last executing test programs: 4m35.972608581s ago: executing program 4 (id=2880): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000010000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000340)=@filename='\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, &(0x7f0000000040)='&@,,') 4m35.806086696s ago: executing program 4 (id=2881): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) 4m35.739845371s ago: executing program 4 (id=2882): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)="d6", 0x3, 0x0, 0x0, 0x0) 4m35.62339016s ago: executing program 4 (id=2883): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x2000, 0x0) 4m35.557097373s ago: executing program 4 (id=2884): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80090}, 0x0) 4m35.25276921s ago: executing program 4 (id=2887): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)={r1, 0x0, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) 4m34.919490255s ago: executing program 32 (id=2887): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)={r1, 0x0, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) 16.932169989s ago: executing program 5 (id=6450): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000040)=""/52, 0x34) 16.462795138s ago: executing program 5 (id=6454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 11.293562229s ago: executing program 5 (id=6454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 11.142417475s ago: executing program 5 (id=6509): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$l2tp(0x2, 0x2, 0x73) 10.961551751s ago: executing program 5 (id=6513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) getpriority(0x1, 0x0) 10.562163411s ago: executing program 5 (id=6517): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92d", 0x8a}], 0x1}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000100)=@arm64={0x1, 0x3, 0xff, '\x00', 0x1}) 4.438122942s ago: executing program 1 (id=6567): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0x0, 0x80, 0x2, 0x3bd}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) 3.63683224s ago: executing program 3 (id=6569): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000200)=r2, 0x4) 3.502125644s ago: executing program 1 (id=6570): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@fd={0x6, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x1, 0x2, 0x9f, 0x9, 0x7, 0x10, "958131d4"}, 0x8, 0x4, {}, 0x8001}) 3.395554521s ago: executing program 1 (id=6571): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001440)="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", 0x9fe}, {&(0x7f0000000480)="41185a733ffbee07e79bd071f0c81cb20cfedc1b91c375edffd83dda59a25463ca079228cb9a325e31259967abf2798db29b660d38cd7ac3dc83cdc3c2cd4ff8c6e702c6a42dad98a39247ab624afbdb57e8287eb6299f48c67a7e632e89d26c0dfb88f15ca597d76f251188b6079b9192b48b90996f651dc8910c2b1cae377b2884f9106311be6e2e7e2b2d463a7c1e0d0d8c6a43d2f57ed755236dac67a30a93204be37a3885794fa06ab7eaddf3a54c2530fefc5a7302ca78ac5dfcfd2793a853493849bcdd11ac37feec0be6bc032f385902c87e91e3aff8fe06e5637e5a584855849cf1474024bf7d3318c84768a912", 0xf2}, {&(0x7f0000000100)="26885e", 0x3}], 0x3, 0x0, 0x0, 0x4000005}, 0x0) 3.276503078s ago: executing program 1 (id=6572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x40}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x1}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 3.122141406s ago: executing program 1 (id=6573): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvfrom(r0, 0x0, 0x0, 0x40012000, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2.950806362s ago: executing program 1 (id=6575): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)=0x400) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000001c0)=""/143, 0x8f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2.70571466s ago: executing program 3 (id=6576): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 1.643732599s ago: executing program 2 (id=6583): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000680)={0x0, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x4e26, 0xffffffff, @remote, 0xdc1}}}, 0x108) 1.506375887s ago: executing program 2 (id=6585): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.314098286s ago: executing program 2 (id=6586): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x70cb0}], 0xc}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 978.305813ms ago: executing program 3 (id=6589): open(&(0x7f0000000300)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_resolv_list_size={{}, {0x93, 0x6}}}}, 0x8) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_vhci(0x0, 0x0) 973.816331ms ago: executing program 0 (id=6590): r0 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x8240) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000280)={'\x00', 0xcb4, 0x36, 0xb, 0x1, 0x5, "6da4e6ce7ab12f4625c7824a459df7", '\x00', "194882db", "a9600565", ["6b2b543d704d47f85ae863da", "2fb3af35a807abe0544ac18d", "be93e58756228e2a207523e7", "5bb79d03b5df5782364d9670"]}) ioctl$sock_rose_SIOCRSCLRRT(0xffffffffffffffff, 0x89e4) 798.654795ms ago: executing program 3 (id=6591): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x380000, @dev, 0xfffffffe}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="d8000000000000002900000002000000c2000000e96193cd6e99fd7d3a0ce26077"], 0xd8}], 0x4a, 0x0) 698.081324ms ago: executing program 0 (id=6592): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}) 689.275709ms ago: executing program 3 (id=6593): r0 = syz_io_uring_setup(0x18e0, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x28}, 0x0, 0x4044094, 0x1}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 582.657323ms ago: executing program 0 (id=6594): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001701000003000000020000000000000018000000000000001701000004000000060000000000000080000000000000001701000002"], 0xb0, 0x400c014}], 0x1, 0x40810) 442.576877ms ago: executing program 0 (id=6595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x2c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x40054) 385.336972ms ago: executing program 2 (id=6596): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 221.414614ms ago: executing program 0 (id=6597): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r1, 0xd, 0x0, 0x0, 0x1, 0x6}, &(0x7f00000000c0)=0x14) 221.192971ms ago: executing program 2 (id=6598): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r2, 0x89ef, &(0x7f0000004bc0)) 65.056389ms ago: executing program 0 (id=6599): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {r1, r2+10000000}}, 0x0) 18.390589ms ago: executing program 3 (id=6600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000ff000040"]) 0s ago: executing program 2 (id=6601): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="0503092c8f0b480301020d00c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) kernel console output (not intermixed with test programs): B disconnect, device number 37 [ 424.988297][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 424.998508][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 425.014060][ T8] usb 3-1: USB disconnect, device number 39 [ 425.354707][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 425.354729][ T29] audit: type=1400 audit(4775.313:1077): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=16543 comm="syz.2.4654" key_serial=314384279 key_desc="_uid_ses.0" [ 426.247123][T16579] sp0: Synchronizing with TNC [ 426.261500][T16579] sp0: Found TNC [ 427.959963][T16643] bridge0: port 1(vlan2) entered blocking state [ 427.984252][T16643] bridge0: port 1(vlan2) entered disabled state [ 428.005874][T16643] vlan2: entered allmulticast mode [ 428.032758][T16643] vlan2: left allmulticast mode [ 430.368310][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4724'. [ 431.424260][T16745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4743'. [ 431.699748][T16754] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 431.707854][T16754] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 433.087029][T16809] vcan0: entered allmulticast mode [ 433.508239][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4780'. [ 434.032280][ T9104] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 434.182995][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 434.212000][ T9104] usb 6-1: Using ep0 maxpacket: 8 [ 434.283798][ T9104] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 434.292316][ T9104] usb 6-1: config 179 has no interface number 0 [ 434.298811][ T9104] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 434.310600][ T9104] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 434.322700][ T9104] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 434.335005][ T9104] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 434.346729][ T9104] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 434.360530][ T9104] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 434.369887][ T9104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.380829][T16842] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 434.621804][ T9091] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 434.723391][ T5918] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input56 [ 434.816764][ T9091] usb 4-1: Using ep0 maxpacket: 8 [ 434.826649][ T9091] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.844951][ T9091] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.857525][ T9091] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.878238][ T9091] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.921281][ T9091] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.946435][ T9091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.984811][ T5918] usb 6-1: USB disconnect, device number 20 [ 434.984880][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 434.984925][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 435.038793][ T5918] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 435.187216][ T9091] usb 4-1: GET_CAPABILITIES returned 0 [ 435.193202][ T9091] usbtmc 4-1:16.0: can't read capabilities [ 435.390091][ T5918] usb 4-1: USB disconnect, device number 45 [ 435.828724][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4803'. [ 435.854718][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4803'. [ 437.486479][T16945] vivid-000: disconnect [ 437.495573][T16943] vivid-000: reconnect [ 438.610963][T16989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4848'. [ 439.735335][T17038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4868'. [ 440.097157][ T29] audit: type=1326 audit(4790.053:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17051 comm="syz.0.4874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x0 [ 440.355517][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.380449][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.358997][T17112] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 442.642119][ T5918] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 442.818311][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.850051][ T5918] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 442.872306][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.893003][ T5918] usb 4-1: config 0 descriptor?? [ 443.313171][ T5918] keytouch 0003:0926:3333.0027: fixing up Keytouch IEC report descriptor [ 443.344158][ T5918] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0027/input/input57 [ 443.461737][ T5918] keytouch 0003:0926:3333.0027: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 443.568618][ C0] keyboard: can't emulate rawmode for keycode 240 [ 443.576237][ C0] keyboard: can't emulate rawmode for keycode 240 [ 443.583954][ C0] keyboard: can't emulate rawmode for keycode 240 [ 443.590877][ C0] keyboard: can't emulate rawmode for keycode 240 [ 443.597341][ C0] keyboard: can't emulate rawmode for keycode 240 [ 443.603869][ C0] keyboard: can't emulate rawmode for keycode 240 [ 443.610317][ C0] keyboard: can't emulate rawmode for keycode 240 [ 443.621421][ C0] keyboard: can't emulate rawmode for keycode 240 [ 443.627973][ C0] keyboard: can't emulate rawmode for keycode 240 [ 443.653284][ T9079] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 443.823820][ T9079] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.836540][ T9079] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.857230][ T9079] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 443.881996][ T9079] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 443.891115][ T9079] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.917796][ T9079] usb 6-1: config 0 descriptor?? [ 443.992694][T17192] binder: 17191:17192 ioctl c0306201 20000480 returned -22 [ 444.000638][ T9091] usb 4-1: USB disconnect, device number 46 [ 444.339069][ T9079] logitech 0003:046D:C29C.0028: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 444.430155][T17204] pimreg3: entered allmulticast mode [ 444.594655][T17212] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 444.736660][ T9079] logitech 0003:046D:C29C.0028: no inputs found [ 444.754895][ T9079] usb 6-1: USB disconnect, device number 21 [ 444.772402][ T8] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 444.948067][ T8] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 444.971728][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.983298][ T8] usb 3-1: config 0 descriptor?? [ 445.004332][ T8] cp210x 3-1:0.0: cp210x converter detected [ 445.101802][ T5878] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 445.256298][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 445.266131][ T5878] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 445.276436][ T5878] usb 4-1: config 0 has no interface number 0 [ 445.294445][ T5878] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 445.311805][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.320694][ T5878] usb 4-1: Product: syz [ 445.330186][ T5878] usb 4-1: Manufacturer: syz [ 445.341736][ T5878] usb 4-1: SerialNumber: syz [ 445.351442][ T5878] usb 4-1: config 0 descriptor?? [ 445.376416][ T5878] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 445.398280][ T8] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 445.417162][ T8] usb 3-1: cp210x converter now attached to ttyUSB0 [ 445.596839][ T5878] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 445.615684][ T5878] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 445.653355][ T5878] usb 3-1: USB disconnect, device number 40 [ 445.683354][ T5878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 445.695154][ T5878] cp210x 3-1:0.0: device disconnected [ 445.741595][T17243] random: crng reseeded on system resumption [ 446.045806][T17220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.069493][T17220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.241561][T17249] tmpfs: Cannot disable swap on remount [ 446.289135][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 446.297601][ T5878] usb 4-1: USB disconnect, device number 47 [ 446.312711][ T5878] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 446.342259][ T5878] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 446.362803][ T5878] quatech2 4-1:0.51: device disconnected [ 449.122552][ T9079] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 449.282639][ T9079] usb 1-1: unable to get BOS descriptor or descriptor too short [ 449.302696][ T9079] usb 1-1: not running at top speed; connect to a high speed hub [ 449.355567][ T9079] usb 1-1: config 0 has an invalid interface number: 45 but max is 0 [ 449.388929][ T9079] usb 1-1: config 0 has no interface number 0 [ 449.418281][ T9079] usb 1-1: config 0 interface 45 altsetting 8 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 449.450680][ T9079] usb 1-1: config 0 interface 45 has no altsetting 0 [ 449.470420][ T9079] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=e5.6a [ 449.480045][ T9079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.505811][ T9079] usb 1-1: Product: syz [ 449.528925][ T9079] usb 1-1: Manufacturer: syz [ 449.557361][ T9079] usb 1-1: SerialNumber: syz [ 449.597584][ T9079] usb 1-1: config 0 descriptor?? [ 449.867675][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 449.885759][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 449.906699][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 449.926732][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 449.945850][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 449.966108][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 449.998222][ T9079] keyspan 1-1:0.45: Keyspan 1 port adapter converter detected [ 450.002573][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 450.006180][ T9079] keyspan 1-1:0.45: found no endpoint descriptor for endpoint 82 [ 450.022151][ T9079] keyspan 1-1:0.45: found no endpoint descriptor for endpoint 81 [ 450.030003][ T9079] keyspan 1-1:0.45: found no endpoint descriptor for endpoint 1 [ 450.038061][ T9079] keyspan 1-1:0.45: unsupported endpoint type 0 [ 450.041775][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 450.062060][ T9079] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 450.078679][ T9079] usb 1-1: USB disconnect, device number 38 [ 450.089314][ T9079] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 450.098462][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 450.099737][ T9079] keyspan 1-1:0.45: device disconnected [ 450.137327][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 450.155353][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 450.169545][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 450.179749][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 450.194068][ T8] hid-generic 0000:0003:0000.0029: unknown main item tag 0x0 [ 450.210222][ T8] hid-generic 0000:0003:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz1 [ 450.235020][T17341] pimreg3: entered allmulticast mode [ 450.719049][T17355] netlink: 'syz.0.5008': attribute type 1 has an invalid length. [ 450.736326][T17355] netlink: 'syz.0.5008': attribute type 3 has an invalid length. [ 450.757646][T17355] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5008'. [ 450.786299][T17355] NCSI netlink: No device for ifindex 813332851 [ 450.883867][T17358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5010'. [ 451.721906][ T5918] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 451.883900][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.906281][ T5918] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 451.915533][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.921803][ T5878] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 451.932292][ T5918] usb 4-1: config 0 descriptor?? [ 451.974838][T17400] sctp: [Deprecated]: syz.0.5029 (pid 17400) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.974838][T17400] Use struct sctp_sack_info instead [ 452.094215][ T5878] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 452.110316][ T5878] usb 6-1: config 0 has no interface number 0 [ 452.116864][ T5878] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 452.126030][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.148997][ T5878] usb 6-1: config 0 descriptor?? [ 452.166525][ T5878] ums-realtek 6-1:0.6: USB Mass Storage device detected [ 452.372286][ T8] usb 6-1: USB disconnect, device number 22 [ 452.556436][ T5918] razer 0003:1532:010E.002A: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 452.606920][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.614992][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.622619][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.630070][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.637604][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.645359][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.652889][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.660305][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.667865][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.675864][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.683443][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.690891][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.698430][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.706195][ T8] hid-generic 0000:0003:0000.002B: unknown main item tag 0x0 [ 452.717093][ T8] hid-generic 0000:0003:0000.002B: hidraw1: HID v0.00 Device [syz0] on syz1 [ 452.767835][ T5878] usb 4-1: USB disconnect, device number 48 [ 453.078663][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 453.078684][ T29] audit: type=1326 audit(4803.033:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17429 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff970f85d29 code=0x7ffc0000 [ 453.106960][ T29] audit: type=1326 audit(4803.033:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17429 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff970f85d29 code=0x7ffc0000 [ 453.134853][ T29] audit: type=1326 audit(4803.043:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17429 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff970f85d29 code=0x7ffc0000 [ 453.171774][ T29] audit: type=1326 audit(4803.043:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17429 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff970f85d29 code=0x7ffc0000 [ 453.203188][ T29] audit: type=1326 audit(4803.043:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17429 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff970f85d29 code=0x7ffc0000 [ 453.245224][ T29] audit: type=1326 audit(4803.043:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17429 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff970f85d29 code=0x7ffc0000 [ 453.302350][ T29] audit: type=1326 audit(4803.063:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17429 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff970f85d29 code=0x7ffc0000 [ 453.340512][ T29] audit: type=1326 audit(4803.063:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17429 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff970f7cce7 code=0x7ffc0000 [ 453.422433][ T29] audit: type=1326 audit(4803.063:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17429 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff970f21f29 code=0x7ffc0000 [ 453.499731][ T29] audit: type=1326 audit(4803.063:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17429 comm="syz.2.5040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff970f7cce7 code=0x7ffc0000 [ 453.902016][ T9091] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 454.012015][ T5878] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 454.061832][ T9091] usb 1-1: Using ep0 maxpacket: 8 [ 454.073108][ T9091] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 454.083093][ T9091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.091555][ T9091] usb 1-1: Product: syz [ 454.095896][ T9091] usb 1-1: Manufacturer: syz [ 454.100523][ T9091] usb 1-1: SerialNumber: syz [ 454.106928][ T9091] usb 1-1: config 0 descriptor?? [ 454.119496][ T9091] gspca_main: sq930x-2.14.0 probing 2770:930c [ 454.163841][ T5878] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 454.173129][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.183860][ T5878] usb 3-1: config 0 descriptor?? [ 454.191908][ T5878] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 454.606061][ T5878] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 454.930459][ T9091] gspca_sq930x: ucbus_write failed -71 [ 455.020662][ T5878] gspca_cpia1: usb_control_msg 02, error -71 [ 455.027482][ T5878] gspca_cpia1: usb_control_msg 05, error -71 [ 455.037371][ T5878] cpia1 3-1:0.0: unexpected systemstate: 00 [ 455.048931][ T5878] usb 3-1: USB disconnect, device number 41 [ 455.152634][ T9091] gspca_sq930x: Sensor ov9630 not yet treated [ 455.158847][ T9091] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 455.181041][ T9091] usb 1-1: USB disconnect, device number 39 [ 455.224456][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5065'. [ 455.451242][T17494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5069'. [ 455.912752][ T5843] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 456.251777][ T9091] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 456.437678][ T9091] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 456.471889][ T9091] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.484968][ T9091] usb 3-1: config 0 has no interface number 0 [ 456.491146][ T9091] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 456.501296][ T9091] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.581793][ T9091] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 456.591097][ T9091] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.599294][ T9091] usb 3-1: Product: syz [ 456.603657][ T9091] usb 3-1: Manufacturer: syz [ 456.608304][ T9091] usb 3-1: SerialNumber: syz [ 456.621107][ T9091] usb 3-1: config 0 descriptor?? [ 456.841841][ T5918] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 457.071000][T17545] kernel profiling enabled (shift: 63) [ 457.072488][ T5918] usb 1-1: config 0 has no interfaces? [ 457.083419][ T5918] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 457.093034][T17545] profiling shift: 63 too large [ 457.098443][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.139625][ T5918] usb 1-1: config 0 descriptor?? [ 457.254339][ T5879] usb 3-1: USB disconnect, device number 42 [ 457.393608][ T9091] usb 1-1: USB disconnect, device number 40 [ 457.772233][ T5918] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 457.942520][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 457.957777][ T5918] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 457.983179][ T5918] usb 4-1: config 0 has no interface number 0 [ 458.001263][ T5918] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 458.018890][ T5918] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 458.035240][ T5918] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 458.045261][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.062921][ T5918] usb 4-1: Product: syz [ 458.072260][ T5918] usb 4-1: Manufacturer: syz [ 458.081447][ T5918] usb 4-1: SerialNumber: syz [ 458.096282][ T5918] usb 4-1: config 0 descriptor?? [ 458.104276][ T9091] kernel write not supported for file /sequencer2 (pid: 9091 comm: kworker/1:17) [ 458.112590][T17566] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 458.121077][T17566] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 458.300353][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 458.300373][ T29] audit: type=1400 audit(4808.253:1113): lsm=SMACK fn=smack_inode_remove_acl action=denied subject="N" object="_" requested=w pid=17594 comm="syz.0.5113" name="vcsa" dev="devtmpfs" ino=16 [ 458.301367][T17593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5112'. [ 458.352861][ T5918] asix 4-1:0.251: probe with driver asix failed with error -71 [ 458.378723][ T5918] usb 4-1: USB disconnect, device number 49 [ 458.450445][T17593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.021724][T17615] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 459.029084][T17615] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.200518][T17624] netlink: 388 bytes leftover after parsing attributes in process `syz.5.5124'. [ 459.417187][T17636] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5131'. [ 459.809898][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5139'. [ 459.951866][ T5918] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 460.129052][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 460.137035][ T5918] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 460.151563][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.169831][ T5918] usb 3-1: config 0 descriptor?? [ 460.179006][ T5918] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 460.870617][T17701] bridge_slave_0: left allmulticast mode [ 460.878469][T17701] bridge_slave_0: left promiscuous mode [ 460.886258][T17701] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.900364][T17701] bridge_slave_1: left allmulticast mode [ 460.906762][T17701] bridge_slave_1: left promiscuous mode [ 460.913369][T17701] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.942425][ T5918] gspca_vc032x: reg_w err -110 [ 460.947260][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 460.953244][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 460.958595][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 460.964117][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 460.969424][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 460.983468][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 460.983464][T17701] bond0: (slave bond_slave_0): Releasing backup interface [ 461.016756][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 461.016805][T17701] bond0: (slave bond_slave_1): Releasing backup interface [ 461.030083][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 461.053961][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 461.059334][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 461.068185][T17701] team0: Port device team_slave_0 removed [ 461.077261][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 461.088655][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 461.094415][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 461.094725][T17701] team0: Port device team_slave_1 removed [ 461.099785][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 461.099802][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 461.099815][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 461.099827][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 461.109562][T17701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.134841][ T5918] gspca_vc032x: I2c Bus Busy Wait 00 [ 461.134862][ T5918] gspca_vc032x: Unknown sensor... [ 461.134927][ T5918] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 461.171862][T17701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.194716][T17701] veth1_to_batadv: left allmulticast mode [ 461.208920][ T5918] usb 3-1: USB disconnect, device number 43 [ 461.232345][T17701] veth1_to_batadv: left promiscuous mode [ 461.252839][T17701] bridge0: port 3(veth1_to_batadv) entered disabled state [ 461.266326][T17701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.278702][T17701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.298256][T17703] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5162'. [ 461.921122][T17739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5179'. [ 462.072342][T17747] veth0_to_bridge: entered promiscuous mode [ 462.089931][T17745] veth0_to_bridge: left promiscuous mode [ 462.365731][ T9104] kernel write not supported for file /snd/midiC2D0 (pid: 9104 comm: kworker/0:10) [ 462.464484][T17766] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 462.493938][T17766] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 462.762009][T17775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5197'. [ 464.022206][ T9104] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 464.186590][ T9104] usb 1-1: Using ep0 maxpacket: 32 [ 464.196125][T17838] bond0: (slave bond_slave_0): Releasing backup interface [ 464.205019][ T9104] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 464.216266][ T9104] usb 1-1: config 0 has no interface number 0 [ 464.226729][T17838] bond0: (slave bond_slave_1): Releasing backup interface [ 464.234311][ T9104] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.251464][ T9104] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.279514][T17838] team0: Port device team_slave_0 removed [ 464.287765][ T9104] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 464.308558][T17838] team0: Port device team_slave_1 removed [ 464.314727][ T9104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.324425][T17838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.335177][ T9104] usb 1-1: config 0 descriptor?? [ 464.351028][T17838] bond0: (slave bond1): Releasing backup interface [ 464.777680][T17859] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5233'. [ 464.818366][T17861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5234'. [ 464.955267][ T9104] uclogic 0003:28BD:0094.002C: pen parameters not found [ 464.963023][ T9104] uclogic 0003:28BD:0094.002C: interface is invalid, ignoring [ 464.974714][ T9104] usb 1-1: USB disconnect, device number 41 [ 465.224939][T17881] tap0: tun_chr_ioctl cmd 1074025694 [ 465.242626][T17880] program syz.3.5242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.255242][T17883] ax25_connect(): syz.2.5244 uses autobind, please contact jreuter@yaina.de [ 465.957300][T17906] mkiss: ax0: crc mode is auto. [ 466.035101][T17906] Falling back ldisc for ttyS3. [ 466.476485][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5264'. [ 466.582623][T17932] Cannot find del_set index 0 as target [ 466.652628][ T5879] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 466.801833][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 466.813683][ T5879] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 466.827355][ T5879] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 466.835755][ T5879] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 466.844782][ T5879] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 466.854409][ T5879] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 466.863667][ T5879] usb 1-1: config 0 has no interface number 0 [ 466.870049][ T5879] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 466.881324][ T5879] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 466.899779][ T5879] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 466.925966][ T5879] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 466.940402][ T5879] usb 1-1: config 0 interface 125 has no altsetting 0 [ 466.941977][ T9104] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 466.953277][ T5879] usb 1-1: config 0 interface 125 has no altsetting 2 [ 466.968302][ T5879] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 466.980227][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.994034][ T5879] usb 1-1: Product: syz [ 466.999500][ T5879] usb 1-1: Manufacturer: syz [ 467.009328][ T5879] usb 1-1: SerialNumber: syz [ 467.019945][ T5879] usb 1-1: config 0 descriptor?? [ 467.030461][ T5879] usb 1-1: selecting invalid altsetting 2 [ 467.105378][ T9104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.122701][ T9104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.137609][ T9104] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 467.148518][ T9104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.166236][ T9104] usb 6-1: config 0 descriptor?? [ 467.256924][ C1] usb 1-1: async_complete: urb error -71 [ 467.262780][ C1] usb 1-1: async_complete: urb error -71 [ 467.268546][ C1] usb 1-1: async_complete: urb error -71 [ 467.274315][ C1] usb 1-1: async_complete: urb error -71 [ 467.287485][ T5879] get_1284_register: usb error -71 [ 467.293015][ T5879] uss720 1-1:0.125: probe with driver uss720 failed with error -71 [ 467.310502][ T5879] usb 1-1: USB disconnect, device number 42 [ 467.543628][T17954] block nbd1: NBD_DISCONNECT [ 467.802638][ T9104] hid-led 0003:1D34:000A.002D: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.5-1/input0 [ 467.834434][ T9104] hid-led 0003:1D34:000A.002D: Dream Cheeky Webmail Notifier initialized [ 468.052052][ T9104] usb 6-1: USB disconnect, device number 23 [ 468.972998][ T5843] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11 [ 471.200257][T18105] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.216266][T18105] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.225447][T18105] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.234575][T18105] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.244406][T18105] vxlan1: entered promiscuous mode [ 471.249590][T18105] vxlan1: entered allmulticast mode [ 472.981900][ T9104] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 473.000666][T18179] trusted_key: encrypted_key: keylen parameter is missing [ 473.104550][T18191] ubi0: attaching mtd0 [ 473.112361][T18191] ubi0 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 473.194517][ T9104] usb 1-1: Using ep0 maxpacket: 8 [ 473.210550][ T9104] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 473.242042][ T9104] usb 1-1: New USB device strings: Mfr=1, Product=247, SerialNumber=3 [ 473.250307][ T9104] usb 1-1: Product: syz [ 473.271983][ T9104] usb 1-1: Manufacturer: syz [ 473.276684][ T9104] usb 1-1: SerialNumber: syz [ 473.294432][ T9104] usb 1-1: config 0 descriptor?? [ 473.609719][ T9104] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 473.818343][ T9104] gspca_sunplus: reg_w_riv err -71 [ 473.824395][ T9104] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 473.849824][ T9104] usb 1-1: USB disconnect, device number 43 [ 474.391859][ T9104] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 474.563681][ T9104] usb 4-1: Using ep0 maxpacket: 16 [ 474.588311][ T9104] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 474.608046][ T9104] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 474.624192][ T9104] usb 4-1: Product: syz [ 474.628851][ T9104] usb 4-1: Manufacturer: syz [ 474.633770][ T9104] usb 4-1: SerialNumber: syz [ 474.641402][ T9104] usb 4-1: config 0 descriptor?? [ 474.862232][ T5918] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 474.870116][ T9091] usb 4-1: USB disconnect, device number 50 [ 475.012145][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 475.019324][ T5918] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 475.035171][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.048813][ T5918] usb 3-1: config 0 descriptor?? [ 475.061120][ T5918] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 475.231794][ T9079] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 475.406455][ T9079] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 475.421723][ T9079] usb 1-1: config 0 has no interface number 0 [ 475.421786][ T9079] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.421819][ T9079] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.421861][ T9079] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 475.421889][ T9079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.424128][ T9079] usb 1-1: config 0 descriptor?? [ 475.843550][ T9079] hid-retrode 0003:0403:97C1.002E: unknown main item tag 0x0 [ 475.843595][ T9079] hid-retrode 0003:0403:97C1.002E: unknown main item tag 0x2 [ 475.843627][ T9079] hid-retrode 0003:0403:97C1.002E: item fetching failed at offset 2/5 [ 475.844197][ T9079] hid-retrode 0003:0403:97C1.002E: probe with driver hid-retrode failed with error -22 [ 475.875895][ T5918] gspca_sonixj: reg_r err -71 [ 475.889220][ T5918] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 475.891426][ T5918] usb 3-1: USB disconnect, device number 44 [ 476.057926][ T9091] usb 1-1: USB disconnect, device number 44 [ 476.482159][ T9091] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 476.646484][ T9091] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 476.668274][ T9091] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 476.682053][ T9091] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 476.694532][ T9091] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.706438][T18282] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 476.717475][ T9091] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 477.145503][ T5918] usb 6-1: USB disconnect, device number 24 [ 478.043441][T18342] loop6: detected capacity change from 0 to 524287999 [ 478.066174][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.075747][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.096506][T18340] tun0: tun_chr_ioctl cmd 1074025677 [ 478.111810][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.121113][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.122462][T18340] tun0: linktype set to 512 [ 478.142309][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.151716][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.176720][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.186010][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.201666][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.210900][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.270177][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.279461][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.315469][T18346] Invalid logical block size (3) [ 478.324614][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.333924][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.354297][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.363617][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.371851][T18342] ldm_validate_partition_table(): Disk read failed. [ 478.380825][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.390264][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.406771][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 478.416069][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 478.430690][T18354] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 18354 comm: syz.2.5447) [ 478.432671][T18342] Dev loop6: unable to read RDB block 0 [ 478.456167][T18342] loop6: unable to read partition table [ 478.485382][ T29] audit: type=1800 audit(4828.433:1114): pid=18354 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.5447" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=64066 res=0 errno=0 [ 478.512230][T18342] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 478.684188][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5450'. [ 478.706401][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5450'. [ 478.734852][T18362] veth1_to_team: entered promiscuous mode [ 478.890325][T18362] syz.5.5452 (18362) used greatest stack depth: 18640 bytes left [ 480.116103][T18420] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5475'. [ 480.473247][T18439] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.530965][T18442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5485'. [ 480.998097][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5496'. [ 481.620011][T18493] bridge0: port 3(vlan2) entered blocking state [ 481.649680][T18493] bridge0: port 3(vlan2) entered disabled state [ 481.669983][T18493] vlan2: entered allmulticast mode [ 481.682734][T18493] gretap0: entered allmulticast mode [ 481.697484][T18493] vlan2: entered promiscuous mode [ 481.712076][T18493] gretap0: entered promiscuous mode [ 481.723085][T18493] bridge0: port 3(vlan2) entered blocking state [ 481.729518][T18493] bridge0: port 3(vlan2) entered forwarding state [ 482.195159][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5517'. [ 482.801393][T18497] syz.3.5509 (18497): drop_caches: 2 [ 483.064366][T18533] netlink: 'syz.3.5525': attribute type 25 has an invalid length. [ 483.084548][T18533] netlink: 'syz.3.5525': attribute type 8 has an invalid length. [ 483.341976][T18542] Bluetooth: MGMT ver 1.23 [ 483.518479][T18554] program syz.5.5536 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.708735][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5541'. [ 483.757472][T18563] bridge_slAve_0: renamed from lo (while UP) [ 484.482091][ T9079] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 484.631874][ T9079] usb 3-1: Using ep0 maxpacket: 16 [ 484.639485][ T9079] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 484.652522][ T9079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 484.674864][ T9079] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 484.684959][ T9079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.693513][ T9079] usb 3-1: Product: syz [ 484.702101][ T9079] usb 3-1: Manufacturer: syz [ 484.706783][ T9079] usb 3-1: SerialNumber: syz [ 484.717560][ T9079] usb 3-1: config 0 descriptor?? [ 484.726596][ T9079] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 484.741016][ T9079] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 485.343299][ T9079] em28xx 3-1:0.0: chip ID is em2860 [ 485.603955][ T9079] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 485.613451][ T9079] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 485.620619][ T9079] em28xx 3-1:0.0: No AC97 audio processor [ 485.630268][ T9079] usb 3-1: USB disconnect, device number 45 [ 485.639440][ T9079] em28xx 3-1:0.0: Disconnecting em28xx [ 485.651117][ T9079] em28xx 3-1:0.0: Freeing device [ 485.754950][T18633] binder: 18632:18633 ioctl 400c620e 20000140 returned -22 [ 486.134273][T18645] syz.5.5574[18645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 486.134447][T18645] syz.5.5574[18645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 486.146981][T18645] syz.5.5574[18645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 486.245464][T18647] vlan3: entered promiscuous mode [ 486.282112][T18647] vlan3: entered allmulticast mode [ 486.290158][T18647] syz_tun: entered allmulticast mode [ 486.304804][T18647] syz_tun: entered promiscuous mode [ 486.338846][T18647] team0: Port device vlan3 added [ 486.423328][ T5876] kworker/0:4 (5876) used greatest stack depth: 18328 bytes left [ 486.682531][T18668] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 486.689492][T18668] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 486.703119][T18668] vhci_hcd vhci_hcd.0: Device attached [ 486.718385][T18671] vhci_hcd: connection closed [ 486.724276][ T145] vhci_hcd: stop threads [ 486.736279][ T145] vhci_hcd: release socket [ 486.740801][ T145] vhci_hcd: disconnect device [ 487.126171][T18690] binder: binder_mmap: 18689 20ffd000-21000000 bad vm_flags failed -1 [ 487.994905][T18720] netlink: 'syz.2.5605': attribute type 1 has an invalid length. [ 488.010928][T18720] netlink: 'syz.2.5605': attribute type 2 has an invalid length. [ 488.121948][ T29] audit: type=1326 audit(4838.073:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18724 comm="syz.1.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 488.172174][ T29] audit: type=1326 audit(4838.073:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18724 comm="syz.1.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 488.195050][ T29] audit: type=1326 audit(4838.073:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18724 comm="syz.1.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 488.216109][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.252472][ T29] audit: type=1326 audit(4838.073:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18724 comm="syz.1.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 488.338021][ T29] audit: type=1326 audit(4838.073:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18724 comm="syz.1.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 488.388400][ T29] audit: type=1326 audit(4838.073:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18724 comm="syz.1.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 488.412306][ T9091] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 488.434407][ T29] audit: type=1326 audit(4838.073:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18724 comm="syz.1.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 488.486443][ T29] audit: type=1326 audit(4838.073:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18724 comm="syz.1.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 488.540266][ T29] audit: type=1326 audit(4838.073:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18724 comm="syz.1.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 488.550175][T18737] netlink: 'syz.2.5613': attribute type 1 has an invalid length. [ 488.576699][T18737] netlink: 'syz.2.5613': attribute type 2 has an invalid length. [ 488.589708][ T29] audit: type=1326 audit(4838.073:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18724 comm="syz.1.5607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 488.617440][ T9091] usb 1-1: Using ep0 maxpacket: 8 [ 488.637682][ T9091] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 488.652114][ T9091] usb 1-1: config 0 has no interface number 0 [ 488.670853][ T9091] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92 [ 488.691151][ T9091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.699763][ T9091] usb 1-1: Product: syz [ 488.709844][ T9091] usb 1-1: Manufacturer: syz [ 488.721756][ T9091] usb 1-1: SerialNumber: syz [ 488.733363][ T9091] usb 1-1: config 0 descriptor?? [ 488.742136][ T9091] usb 1-1: selecting invalid altsetting 2 [ 488.780649][ T9091] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 488.958873][ T9091] usb 1-1: USB disconnect, device number 45 [ 489.032749][T18748] netlink: 'syz.3.5617': attribute type 16 has an invalid length. [ 489.040649][T18748] netlink: 'syz.3.5617': attribute type 3 has an invalid length. [ 489.052127][T18748] netlink: 'syz.3.5617': attribute type 1 has an invalid length. [ 489.059933][T18748] netlink: 64030 bytes leftover after parsing attributes in process `syz.3.5617'. [ 489.255034][T18755] dummy0: entered promiscuous mode [ 489.288158][T18755] dummy0: left promiscuous mode [ 489.631210][T18767] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5625'. [ 489.977638][T18780] tap0: tun_chr_ioctl cmd 35108 [ 490.260167][T18796] netlink: 'syz.5.5639': attribute type 1 has an invalid length. [ 490.278813][T18798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5638'. [ 490.772594][T18815] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5647'. [ 491.016977][T18826] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5652'. [ 491.222468][ T9104] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 491.259456][T18840] netlink: 'syz.5.5658': attribute type 6 has an invalid length. [ 491.382354][ T9104] usb 1-1: Using ep0 maxpacket: 16 [ 491.406825][ T9104] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 491.418204][ T9104] usb 1-1: config 0 has no interface number 0 [ 491.427745][ T9104] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 491.440496][ T9104] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 491.443638][T18844] block device autoloading is deprecated and will be removed. [ 491.469173][ T9104] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 491.494740][ T9104] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.506640][ T9104] usb 1-1: Product: syz [ 491.510879][ T9104] usb 1-1: Manufacturer: syz [ 491.519411][ T9104] usb 1-1: SerialNumber: syz [ 491.529002][ T9104] usb 1-1: config 0 descriptor?? [ 491.549304][T18825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 491.563565][T18825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 491.798760][T18825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 491.811891][T18825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 492.293482][T18881] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5677'. [ 492.440378][ T9104] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 492.451426][ T9104] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 492.481870][ T9104] asix 1-1:0.251: probe with driver asix failed with error -71 [ 492.503151][ T9104] usb 1-1: USB disconnect, device number 46 [ 493.421871][ T9091] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 493.623895][ T9091] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.648427][ T9091] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.848235][ T9091] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 493.858267][ T9091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 493.867082][ T9091] usb 1-1: SerialNumber: syz [ 493.993666][T18949] UBIFS error (pid: 18949): cannot open "/dev/loop3", error -22 [ 494.088992][ T9091] usb 1-1: 0:2 : does not exist [ 494.134197][ T9091] usb 1-1: USB disconnect, device number 47 [ 494.616133][ T9091] hid-generic 0000:0003:0000.002F: unknown main item tag 0x0 [ 494.640235][ T9091] hid-generic 0000:0003:0000.002F: unknown main item tag 0x0 [ 494.666673][T18976] netlink: 340 bytes leftover after parsing attributes in process `syz.3.5718'. [ 494.675929][ T9091] hid-generic 0000:0003:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 494.791325][T18981] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5720'. [ 495.794131][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5736'. [ 495.996031][ T5843] Bluetooth: hci0: unknown advertising packet type: 0x32 [ 495.996118][ T5843] Bluetooth: hci0: Malformed LE Event: 0x02 [ 496.153538][T19037] ptrace attach of "./syz-executor exec"[5835] was attempted by ""[19037] [ 496.604926][T19060] netlink: 'syz.5.5753': attribute type 7 has an invalid length. [ 496.832061][ T8] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 496.986819][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 497.010916][T19073] netem: incorrect ge model size [ 497.011185][ T8] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 497.038832][T19073] netem: change failed [ 497.050405][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.078474][ T8] usb 4-1: config 0 descriptor?? [ 497.452647][ T9091] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 497.522585][T19086] program syz.0.5764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.633613][ T9091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.653029][ T9091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.681923][ T9091] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 497.697373][ T9091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.717283][ T9091] usb 3-1: config 0 descriptor?? [ 497.729285][ T8] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 497.770745][ T8] asix 4-1:0.0: probe with driver asix failed with error -71 [ 497.800511][ T8] usb 4-1: USB disconnect, device number 51 [ 498.145203][ T9091] lg-g15 0003:046D:C222.0030: unknown main item tag 0x0 [ 498.161750][ T9091] lg-g15 0003:046D:C222.0030: unknown main item tag 0x0 [ 498.168910][ T9091] lg-g15 0003:046D:C222.0030: unknown main item tag 0x0 [ 498.179039][ T9091] lg-g15 0003:046D:C222.0030: unknown main item tag 0x0 [ 498.207418][ T9091] lg-g15 0003:046D:C222.0030: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 498.386669][ T9091] usb 3-1: USB disconnect, device number 46 [ 498.652310][ T9079] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 498.728881][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 498.728901][ T29] audit: type=1326 audit(4848.683:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19109 comm="syz.3.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dad85d29 code=0x7ffc0000 [ 498.760548][ T29] audit: type=1326 audit(4848.683:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19109 comm="syz.3.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76dad85d29 code=0x7ffc0000 [ 498.831778][ T9079] usb 1-1: Using ep0 maxpacket: 16 [ 498.838748][ T9079] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 498.843583][T19114] MPI: mpi too large (187712 bits) [ 498.848954][ T9079] usb 1-1: config 0 has no interface number 0 [ 498.863610][ T9079] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 498.888975][ T9079] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 498.990555][ T9079] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 499.001191][ T9079] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 499.018609][ T9079] usb 1-1: Product: syz [ 499.024105][ T9079] usb 1-1: SerialNumber: syz [ 499.031126][ T9079] usb 1-1: config 0 descriptor?? [ 499.046311][ T9079] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 499.060090][ T9079] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input59 [ 499.317856][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 499.318668][ T9104] usb 1-1: USB disconnect, device number 48 [ 499.324977][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 499.376230][ T9104] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 500.366510][T19165] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5799'. [ 501.022096][ T9079] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 501.194138][ T9079] usb 4-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 501.203740][ T9079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.215818][ T9079] usb 4-1: config 0 descriptor?? [ 501.223647][T19207] ref_ctr_offset mismatch. inode: 0x1784 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 501.225629][ T9079] gspca_main: tv8532-2.14.0 probing 0545:808b [ 501.630434][ T9079] usb 4-1: USB disconnect, device number 52 [ 501.661942][ T8] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 501.788365][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.796214][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.821761][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 501.833672][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 501.845745][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 501.864870][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 501.893509][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.903215][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 501.911418][ T8] usb 1-1: SerialNumber: syz [ 501.924905][T19205] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 501.946501][T19228] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.5826'. [ 501.959916][T19228] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 502.175621][ T8] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 502.199615][ T8] usb 1-1: USB disconnect, device number 49 [ 502.315780][T19240] netlink: zone id is out of range [ 502.330996][T19240] netlink: zone id is out of range [ 502.336516][T19240] netlink: zone id is out of range [ 502.346683][T19240] netlink: zone id is out of range [ 502.399692][T19240] netlink: zone id is out of range [ 502.439250][T19240] netlink: zone id is out of range [ 502.476502][T19240] netlink: zone id is out of range [ 502.502246][T19240] netlink: zone id is out of range [ 502.521744][T19240] netlink: zone id is out of range [ 502.543319][T19240] netlink: zone id is out of range [ 502.841755][ T5918] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 503.011752][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 503.013535][ T5918] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 503.013571][ T5918] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 503.013597][ T5918] usb 6-1: config 0 has no interface number 0 [ 503.013632][ T5918] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.013663][ T5918] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 503.013695][ T5918] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 503.014660][ T5918] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 503.014695][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 503.014720][ T5918] usb 6-1: Product: syz [ 503.016904][ T5918] usb 6-1: config 0 descriptor?? [ 503.017576][T19248] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 503.115425][ T8] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 503.286885][T19244] syz.1.5835 (19244): drop_caches: 2 [ 503.342294][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 503.344367][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.344408][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 503.344453][ T8] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 503.344509][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.347135][ T8] usb 4-1: config 0 descriptor?? [ 503.613102][T19269] netlink: 'syz.1.5846': attribute type 1 has an invalid length. [ 503.621214][T19269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5846'. [ 503.663314][ T5918] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input60 [ 503.793899][ T8] dragonrise 0003:0079:0011.0031: hidraw0: USB HID vff.fe Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 503.883080][ T9079] usb 6-1: USB disconnect, device number 25 [ 503.883208][ C0] keyspan_remote 6-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 504.049339][ T8] usb 4-1: USB disconnect, device number 53 [ 505.624493][T19332] syz.1.5873 (19332): drop_caches: 2 [ 506.277084][T19350] pim6reg1: left allmulticast mode [ 506.291283][T19350] pim6reg1: left promiscuous mode [ 506.307430][T19350] bridge0: port 1(pim6reg1) entered disabled state [ 506.378765][T19350] bridge_slave_1: left allmulticast mode [ 506.388018][T19350] bridge_slave_1: left promiscuous mode [ 506.406097][T19350] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.454043][T19350] bond0: (slave bond_slave_0): Releasing backup interface [ 506.502772][T19350] bond0: (slave bond_slave_1): Releasing backup interface [ 506.618954][T19350] team0: Port device team_slave_0 removed [ 506.652603][T19350] team0: Port device team_slave_1 removed [ 506.672911][T19350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.687083][T19350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.705774][T19350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.730569][T19350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.786463][T19350] vlan2: left allmulticast mode [ 506.827019][T19350] gretap0: left allmulticast mode [ 506.833714][T19350] vlan2: left promiscuous mode [ 506.838552][T19350] gretap0: left promiscuous mode [ 506.874625][T19350] bridge0: port 3(vlan2) entered disabled state [ 506.918268][T19350] syz_tun: left allmulticast mode [ 506.931820][T19350] syz_tun: left promiscuous mode [ 506.948096][T19350] team0: Port device vlan3 removed [ 507.493198][T19386] netlink: 'syz.1.5897': attribute type 3 has an invalid length. [ 507.728207][T19389] netlink: 'syz.1.5898': attribute type 6 has an invalid length. [ 507.737228][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5898'. [ 508.324108][T19398] IPVS: Error connecting to the multicast addr [ 510.088824][T19456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5928'. [ 510.106631][T19456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5928'. [ 510.276299][ T9091] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 510.441152][ T9091] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 510.472303][ T9091] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 510.480554][ T9091] usb 4-1: config 0 has no interface number 0 [ 510.491466][T19444] team0 (unregistering): Port device team_slave_0 removed [ 510.495945][ T9091] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.517944][ T9091] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 510.524049][T19444] team0 (unregistering): Port device team_slave_1 removed [ 510.530640][ T9091] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 510.557733][ T9091] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 510.569360][ T9091] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 510.612718][T19456] gtp0: entered promiscuous mode [ 510.617741][T19456] gtp0: entered allmulticast mode [ 510.623966][ T9091] usb 4-1: Product: syz [ 510.628187][ T9091] usb 4-1: Manufacturer: syz [ 510.644783][ T9091] usb 4-1: config 0 descriptor?? [ 510.650706][T19453] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 510.920730][T19480] vlan2: entered promiscuous mode [ 510.937166][T19480] vlan2: entered allmulticast mode [ 511.290602][ T9091] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input61 [ 511.369158][T19499] ALSA: seq fatal error: cannot create timer (-22) [ 511.545446][ T9079] usb 4-1: USB disconnect, device number 54 [ 511.551450][ C1] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 512.229025][T19531] syz.2.5955 (19531): drop_caches: 2 [ 512.275531][T19533] ALSA: mixer_oss: invalid OSS volume 'P²7{*;à»é+§$p ' [ 512.298193][T19533] ALSA: mixer_oss: invalid OSS volume '' [ 512.320825][T19533] ALSA: mixer_oss: invalid OSS volume 'b$Kf®Í7?]ÿ˜‘æ3séX' [ 512.350220][T19533] ALSA: mixer_oss: invalid OSS volume 'æƒKô×?Fõg' [ 512.374579][T19533] ALSA: mixer_oss: invalid OSS volume '¢ðš.L!¼tã8©yª»à¿ÈW¶+ûÑ$N§½Jsœ' [ 512.831283][T19548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5962'. [ 513.370798][ T5843] Bluetooth: hci1: unknown advertising packet type: 0xaa [ 513.370998][ T5843] Bluetooth: hci1: unknown advertising packet type: 0x81 [ 513.381192][ T5843] Bluetooth: hci1: Dropping invalid advertising data [ 513.397023][ T5843] Bluetooth: hci1: Malformed LE Event: 0x02 [ 515.181999][ T5921] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 515.242492][ T9091] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 515.361972][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 515.368962][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.380800][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 515.392366][ T9091] usb 1-1: Using ep0 maxpacket: 32 [ 515.394744][ T5921] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 515.402783][ T9091] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 515.416153][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.426341][ T5921] usb 4-1: config 0 descriptor?? [ 515.429856][ T9091] usb 1-1: config 0 has no interface number 0 [ 515.437908][ T9091] usb 1-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 515.449575][ T9091] usb 1-1: config 0 interface 244 has no altsetting 0 [ 515.459038][ T9091] usb 1-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 515.468984][ T9091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.479545][ T9091] usb 1-1: Product: syz [ 515.484537][ T9091] usb 1-1: Manufacturer: syz [ 515.489315][ T9091] usb 1-1: SerialNumber: syz [ 515.496504][ T9091] usb 1-1: config 0 descriptor?? [ 515.506301][ T9091] snd_usb_toneport 1-1:0.244: Line 6 GuitarPort found [ 515.602387][ T5879] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 515.711345][ T9091] snd_usb_toneport 1-1:0.244: cannot get proper max packet size [ 515.719474][ T9091] snd_usb_toneport 1-1:0.244: Line 6 GuitarPort now disconnected [ 515.729471][ T9091] snd_usb_toneport 1-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 515.760016][ T5879] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 515.769911][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.779883][ T5879] usb 3-1: config 0 descriptor?? [ 515.789746][ T5879] cp210x 3-1:0.0: cp210x converter detected [ 515.935484][ T9091] usb 1-1: USB disconnect, device number 50 [ 516.203334][ T5879] usb 3-1: cp210x converter now attached to ttyUSB0 [ 516.237528][ T5921] usbhid 4-1:0.0: can't add hid device: -71 [ 516.245019][ T5921] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 516.256997][ T5921] usb 4-1: USB disconnect, device number 55 [ 516.412292][ T5879] usb 3-1: USB disconnect, device number 47 [ 516.428779][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 516.441303][ T5879] cp210x 3-1:0.0: device disconnected [ 517.017357][T19690] loop2: detected capacity change from 0 to 7 [ 517.036562][T19690] Dev loop2: unable to read RDB block 7 [ 517.049373][T19690] loop2: AHDI p1 p2 [ 517.058562][T19690] loop2: partition table partially beyond EOD, truncated [ 517.067192][T19690] loop2: p1 size 972816640 extends beyond EOD, truncated [ 517.092131][ T5879] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 517.252146][ T5879] usb 4-1: Using ep0 maxpacket: 16 [ 517.273795][ T5879] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 517.297646][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.312024][ T5879] usb 4-1: Product: syz [ 517.318657][ T5879] usb 4-1: Manufacturer: syz [ 517.329436][ T5879] usb 4-1: SerialNumber: syz [ 517.343413][ T5879] usb 4-1: config 0 descriptor?? [ 517.358682][ T5879] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 517.571332][ T5879] gp8psk: usb in 128 operation failed. [ 517.586924][ T5879] gp8psk: usb in 137 operation failed. [ 517.596995][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.608031][ T5879] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 517.619087][ T5879] usb 4-1: media controller created [ 517.644463][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.653456][ T5878] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 517.681282][ T5879] gp8psk_fe: Frontend revision 1 attached [ 517.688021][ T5879] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 517.696410][ T5879] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 517.821177][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 517.835497][ T5878] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 517.849286][ T5878] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 517.866193][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.896323][ T5878] usb 1-1: config 0 descriptor?? [ 517.906876][ T5878] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input62 [ 517.939479][ T5879] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 517.972052][ T5879] gp8psk: found Genpix USB device pID = 201 (hex) [ 518.106453][ T5179] bcm5974 1-1:0.0: could not read from device [ 518.123417][ T5878] bcm5974 1-1:0.0: could not read from device [ 518.170270][ T5179] bcm5974 1-1:0.0: could not read from device [ 518.183817][ T5878] input: failed to attach handler mousedev to device input62, error: -5 [ 518.217160][ T5878] usb 1-1: USB disconnect, device number 51 [ 518.218312][ T5179] bcm5974 1-1:0.0: could not read from device [ 518.238135][ T9091] usb 4-1: USB disconnect, device number 56 [ 518.339385][ T9091] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 518.690456][T19728] tipc: Started in network mode [ 518.695651][T19728] tipc: Node identity 7, cluster identity 4711 [ 518.702019][T19728] tipc: Node number set to 7 [ 519.468000][T19757] syzkaller1: entered promiscuous mode [ 519.488319][T19757] syzkaller1: entered allmulticast mode [ 519.643667][ T9091] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 519.802093][ T9091] usb 3-1: Using ep0 maxpacket: 32 [ 519.818042][ T9091] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 519.828086][ T9091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.850303][ T9091] usb 3-1: config 0 descriptor?? [ 519.878096][ T9091] gspca_main: sunplus-2.14.0 probing 041e:400b [ 520.482388][ T5878] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 520.490358][ T5879] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 520.642382][ T5879] usb 6-1: Using ep0 maxpacket: 16 [ 520.649959][ T5878] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.666100][ T5879] usb 6-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 520.676847][ T5878] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.686578][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.698512][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 149, changing to 11 [ 520.711366][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 17459, setting to 1024 [ 520.724286][ T5878] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 520.734241][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 520.743238][ T5879] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.757257][ T5878] usb 4-1: SerialNumber: syz [ 520.768712][ T5879] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 520.778297][ T5879] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 520.787379][ T5879] usb 6-1: Manufacturer: syz [ 520.796309][ T5879] usb 6-1: config 0 descriptor?? [ 520.911100][ T9091] gspca_sunplus: reg_w_riv err -71 [ 520.916714][ T9091] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 520.935876][ T9091] usb 3-1: USB disconnect, device number 48 [ 520.974944][ T5878] usb 4-1: 0:2 : does not exist [ 520.996096][ T5878] usb 4-1: 0:0: failed to get current value for ch 0 (-22) [ 521.035106][ T5878] usb 4-1: USB disconnect, device number 57 [ 521.102933][ T5879] rc_core: IR keymap rc-hauppauge not found [ 521.108918][ T5879] Registered IR keymap rc-empty [ 521.115189][ T5879] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.152839][ T5879] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.173106][ T5879] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 521.189778][ T5879] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input63 [ 521.205076][ T5879] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.252046][ T5879] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.271993][ T5879] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.302549][ T5879] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.352525][ T5879] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.378525][ T5879] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.402459][ T5879] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.423731][ T5879] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.445911][ T5879] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.472590][ T5879] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 521.492764][ T5879] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 521.522016][ T5879] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 521.551108][ T5879] usb 6-1: USB disconnect, device number 26 [ 523.572179][ T8] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 523.653409][T19863] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.6098'. [ 523.724465][ T8] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 523.734928][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.754036][ T8] usb 1-1: config 0 descriptor?? [ 523.776421][ T8] cp210x 1-1:0.0: cp210x converter detected [ 523.862041][ T9104] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 524.011764][ T9104] usb 6-1: Using ep0 maxpacket: 16 [ 524.019854][ T9104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.037797][ T9104] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.049501][ T9104] usb 6-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 524.063299][ T9104] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.067051][T19871] netlink: 'syz.1.6103': attribute type 7 has an invalid length. [ 524.093073][ T9104] usb 6-1: config 0 descriptor?? [ 524.099769][T19871] netlink: 208140 bytes leftover after parsing attributes in process `syz.1.6103'. [ 524.207951][ T8] usb 1-1: cp210x converter now attached to ttyUSB0 [ 524.428182][ T5879] usb 1-1: USB disconnect, device number 52 [ 524.437337][ T5879] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 524.468340][ T5879] cp210x 1-1:0.0: device disconnected [ 524.513274][ T9104] ortek 0003:05A4:8003.0032: unknown main item tag 0x2 [ 524.520234][ T9104] ortek 0003:05A4:8003.0032: unknown main item tag 0x0 [ 524.542124][ T9104] ortek 0003:05A4:8003.0032: hidraw0: USB HID v0.00 Device [HID 05a4:8003] on usb-dummy_hcd.5-1/input0 [ 524.728406][ T5878] usb 6-1: USB disconnect, device number 27 [ 524.735300][T19894] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 525.619784][T19934] loop2: detected capacity change from 0 to 7 [ 525.628129][T19934] Dev loop2: unable to read RDB block 7 [ 525.635324][T19934] loop2: unable to read partition table [ 525.641173][T19934] loop2: partition table beyond EOD, truncated [ 525.650265][T19934] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 525.666335][T19935] rtc_cmos 00:00: Alarms can be up to one day in the future [ 526.202737][ T5878] rtc_cmos 00:00: Alarms can be up to one day in the future [ 526.252342][ T5878] rtc_cmos 00:00: Alarms can be up to one day in the future [ 526.283910][ T5878] rtc_cmos 00:00: Alarms can be up to one day in the future [ 526.300605][ T5878] rtc_cmos 00:00: Alarms can be up to one day in the future [ 526.310413][ T5878] rtc rtc0: __rtc_set_alarm: err=-22 [ 526.642483][ T5878] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 526.833304][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.857957][T19968] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 526.868017][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.896900][ T5878] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 526.942076][ T5878] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 526.962832][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.994780][ T5878] usb 1-1: config 0 descriptor?? [ 527.469664][ T5878] plantronics 0003:047F:FFFF.0033: No inputs registered, leaving [ 527.542943][ T5878] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 527.758166][ T5878] usb 1-1: USB disconnect, device number 53 [ 527.828545][T19997] loop2: detected capacity change from 0 to 7 [ 527.837470][T19997] Dev loop2: unable to read RDB block 7 [ 527.843453][T19997] loop2: AHDI p1 p2 [ 527.847699][T19997] loop2: partition table partially beyond EOD, truncated [ 527.855084][T19997] loop2: p1 start 926365495 is beyond EOD, truncated [ 527.947110][T19999] syzkaller1: entered promiscuous mode [ 527.962626][T19999] syzkaller1: entered allmulticast mode [ 530.487058][T20077] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6188'. [ 531.521855][T20103] net_ratelimit: 299 callbacks suppressed [ 531.521887][T20103] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 532.470642][T20137] evm: overlay not supported [ 532.825047][ T29] audit: type=1326 audit(4882.773:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20148 comm="syz.1.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 532.907995][ T29] audit: type=1326 audit(4882.783:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20148 comm="syz.1.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 532.956978][T20151] binder: 20150:20151 ioctl c0306201 0 returned -14 [ 532.967589][T20151] binder: 20150:20151 ioctl c0184800 0 returned -22 [ 533.012378][ T29] audit: type=1326 audit(4882.783:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20148 comm="syz.1.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 533.036850][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6228'. [ 533.065097][ T29] audit: type=1326 audit(4882.783:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20148 comm="syz.1.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 533.143200][ T29] audit: type=1326 audit(4882.783:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20148 comm="syz.1.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 533.251729][ T29] audit: type=1326 audit(4882.813:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20148 comm="syz.1.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 533.298671][ T29] audit: type=1326 audit(4882.813:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20148 comm="syz.1.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 533.352030][ T9104] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 533.375735][ T29] audit: type=1326 audit(4882.813:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20148 comm="syz.1.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f321297cce7 code=0x7ffc0000 [ 533.438379][ T29] audit: type=1326 audit(4882.813:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20148 comm="syz.1.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3212921f29 code=0x7ffc0000 [ 533.492653][ T29] audit: type=1326 audit(4882.813:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20148 comm="syz.1.6224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f321297cce7 code=0x7ffc0000 [ 533.522191][ T9104] usb 1-1: Using ep0 maxpacket: 16 [ 533.583262][ T9104] usb 1-1: config 0 interface 0 has no altsetting 0 [ 533.592322][ T9104] usb 1-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 533.618983][ T9104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.663339][ T9104] usb 1-1: config 0 descriptor?? [ 534.122969][ T9104] hid (null): unknown global tag 0xe [ 534.128828][ T9104] hid (null): report_id 58501 is invalid [ 534.142120][ T9104] hid (null): unknown global tag 0x1c [ 534.149331][ T9104] hid (null): unknown global tag 0xe [ 534.155081][ T9104] hid (null): unknown global tag 0xe [ 534.160438][ T9104] hid (null): unknown global tag 0xe [ 534.166360][ T9104] hid (null): unknown global tag 0xe [ 534.182138][ T9104] hid (null): invalid report_count 1640429044 [ 534.188687][ T9104] hid (null): unknown global tag 0x16 [ 534.201788][ T9104] hid (null): unknown global tag 0xd [ 534.207197][ T9104] hid (null): report_id 2384115945 is invalid [ 534.234597][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x0 [ 534.243695][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x0 [ 534.252106][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x0 [ 534.260432][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x0 [ 534.269193][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x0 [ 534.278043][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x0 [ 534.286525][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x0 [ 534.294938][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x0 [ 534.303673][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x0 [ 534.312078][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x0 [ 534.320405][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x3 [ 534.328891][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x4 [ 534.337632][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unknown main item tag 0x6 [ 534.346318][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: unexpected long global item [ 534.355593][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: hidpp_probe:parse failed [ 534.364294][ T9104] logitech-hidpp-device 0003:046D:C09B.0034: probe with driver logitech-hidpp-device failed with error -22 [ 534.431942][ T9104] usb 1-1: USB disconnect, device number 54 [ 534.755479][T20208] syzkaller1: entered promiscuous mode [ 534.761207][T20208] syzkaller1: entered allmulticast mode [ 535.299934][T20201] geneve0: entered promiscuous mode [ 535.352085][T20201] geneve0: entered allmulticast mode [ 536.256510][ T5836] Bluetooth: hci5: sending frame failed (-49) [ 536.273423][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 537.171810][ T9104] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 537.365720][ T9104] usb 4-1: Using ep0 maxpacket: 8 [ 537.380143][ T9104] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 537.399456][ T9104] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.410875][ T9104] usb 4-1: config 0 descriptor?? [ 537.571763][ T5921] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 537.751867][ T5921] usb 3-1: Using ep0 maxpacket: 8 [ 537.764658][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 537.792020][ T5921] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 537.801217][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.844436][ T5921] usb 3-1: config 0 descriptor?? [ 538.063540][ T5921] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 538.444804][ T9104] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 538.455469][ T9104] asix 4-1:0.0: probe with driver asix failed with error -71 [ 538.467129][ T9104] usb 4-1: USB disconnect, device number 58 [ 538.481135][ T8] usb 3-1: USB disconnect, device number 49 [ 538.522357][ T5878] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 538.581792][ T5843] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 538.592504][ T5843] Bluetooth: hci2: Injecting HCI hardware error event [ 538.603306][ T5836] Bluetooth: hci2: hardware error 0x00 [ 538.684420][ T5878] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 538.693734][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.704218][ T5878] usb 6-1: config 0 descriptor?? [ 538.716255][ T5878] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 539.563000][ T5879] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 539.720657][ T5878] gspca_stv06xx: I2C: Read error writing address: -71 [ 539.732655][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.744815][ T5878] usb 6-1: USB disconnect, device number 28 [ 539.759914][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.776288][T20374] input: syz0 as /devices/virtual/input/input64 [ 539.783187][ T5879] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 539.795512][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.808714][ T5879] usb 4-1: config 0 descriptor?? [ 540.244745][ T5879] cm6533_jd 0003:0D8C:0022.0035: unknown main item tag 0x0 [ 540.282244][ T5879] cm6533_jd 0003:0D8C:0022.0035: unknown main item tag 0x0 [ 540.300863][ T5879] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0035/input/input65 [ 540.350789][ T5879] cm6533_jd 0003:0D8C:0022.0035: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 540.484525][ T5879] usb 4-1: USB disconnect, device number 59 [ 540.662851][ T5836] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 540.874991][T20404] loop2: detected capacity change from 0 to 7 [ 540.910293][T20404] Dev loop2: unable to read RDB block 7 [ 540.917635][T20404] loop2: AHDI p1 p2 [ 540.923886][T20404] loop2: partition table partially beyond EOD, truncated [ 541.064899][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.215158][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.415159][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.553377][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.711784][ T8] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 541.742624][T20426] syz_tun: entered promiscuous mode [ 541.780385][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 541.780631][T20426] syz_tun: left promiscuous mode [ 541.797309][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 541.821962][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 541.842682][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 541.863596][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 541.874337][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 541.902872][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 541.920368][ T8] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.944949][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 541.951734][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 541.981779][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.995652][ T8] usb 1-1: config 0 descriptor?? [ 542.079084][T20437] kvm: kvm [20436]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000014) [ 542.463365][ T8] logitech-djreceiver 0003:046D:C517.0036: hidraw0: USB HID v0.05 Device [HID 046d:c517] on usb-dummy_hcd.0-1/input0 [ 542.553424][T20453] xt_hashlimit: size too large, truncated to 1048576 [ 542.664379][ T9079] usb 1-1: USB disconnect, device number 55 [ 543.457404][ T35] bond0 (unregistering): Released all slaves [ 543.944478][ T5843] Bluetooth: hci4: command tx timeout [ 544.244654][ T35] bond1 (unregistering): Released all slaves [ 544.382095][ T35] tipc: Left network mode [ 545.006079][T20427] chnl_net:caif_netlink_parms(): no params data found [ 545.120767][ T35] hsr_slave_0: left promiscuous mode [ 545.136655][ T35] hsr_slave_1: left promiscuous mode [ 545.511816][ T9079] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 545.680076][ T9079] usb 1-1: Using ep0 maxpacket: 16 [ 545.696128][ T9079] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.707041][ T9079] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.718530][ T9079] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.728131][ T9079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.741676][ T9079] usb 1-1: Product: syz [ 545.745926][ T9079] usb 1-1: Manufacturer: syz [ 545.750599][ T9079] usb 1-1: SerialNumber: syz [ 546.040914][ T9079] usb 1-1: 0:2 : does not exist [ 546.072188][ T5843] Bluetooth: hci4: command tx timeout [ 546.099286][ T9079] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 546.228591][ T9079] usb 1-1: USB disconnect, device number 56 [ 546.485229][ T5921] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 546.700613][ T5921] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 546.732395][ T5921] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 546.747530][ T5921] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.763047][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.771167][ T5921] usb 6-1: Product: syz [ 546.783092][ T5921] usb 6-1: Manufacturer: syz [ 546.787777][ T5921] usb 6-1: SerialNumber: syz [ 546.803073][ T5921] cdc_ncm 6-1:1.0: skipping garbage [ 547.068963][T20496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 547.076764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 547.076776][ T5879] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 547.085347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 547.240452][T20512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6379'. [ 547.263885][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 547.291001][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 547.312142][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 547.334220][ T5879] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 547.365627][ T5879] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 547.397372][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.409694][ T5879] usb 4-1: config 0 descriptor?? [ 547.423965][T20509] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 547.719173][T20496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 547.822000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 547.875166][ T5879] plantronics 0003:047F:FFFF.0037: unknown main item tag 0xd [ 547.896050][ T5879] plantronics 0003:047F:FFFF.0037: No inputs registered, leaving [ 547.930669][ T5921] cdc_ncm 6-1:1.0: bind() failure [ 547.955862][ T5921] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 547.965524][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 547.965543][ T29] audit: type=1326 audit(4897.923:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20515 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 547.994484][ T5879] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 548.041287][ T5921] usb 6-1: USB disconnect, device number 29 [ 548.055791][ T29] audit: type=1326 audit(4897.963:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20515 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 548.077039][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.122068][ T5843] Bluetooth: hci4: command tx timeout [ 548.152506][ T29] audit: type=1326 audit(4897.973:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20515 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 548.196483][ T29] audit: type=1326 audit(4897.973:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20515 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 548.205640][ T5879] usb 4-1: USB disconnect, device number 60 [ 548.291676][ T29] audit: type=1326 audit(4897.973:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20515 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 548.312747][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.378424][ T29] audit: type=1326 audit(4897.973:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20515 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 548.483856][ T29] audit: type=1326 audit(4897.973:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20515 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 548.530792][ T29] audit: type=1326 audit(4897.973:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20515 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 548.573648][T20427] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.615958][T20427] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.632500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 548.660279][T20427] bridge_slave_0: entered allmulticast mode [ 548.689280][T20427] bridge_slave_0: entered promiscuous mode [ 548.713448][T20427] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.742998][ T29] audit: type=1326 audit(4897.973:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20515 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 548.797643][ T29] audit: type=1326 audit(4897.973:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20515 comm="syz.1.6381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3212985d29 code=0x7ffc0000 [ 548.838218][T20427] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.869811][T20427] bridge_slave_1: entered allmulticast mode [ 548.887772][T20427] bridge_slave_1: entered promiscuous mode [ 549.015439][T20427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.079609][T20427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.218679][T20427] team0: Port device team_slave_0 added [ 549.262274][T20427] team0: Port device team_slave_1 added [ 549.304364][ T35] IPVS: stop unused estimator thread 0... [ 549.360802][T20427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.371479][T20427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.442846][T20427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.520634][T20427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.542831][T20427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.631633][T20427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.710138][T20427] hsr_slave_0: entered promiscuous mode [ 549.730006][T20427] hsr_slave_1: entered promiscuous mode [ 549.748854][T20427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.762619][T20427] Cannot create hsr debugfs directory [ 550.035401][T20539] overlayfs: invalid origin (0000) [ 550.181871][ T5843] Bluetooth: hci4: command tx timeout [ 550.601884][ T5918] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 550.664076][T20427] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 550.687839][T20427] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 550.701512][T20427] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 550.718060][T20427] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 550.792495][ T5918] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 550.822139][ T5918] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 550.851883][ T5918] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 550.861725][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 550.873044][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 550.889767][T20427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.907711][T20427] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.919385][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.923535][ T5918] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 550.926623][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.935791][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 550.952310][ T5918] usb 4-1: Product: syz [ 550.956804][ T5918] usb 4-1: Manufacturer: syz [ 550.988000][ T5918] cdc_wdm 4-1:1.0: skipping garbage [ 550.993523][ T5918] cdc_wdm 4-1:1.0: skipping garbage [ 551.004075][ T5918] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 551.010092][ T5918] cdc_wdm 4-1:1.0: Unknown control protocol [ 551.034887][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.042050][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.303458][T20427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.378306][T20427] veth0_vlan: entered promiscuous mode [ 551.392912][T20427] veth1_vlan: entered promiscuous mode [ 551.425518][T20427] veth0_macvtap: entered promiscuous mode [ 551.441082][T20427] veth1_macvtap: entered promiscuous mode [ 551.460901][T20427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.472200][T20427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.483824][T20427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.496782][T20427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.507809][T20427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.537991][T20427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.592620][T20427] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.611703][T20427] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.630716][T20427] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.650183][T20427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.854489][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.873296][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.916039][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.936230][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.362438][ T9079] usb 4-1: USB disconnect, device number 61 [ 554.142105][T20652] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 554.158305][T20652] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 554.203074][T20652] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 554.215197][T20652] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 554.240952][T20652] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 554.448386][T20669] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6446'. [ 555.571242][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 555.585481][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 555.604340][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 555.649014][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 555.657222][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 555.665462][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 555.898051][T20689] chnl_net:caif_netlink_parms(): no params data found [ 556.028002][T20689] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.044376][T20689] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.052209][T20689] bridge_slave_0: entered allmulticast mode [ 556.059439][T20689] bridge_slave_0: entered promiscuous mode [ 556.069028][T20689] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.076417][T20689] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.088255][T20689] bridge_slave_1: entered allmulticast mode [ 556.094800][ T8] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 556.107796][T20689] bridge_slave_1: entered promiscuous mode [ 556.140175][T20689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 556.156361][T20689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.183634][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 556.245907][T20689] team0: Port device team_slave_0 added [ 556.254157][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.265583][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 556.274723][T20689] team0: Port device team_slave_1 added [ 556.280480][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.290683][ T8] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 556.299931][ T5918] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 556.308202][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.319067][ T8] usb 1-1: config 0 descriptor?? [ 556.363258][T20689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.370503][T20689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.396809][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.404664][T20689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.418092][T20689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.427293][T20689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.454555][T20689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.482097][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 556.494044][ T5918] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 556.504738][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.517777][ T5918] usb 3-1: config 0 descriptor?? [ 556.567932][T20689] hsr_slave_0: entered promiscuous mode [ 556.575787][T20689] hsr_slave_1: entered promiscuous mode [ 556.584827][T20689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 556.592890][T20689] Cannot create hsr debugfs directory [ 556.749269][ T8] itetech 0003:06CB:73F5.0038: unbalanced collection at end of report description [ 556.770637][ T8] itetech 0003:06CB:73F5.0038: probe with driver itetech failed with error -22 [ 556.854482][T20689] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.997430][ T8] usb 1-1: USB disconnect, device number 57 [ 557.070816][T20689] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.223632][T20689] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.378610][T20689] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.407584][ T5918] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 557.418530][ T5918] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 557.448385][ T5918] asix 3-1:0.0: probe with driver asix failed with error -71 [ 557.482729][ T5918] usb 3-1: USB disconnect, device number 50 [ 557.663026][T20689] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 557.684367][T20689] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 557.708726][T20689] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 557.735094][T20689] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 557.791872][ T5843] Bluetooth: hci2: command tx timeout [ 558.005514][T20689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.040332][T20689] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.174420][T20689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 558.228733][T20689] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 558.316620][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.322079][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 558.323839][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.339867][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.347111][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.355563][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 558.444062][ T5918] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 558.690660][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 558.714595][T20689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.742231][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 558.799231][ T5918] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 558.809436][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.818206][ T5918] usb 4-1: Product: syz [ 558.823197][ T5918] usb 4-1: Manufacturer: syz [ 558.827897][ T5918] usb 4-1: SerialNumber: syz [ 558.834838][ T5918] usb 4-1: config 0 descriptor?? [ 559.261038][ T5918] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 559.279364][T20689] veth0_vlan: entered promiscuous mode [ 559.301144][T20689] veth1_vlan: entered promiscuous mode [ 559.370789][T20689] veth0_macvtap: entered promiscuous mode [ 559.403460][T20689] veth1_macvtap: entered promiscuous mode [ 559.429301][T20689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.439942][T20689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.450262][T20689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.473048][T20689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.493317][T20689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.696672][T20689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.721075][T20689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.751681][T20689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.772198][T20689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.793741][T20689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.828937][T20689] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.853922][T20689] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.863768][ T5843] Bluetooth: hci2: command tx timeout [ 559.874736][T20689] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.883708][T20689] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.908605][ T9079] usb 4-1: USB disconnect, device number 62 [ 560.112449][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.129509][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.137747][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.149762][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.172407][T20814] sctp: [Deprecated]: syz.1.6504 (pid 20814) Use of int in maxseg socket option. [ 560.172407][T20814] Use struct sctp_assoc_value instead [ 560.422576][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 560.571224][T20833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6511'. [ 560.586476][T20833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6511'. [ 560.821483][T20840] pim6reg1: entered promiscuous mode [ 560.842107][T20840] pim6reg1: entered allmulticast mode [ 561.249253][ T5031] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.469645][ T5031] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.509886][T20853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6520'. [ 561.554654][T20853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6520'. [ 561.611291][ T5878] kernel write not supported for file /snd/seq (pid: 5878 comm: kworker/1:4) [ 561.748125][ T5031] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.888901][ T5031] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.989349][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 562.005143][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 562.014848][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 562.036037][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 562.047077][ T5836] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 562.054731][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 562.214295][ T5031] bridge_slave_1: left allmulticast mode [ 562.242002][ T5031] bridge_slave_1: left promiscuous mode [ 562.247987][ T5031] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.278948][ T5031] bridge_slave_0: left allmulticast mode [ 562.308739][ T5031] bridge_slave_0: left promiscuous mode [ 562.335795][ T5031] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.242446][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.248815][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.134860][ T5843] Bluetooth: hci2: command tx timeout [ 564.226601][ T5031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.272796][ T5031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.323474][ T5031] bond0 (unregistering): Released all slaves [ 564.585442][T20921] binder: 20920:20921 ioctl c0306201 0 returned -14 [ 564.804681][T20868] chnl_net:caif_netlink_parms(): no params data found [ 564.871811][ T5918] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 565.022194][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 565.035393][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 565.071701][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 565.086305][ T5918] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 565.095668][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.103760][ T5918] usb 4-1: Product: syz [ 565.108049][ T5918] usb 4-1: Manufacturer: syz [ 565.113079][ T5918] usb 4-1: SerialNumber: syz [ 565.120572][ T5918] usb 4-1: config 0 descriptor?? [ 565.129400][ T5918] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 565.139291][ T5918] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 565.346568][ T5031] hsr_slave_0: left promiscuous mode [ 565.364394][ T5031] hsr_slave_1: left promiscuous mode [ 565.383259][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 565.383279][ T29] audit: type=1326 audit(4915.343:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 565.410503][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.437166][ T5031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.451957][ T5031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.472559][ T29] audit: type=1326 audit(4915.373:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 565.493723][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.501189][ T5031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.521878][ T5031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.546781][ T29] audit: type=1326 audit(4915.373:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 565.620514][ T5031] veth1_macvtap: left promiscuous mode [ 565.636699][ T29] audit: type=1326 audit(4915.383:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 565.658873][ T5031] veth0_macvtap: left promiscuous mode [ 565.664675][ T5031] veth1_vlan: left promiscuous mode [ 565.680274][ T5031] veth0_vlan: left promiscuous mode [ 565.688672][ T29] audit: type=1326 audit(4915.383:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 565.709960][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.736257][ T29] audit: type=1326 audit(4915.383:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 565.759048][ T5918] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 565.790090][ T29] audit: type=1326 audit(4915.383:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 565.868439][ T29] audit: type=1326 audit(4915.383:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 565.892764][ T29] audit: type=1326 audit(4915.383:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 565.941895][ T29] audit: type=1326 audit(4915.383:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20952 comm="syz.0.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 565.962106][ T9079] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 565.966800][ T5918] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 565.991323][ T5918] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 566.002830][ T5918] em28xx 4-1:0.0: No AC97 audio processor [ 566.025839][ T5918] usb 4-1: USB disconnect, device number 63 [ 566.033280][ T5918] em28xx 4-1:0.0: Disconnecting em28xx [ 566.057195][ T5918] em28xx 4-1:0.0: Freeing device [ 566.126289][ T9079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.146077][ T9079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.167348][ T9079] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 566.182365][ T5843] Bluetooth: hci2: command tx timeout [ 566.199201][ T9079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.227503][ T9079] usb 3-1: config 0 descriptor?? [ 566.665930][ T9079] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 566.694457][ T9079] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 566.701516][ T9079] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 566.730572][ T9079] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 566.752414][ T9079] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 566.759460][ T9079] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 566.791167][ T9079] cp2112 0003:10C4:EA90.0039: unknown main item tag 0x0 [ 566.838439][ T9079] cp2112 0003:10C4:EA90.0039: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 566.962993][ T9079] cp2112 0003:10C4:EA90.0039: error requesting version [ 566.985776][ T9079] cp2112 0003:10C4:EA90.0039: probe with driver cp2112 failed with error -71 [ 567.006156][ T9079] usb 3-1: USB disconnect, device number 51 [ 567.355143][ T5031] team0 (unregistering): Port device team_slave_1 removed [ 567.426370][ T5031] team0 (unregistering): Port device team_slave_0 removed [ 568.271692][ T5843] Bluetooth: hci2: command tx timeout [ 568.473538][T20868] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.487126][T20868] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.495000][T20868] bridge_slave_0: entered allmulticast mode [ 568.504004][T20868] bridge_slave_0: entered promiscuous mode [ 568.517099][T20868] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.541891][T20868] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.557896][T20868] bridge_slave_1: entered allmulticast mode [ 568.573599][T20868] bridge_slave_1: entered promiscuous mode [ 568.699308][T20868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.722862][T20868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.964783][T20868] team0: Port device team_slave_0 added [ 568.975717][T20868] team0: Port device team_slave_1 added [ 569.112079][T20868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.119389][T20868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.145314][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.159948][T20868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.188898][T20868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.204949][T20868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.230972][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.246301][T20868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.384969][T20868] hsr_slave_0: entered promiscuous mode [ 569.400310][T20868] hsr_slave_1: entered promiscuous mode [ 569.414279][T20868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 569.421995][T20868] Cannot create hsr debugfs directory [ 570.237592][T20868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 570.265680][T20868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 570.287342][T20868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 570.305353][T20868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 570.342300][ T5843] Bluetooth: hci2: command tx timeout [ 570.460524][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 570.460544][ T29] audit: type=1326 audit(4920.413:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 570.514984][T20868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.528204][ T29] audit: type=1326 audit(4920.453:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 570.550900][T20868] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.584334][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.588463][ T29] audit: type=1326 audit(4920.453:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 570.591510][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.612526][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.646786][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.654004][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.661807][ T29] audit: type=1326 audit(4920.453:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 570.706808][ T29] audit: type=1326 audit(4920.453:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 570.760504][ T29] audit: type=1326 audit(4920.453:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 570.819899][ T29] audit: type=1326 audit(4920.453:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 570.872304][ T29] audit: type=1326 audit(4920.453:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 570.894881][ T29] audit: type=1326 audit(4920.453:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 570.940898][ T29] audit: type=1326 audit(4920.463:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21027 comm="syz.0.6588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f63385d29 code=0x7ffc0000 [ 571.100292][T20868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.621558][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 676.628603][ C1] rcu: 0-...!: (0 ticks this GP) idle=90d4/1/0x4000000000000000 softirq=78921/78922 fqs=1 [ 676.640592][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P53/1:b..l [ 676.648464][ C1] rcu: (detected by 1, t=10502 jiffies, g=94761, q=613 ncpus=2) [ 676.656234][ C1] Sending NMI from CPU 1 to CPUs 0: [ 676.656281][ C0] NMI backtrace for cpu 0 [ 676.656305][ C0] CPU: 0 UID: 0 PID: 20868 Comm: syz-executor Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 676.656326][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 676.656337][ C0] RIP: 0010:_raw_spin_lock_irq+0x2a/0x120 [ 676.656369][ C0] Code: f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 83 ec 60 49 89 fc 65 48 8b 04 25 28 00 00 00 48 89 44 24 40 <49> bf 00 00 00 00 00 fc ff df 4c 8d 74 24 20 48 c7 04 24 b3 8a b5 [ 676.656384][ C0] RSP: 0018:ffffc900000072e0 EFLAGS: 00000082 [ 676.656399][ C0] RAX: 6161e4f5eb5b7d00 RBX: ffff8880b862c9c8 RCX: ffff888025d90000 [ 676.656413][ C0] RDX: 0000000000010100 RSI: ffffffff8c5edd40 RDI: ffff8880b862c880 [ 676.656427][ C0] RBP: ffffc90000007370 R08: ffffffff818cdaf6 R09: 1ffffffff2030b0e [ 676.656441][ C0] R10: dffffc0000000000 R11: fffffbfff2030b0f R12: ffff8880b862c880 [ 676.656454][ C0] R13: 0000000000000001 R14: ffff888024fd6340 R15: ffff8880b862c880 [ 676.656468][ C0] FS: 00005555641c6500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 676.656484][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 676.656496][ C0] CR2: 00007f8f641b1f98 CR3: 000000005c1f4000 CR4: 00000000003526f0 [ 676.656513][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 676.656523][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 676.656535][ C0] Call Trace: [ 676.656543][ C0] [ 676.656552][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 676.656585][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 676.656617][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 676.656650][ C0] ? nmi_handle+0x2a/0x5a0 [ 676.656688][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 676.656714][ C0] ? nmi_handle+0x14f/0x5a0 [ 676.656733][ C0] ? nmi_handle+0x2a/0x5a0 [ 676.656754][ C0] ? _raw_spin_lock_irq+0x2a/0x120 [ 676.656775][ C0] ? default_do_nmi+0x63/0x160 [ 676.656797][ C0] ? exc_nmi+0x123/0x1f0 [ 676.656817][ C0] ? end_repeat_nmi+0xf/0x53 [ 676.656836][ C0] ? __hrtimer_run_queues+0x626/0xd30 [ 676.656863][ C0] ? _raw_spin_lock_irq+0x2a/0x120 [ 676.656886][ C0] ? _raw_spin_lock_irq+0x2a/0x120 [ 676.656909][ C0] ? _raw_spin_lock_irq+0x2a/0x120 [ 676.656933][ C0] [ 676.656939][ C0] [ 676.656953][ C0] __hrtimer_run_queues+0x670/0xd30 [ 676.656977][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 676.657006][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 676.657032][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 676.657055][ C0] hrtimer_interrupt+0x403/0xa40 [ 676.657091][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 676.657113][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 676.657138][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.657168][ C0] RIP: 0010:unwind_next_frame+0xcec/0x22d0 [ 676.657188][ C0] Code: 33 48 8b 44 24 58 80 3c 28 00 4c 8b 6c 24 08 48 8b 5c 24 78 4c 8b 7c 24 50 74 08 48 89 df e8 0b 96 b7 00 48 8b 04 24 48 89 03 10 00 00 00 4c 89 ff 31 f6 e8 d5 97 b7 00 e9 85 07 00 00 48 89 [ 676.657202][ C0] RSP: 0018:ffffc900000076f0 EFLAGS: 00000246 [ 676.657217][ C0] RAX: ffffc90003efedf0 RBX: ffffc900000077f8 RCX: 1ffff92000000ef8 [ 676.657231][ C0] RDX: ffffffff90a33d76 RSI: 0000000000000002 RDI: ffffc90003efede8 [ 676.657243][ C0] RBP: dffffc0000000000 R08: 0000000000000006 R09: ffffc900000078b0 [ 676.657256][ C0] R10: ffffc90000007810 R11: ffffffff818b3a60 R12: ffffc90003f00000 [ 676.657269][ C0] R13: ffffc900000077c0 R14: ffffffff814ba930 R15: ffffc90000007810 [ 676.657284][ C0] ? unwind_next_frame+0xb0/0x22d0 [ 676.657302][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 676.657341][ C0] ? preempt_count_add+0x8/0x190 [ 676.657368][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 676.657396][ C0] arch_stack_walk+0x11c/0x150 [ 676.657420][ C0] ? unwind_next_frame+0xb0/0x22d0 [ 676.657441][ C0] stack_trace_save+0x118/0x1d0 [ 676.657469][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 676.657498][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 676.657520][ C0] kasan_save_track+0x3f/0x80 [ 676.657544][ C0] ? kasan_save_track+0x3f/0x80 [ 676.657565][ C0] ? kasan_save_free_info+0x40/0x50 [ 676.657584][ C0] ? __kasan_slab_free+0x59/0x70 [ 676.657606][ C0] ? slab_free_after_rcu_debug+0x11a/0x280 [ 676.657630][ C0] ? rcu_core+0xaaa/0x17a0 [ 676.657672][ C0] ? handle_softirqs+0x2d4/0x9b0 [ 676.657698][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 676.657722][ C0] ? irq_exit_rcu+0x9/0x30 [ 676.657745][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 676.657769][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.657803][ C0] ? preempt_count_add+0x8/0x190 [ 676.657852][ C0] kasan_save_free_info+0x40/0x50 [ 676.657871][ C0] __kasan_slab_free+0x59/0x70 [ 676.657896][ C0] slab_free_after_rcu_debug+0x11a/0x280 [ 676.657922][ C0] ? rcu_core+0xa37/0x17a0 [ 676.657942][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 676.657972][ C0] rcu_core+0xaaa/0x17a0 [ 676.658002][ C0] ? __pfx_rcu_core+0x10/0x10 [ 676.658025][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 676.658048][ C0] ? sched_clock+0x4a/0x70 [ 676.658074][ C0] ? mark_lock+0x9a/0x360 [ 676.658103][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 676.658124][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 676.658143][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 676.658174][ C0] handle_softirqs+0x2d4/0x9b0 [ 676.658208][ C0] ? __irq_exit_rcu+0xf7/0x220 [ 676.658235][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 676.658263][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 676.658285][ C0] __irq_exit_rcu+0xf7/0x220 [ 676.658310][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 676.658340][ C0] irq_exit_rcu+0x9/0x30 [ 676.658362][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 676.658387][ C0] [ 676.658393][ C0] [ 676.658399][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.658427][ C0] RIP: 0010:preempt_count_add+0x8/0x190 [ 676.658453][ C0] Code: 3c 24 e8 0b c9 95 00 eb 8c e9 ee fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 <53> 89 fb 48 c7 c0 c0 89 37 9a 48 c1 e8 03 49 bf 00 00 00 00 00 fc [ 676.658467][ C0] RSP: 0018:ffffc90003efedd8 EFLAGS: 00000202 [ 676.658482][ C0] RAX: 0000000000000001 RBX: 1ffff920007dfdd8 RCX: ffffc90003eff050 [ 676.658495][ C0] RDX: dffffc0000000000 RSI: ffffffff8203104f RDI: 0000000000000001 [ 676.658507][ C0] RBP: ffffc90003efeef8 R08: 0000000000000000 R09: ffffc90003efefb0 [ 676.658520][ C0] R10: ffffc90003efef10 R11: ffffffff818b3a60 R12: dffffc0000000000 [ 676.658533][ C0] R13: ffffc90003efeec0 R14: ffffffff8203104f R15: 0000000000000000 [ 676.658546][ C0] ? kasan_save_track+0x3f/0x80 [ 676.658569][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 676.658598][ C0] ? kasan_save_track+0x3f/0x80 [ 676.658622][ C0] ? kasan_save_track+0x3f/0x80 [ 676.658643][ C0] ? kasan_save_track+0x3f/0x80 [ 676.658669][ C0] unwind_next_frame+0xb0/0x22d0 [ 676.658693][ C0] ? stack_trace_save+0x118/0x1d0 [ 676.658720][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 676.658748][ C0] arch_stack_walk+0x11c/0x150 [ 676.658771][ C0] ? kasan_save_track+0x3f/0x80 [ 676.658796][ C0] stack_trace_save+0x118/0x1d0 [ 676.658823][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 676.658851][ C0] ? __pfx_validate_chain+0x10/0x10 [ 676.658879][ C0] kasan_save_track+0x3f/0x80 [ 676.658900][ C0] ? kasan_save_track+0x3f/0x80 [ 676.658951][ C0] __kasan_kmalloc+0x98/0xb0 [ 676.658977][ C0] __kmalloc_cache_noprof+0x243/0x390 [ 676.658995][ C0] ? sctp_inet6addr_event+0x36e/0x730 [ 676.659018][ C0] sctp_inet6addr_event+0x36e/0x730 [ 676.659039][ C0] ? rcu_read_unlock+0x87/0xa0 [ 676.659063][ C0] ? ipvlan_addr6_event+0x8c/0x420 [ 676.659086][ C0] notifier_call_chain+0x1a5/0x3f0 [ 676.659106][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 676.659124][ C0] atomic_notifier_call_chain+0xdb/0x180 [ 676.659143][ C0] ipv6_add_addr+0xde0/0x1090 [ 676.659172][ C0] ? __pfx_ipv6_add_addr+0x10/0x10 [ 676.659199][ C0] ? ipv6_get_ifaddr+0x7ff/0x8f0 [ 676.659228][ C0] inet6_addr_add+0x563/0xb00 [ 676.659261][ C0] inet6_rtm_newaddr+0x8a4/0xc80 [ 676.659288][ C0] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 676.659323][ C0] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 676.659346][ C0] rtnetlink_rcv_msg+0x73f/0xcf0 [ 676.659370][ C0] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 676.659396][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 676.659424][ C0] ? ref_tracker_free+0x643/0x7e0 [ 676.659447][ C0] netlink_rcv_skb+0x1e3/0x430 [ 676.659468][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 676.659493][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.659524][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 676.659544][ C0] netlink_unicast+0x7f6/0x990 [ 676.659576][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 676.659602][ C0] ? __virt_addr_valid+0x45f/0x530 [ 676.659622][ C0] ? __phys_addr_symbol+0x2f/0x70 [ 676.659641][ C0] ? __check_object_size+0x47a/0x730 [ 676.659677][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 676.659704][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.659726][ C0] ? __might_fault+0xaa/0x120 [ 676.659751][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.659769][ C0] __sock_sendmsg+0x221/0x270 [ 676.659797][ C0] __sys_sendto+0x363/0x4c0 [ 676.659819][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 676.659851][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 676.659872][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 676.659894][ C0] __x64_sys_sendto+0xde/0x100 [ 676.659916][ C0] do_syscall_64+0xf3/0x230 [ 676.659943][ C0] ? clear_bhb_loop+0x35/0x90 [ 676.659961][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.659989][ C0] RIP: 0033:0x7f8832987bbc [ 676.660011][ C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 676.660025][ C0] RSP: 002b:00007ffdd3e8c680 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 676.660043][ C0] RAX: ffffffffffffffda RBX: 00007f88336a4620 RCX: 00007f8832987bbc [ 676.660056][ C0] RDX: 0000000000000040 RSI: 00007f88336a4670 RDI: 0000000000000003 [ 676.660067][ C0] RBP: 0000000000000000 R08: 00007ffdd3e8c6d4 R09: 000000000000000c [ 676.660079][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 676.660089][ C0] R13: 0000000000000000 R14: 00007f88336a4670 R15: 0000000000000000 [ 676.660109][ C0] [ 676.660269][ C1] task:kworker/u8:3 state:R running task stack:21264 pid:53 tgid:53 ppid:2 flags:0x00004000 [ 677.682164][ C1] Workqueue: bat_events batadv_nc_worker [ 677.687843][ C1] Call Trace: [ 677.691148][ C1] [ 677.694112][ C1] __schedule+0x17fb/0x4be0 [ 677.698687][ C1] ? __pfx___schedule+0x10/0x10 [ 677.703674][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 677.709726][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 677.715071][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 677.720226][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 677.726001][ C1] irqentry_exit+0x5e/0x90 [ 677.730452][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 677.735941][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 677.741258][ C1] Code: 2b 00 74 08 4c 89 f7 e8 6a 99 88 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 677.760896][ C1] RSP: 0018:ffffc90000bd79e0 EFLAGS: 00000206 [ 677.767001][ C1] RAX: 0000000000000001 RBX: 1ffff9200017af48 RCX: ffff888022af8ad8 [ 677.775001][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0aaae0 RDI: ffffffff8c5edd60 [ 677.783003][ C1] RBP: ffffc90000bd7b40 R08: ffffffff94271887 R09: 1ffffffff284e310 [ 677.791003][ C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: 1ffff9200017af44 [ 677.799006][ C1] R13: dffffc0000000000 R14: ffffc90000bd7a40 R15: 0000000000000246 [ 677.807036][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 677.812104][ C1] ? batadv_nc_worker+0xcb/0x610 [ 677.817074][ C1] ? __pfx_lock_release+0x10/0x10 [ 677.822132][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 677.828171][ C1] batadv_nc_worker+0xec/0x610 [ 677.832981][ C1] ? batadv_nc_worker+0xcb/0x610 [ 677.837956][ C1] ? batadv_nc_worker+0xcb/0x610 [ 677.842929][ C1] ? process_scheduled_works+0x976/0x1840 [ 677.848691][ C1] process_scheduled_works+0xa66/0x1840 [ 677.854306][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 677.860340][ C1] ? assign_work+0x364/0x3d0 [ 677.864982][ C1] worker_thread+0x870/0xd30 [ 677.869620][ C1] ? __kthread_parkme+0x169/0x1d0 [ 677.874676][ C1] ? __pfx_worker_thread+0x10/0x10 [ 677.879818][ C1] kthread+0x2f0/0x390 [ 677.883918][ C1] ? __pfx_worker_thread+0x10/0x10 [ 677.889055][ C1] ? __pfx_kthread+0x10/0x10 [ 677.893684][ C1] ret_from_fork+0x4b/0x80 [ 677.898126][ C1] ? __pfx_kthread+0x10/0x10 [ 677.902747][ C1] ret_from_fork_asm+0x1a/0x30 [ 677.907565][ C1] [ 677.910619][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g94761 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 677.921846][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 677.931861][ C1] rcu: RCU grace-period kthread stack dump: [ 677.937768][ C1] task:rcu_preempt state:R running task stack:26064 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 677.949570][ C1] Call Trace: [ 677.952873][ C1] [ 677.955834][ C1] __schedule+0x17fb/0x4be0 [ 677.960403][ C1] ? __pfx___schedule+0x10/0x10 [ 677.965298][ C1] ? __pfx_lock_release+0x10/0x10 [ 677.970372][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 677.976734][ C1] ? schedule+0x90/0x320 [ 677.981011][ C1] schedule+0x14b/0x320 [ 677.985214][ C1] schedule_timeout+0x15a/0x290 [ 677.990105][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 677.995510][ C1] ? __pfx_process_timeout+0x10/0x10 [ 678.000843][ C1] ? prepare_to_swait_event+0x330/0x350 [ 678.006512][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 678.011396][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 678.016649][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 678.022578][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 678.027903][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 678.033846][ C1] ? finish_swait+0xd4/0x1e0 [ 678.038557][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 678.043195][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 678.048425][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 678.054358][ C1] ? __kthread_parkme+0x169/0x1d0 [ 678.059420][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 678.064731][ C1] kthread+0x2f0/0x390 [ 678.068861][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 678.074108][ C1] ? __pfx_kthread+0x10/0x10 [ 678.078825][ C1] ret_from_fork+0x4b/0x80 [ 678.083277][ C1] ? __pfx_kthread+0x10/0x10 [ 678.087901][ C1] ret_from_fork_asm+0x1a/0x30 [ 678.092727][ C1] [ 678.095773][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 678.102116][ C1] CPU: 1 UID: 0 PID: 21062 Comm: syz.3.6600 Not tainted 6.13.0-rc6-syzkaller-00290-gbe548645527a #0 [ 678.112908][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 678.123003][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 678.129812][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 c6 e6 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 71 e2 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 55 e2 [ 678.149460][ C1] RSP: 0018:ffffc9000db67940 EFLAGS: 00000246 [ 678.155565][ C1] RAX: ffffffff81938f8b RBX: 1ffff110170c8c65 RCX: 0000000000080000 [ 678.163588][ C1] RDX: ffffc9000ceda000 RSI: 000000000007ffff RDI: 0000000000080000 [ 678.171616][ C1] RBP: ffffc9000db67b40 R08: ffffffff81938f5a R09: 1ffffffff284e310 [ 678.179626][ C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: dffffc0000000000 [ 678.187646][ C1] R13: ffff8880b8646328 R14: ffff8880b873f940 R15: 0000000000000000 [ 678.195653][ C1] FS: 00007f76d8bf66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 678.204615][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.211221][ C1] CR2: 0000001b2fd1fffc CR3: 000000005b5ba000 CR4: 00000000003526f0 [ 678.219221][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 678.227215][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 678.235213][ C1] Call Trace: [ 678.238516][ C1] [ 678.241386][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 678.247761][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 678.253447][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 678.259293][ C1] ? cgroup_rstat_updated+0x13b/0xc30 [ 678.264712][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 678.270991][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 678.276408][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 678.282111][ C1] ? update_process_times+0x242/0x2f0 [ 678.287517][ C1] ? tick_nohz_handler+0x37c/0x500 [ 678.292669][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 678.298257][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 678.303685][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 678.309527][ C1] ? handle_softirqs+0x7e0/0x9b0 [ 678.314508][ C1] ? read_tsc+0x9/0x20 [ 678.318634][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 678.324740][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 678.329917][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 678.336110][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 678.341954][ C1] [ 678.344917][ C1] [ 678.347874][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 678.354078][ C1] ? smp_call_function_many_cond+0x19da/0x2c60 [ 678.360265][ C1] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 678.366461][ C1] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 678.372668][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 678.377745][ C1] ? __pfx___text_poke+0x10/0x10 [ 678.382719][ C1] ? __pfx___might_resched+0x10/0x10 [ 678.388044][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 678.394427][ C1] ? __pfx___might_resched+0x10/0x10 [ 678.399758][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 678.404819][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 678.410004][ C1] text_poke_bp_batch+0x352/0xb30 [ 678.415089][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 678.421117][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 678.426180][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 678.431810][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 678.438112][ C1] ? __jump_label_update+0x379/0x3a0 [ 678.443449][ C1] text_poke_finish+0x30/0x50 [ 678.448181][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 678.454223][ C1] static_key_slow_inc_cpuslocked+0x80/0xf0 [ 678.460348][ C1] static_key_slow_inc+0x1a/0x30 [ 678.465324][ C1] kvm_dev_ioctl+0x1855/0x2460 [ 678.470142][ C1] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 678.475373][ C1] ? __fget_files+0x2a/0x410 [ 678.480001][ C1] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 678.485145][ C1] __se_sys_ioctl+0xf5/0x170 [ 678.489780][ C1] do_syscall_64+0xf3/0x230 [ 678.494324][ C1] ? clear_bhb_loop+0x35/0x90 [ 678.499051][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.504992][ C1] RIP: 0033:0x7f76dad85d29 [ 678.509443][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.529170][ C1] RSP: 002b:00007f76d8bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.537624][ C1] RAX: ffffffffffffffda RBX: 00007f76daf75fa0 RCX: 00007f76dad85d29 [ 678.545626][ C1] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 678.553623][ C1] RBP: 00007f76dae01b08 R08: 0000000000000000 R09: 0000000000000000 [ 678.561626][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.569711][ C1] R13: 0000000000000000 R14: 00007f76daf75fa0 R15: 00007fff5c4586e8 [ 678.577734][ C1]