5847] usb 2-1: Product: syz [ 458.818540][ T5847] usb 2-1: Manufacturer: syz [ 458.818555][ T5847] usb 2-1: SerialNumber: syz [ 459.391432][ T5847] usb 2-1: USB disconnect, device number 29 [ 460.331085][T13155] input: syz0 as /devices/virtual/input/input42 [ 461.374733][T13170] Invalid source name [ 461.374749][T13170] UBIFS error (pid: 13170): cannot open "./file0", error -22 [ 461.995344][T13179] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 462.473570][T13188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2948'. [ 463.127816][ T5860] Bluetooth: hci1: command 0x0406 tx timeout [ 463.127861][ T5934] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 463.127879][ T5934] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 465.447755][ T5934] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 465.447781][ T5934] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 465.447908][ C1] ------------[ cut here ]------------ [ 465.447916][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 465.448022][ C1] WARNING: CPU: 1 PID: 29 at kernel/workqueue.c:2256 __queue_work+0x2e5/0x1010 [ 465.448058][ C1] Modules linked in: [ 465.448091][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 465.448112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 465.448143][ C1] RIP: 0010:__queue_work+0x2e5/0x1010 [ 465.448176][ C1] Code: 42 80 3c 28 00 74 08 48 89 ef e8 86 b2 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 20 f0 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 cd 6b 34 00 eb 2e e8 c6 6b 34 00 e9 [ 465.448192][ C1] RSP: 0018:ffffc90000a3f828 EFLAGS: 00010046 [ 465.448207][ C1] RAX: b9bdd84008d8a500 RBX: 0000000000000000 RCX: ffff88801c6b1dc0 [ 465.448220][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 465.448232][ C1] RBP: ffff88805192c998 R08: 0000000000000000 R09: 0000000000000100 [ 465.448244][ C1] R10: dffffc0000000000 R11: ffffed1017124863 R12: dffffc0000000000 [ 465.448259][ C1] R13: dffffc0000000000 R14: ffff888038c70168 R15: ffff88801c6b28cc [ 465.448275][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 465.448290][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.448303][ C1] CR2: 0000200000000000 CR3: 0000000023c6a000 CR4: 00000000003526f0 [ 465.448321][ C1] Call Trace: [ 465.448328][ C1] [ 465.448353][ C1] call_timer_fn+0x17e/0x5f0 [ 465.448383][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 465.448408][ C1] ? call_timer_fn+0xbe/0x5f0 [ 465.448431][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 465.448463][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 465.448483][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 465.448527][ C1] __run_timer_base+0x709/0x970 [ 465.448563][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 465.448601][ C1] run_timer_softirq+0xb7/0x180 [ 465.448622][ C1] handle_softirqs+0x22f/0x710 [ 465.448654][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 465.448687][ C1] run_ktimerd+0xcf/0x190 [ 465.448710][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 465.448733][ C1] ? schedule+0x91/0x360 [ 465.448765][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 465.448786][ C1] smpboot_thread_fn+0x53f/0xa60 [ 465.448809][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 465.448840][ C1] kthread+0x70e/0x8a0 [ 465.448871][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 465.448893][ C1] ? __pfx_kthread+0x10/0x10 [ 465.448926][ C1] ? __pfx_kthread+0x10/0x10 [ 465.448954][ C1] ret_from_fork+0x439/0x7d0 [ 465.448982][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 465.449014][ C1] ? __switch_to_asm+0x39/0x70 [ 465.449031][ C1] ? __switch_to_asm+0x33/0x70 [ 465.449048][ C1] ? __pfx_kthread+0x10/0x10 [ 465.449076][ C1] ret_from_fork_asm+0x1a/0x30 [ 465.449108][ C1] [ 465.449126][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 465.449139][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 465.449165][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 465.449175][ C1] Call Trace: [ 465.449182][ C1] [ 465.449188][ C1] dump_stack_lvl+0x99/0x250 [ 465.449215][ C1] ? __asan_memcpy+0x40/0x70 [ 465.449235][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.449261][ C1] ? __pfx__printk+0x10/0x10 [ 465.449295][ C1] vpanic+0x281/0x750 [ 465.449324][ C1] ? __pfx__printk+0x10/0x10 [ 465.449343][ C1] ? __pfx_vpanic+0x10/0x10 [ 465.449372][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 465.449413][ C1] panic+0xb9/0xc0 [ 465.449441][ C1] ? __pfx_panic+0x10/0x10 [ 465.449487][ C1] __warn+0x31b/0x4b0 [ 465.449513][ C1] ? __queue_work+0x2e5/0x1010 [ 465.449543][ C1] ? __queue_work+0x2e5/0x1010 [ 465.449568][ C1] report_bug+0x2be/0x4f0 [ 465.449597][ C1] ? __queue_work+0x2e5/0x1010 [ 465.449636][ C1] ? __queue_work+0x2e5/0x1010 [ 465.449662][ C1] ? __queue_work+0x2e7/0x1010 [ 465.449700][ C1] handle_bug+0x84/0x160 [ 465.449719][ C1] exc_invalid_op+0x1a/0x50 [ 465.449738][ C1] asm_exc_invalid_op+0x1a/0x20 [ 465.449755][ C1] RIP: 0010:__queue_work+0x2e5/0x1010 [ 465.449778][ C1] Code: 42 80 3c 28 00 74 08 48 89 ef e8 86 b2 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 20 f0 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 cd 6b 34 00 eb 2e e8 c6 6b 34 00 e9 [ 465.449793][ C1] RSP: 0018:ffffc90000a3f828 EFLAGS: 00010046 [ 465.449809][ C1] RAX: b9bdd84008d8a500 RBX: 0000000000000000 RCX: ffff88801c6b1dc0 [ 465.449822][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 465.449833][ C1] RBP: ffff88805192c998 R08: 0000000000000000 R09: 0000000000000100 [ 465.449844][ C1] R10: dffffc0000000000 R11: ffffed1017124863 R12: dffffc0000000000 [ 465.449857][ C1] R13: dffffc0000000000 R14: ffff888038c70168 R15: ffff88801c6b28cc [ 465.449888][ C1] ? __queue_work+0x2e4/0x1010 [ 465.449929][ C1] call_timer_fn+0x17e/0x5f0 [ 465.449953][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 465.449973][ C1] ? call_timer_fn+0xbe/0x5f0 [ 465.449994][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 465.450023][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 465.450042][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 465.450066][ C1] __run_timer_base+0x709/0x970 [ 465.450100][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 465.450134][ C1] run_timer_softirq+0xb7/0x180 [ 465.450155][ C1] handle_softirqs+0x22f/0x710 [ 465.450198][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 465.450230][ C1] run_ktimerd+0xcf/0x190 [ 465.450255][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 465.450279][ C1] ? schedule+0x91/0x360 [ 465.450308][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 465.450327][ C1] smpboot_thread_fn+0x53f/0xa60 [ 465.450347][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 465.450375][ C1] kthread+0x70e/0x8a0 [ 465.450403][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 465.450426][ C1] ? __pfx_kthread+0x10/0x10 [ 465.450460][ C1] ? __pfx_kthread+0x10/0x10 [ 465.450488][ C1] ret_from_fork+0x439/0x7d0 [ 465.450514][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 465.450544][ C1] ? __switch_to_asm+0x39/0x70 [ 465.450561][ C1] ? __switch_to_asm+0x33/0x70 [ 465.450576][ C1] ? __pfx_kthread+0x10/0x10 [ 465.450605][ C1] ret_from_fork_asm+0x1a/0x30 [ 465.450639][ C1] [ 465.451259][ C1] Kernel Offset: disabled