last executing test programs: 5m24.137952887s ago: executing program 4 (id=1326): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x11, @loopback, 0x7ffffff}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)="cf20", 0x2}], 0x1}}], 0x2, 0x400c800) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback}}}, 0x84) 5m23.975967807s ago: executing program 4 (id=1330): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) flock(r0, 0x1) fcntl$setlease(r0, 0x400, 0x1) close(r0) 5m23.840768598s ago: executing program 4 (id=1334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5m23.624243844s ago: executing program 4 (id=1339): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0) 5m23.477138111s ago: executing program 4 (id=1343): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x1d, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 5m22.23076377s ago: executing program 4 (id=1367): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002015}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000002380)={0x80000000}) 5m21.927945517s ago: executing program 32 (id=1367): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x20002015}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000002380)={0x80000000}) 2m1.277711326s ago: executing program 2 (id=5728): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) 2m0.357608952s ago: executing program 2 (id=5748): timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 1m59.723953219s ago: executing program 2 (id=5757): socket(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 1m59.373973772s ago: executing program 2 (id=5762): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) socket$key(0xf, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/213, 0xd5}, {0x0}, {0x0}], 0x3, 0xfffffffb, 0x4) 1m58.879253948s ago: executing program 2 (id=5771): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x1, 0x8010000000000084) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x4, 0x8, 0x3, 0x0, 0x2, 0x7}, 0x0, 0x0) syz_usb_disconnect(r0) 1m57.649774187s ago: executing program 2 (id=5788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) 1m57.332942973s ago: executing program 33 (id=5788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) 1m35.416896704s ago: executing program 6 (id=6240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x401) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaacd9, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0x3000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="672e670fc7baf5ceb9230200000f320fc5b0040000000f9a000000008b000f01cfc4e21d4501c74424ba00e40000660f38823d0e3000005224020f01c50000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bafc0c66b8004066ef", 0x63}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m34.8375389s ago: executing program 6 (id=6249): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x2fb}], 0x1}}], 0x1, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m34.547400609s ago: executing program 6 (id=6256): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000001e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, r7, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 1m33.471340962s ago: executing program 6 (id=6281): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x432a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m32.931693075s ago: executing program 6 (id=6295): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x820100, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m31.865577647s ago: executing program 6 (id=6321): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000640)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)={0x20, 0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1m16.775335947s ago: executing program 34 (id=6321): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000640)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)={0x20, 0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5.252933454s ago: executing program 5 (id=7539): socket$l2tp6(0xa, 0x2, 0x73) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4.254652907s ago: executing program 5 (id=7561): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) 3.741853539s ago: executing program 1 (id=7572): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 3.718288042s ago: executing program 5 (id=7574): r0 = epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timerfd_create(0x0, 0x0) r4 = eventfd2(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000180)={0x20000005}) 3.604776527s ago: executing program 1 (id=7576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x200, 0x0) read$FUSE(r4, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 2.598275844s ago: executing program 1 (id=7580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace(0x4207, r1) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r4, &(0x7f00000000c0)=""/83, 0x4da, 0x0) 2.59763152s ago: executing program 5 (id=7582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7) 2.489616854s ago: executing program 3 (id=7583): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x10003}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38f", 0x5}, {&(0x7f0000000140)}], 0x2}], 0x1, 0x40800) recvmsg(r4, 0x0, 0x0) 2.413399967s ago: executing program 0 (id=7584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000"], 0x5c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)}], 0x1}, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2.412554065s ago: executing program 1 (id=7585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000004c0)={0x18, 0x0, {0x1, @random="dffcc2101e34", 'vcan0\x00'}}, 0x1e) sendmsg(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000640)="d96c3c51b0acb24d37ab5961a303e8f849abacd4264654ab77f9b7bfdfb47cbbd9f6601c58f5fe0c2821c40fdd5fbbab664fa84ecf1121328312f511ed213cdbb967f5410c784b3d3f", 0x49}], 0x1}, 0x20000040) 2.231682863s ago: executing program 0 (id=7586): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2.129804825s ago: executing program 3 (id=7587): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.193659128s ago: executing program 1 (id=7588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) flistxattr(r2, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000002340), 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 1.18842964s ago: executing program 5 (id=7589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x735}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) 1.121905989s ago: executing program 3 (id=7590): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_pidfd_open(r1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f00000001c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @bcast}, 0x1c) 1.121672315s ago: executing program 0 (id=7591): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) read$FUSE(r1, 0x0, 0x0) stat(0x0, 0x0) getegid() close_range(r0, 0xffffffffffffffff, 0x0) 1.072264889s ago: executing program 3 (id=7592): socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="02060200020000000200000000000000bcbb37b0ebaf58b84112e26aae680515535c6e8944823d3922953cd95fbc1427bb8e43b6b80dc4b14b4578ab25827474bd6ae63b64cb0866c19440416789cef84bcba14e06783842922a9e4b298abadef5a8465c0272a8adb680f23bf5f1a549bf5b2e6b1f12bbd9f37b70be3ee767a6b703674448acad0b940aeaebdc59ad743d8df3e33b2ace492be6e7eabcbaabb8c1a53118194026fc260b525ccbb208ab7656799485cf26ef145d7c26c9150b6878acd8f564af02ffc048ba7f003b5e1f390d42d606883bbbb7346f5ba469d76b478194d410c999b7799d9325370751e9219b4273e444bfe4ea9b1725fa8bd01aba416c861ae7c25331fe25c2ebef7dd17c6a6d7e3e7b7ef5f3a3282431e9d33123ea765e0295efe2071ac0ecaa06aeda21a4aec05390"], 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.035153867s ago: executing program 0 (id=7593): syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, 0x0, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20) 961.872408ms ago: executing program 1 (id=7594): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 190.51974ms ago: executing program 0 (id=7595): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000000000}) 182.163866ms ago: executing program 3 (id=7596): mkdir(&(0x7f0000000080)='./file0\x00', 0x115) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x0, 0x1, 0xf82f, 0x10000}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) 121.857585ms ago: executing program 5 (id=7597): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000340)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) 7.869521ms ago: executing program 0 (id=7598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) 0s ago: executing program 3 (id=7599): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r3, 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)=0x8763ffe, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newnexthop={0x1c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) kernel console output (not intermixed with test programs): 3] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.586568][ T5893] usb 4-1: Product: syz [ 149.586582][ T5893] usb 4-1: Manufacturer: syz [ 149.586595][ T5893] usb 4-1: SerialNumber: syz [ 149.617514][ T5893] usb 4-1: config 0 descriptor?? [ 149.852627][ T5893] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 149.883983][ T5893] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 149.884499][ T5893] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 149.884551][ T5893] usb 4-1: media controller created [ 149.963414][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.361092][ T5930] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.511107][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 150.513589][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.513644][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.513671][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 150.513690][ T5930] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 150.513711][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.515392][ T5930] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 150.515419][ T5930] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 150.515436][ T5930] usb 3-1: Manufacturer: syz [ 150.534544][ T5930] usb 3-1: config 0 descriptor?? [ 150.941039][ T5930] rc_core: IR keymap rc-hauppauge not found [ 150.941079][ T5930] Registered IR keymap rc-empty [ 150.943624][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 150.961147][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 150.988285][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 150.995506][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 151.037005][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 151.039026][ C1] mceusb 3-1:0.0: long-range (0x1) receiver active [ 151.051696][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 151.074568][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 151.091098][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 151.111105][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 151.111536][ T5893] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 151.131567][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 151.152457][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 151.171470][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 151.192204][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 151.211195][ T5930] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 151.234032][ T5893] usb 4-1: USB disconnect, device number 9 [ 151.277533][ T5930] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 151.277559][ T5930] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x1 active) [ 151.300848][ T5930] usb 3-1: USB disconnect, device number 5 [ 151.394706][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 151.394735][ T7549] netlink: 'syz.4.750': attribute type 9 has an invalid length. [ 151.426918][ T7549] macvlan2: entered allmulticast mode [ 151.426938][ T7549] veth0_macvtap: entered allmulticast mode [ 153.102971][ T1227] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.261032][ T1227] usb 3-1: Using ep0 maxpacket: 16 [ 153.264768][ T1227] usb 3-1: config 0 interface 0 has no altsetting 0 [ 153.264808][ T1227] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 153.264829][ T1227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.276506][ T1227] usb 3-1: config 0 descriptor?? [ 153.728773][ T1227] hid (null): nested delimiters [ 153.946457][ T5906] usb 3-1: USB disconnect, device number 6 [ 155.035328][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'. [ 155.539461][ T7665] ref_ctr_offset mismatch. inode: 0x265 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 155.741001][ T5906] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.901157][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 155.903685][ T5906] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 155.903715][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.966933][ T5906] pvrusb2: Hardware description: Terratec Grabster AV400 [ 155.966951][ T5906] pvrusb2: ********** [ 155.966957][ T5906] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 155.966968][ T5906] pvrusb2: Important functionality might not be entirely working. [ 155.966977][ T5906] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 155.966988][ T5906] pvrusb2: ********** [ 156.151003][ T2367] pvrusb2: Invalid write control endpoint [ 156.317948][ T2367] pvrusb2: Invalid write control endpoint [ 156.317963][ T2367] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 156.317972][ T2367] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 156.317979][ T2367] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 156.317987][ T2367] pvrusb2: Device being rendered inoperable [ 156.318085][ T2367] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 156.318130][ T2367] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 156.319100][ T2367] pvrusb2: Attached sub-driver cx25840 [ 156.319109][ T2367] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 156.319117][ T2367] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 156.364785][ T5906] usb 5-1: USB disconnect, device number 6 [ 156.544253][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 156.621701][ T7707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 156.981059][ T5906] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.155822][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.155879][ T5906] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 157.155901][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.164851][ T5906] usb 3-1: config 0 descriptor?? [ 157.185168][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 157.596653][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 157.804053][ T5906] pwc: recv_control_msg error -71 req 02 val 2c00 [ 157.804522][ T5906] pwc: recv_control_msg error -71 req 04 val 1000 [ 157.806644][ T5906] pwc: recv_control_msg error -71 req 04 val 1300 [ 157.807232][ T5906] pwc: recv_control_msg error -71 req 04 val 1400 [ 157.807709][ T5906] pwc: recv_control_msg error -71 req 02 val 2000 [ 157.808177][ T5906] pwc: recv_control_msg error -71 req 02 val 2100 [ 157.808643][ T5906] pwc: recv_control_msg error -71 req 04 val 1500 [ 157.809117][ T5906] pwc: recv_control_msg error -71 req 02 val 2500 [ 157.809572][ T5906] pwc: recv_control_msg error -71 req 02 val 2400 [ 157.810010][ T5906] pwc: recv_control_msg error -71 req 02 val 2600 [ 157.810603][ T5906] pwc: recv_control_msg error -71 req 02 val 2900 [ 157.811200][ T5906] pwc: recv_control_msg error -71 req 02 val 2800 [ 157.811904][ T5906] pwc: recv_control_msg error -71 req 04 val 1100 [ 157.812369][ T5906] pwc: recv_control_msg error -71 req 04 val 1200 [ 157.824818][ T5906] pwc: Registered as video103. [ 157.827807][ T5906] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 157.840001][ T5906] usb 3-1: USB disconnect, device number 7 [ 158.179844][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 158.981156][ T5829] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 159.161065][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 159.163282][ T5829] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 159.163308][ T5829] usb 4-1: config 0 has no interface number 0 [ 159.163353][ T5829] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 159.163376][ T5829] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 159.169785][ T5829] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 159.169815][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.169834][ T5829] usb 4-1: Product: syz [ 159.169848][ T5829] usb 4-1: Manufacturer: syz [ 159.169861][ T5829] usb 4-1: SerialNumber: syz [ 159.176662][ T5829] usb 4-1: config 0 descriptor?? [ 159.177483][ T7773] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.177606][ T7773] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.386635][ T7773] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.386760][ T7773] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 160.034048][ T5829] asix 4-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 160.034766][ T5829] asix 4-1:0.251: probe with driver asix failed with error -524 [ 160.878760][ T5817] usb 4-1: USB disconnect, device number 10 [ 160.967300][ T37] audit: type=1400 audit(160.798:7): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=7825 comm="syz.0.880" name="144" dev="tmpfs" ino=745 [ 161.591134][ T59] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 161.701196][ T7859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.895'. [ 162.251479][ T7878] program syz.2.905 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.671100][ T5817] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.921074][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 162.923134][ T5817] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.923166][ T5817] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.923187][ T5817] usb 3-1: config 0 interface 0 has no altsetting 0 [ 162.923218][ T5817] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 162.923236][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.930826][ T5817] usb 3-1: config 0 descriptor?? [ 163.161059][ T5829] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.323349][ T5829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.323374][ T5829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.325181][ T5829] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.325207][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.325226][ T5829] usb 5-1: SerialNumber: syz [ 163.389749][ T5817] hid (null): report_id 4212356190 is invalid [ 163.389784][ T5817] hid (null): unknown global tag 0x2c [ 163.389850][ T5817] hid (null): invalid report_count 53475 [ 163.389877][ T5817] hid (null): global environment stack underflow [ 163.393118][ T5817] hid (null): invalid report_count 53042 [ 163.393500][ T5817] hid (null): unknown global tag 0xd [ 163.393526][ T5817] hid (null): unknown global tag 0xe [ 163.627779][ T5906] usb 3-1: USB disconnect, device number 8 [ 163.652028][ T5829] usb 5-1: 0:2 : does not exist [ 163.720741][ T5829] usb 5-1: USB disconnect, device number 7 [ 163.908265][ T7937] netlink: 52 bytes leftover after parsing attributes in process `syz.3.933'. [ 163.908309][ T7937] netlink: 32 bytes leftover after parsing attributes in process `syz.3.933'. [ 164.288461][ T7951] block nbd0: shutting down sockets [ 165.996508][ T8012] input: syz0 as /devices/virtual/input/input12 [ 167.310678][ T8052] trusted_key: encrypted_key: keyword 'udate' not recognized [ 168.097967][ T8075] erspan0: entered promiscuous mode [ 168.273445][ T8080] tap0: tun_chr_ioctl cmd 1074025677 [ 168.273666][ T8080] tap0: linktype set to 825 [ 168.991911][ T5930] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 169.162552][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 169.182443][ T5930] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 169.182472][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 169.182491][ T5930] usb 4-1: Product: syz [ 169.182504][ T5930] usb 4-1: Manufacturer: syz [ 169.182523][ T5930] usb 4-1: SerialNumber: syz [ 169.190079][ T5930] usb 4-1: config 0 descriptor?? [ 169.448990][ T5906] usb 4-1: USB disconnect, device number 11 [ 171.206171][ T8188] sp0: Synchronizing with TNC [ 172.101099][ T5906] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 172.250993][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 172.263495][ T5906] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.4d [ 172.263528][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 172.263549][ T5906] usb 3-1: Product: syz [ 172.296078][ T5906] usb 3-1: config 0 descriptor?? [ 172.332753][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1071'. [ 172.332778][ T8235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'. [ 172.332794][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1071'. [ 172.334125][ T8235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1071'. [ 172.334157][ T8235] netlink: 'syz.0.1071': attribute type 6 has an invalid length. [ 172.558065][ T5906] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 172.579044][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.580127][ T5906] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 172.580186][ T5906] usb 3-1: media controller created [ 172.627619][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.769515][ T5906] az6027: usb out operation failed. (-71) [ 172.769949][ T5906] az6027: usb out operation failed. (-71) [ 172.769963][ T5906] stb0899_attach: Driver disabled by Kconfig [ 172.769972][ T5906] az6027: no front-end attached [ 172.769972][ T5906] [ 172.770359][ T5906] az6027: usb out operation failed. (-71) [ 172.770372][ T5906] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 172.810998][ T5906] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 172.813504][ T5906] dvb-usb: schedule remote query interval to 400 msecs. [ 172.813524][ T5906] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 172.815929][ T5906] usb 3-1: USB disconnect, device number 9 [ 173.055400][ T5906] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 175.540313][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 175.881691][ T8348] Bluetooth: hci5: Frame reassembly failed (-84) [ 176.450818][ T8371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1132'. [ 177.911317][ T59] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 178.459112][ T1556] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.459163][ T1556] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.459197][ T1556] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.459229][ T1556] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.777246][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 178.777436][ T8474] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 178.777464][ T8474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.671838][ T8517] vxcan0: tx address claim with dest, not broadcast [ 180.201308][ T8535] sp0: Synchronizing with TNC [ 180.632067][ T8552] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 180.751096][ T5906] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 180.913424][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.913456][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.913492][ T5906] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 180.913513][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.918964][ T5906] usb 4-1: config 0 descriptor?? [ 181.381983][ T5906] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 181.441064][ T5906] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 181.470081][ T5906] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 181.603402][ T5906] usb 4-1: USB disconnect, device number 12 [ 181.645639][ T5906] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 182.231093][ T5906] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 182.383329][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 182.385675][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.385712][ T5906] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00 [ 182.385734][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.425957][ T5906] usb 3-1: config 0 descriptor?? [ 182.891659][ T5906] hid (null): bogus close delimiter [ 182.912521][ T5906] hid-generic 0003:0DFC:0101.000A: unknown main item tag 0x0 [ 182.912559][ T5906] hid-generic 0003:0DFC:0101.000A: unknown main item tag 0x0 [ 182.912586][ T5906] hid-generic 0003:0DFC:0101.000A: unknown main item tag 0x0 [ 182.912612][ T5906] hid-generic 0003:0DFC:0101.000A: unknown main item tag 0x0 [ 182.912638][ T5906] hid-generic 0003:0DFC:0101.000A: unknown main item tag 0x0 [ 182.912663][ T5906] hid-generic 0003:0DFC:0101.000A: unknown main item tag 0x0 [ 182.912688][ T5906] hid-generic 0003:0DFC:0101.000A: unknown main item tag 0x0 [ 182.912713][ T5906] hid-generic 0003:0DFC:0101.000A: unknown main item tag 0x0 [ 182.912739][ T5906] hid-generic 0003:0DFC:0101.000A: unknown main item tag 0x0 [ 182.912764][ T5906] hid-generic 0003:0DFC:0101.000A: unknown main item tag 0x0 [ 182.920689][ T5906] hid-generic 0003:0DFC:0101.000A: item 0 4 0 9 parsing failed [ 183.007218][ T5906] hid-generic 0003:0DFC:0101.000A: probe with driver hid-generic failed with error -22 [ 183.098304][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 183.129124][ T5906] usb 3-1: USB disconnect, device number 10 [ 183.141160][ T1227] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 183.303985][ T1227] usb 1-1: unable to get BOS descriptor or descriptor too short [ 183.304717][ T1227] usb 1-1: not running at top speed; connect to a high speed hub [ 183.306170][ T1227] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.306190][ T1227] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.310655][ T1227] usb 1-1: string descriptor 0 read error: -22 [ 183.310802][ T1227] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 183.310824][ T1227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.398939][ T1227] usb 1-1: 0:2 : does not exist [ 184.145276][ T8665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1272'. [ 184.210281][ T1227] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 184.239858][ T1227] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 184.260826][ T1227] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 184.322273][ T1227] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 184.342670][ T1227] usb 1-1: USB disconnect, device number 5 [ 185.010035][ T8665] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.051103][ T8665] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.434728][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.307819][ C1] vkms_vblank_simulate: vblank timer overrun [ 186.585692][ T8714] bridge0: port 3(ipvlan2) entered blocking state [ 186.585996][ T8714] bridge0: port 3(ipvlan2) entered disabled state [ 186.586225][ T8714] ipvlan2: entered allmulticast mode [ 186.586239][ T8714] bridge0: entered allmulticast mode [ 186.631976][ T8714] ipvlan2: left allmulticast mode [ 186.631999][ T8714] bridge0: left allmulticast mode [ 187.008741][ T8738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.238277][ T8747] program syz.4.1309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.871714][ T1227] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 189.031029][ T1227] usb 3-1: Using ep0 maxpacket: 32 [ 189.035231][ T1227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.035264][ T1227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.035303][ T1227] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.035325][ T1227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.085891][ T1227] usb 3-1: config 0 descriptor?? [ 189.097139][ T1227] hub 3-1:0.0: USB hub found [ 189.311079][ T1227] hub 3-1:0.0: 1 port detected [ 189.751609][ T1227] usb 3-1: USB disconnect, device number 11 [ 190.848411][ T1428] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.320231][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.342751][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.344772][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.373067][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.373854][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.429244][ T1428] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.884223][ T1428] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.014846][ T8918] netlink: 39 bytes leftover after parsing attributes in process `syz.2.1396'. [ 192.014875][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 192.246405][ T1428] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.706892][ T8891] chnl_net:caif_netlink_parms(): no params data found [ 193.662034][ T59] Bluetooth: hci1: command tx timeout [ 193.707421][ T8958] sctp: [Deprecated]: syz.2.1411 (pid 8958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.707421][ T8958] Use struct sctp_sack_info instead [ 193.800815][ T8962] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1414'. [ 194.169359][ T8891] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.169573][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.169780][ T8891] bridge_slave_0: entered allmulticast mode [ 194.180639][ T8891] bridge_slave_0: entered promiscuous mode [ 194.200040][ T8891] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.200186][ T8891] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.200398][ T8891] bridge_slave_1: entered allmulticast mode [ 194.223015][ T8891] bridge_slave_1: entered promiscuous mode [ 194.317558][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.317628][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.569247][ T8891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.609036][ T8891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.881114][ T1227] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 194.901087][ T1428] bridge_slave_1: left allmulticast mode [ 194.901273][ T1428] bridge_slave_1: left promiscuous mode [ 194.915596][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.014390][ T1428] bridge_slave_0: left allmulticast mode [ 195.014418][ T1428] bridge_slave_0: left promiscuous mode [ 195.014668][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.033650][ T1227] usb 3-1: Using ep0 maxpacket: 32 [ 195.048441][ T1227] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 195.048467][ T1227] usb 3-1: config 0 has no interface number 0 [ 195.052510][ T1227] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 195.052535][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.052551][ T1227] usb 3-1: Product: syz [ 195.052563][ T1227] usb 3-1: Manufacturer: syz [ 195.052586][ T1227] usb 3-1: SerialNumber: syz [ 195.059483][ T1227] usb 3-1: config 0 descriptor?? [ 195.076938][ T1227] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 195.339296][ T1227] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 195.357686][ T1227] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 195.671027][ T59] Bluetooth: hci1: command tx timeout [ 195.809978][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 195.871682][ T1227] usb 3-1: USB disconnect, device number 12 [ 195.888711][ T1227] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 195.924557][ T1227] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 195.930721][ T1227] quatech2 3-1:0.51: device disconnected [ 197.761176][ T59] Bluetooth: hci1: command tx timeout [ 198.451801][ T1428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.533986][ T1428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.574683][ T1428] bond0 (unregistering): Released all slaves [ 198.645856][ T8891] team0: Port device team_slave_0 added [ 198.690611][ T8891] team0: Port device team_slave_1 added [ 199.674573][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.674589][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.674613][ T8891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.679071][ T8891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.679087][ T8891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.679110][ T8891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.835454][ T59] Bluetooth: hci1: command tx timeout [ 201.038339][ T8891] hsr_slave_0: entered promiscuous mode [ 201.039607][ T8891] hsr_slave_1: entered promiscuous mode [ 201.040478][ T8891] debugfs: 'hsr0' already exists in 'hsr' [ 201.040499][ T8891] Cannot create hsr debugfs directory [ 201.111147][ T1227] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 201.281057][ T1227] usb 3-1: Using ep0 maxpacket: 32 [ 201.289158][ T1227] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 201.289186][ T1227] usb 3-1: config 0 has no interface number 0 [ 201.289231][ T1227] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 201.289256][ T1227] usb 3-1: config 0 interface 85 has no altsetting 0 [ 201.292158][ T1227] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 201.292185][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.292204][ T1227] usb 3-1: Product: syz [ 201.292217][ T1227] usb 3-1: Manufacturer: syz [ 201.292229][ T1227] usb 3-1: SerialNumber: syz [ 201.304503][ T1227] usb 3-1: config 0 descriptor?? [ 201.471249][ T5893] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 201.492011][ T1428] hsr_slave_0: left promiscuous mode [ 201.541983][ T1428] hsr_slave_1: left promiscuous mode [ 201.543050][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.543186][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.618860][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.618888][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.636790][ T5893] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 201.636816][ T5893] usb 1-1: config 0 has no interface number 0 [ 201.636846][ T5893] usb 1-1: config 0 interface 106 has no altsetting 0 [ 201.641133][ T5893] usb 1-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 201.641162][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.641180][ T5893] usb 1-1: Product: syz [ 201.641193][ T5893] usb 1-1: Manufacturer: syz [ 201.641214][ T5893] usb 1-1: SerialNumber: syz [ 201.698741][ T5893] usb 1-1: config 0 descriptor?? [ 201.938029][ T1227] appletouch 3-1:0.85: Geyser mode initialized. [ 201.943304][ T1227] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input14 [ 201.979978][ T5893] usb 1-1: USB disconnect, device number 6 [ 202.065665][ T1428] veth0_macvtap: left allmulticast mode [ 202.072947][ T1428] veth1_macvtap: left promiscuous mode [ 202.074076][ T1428] veth0_macvtap: left promiscuous mode [ 202.075648][ T1428] veth1_vlan: left promiscuous mode [ 202.081540][ T1428] veth0_vlan: left promiscuous mode [ 202.198048][ T5893] usb 3-1: USB disconnect, device number 13 [ 202.325023][ T5893] appletouch 3-1:0.85: input: appletouch disconnected [ 202.587585][ T9323] usb usb8: usbfs: process 9323 (syz.0.1591) did not claim interface 0 before use [ 202.941048][ T1227] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 203.125644][ T1227] usb 1-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 203.125678][ T1227] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 203.125704][ T1227] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 127, setting to 64 [ 203.125730][ T1227] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 203.125771][ T1227] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 203.125802][ T1227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.178365][ T9328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.178580][ T9328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.215350][ T1227] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.489678][ T1227] usb 1-1: USB disconnect, device number 7 [ 206.807136][ T1428] team0 (unregistering): Port device team_slave_1 removed [ 207.212017][ T1428] team0 (unregistering): Port device team_slave_0 removed [ 211.768488][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 211.768528][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 211.769327][ T5818] Bluetooth: hci0: command 0x0406 tx timeout [ 211.769352][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 212.203316][ T8891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.294556][ T8891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.350422][ T8891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.442676][ T9736] Invalid logical block size (117) [ 212.453492][ T8891] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 213.561497][ T8891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.652558][ T8891] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.687131][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.687326][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.756617][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.756759][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.910084][ T9] kernel write not supported for file /544/attr/prev (pid: 9 comm: kworker/0:0) [ 214.761967][ T8891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.848609][ T8891] veth0_vlan: entered promiscuous mode [ 215.883966][ T8891] veth1_vlan: entered promiscuous mode [ 216.012260][ T8891] veth0_macvtap: entered promiscuous mode [ 216.044727][ T8891] veth1_macvtap: entered promiscuous mode [ 216.081428][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.104930][ T8891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.137603][ T1428] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.153979][ T1428] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.161556][ T1428] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.193841][ T1428] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.421131][ T1227] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 216.526178][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.526198][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.600762][ T1227] usb 3-1: Using ep0 maxpacket: 8 [ 216.630260][ T1227] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 216.630290][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.630306][ T1227] usb 3-1: Product: syz [ 216.630319][ T1227] usb 3-1: Manufacturer: syz [ 216.630331][ T1227] usb 3-1: SerialNumber: syz [ 216.661364][ T1227] usb 3-1: config 0 descriptor?? [ 216.674999][ T9891] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.699116][ T5829] IPVS: starting estimator thread 0... [ 216.699926][ T1428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.699942][ T1428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.791179][ T9897] IPVS: using max 10 ests per chain, 24000 per kthread [ 216.899233][ T1227] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 218.340369][ T1227] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 218.355981][ T1227] usb 3-1: USB disconnect, device number 14 [ 219.281419][ T5817] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 219.439293][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 219.447212][ T5817] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 219.461382][ T5817] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 219.461413][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.461431][ T5817] usb 3-1: Product: syz [ 219.461444][ T5817] usb 3-1: Manufacturer: syz [ 219.461456][ T5817] usb 3-1: SerialNumber: syz [ 219.503759][ T5817] usb 3-1: config 0 descriptor?? [ 219.518166][ T5817] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 219.519798][ T5817] usb 3-1: Detected FT232R [ 219.723822][ T5817] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 219.941835][ T5817] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 220.150131][ T1805] usb 3-1: USB disconnect, device number 15 [ 220.441751][ T1805] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 220.442256][ T1805] ftdi_sio 3-1:0.0: device disconnected [ 221.176228][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1923'. [ 221.285516][T10036] netlink: 'syz.5.1925': attribute type 11 has an invalid length. [ 221.285537][T10036] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1925'. [ 221.842373][T10060] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 221.924951][T10072] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1940'. [ 226.151451][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 226.176407][ T5834] Bluetooth: hci1: command tx timeout [ 226.315334][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2029'. [ 226.810432][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2041'. [ 229.294804][T10390] gretap0: entered promiscuous mode [ 229.837297][T10410] binder: 10409:10410 ioctl c018620b 200000000700 returned -14 [ 229.901964][T10414] 9pnet: p9_errstr2errno: server reported unknown error @í [ 230.908878][T10447] dummy0: entered promiscuous mode [ 230.920297][T10447] bond_slave_0: entered promiscuous mode [ 230.923414][T10447] bond_slave_0: left promiscuous mode [ 230.957547][T10447] dummy0: left promiscuous mode [ 231.592321][T10483] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2139'. [ 231.741059][ T5817] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 231.914003][ T5817] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 231.914035][ T5817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.940659][ T5817] usb 6-1: config 0 descriptor?? [ 232.976058][ T5817] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 232.976330][ T5817] asix 6-1:0.0: probe with driver asix failed with error -71 [ 233.011330][ T5817] usb 6-1: USB disconnect, device number 2 [ 233.111505][T10545] netlink: 'syz.0.2170': attribute type 1 has an invalid length. [ 233.111527][T10545] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2170'. [ 233.771141][ T5829] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 233.851073][ T5817] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 233.941505][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 233.944711][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.944736][ T5829] usb 3-1: config 0 has no interfaces? [ 233.944765][ T5829] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 233.944787][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.949995][ T5829] usb 3-1: config 0 descriptor?? [ 234.021047][ T5817] usb 1-1: Using ep0 maxpacket: 32 [ 234.023962][ T5817] usb 1-1: config 0 interface 0 has no altsetting 0 [ 234.044762][ T5817] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 234.044798][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.044817][ T5817] usb 1-1: Product: syz [ 234.044830][ T5817] usb 1-1: Manufacturer: syz [ 234.044843][ T5817] usb 1-1: SerialNumber: syz [ 234.105764][ T5817] usb 1-1: config 0 descriptor?? [ 234.533757][ T5817] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 235.166983][ T6012] usb 1-1: USB disconnect, device number 8 [ 236.350419][ T1805] usb 3-1: USB disconnect, device number 16 [ 238.190996][ T1805] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 238.353398][ T1805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.353430][ T1805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.353467][ T1805] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 238.353488][ T1805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.358914][ T1805] usb 3-1: config 0 descriptor?? [ 238.819998][ T1805] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 239.423793][ T1805] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 239.423850][ T1805] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 239.426321][ T1805] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71 [ 239.443556][ T1805] usb 3-1: USB disconnect, device number 17 [ 240.348707][T10845] unknown channel width for channel at 909000KHz? [ 240.348727][T10845] unknown channel width for channel at 909000KHz? [ 240.348739][T10845] unknown channel width for channel at 909000KHz? [ 240.811090][ T1805] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 240.871357][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2324'. [ 240.965116][ T1805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.965149][ T1805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.968333][ T1805] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 240.968361][ T1805] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 240.968380][ T1805] usb 6-1: Manufacturer: syz [ 240.990397][ T1805] usb 6-1: config 0 descriptor?? [ 241.488776][T10895] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 241.893594][ T1805] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000C/input/input16 [ 241.894223][T10906] (syz.0.2340,10906,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 241.958275][ T1805] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000C/input/input17 [ 242.011898][ T1805] input: syz Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000C/input/input18 [ 242.027283][ T1805] input: syz Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.000C/input/input19 [ 242.110389][ T1805] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 242.134829][ T1805] usb 6-1: USB disconnect, device number 3 [ 242.952995][T10958] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 243.151582][T10969] netlink: 'syz.2.2372': attribute type 12 has an invalid length. [ 243.151602][T10969] netlink: 'syz.2.2372': attribute type 29 has an invalid length. [ 243.151615][T10969] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2372'. [ 243.151650][T10969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2372'. [ 243.396974][T10985] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2379'. [ 243.648653][ T37] audit: type=1326 audit(243.468:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz.5.2384" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d3efaeec9 code=0x0 [ 243.751194][ T1805] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 243.901161][ T1805] usb 1-1: Using ep0 maxpacket: 16 [ 243.906038][ T1805] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.906064][ T1805] usb 1-1: config 0 has no interface number 0 [ 243.906111][ T1805] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.906136][ T1805] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.906173][ T1805] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 243.906195][ T1805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.979677][ T1805] usb 1-1: config 0 descriptor?? [ 244.516908][T11038] netlink: 'syz.2.2405': attribute type 1 has an invalid length. [ 244.628797][T11038] bond1: entered promiscuous mode [ 244.629421][T11038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.634501][ T1805] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.000D/input/input20 [ 244.697753][T11042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.711849][T11042] bond1: (slave bond2): making interface the new active one [ 244.711871][T11042] bond2: entered promiscuous mode [ 244.714755][T11042] bond1: (slave bond2): Enslaving as an active interface with an up link [ 244.743359][ T1805] input: HID 28bd:0071 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0071.000D/input/input21 [ 244.793696][ T1805] uclogic 0003:28BD:0071.000D: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.0-1/input1 [ 244.823828][ T1805] usb 1-1: USB disconnect, device number 9 [ 245.229062][ T5829] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 245.395205][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.395236][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.395257][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.395298][ T5829] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.395319][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.415113][ T5829] usb 3-1: config 0 descriptor?? [ 245.890443][ T5829] plantronics 0003:047F:FFFF.000E: unbalanced collection at end of report description [ 245.893196][ T5829] plantronics 0003:047F:FFFF.000E: parse failed [ 245.893298][ T5829] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 246.084358][ T5829] usb 3-1: USB disconnect, device number 18 [ 246.718880][T11126] netlink: 'syz.0.2446': attribute type 83 has an invalid length. [ 247.102541][T11144] block nbd0: server does not support multiple connections per device. [ 247.104365][T11144] block nbd0: shutting down sockets [ 247.621258][ T6012] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 247.771026][ T6012] usb 3-1: Using ep0 maxpacket: 16 [ 247.773608][ T6012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.773640][ T6012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.773669][ T6012] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.773788][ T6012] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 247.773811][ T6012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.853255][ T6012] usb 3-1: config 0 descriptor?? [ 248.086329][T11165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.092507][T11165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.250629][ T37] audit: type=1326 audit(248.078:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11193 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3efaeec9 code=0x7ffc0000 [ 248.254370][ T37] audit: type=1326 audit(248.088:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11193 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3efaeec9 code=0x7ffc0000 [ 248.256086][ T37] audit: type=1326 audit(248.088:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11193 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1d3efaeec9 code=0x7ffc0000 [ 248.257199][ T37] audit: type=1326 audit(248.088:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11193 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3efaeec9 code=0x7ffc0000 [ 248.258571][ T37] audit: type=1326 audit(248.088:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11193 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3efaeec9 code=0x7ffc0000 [ 248.263758][ T37] audit: type=1326 audit(248.088:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11193 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f1d3efaeec9 code=0x7ffc0000 [ 248.265450][ T37] audit: type=1326 audit(248.098:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11193 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3efaeec9 code=0x7ffc0000 [ 248.267013][ T37] audit: type=1326 audit(248.098:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11193 comm="syz.5.2478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3efaeec9 code=0x7ffc0000 [ 248.323942][ T6012] hid_parser_main: 623 callbacks suppressed [ 248.323966][ T6012] microsoft 0003:045E:07DA.000F: unknown main item tag 0x2 [ 248.324307][ T6012] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 248.324332][ T6012] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 248.324357][ T6012] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 248.324382][ T6012] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 248.324406][ T6012] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 248.324430][ T6012] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 248.324455][ T6012] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 248.324479][ T6012] microsoft 0003:045E:07DA.000F: unknown main item tag 0x0 [ 248.370521][ T6012] microsoft 0003:045E:07DA.000F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 248.370554][ T6012] microsoft 0003:045E:07DA.000F: no inputs found [ 248.370567][ T6012] microsoft 0003:045E:07DA.000F: could not initialize ff, continuing anyway [ 248.608043][ T5817] usb 3-1: USB disconnect, device number 19 [ 248.929388][T11221] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2489'. [ 249.679034][T11260] bridge0: entered promiscuous mode [ 249.680537][T11260] bond0: entered promiscuous mode [ 249.680558][T11260] bond_slave_0: entered promiscuous mode [ 249.680773][T11260] bond_slave_1: entered promiscuous mode [ 249.717171][T11260] hsr1: entered allmulticast mode [ 249.717193][T11260] bridge0: entered allmulticast mode [ 249.717211][T11260] bond0: entered allmulticast mode [ 249.717231][T11260] bond_slave_0: entered allmulticast mode [ 249.717248][T11260] bond_slave_1: entered allmulticast mode [ 254.197698][T11448] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 255.756357][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.756451][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.221679][ T5829] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 256.374285][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.374343][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 256.374367][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 256.374391][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 256.374412][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 256.377439][ T5829] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 256.377466][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 256.377484][ T5829] usb 1-1: Product: syz [ 256.377497][ T5829] usb 1-1: Manufacturer: syz [ 256.377511][ T5829] usb 1-1: SerialNumber: syz [ 256.494086][ T5829] usb 1-1: config 0 descriptor?? [ 256.713741][ T5829] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 256.713766][ T5829] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 256.918917][ T5829] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 256.918943][ T5829] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 256.918963][ T5829] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 257.119711][ T5829] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 257.523113][ T5829] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 257.523504][ T5829] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 257.571846][ T5829] usb 1-1: USB disconnect, device number 10 [ 258.278658][T11595] vxcan0: tx address claim with dlc 0 [ 258.463921][T11604] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2673'. [ 259.660469][T11656] 9pnet: p9_errstr2errno: server reported unknown error @í΂0x0000000000000003 [ 260.004486][T11678] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 260.701261][ T1227] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 260.872321][ T1227] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 260.872359][ T1227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.877767][ T1227] usb 6-1: config 0 descriptor?? [ 261.141181][ T1227] kaweth 6-1:0.0: Firmware present in device. [ 261.301788][ T1227] kaweth 6-1:0.0: Statistics collection: 0 [ 261.301810][ T1227] kaweth 6-1:0.0: Multicast filter limit: 0 [ 261.301936][ T1227] kaweth 6-1:0.0: MTU: 0 [ 261.301950][ T1227] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 261.906449][ T1227] kaweth 6-1:0.0: Error setting receive filter [ 261.906725][ T1227] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 261.941158][ T1227] usb 6-1: USB disconnect, device number 4 [ 264.061399][T11851] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2789'. [ 264.291463][T11861] loop8: detected capacity change from 0 to 7 [ 264.299182][T11861] Dev loop8: unable to read RDB block 7 [ 264.299229][T11861] loop8: unable to read partition table [ 264.299453][T11861] loop8: partition table beyond EOD, truncated [ 264.299471][T11861] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 265.995637][ T5906] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 266.141090][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 266.145760][ T5906] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 266.145786][ T5906] usb 6-1: config 0 has no interface number 0 [ 266.145843][ T5906] usb 6-1: config 0 interface 12 has no altsetting 0 [ 266.148665][ T5906] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 266.148695][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.148714][ T5906] usb 6-1: Product: syz [ 266.148728][ T5906] usb 6-1: Manufacturer: syz [ 266.148741][ T5906] usb 6-1: SerialNumber: syz [ 266.162996][ T5906] usb 6-1: config 0 descriptor?? [ 266.531130][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 266.681003][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 266.683266][ T10] usb 1-1: config 0 has no interfaces? [ 266.686921][ T10] usb 1-1: New USB device found, idVendor=6933, idProduct=5001, bcdDevice=45.02 [ 266.686948][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.686966][ T10] usb 1-1: Product: syz [ 266.686979][ T10] usb 1-1: Manufacturer: syz [ 266.686992][ T10] usb 1-1: SerialNumber: syz [ 266.734663][ T10] usb 1-1: config 0 descriptor?? [ 266.894500][ T5817] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 266.976856][ T10] usb 1-1: USB disconnect, device number 11 [ 267.043441][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.043467][ T5817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.047923][ T5817] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 267.047950][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 267.047968][ T5817] usb 3-1: SerialNumber: syz [ 267.219475][ T5906] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 267.219542][ T5906] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 267.219558][ T5906] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 267.219650][ T5906] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 267.285718][ T5906] usb 6-1: USB disconnect, device number 5 [ 267.330419][ T5817] usb 3-1: 0:2 : does not exist [ 267.373856][ T5817] usb 3-1: USB disconnect, device number 20 [ 268.107936][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 268.191224][ T5906] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 268.351086][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 268.353493][ T5906] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 268.353519][ T5906] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.353537][ T5906] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.356011][ T5906] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.356037][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.356056][ T5906] usb 6-1: Product: syz [ 268.356069][ T5906] usb 6-1: Manufacturer: syz [ 268.356082][ T5906] usb 6-1: SerialNumber: syz [ 268.663426][ T5906] usb 6-1: 0:2 : does not exist [ 268.758355][ T5906] usb 6-1: USB disconnect, device number 6 [ 268.822890][T12049] use of bytesused == 0 is deprecated and will be removed in the future, [ 268.822906][T12049] use the actual size instead. [ 270.522115][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 270.687704][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.687728][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.689329][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 270.689355][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 270.689381][ T10] usb 1-1: SerialNumber: syz [ 270.999367][ T10] usb 1-1: 0:2 : does not exist [ 271.061493][ T10] usb 1-1: USB disconnect, device number 12 [ 272.679749][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.474810][ T37] audit: type=1326 audit(273.308:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12194 comm="syz.2.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe66ae6af79 code=0x7ffc0000 [ 273.478666][ T37] audit: type=1326 audit(273.308:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12194 comm="syz.2.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 273.479061][ T37] audit: type=1326 audit(273.308:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12194 comm="syz.2.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 273.547423][ T37] audit: type=1326 audit(273.308:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12194 comm="syz.2.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe66ae6af79 code=0x7ffc0000 [ 273.547612][ T37] audit: type=1326 audit(273.308:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12194 comm="syz.2.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 273.547650][ T37] audit: type=1326 audit(273.308:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12194 comm="syz.2.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 273.547688][ T37] audit: type=1326 audit(273.378:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12194 comm="syz.2.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 273.548327][ T37] audit: type=1326 audit(273.378:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12194 comm="syz.2.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 273.549008][ T37] audit: type=1326 audit(273.378:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12194 comm="syz.2.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 273.549483][ T37] audit: type=1326 audit(273.378:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12194 comm="syz.2.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe66ae6af79 code=0x7ffc0000 [ 274.359421][T12243] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2978'. [ 274.713082][T12260] syz.0.2986 uses obsolete (PF_INET,SOCK_PACKET) [ 275.711129][ T5817] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 275.865549][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.865580][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.865610][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.865651][ T5817] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.865673][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.930327][ T5817] usb 1-1: config 0 descriptor?? [ 276.363974][ T5817] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 276.364010][ T5817] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 276.364036][ T5817] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 276.364061][ T5817] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 276.364086][ T5817] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 276.364111][ T5817] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 276.364136][ T5817] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 276.364162][ T5817] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 276.364187][ T5817] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 276.364212][ T5817] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 276.473650][ T5817] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 276.691444][ T5829] usb 1-1: USB disconnect, device number 13 [ 279.663183][ T5893] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 279.823554][ T5893] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.846869][ T5893] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.846898][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.846916][ T5893] usb 1-1: Product: syz [ 279.846929][ T5893] usb 1-1: Manufacturer: syz [ 279.846943][ T5893] usb 1-1: SerialNumber: syz [ 279.973905][T12491] loop2: detected capacity change from 0 to 7 [ 280.002827][T12491] Dev loop2: unable to read RDB block 7 [ 280.002871][T12491] loop2: unable to read partition table [ 280.003201][T12491] loop2: partition table beyond EOD, truncated [ 280.003221][T12491] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 280.681084][ T5829] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 280.833433][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.833467][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.833489][ T5829] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.833530][ T5829] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.833553][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.841751][ T5829] usb 6-1: config 0 descriptor?? [ 280.948898][ T5893] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 280.948941][ T5893] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 280.948960][ T5893] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 281.150105][ T5893] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 281.188573][ T5893] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 281.222995][ T5893] usb 1-1: USB disconnect, device number 14 [ 281.227419][ T5893] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 281.321855][ T5829] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 281.799478][ T5829] usb 6-1: USB disconnect, device number 7 [ 282.071327][ T5906] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 282.223723][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.223757][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.223779][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.223820][ T5906] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.223842][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.233863][ T5906] usb 1-1: config 0 descriptor?? [ 282.631077][ T5893] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 282.730744][ T5906] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 282.791059][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 282.793511][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.793539][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.793557][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 282.793591][ T5893] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 282.793609][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.861937][ T5893] usb 6-1: config 0 descriptor?? [ 283.362966][ T5893] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.0013/input/input24 [ 283.540547][ T5893] appleir 0003:05AC:8241.0013: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 283.576517][ T5893] usb 6-1: USB disconnect, device number 8 [ 285.081693][ T10] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 285.295593][ T10] usb 1-1: device firmware changed [ 285.333140][ T5817] usb 1-1: USB disconnect, device number 15 [ 285.501317][ T5817] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 285.653938][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.653970][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 285.653994][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 285.654014][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.654054][ T5817] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.654075][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.725719][ T5817] usb 1-1: config 0 descriptor?? [ 286.211690][ T5817] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 286.496507][ T5906] usb 1-1: USB disconnect, device number 16 [ 286.511047][ T5829] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 286.663215][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.663246][ T5829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.663267][ T5829] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.663308][ T5829] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.663330][ T5829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.673081][ T5829] usb 6-1: config 0 descriptor?? [ 287.058864][T12800] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.151337][ T5829] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 287.190388][ T5829] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 287.386179][T12817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 287.767053][ C0] plantronics 0003:047F:FFFF.0015: hid_field_extract() called with n (132) > 32! (ktimers/0) [ 287.971209][ T5829] usb 6-1: USB disconnect, device number 9 [ 289.002864][T12893] netlink: 'syz.5.3290': attribute type 4 has an invalid length. [ 289.067842][T12898] netlink: 'syz.5.3290': attribute type 4 has an invalid length. [ 289.275813][T12901] macvtap1: entered allmulticast mode [ 289.275836][T12901] bridge0: entered allmulticast mode [ 289.280710][T12901] bridge0: port 3(macvtap1) entered blocking state [ 289.281419][T12901] bridge0: port 3(macvtap1) entered disabled state [ 289.397307][T12901] bridge0: left allmulticast mode [ 290.331412][T12966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.103166][T13040] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3359'. [ 292.103194][T13040] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3359'. [ 293.821092][ T1805] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 293.977301][ T1805] usb 6-1: Using ep0 maxpacket: 32 [ 293.979544][ T1805] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 293.979589][ T1805] usb 6-1: config 0 has no interface number 0 [ 294.003582][ T1805] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 294.003613][ T1805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.003631][ T1805] usb 6-1: Product: syz [ 294.003644][ T1805] usb 6-1: Manufacturer: syz [ 294.003657][ T1805] usb 6-1: SerialNumber: syz [ 294.013730][ T1805] usb 6-1: config 0 descriptor?? [ 294.028835][ T1805] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 294.254443][ T1805] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 294.305981][ T1805] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 294.384439][T13149] netlink: 'syz.2.3412': attribute type 9 has an invalid length. [ 294.384462][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3412'. [ 294.417669][T13149] netlink: 'syz.2.3412': attribute type 9 has an invalid length. [ 294.417693][T13149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3412'. [ 294.655465][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 294.662948][ T10] usb 6-1: USB disconnect, device number 10 [ 294.702126][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 294.729107][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 294.729777][ T10] quatech2 6-1:0.51: device disconnected [ 295.251936][ T37] kauditd_printk_skb: 96 callbacks suppressed [ 295.251951][ T37] audit: type=1400 audit(295.058:123): lsm=SMACK fn=smk_curacc_msq action=denied subject="w" object="_" requested=rw pid=13186 comm="syz.2.3433" ipc_key=0 [ 296.681067][ T5893] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 296.843411][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.843476][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 296.843503][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 296.843524][ T5893] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 296.845183][ T5893] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 296.845210][ T5893] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 296.845228][ T5893] usb 6-1: Manufacturer: syz [ 296.919485][ T5893] usb 6-1: config 0 descriptor?? [ 297.351323][ T5893] rc_core: IR keymap rc-hauppauge not found [ 297.351343][ T5893] Registered IR keymap rc-empty [ 297.351511][ T5893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 297.371278][ T5893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 297.393152][ T5893] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 297.416718][ T5893] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input26 [ 297.456628][ T5893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 297.471381][ T5893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 297.491340][ T5893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 297.513199][ T5893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 297.541437][ T5893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 297.561081][ T5893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 297.581124][ T5893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 297.601143][ T5893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 297.621228][ T5893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 297.651276][ T5893] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 297.681391][ T5893] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 297.681418][ T5893] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 297.745416][ T1805] usb 6-1: USB disconnect, device number 11 [ 299.419160][T13424] netlink: 'syz.5.3546': attribute type 29 has an invalid length. [ 299.419962][T13424] netlink: 'syz.5.3546': attribute type 29 has an invalid length. [ 299.420772][T13424] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3546'. [ 300.259963][ T37] audit: type=1326 audit(300.088:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13467 comm="syz.2.3568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x0 [ 303.851085][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 304.015118][ T10] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 304.015148][ T10] usb 3-1: config 0 has no interface number 0 [ 304.015198][ T10] usb 3-1: config 0 interface 112 altsetting 0 endpoint 0xF has invalid maxpacket 1007, setting to 64 [ 304.015242][ T10] usb 3-1: New USB device found, idVendor=3154, idProduct=721e, bcdDevice= 9.c6 [ 304.015266][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.065779][ T10] usb 3-1: config 0 descriptor?? [ 304.079407][ T10] usb-storage 3-1:0.112: USB Mass Storage device detected [ 304.306695][ T10] usb 3-1: USB disconnect, device number 21 [ 305.768735][T13755] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 305.963417][ T5834] Bluetooth: hci1: link tx timeout [ 305.963663][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.969184][ T5834] Bluetooth: hci1: link tx timeout [ 305.969202][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.973820][ T5834] Bluetooth: hci1: link tx timeout [ 305.973837][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.973851][ T5834] Bluetooth: hci1: link tx timeout [ 305.973860][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.973974][ T5834] Bluetooth: hci1: link tx timeout [ 305.973984][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.973996][ T5834] Bluetooth: hci1: link tx timeout [ 305.974005][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.974107][ T5834] Bluetooth: hci1: link tx timeout [ 305.974116][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.974128][ T5834] Bluetooth: hci1: link tx timeout [ 305.974137][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.985710][ T5834] Bluetooth: hci1: link tx timeout [ 305.985729][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.985744][ T5834] Bluetooth: hci1: link tx timeout [ 305.985753][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.985883][ T5834] Bluetooth: hci1: link tx timeout [ 305.985893][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.985905][ T5834] Bluetooth: hci1: link tx timeout [ 305.985915][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.986027][ T5834] Bluetooth: hci1: link tx timeout [ 305.986037][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.986048][ T5834] Bluetooth: hci1: link tx timeout [ 305.986057][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.986159][ T5834] Bluetooth: hci1: link tx timeout [ 305.986169][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.986181][ T5834] Bluetooth: hci1: link tx timeout [ 305.986190][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.986289][ T5834] Bluetooth: hci1: link tx timeout [ 305.986299][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.986311][ T5834] Bluetooth: hci1: link tx timeout [ 305.986320][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.986422][ T5834] Bluetooth: hci1: link tx timeout [ 305.986431][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.986443][ T5834] Bluetooth: hci1: link tx timeout [ 305.986451][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.986556][ T5834] Bluetooth: hci1: link tx timeout [ 305.986566][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.986577][ T5834] Bluetooth: hci1: link tx timeout [ 305.986586][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.986687][ T5834] Bluetooth: hci1: link tx timeout [ 305.986696][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.986708][ T5834] Bluetooth: hci1: link tx timeout [ 305.986716][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.986815][ T5834] Bluetooth: hci1: link tx timeout [ 305.986824][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.986835][ T5834] Bluetooth: hci1: link tx timeout [ 305.986844][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.986942][ T5834] Bluetooth: hci1: link tx timeout [ 305.986951][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.986963][ T5834] Bluetooth: hci1: link tx timeout [ 305.986972][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.987070][ T5834] Bluetooth: hci1: link tx timeout [ 305.987080][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.987092][ T5834] Bluetooth: hci1: link tx timeout [ 305.987101][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.987268][ T5834] Bluetooth: hci1: link tx timeout [ 305.987278][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.987290][ T5834] Bluetooth: hci1: link tx timeout [ 305.987299][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.987441][ T5834] Bluetooth: hci1: link tx timeout [ 305.987451][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.987463][ T5834] Bluetooth: hci1: link tx timeout [ 305.987472][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.987600][ T5834] Bluetooth: hci1: link tx timeout [ 305.987610][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.987621][ T5834] Bluetooth: hci1: link tx timeout [ 305.987630][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.987730][ T5834] Bluetooth: hci1: link tx timeout [ 305.987740][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.987752][ T5834] Bluetooth: hci1: link tx timeout [ 305.987761][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.987862][ T5834] Bluetooth: hci1: link tx timeout [ 305.987871][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.987883][ T5834] Bluetooth: hci1: link tx timeout [ 305.987893][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.987991][ T5834] Bluetooth: hci1: link tx timeout [ 305.988000][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.988012][ T5834] Bluetooth: hci1: link tx timeout [ 305.988020][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.988119][ T5834] Bluetooth: hci1: link tx timeout [ 305.988129][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.988141][ T5834] Bluetooth: hci1: link tx timeout [ 305.988149][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.988247][ T5834] Bluetooth: hci1: link tx timeout [ 305.988256][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.988269][ T5834] Bluetooth: hci1: link tx timeout [ 305.988278][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.988376][ T5834] Bluetooth: hci1: link tx timeout [ 305.988386][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.988397][ T5834] Bluetooth: hci1: link tx timeout [ 305.988406][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.988504][ T5834] Bluetooth: hci1: link tx timeout [ 305.988514][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.988526][ T5834] Bluetooth: hci1: link tx timeout [ 305.988535][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.988644][ T5834] Bluetooth: hci1: link tx timeout [ 305.988654][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.988665][ T5834] Bluetooth: hci1: link tx timeout [ 305.988674][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.988773][ T5834] Bluetooth: hci1: link tx timeout [ 305.988782][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.988794][ T5834] Bluetooth: hci1: link tx timeout [ 305.988802][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 305.988918][ T5834] Bluetooth: hci1: link tx timeout [ 305.988928][ T5834] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 305.988940][ T5834] Bluetooth: hci1: link tx timeout [ 305.988949][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.209833][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3719'. [ 307.159108][T13810] pim6reg: entered allmulticast mode [ 307.188562][T13810] pim6reg: left allmulticast mode [ 307.526255][T13826] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3742'. [ 307.526278][T13826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3742'. [ 307.996670][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 308.629383][T13888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.896184][T13902] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 309.806063][T13951] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 309.870937][T13956] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 310.152707][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 310.189004][T13972] netlink: 'syz.2.3813': attribute type 1 has an invalid length. [ 310.358793][T13972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 310.437402][T13976] bond3: (slave ip6erspan0): making interface the new active one [ 310.453985][T13976] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 313.193474][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.601884][T14116] bridge1: entered promiscuous mode [ 314.901038][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3913'. [ 315.100848][T14185] vxlan0: entered promiscuous mode [ 315.147216][ T57] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.147983][ T57] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.148024][ T57] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.148056][ T57] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.196047][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.196117][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.798765][T14365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4002'. [ 321.140118][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4069'. [ 322.817244][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4116'. [ 323.713144][ T37] audit: type=1326 audit(323.538:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14633 comm="syz.5.4132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3efaeec9 code=0x7fc00000 [ 324.110224][T14678] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 324.116677][T14677] IPVS: stopping master sync thread 14678 ... [ 324.271047][ T37] audit: type=1326 audit(324.098:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14633 comm="syz.5.4132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d3efaeec9 code=0x7fc00000 [ 324.311992][T14686] Invalid ELF header magic: != ELF [ 325.931211][ T6012] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 326.086912][ T6012] usb 3-1: Using ep0 maxpacket: 16 [ 326.104679][ T6012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.104712][ T6012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.104733][ T6012] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 326.104778][ T6012] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 326.104816][ T6012] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.170341][ T6012] usb 3-1: config 0 descriptor?? [ 326.614523][ T6012] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0016/input/input27 [ 326.688366][ T6012] appleir 0003:05AC:8241.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 326.835498][ T6012] usb 3-1: USB disconnect, device number 22 [ 327.543570][T14852] netlink: 'syz.2.4238': attribute type 12 has an invalid length. [ 329.031070][ T5834] Bluetooth: hci5: command 0xfc11 tx timeout [ 329.031384][ T59] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 330.272564][T14996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4303'. [ 330.621088][ T5829] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 330.771124][ T5829] usb 3-1: Using ep0 maxpacket: 32 [ 330.773434][ T5829] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 330.773462][ T5829] usb 3-1: config 0 has no interface number 0 [ 330.773514][ T5829] usb 3-1: config 0 interface 184 has no altsetting 0 [ 330.779312][ T5829] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 330.779342][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.779362][ T5829] usb 3-1: Product: syz [ 330.779376][ T5829] usb 3-1: Manufacturer: syz [ 330.779389][ T5829] usb 3-1: SerialNumber: syz [ 330.801171][ T5829] usb 3-1: config 0 descriptor?? [ 330.827484][ T5829] smsc75xx v1.0.0 [ 331.472876][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 331.472905][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 331.910753][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 331.910801][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 331.910821][ T5829] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 331.912034][ T5829] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 331.938542][ T5829] usb 3-1: USB disconnect, device number 23 [ 332.671576][T15127] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4368'. [ 333.860130][T15184] overlayfs: failed lookup in lower (newroot/474, name='bus', err=-40): overlapping layers [ 334.418631][T15220] netlink: 'syz.5.4415': attribute type 1 has an invalid length. [ 334.507996][T15220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.790259][T15242] sg_write: process 1072 (syz.2.4423) changed security contexts after opening file descriptor, this is not allowed. [ 337.832062][T15388] kernel read not supported for file /¡sxt (pid: 15388 comm: syz.2.4493) [ 337.835153][ T37] audit: type=1800 audit(337.668:127): pid=15388 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.4493" name=A17378741A dev="mqueue" ino=42952 res=0 errno=0 [ 343.137972][T15646] loop5: detected capacity change from 0 to 7 [ 343.157387][T15646] loop5: [ 343.157426][T15646] loop5: partition table partially beyond EOD, truncated [ 343.231079][ T5829] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 343.384481][ T5829] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.384509][ T5829] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.387500][ T5829] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.387528][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.387547][ T5829] usb 6-1: Product: syz [ 343.387560][ T5829] usb 6-1: Manufacturer: syz [ 343.387574][ T5829] usb 6-1: SerialNumber: syz [ 343.887215][ T5829] usb 6-1: cannot find UAC_HEADER [ 344.033403][ T5829] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 344.151712][ T5829] usb 6-1: USB disconnect, device number 12 [ 347.803309][T15886] input: syz1 as /devices/virtual/input/input28 [ 349.111249][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 349.626413][ T37] audit: type=1326 audit(349.458:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15989 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 349.626466][ T37] audit: type=1326 audit(349.458:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15989 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 349.636986][ T37] audit: type=1326 audit(349.468:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15989 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 349.637035][ T37] audit: type=1326 audit(349.468:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15989 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 349.637072][ T37] audit: type=1326 audit(349.468:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15989 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 349.641837][ T37] audit: type=1326 audit(349.478:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15989 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 349.642178][ T37] audit: type=1326 audit(349.478:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15989 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 349.642511][ T37] audit: type=1326 audit(349.478:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15989 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 349.642747][ T37] audit: type=1326 audit(349.478:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15989 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 349.649816][ T37] audit: type=1326 audit(349.478:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15989 comm="syz.2.4783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe66aeceec9 code=0x7ffc0000 [ 350.221256][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 350.398914][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 350.398944][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.398963][ T10] usb 3-1: Product: syz [ 350.398976][ T10] usb 3-1: Manufacturer: syz [ 350.398990][ T10] usb 3-1: SerialNumber: syz [ 351.693017][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 351.693088][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 351.695109][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 351.769762][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 351.831389][ T10] usb 3-1: USB disconnect, device number 24 [ 353.971074][ T1805] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 354.134885][ T1805] usb 3-1: config 0 has an invalid interface number: 42 but max is 0 [ 354.134914][ T1805] usb 3-1: config 0 has no interface number 0 [ 354.134950][ T1805] usb 3-1: config 0 interface 42 has no altsetting 0 [ 354.134983][ T1805] usb 3-1: New USB device found, idVendor=1e0e, idProduct=9200, bcdDevice= 6.d8 [ 354.135013][ T1805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.159076][ T1805] usb 3-1: config 0 descriptor?? [ 354.168783][ T1805] option 3-1:0.42: GSM modem (1-port) converter detected [ 354.452113][ T1805] usb 3-1: USB disconnect, device number 25 [ 354.454426][ T1805] option 3-1:0.42: device disconnected [ 355.021245][ T1805] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 355.171092][ T1805] usb 6-1: Using ep0 maxpacket: 32 [ 355.180563][ T1805] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 355.180593][ T1805] usb 6-1: config 0 has no interface number 0 [ 355.199299][ T1805] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 355.199327][ T1805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.199347][ T1805] usb 6-1: Product: syz [ 355.199360][ T1805] usb 6-1: Manufacturer: syz [ 355.199373][ T1805] usb 6-1: SerialNumber: syz [ 355.233104][ T1805] usb 6-1: config 0 descriptor?? [ 355.260175][ T1805] smsc95xx v2.0.0 [ 355.422981][T16289] netlink: 'syz.2.4930': attribute type 21 has an invalid length. [ 355.423481][T16289] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4930'. [ 355.501529][T16297] netlink: 'syz.2.4930': attribute type 21 has an invalid length. [ 355.501773][T16297] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4930'. [ 355.669691][ T1805] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 355.669722][ T1805] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 356.690359][T16343] capability: warning: `syz.2.4957' uses 32-bit capabilities (legacy support in use) [ 356.704945][ T1805] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 356.705254][ T1805] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 356.722949][T16343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.729578][ T1805] usb 6-1: USB disconnect, device number 13 [ 359.891125][ T5906] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 360.041210][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 360.043485][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.043517][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.043555][ T5906] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 360.043577][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.088166][ T5906] usb 6-1: config 0 descriptor?? [ 360.571505][ T5906] savu 0003:1E7D:2D5A.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 360.821548][ T5893] usb 6-1: USB disconnect, device number 14 [ 361.801116][ T5906] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 361.985452][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.985486][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.985526][ T5906] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 361.985549][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.997391][ T5906] usb 6-1: config 0 descriptor?? [ 362.436811][ T5906] hid_parser_main: 5 callbacks suppressed [ 362.436842][ T5906] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 362.436876][ T5906] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 362.436909][ T5906] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 362.436935][ T5906] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 362.436962][ T5906] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 362.436987][ T5906] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 362.437012][ T5906] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 362.463252][ T5906] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 362.651847][ T5906] cp2112 0003:10C4:EA90.0018: Part Number: 0x00 Device Version: 0x00 [ 363.290680][T16580] cp2112 0003:10C4:EA90.0018: Error starting transaction: -38 [ 363.302093][ T5906] cp2112 0003:10C4:EA90.0018: error reading lock byte: -71 [ 363.323772][ T5906] usb 6-1: USB disconnect, device number 15 [ 368.111572][T16908] kvm: emulating exchange as write [ 369.569105][T16959] netlink: 332 bytes leftover after parsing attributes in process `syz.2.5254'. [ 369.569192][T16959] netlink: 'syz.2.5254': attribute type 9 has an invalid length. [ 369.569207][T16959] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5254'. [ 369.569224][T16959] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5254'. [ 369.948549][ T10] libceph: connect (1)[c::]:6789 error -101 [ 369.961549][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 369.989132][ T10] libceph: connect (1)[c::]:6789 error -101 [ 369.989334][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 370.015328][T16968] ceph: No mds server is up or the cluster is laggy [ 374.949609][T17206] binder: 17203:17206 ioctl c0306201 0 returned -14 [ 375.205415][T17220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5376'. [ 375.361335][ T5906] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 375.523864][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 375.523894][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 375.523945][ T5906] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 375.523968][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.544436][ T5906] usb 6-1: config 0 descriptor?? [ 375.765235][T17213] netlink: 176 bytes leftover after parsing attributes in process `syz.5.5375'. [ 375.897799][ T5906] ath6kl: Failed to submit usb control message: -71 [ 375.897851][ T5906] ath6kl: unable to send the bmi data to the device: -71 [ 375.897871][ T5906] ath6kl: Unable to send get target info: -71 [ 375.904794][ T5906] ath6kl: Failed to init ath6kl core: -71 [ 375.905496][ T5906] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 375.970089][ T5906] usb 6-1: USB disconnect, device number 16 [ 378.651838][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.651908][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.971122][ T1805] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 379.123017][ T1805] usb 3-1: Using ep0 maxpacket: 16 [ 379.136791][ T1805] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 379.136816][ T1805] usb 3-1: config 0 has no interface number 0 [ 379.139242][ T1805] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 379.139270][ T1805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.139314][ T1805] usb 3-1: Product: syz [ 379.139327][ T1805] usb 3-1: Manufacturer: syz [ 379.139341][ T1805] usb 3-1: SerialNumber: syz [ 379.153125][ T1805] usb 3-1: config 0 descriptor?? [ 379.180555][ T1805] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 380.838729][ T1805] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 380.839145][ T1805] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 380.839533][ T1805] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 380.839926][ T1805] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 380.840313][ T1805] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 380.840836][ T1805] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 380.841409][ T1805] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 380.841804][ T1805] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 380.858939][ T1805] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 380.861118][ T1805] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 380.861514][ T1805] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 380.861917][ T1805] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 380.865710][ T1805] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 380.957001][ T1805] usb 3-1: USB disconnect, device number 26 [ 382.735888][T17559] binder: 17556:17559 ioctl c0306201 2000000000c0 returned -14 [ 387.490957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 387.661601][T17809] tipc: Started in network mode [ 387.661636][T17809] tipc: Node identity 06c23ffd7d78, cluster identity 4711 [ 387.663041][T17809] tipc: Enabled bearer , priority 0 [ 387.702701][T17809] syzkaller0: MTU too low for tipc bearer [ 387.702717][T17809] tipc: Disabling bearer [ 388.030944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 388.544935][T17841] kvm: MWAIT instruction emulated as NOP! [ 388.551376][T17841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 390.227471][T17904] ip6_vti0: entered allmulticast mode [ 390.240802][T17904] ip6_vti0: left allmulticast mode [ 390.862439][T17936] binder: 17934:17936 ioctl c0306201 200000000240 returned -14 [ 393.314081][ T5822] overlayfs: failed lookup in lower (newroot/576, name='file0', err=-40): overlapping layers [ 393.314398][ T5822] overlayfs: failed lookup in lower (newroot/576, name='file0', err=-40): overlapping layers [ 395.873358][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.879348][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.880694][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.904936][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.905650][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.281131][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 396.451116][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 396.455264][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.455297][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.455319][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 396.455360][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 396.455383][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.544397][ T10] usb 6-1: config 0 descriptor?? [ 396.892136][T18114] chnl_net:caif_netlink_parms(): no params data found [ 396.999485][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 396.999523][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 396.999549][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 396.999742][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 396.999769][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 396.999795][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 396.999821][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 396.999847][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 396.999872][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 396.999898][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 397.096389][ T10] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 397.096433][ T10] microsoft 0003:045E:07DA.0019: no inputs found [ 397.096447][ T10] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 397.210540][ T10] usb 6-1: USB disconnect, device number 17 [ 397.651317][T18114] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.651467][T18114] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.651705][T18114] bridge_slave_0: entered allmulticast mode [ 397.659915][T18114] bridge_slave_0: entered promiscuous mode [ 397.672555][T18114] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.672675][T18114] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.672890][T18114] bridge_slave_1: entered allmulticast mode [ 397.681280][T18114] bridge_slave_1: entered promiscuous mode [ 397.991219][ T5834] Bluetooth: hci3: command tx timeout [ 398.077832][T18114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.114591][T18114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.448509][T18114] team0: Port device team_slave_0 added [ 398.464368][T18114] team0: Port device team_slave_1 added [ 399.007256][T18114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.007273][T18114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.007297][T18114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.010653][T18114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.010668][T18114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.010693][T18114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.410325][T18114] hsr_slave_0: entered promiscuous mode [ 399.419319][T18114] hsr_slave_1: entered promiscuous mode [ 399.420174][T18114] debugfs: 'hsr0' already exists in 'hsr' [ 399.420197][T18114] Cannot create hsr debugfs directory [ 400.071054][ T5834] Bluetooth: hci3: command tx timeout [ 400.799857][T18114] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 400.849343][T18114] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 400.899981][T18114] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 400.927709][T18114] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 401.429131][T18114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.479740][T18114] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.501546][ T4291] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.501741][ T4291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.554284][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.582627][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.151165][ T5834] Bluetooth: hci3: command tx timeout [ 402.510326][T18114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.824202][T18114] veth0_vlan: entered promiscuous mode [ 403.878376][T18114] veth1_vlan: entered promiscuous mode [ 404.098282][T18114] veth0_macvtap: entered promiscuous mode [ 404.146409][T18114] veth1_macvtap: entered promiscuous mode [ 404.189174][T18114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.204181][T18114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.230259][ T1556] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.232292][ T5834] Bluetooth: hci3: command tx timeout [ 404.250479][ T4291] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.281966][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.302995][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.865334][ T1348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.865356][ T1348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.991209][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.991229][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.360934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 411.191137][ T5829] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 411.341151][ T5829] usb 7-1: Using ep0 maxpacket: 8 [ 411.359811][ T5829] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 411.359830][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.359841][ T5829] usb 7-1: Product: syz [ 411.359848][ T5829] usb 7-1: Manufacturer: syz [ 411.359855][ T5829] usb 7-1: SerialNumber: syz [ 411.396532][ T5829] usb 7-1: config 0 descriptor?? [ 411.685455][ T5829] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 412.703083][ T5829] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 412.920837][ T5829] usb 7-1: USB disconnect, device number 2 [ 415.379796][T18981] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.393546][T18981] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.800192][T19001] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input31 [ 420.415821][T19216] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6320'. [ 420.476191][T19216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.476221][T19216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.544687][T19216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.544717][T19216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.671798][T19282] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6354'. [ 421.862773][T19282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6354'. [ 429.401163][ T5893] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 429.553381][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.553440][ T5893] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 429.553464][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.561861][ T5893] usb 6-1: config 0 descriptor?? [ 429.567375][ T5893] pwc: Askey VC010 type 2 USB webcam detected. [ 430.011463][ T5893] pwc: recv_control_msg error -32 req 02 val 2b00 [ 430.014824][ T5893] pwc: recv_control_msg error -32 req 02 val 2700 [ 430.016913][ T5893] pwc: recv_control_msg error -32 req 02 val 2c00 [ 430.017718][ T5893] pwc: recv_control_msg error -32 req 04 val 1000 [ 430.018521][ T5893] pwc: recv_control_msg error -32 req 04 val 1300 [ 430.019223][ T5893] pwc: recv_control_msg error -32 req 04 val 1400 [ 430.020041][ T5893] pwc: recv_control_msg error -32 req 02 val 2000 [ 430.224286][ T5893] pwc: recv_control_msg error -71 req 04 val 1500 [ 430.233125][ T5893] pwc: recv_control_msg error -71 req 02 val 2500 [ 430.233660][ T5893] pwc: recv_control_msg error -71 req 02 val 2400 [ 430.238717][ T5893] pwc: recv_control_msg error -71 req 02 val 2600 [ 430.239230][ T5893] pwc: recv_control_msg error -71 req 02 val 2900 [ 430.239659][ T5893] pwc: recv_control_msg error -71 req 02 val 2800 [ 430.248620][ T5893] pwc: recv_control_msg error -71 req 04 val 1100 [ 430.249146][ T5893] pwc: recv_control_msg error -71 req 04 val 1200 [ 430.265569][ T5893] pwc: Registered as video103. [ 430.268608][ T5893] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input32 [ 430.297894][ T5893] usb 6-1: USB disconnect, device number 18 [ 433.440935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 433.800949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 436.470949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 436.480961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 436.487518][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 436.669423][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 436.696157][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 436.698997][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 436.716306][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 436.718052][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 438.435883][ T1446] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.791214][ T59] Bluetooth: hci5: command tx timeout [ 440.121823][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.121919][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.182194][ T1446] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.299807][T20024] binder_alloc: 20023: binder_alloc_buf size 17432 failed, no address space [ 440.299979][T20024] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 440.870999][ T59] Bluetooth: hci5: command tx timeout [ 441.284621][ T1446] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.417286][T19927] chnl_net:caif_netlink_parms(): no params data found [ 442.014562][ T1446] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.162019][T20098] svc: failed to register nfsdv3 RPC service (errno 111). [ 442.164213][T20098] svc: failed to register nfsaclv3 RPC service (errno 111). [ 442.641801][T19927] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.641947][T19927] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.642212][T19927] bridge_slave_0: entered allmulticast mode [ 442.652811][T19927] bridge_slave_0: entered promiscuous mode [ 442.666682][T19927] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.666818][T19927] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.667031][T19927] bridge_slave_1: entered allmulticast mode [ 442.669509][T19927] bridge_slave_1: entered promiscuous mode [ 443.625202][ T59] Bluetooth: hci5: command tx timeout [ 443.880993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 443.882829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 444.039415][T19927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.168588][T19927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.412877][T19927] team0: Port device team_slave_0 added [ 445.495155][T19927] team0: Port device team_slave_1 added [ 445.671598][ T59] Bluetooth: hci5: command tx timeout [ 446.011943][T19927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.011961][T19927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.011986][T19927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.014383][T19927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.014397][T19927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.014420][T19927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.412335][ T1446] bridge_slave_1: left allmulticast mode [ 446.412364][ T1446] bridge_slave_1: left promiscuous mode [ 446.412625][ T1446] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.525504][ T1446] bridge_slave_0: left allmulticast mode [ 446.525532][ T1446] bridge_slave_0: left promiscuous mode [ 446.525791][ T1446] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.818270][ T1446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.870078][ T1446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.892420][ T1446] bond0 (unregistering): Released all slaves [ 457.230315][T19927] hsr_slave_0: entered promiscuous mode [ 457.231924][T19927] hsr_slave_1: entered promiscuous mode [ 457.232766][T19927] debugfs: 'hsr0' already exists in 'hsr' [ 457.232791][T19927] Cannot create hsr debugfs directory [ 464.392851][ T1446] hsr_slave_0: left promiscuous mode [ 464.444461][ T1446] hsr_slave_1: left promiscuous mode [ 464.447193][ T1446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.447212][ T1446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.503369][ T1446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.503397][ T1446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.808192][ T1446] veth1_macvtap: left promiscuous mode [ 464.915058][ T1446] veth0_macvtap: left promiscuous mode [ 464.915344][ T1446] veth1_vlan: left promiscuous mode [ 464.915521][ T1446] veth0_vlan: left promiscuous mode [ 466.293859][T20706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7029'. [ 477.037670][ T1446] team0 (unregistering): Port device team_slave_1 removed [ 478.649521][ T1446] team0 (unregistering): Port device team_slave_0 removed [ 482.696602][T21162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7237'. [ 486.796315][T21162] lo: entered promiscuous mode [ 486.796341][T21162] lo: entered allmulticast mode [ 486.798103][T21162] tunl0: entered promiscuous mode [ 486.798118][T21162] tunl0: entered allmulticast mode [ 486.798581][T21162] gre0: entered promiscuous mode [ 486.798591][T21162] gre0: entered allmulticast mode [ 486.799804][T21162] gretap0: entered promiscuous mode [ 486.799819][T21162] gretap0: entered allmulticast mode [ 486.847247][T21162] erspan0: entered promiscuous mode [ 486.847264][T21162] erspan0: entered allmulticast mode [ 486.848031][T21162] ip_vti0: entered promiscuous mode [ 486.848044][T21162] ip_vti0: entered allmulticast mode [ 486.848738][T21162] ip6_vti0: entered promiscuous mode [ 486.848756][T21162] ip6_vti0: entered allmulticast mode [ 486.849376][T21162] sit0: entered promiscuous mode [ 486.849390][T21162] sit0: entered allmulticast mode [ 486.850144][T21162] ip6tnl0: entered promiscuous mode [ 486.850162][T21162] ip6tnl0: entered allmulticast mode [ 486.850569][T21162] ip6gre0: entered promiscuous mode [ 486.850579][T21162] ip6gre0: entered allmulticast mode [ 486.924394][T21162] syz_tun: entered promiscuous mode [ 486.924412][T21162] syz_tun: entered allmulticast mode [ 486.950223][T21162] ip6gretap0: entered promiscuous mode [ 486.950241][T21162] ip6gretap0: entered allmulticast mode [ 486.950834][T21162] bridge0: entered promiscuous mode [ 486.950847][T21162] bridge0: entered allmulticast mode [ 487.015515][T21162] vcan0: entered promiscuous mode [ 487.015532][T21162] vcan0: entered allmulticast mode [ 487.015780][T21162] bond0: entered promiscuous mode [ 487.015790][T21162] bond_slave_0: entered promiscuous mode [ 487.015916][T21162] bond_slave_1: entered promiscuous mode [ 487.016042][T21162] bond0: entered allmulticast mode [ 487.016049][T21162] bond_slave_0: entered allmulticast mode [ 487.016057][T21162] bond_slave_1: entered allmulticast mode [ 487.016952][T21162] team0: entered promiscuous mode [ 487.016962][T21162] team_slave_0: entered promiscuous mode [ 487.017075][T21162] team_slave_1: entered promiscuous mode [ 487.017186][T21162] team0: entered allmulticast mode [ 487.017192][T21162] team_slave_0: entered allmulticast mode [ 487.017200][T21162] team_slave_1: entered allmulticast mode [ 487.123612][T21162] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.124435][T21162] dummy0: entered promiscuous mode [ 487.124449][T21162] dummy0: entered allmulticast mode [ 487.124916][T21162] nlmon0: entered promiscuous mode [ 487.124927][T21162] nlmon0: entered allmulticast mode [ 487.179739][T21162] caif0: entered promiscuous mode [ 487.179753][T21162] caif0: entered allmulticast mode [ 487.179764][T21162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.554823][T19927] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 487.615953][T19927] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 487.698205][T19927] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 487.869370][T19927] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 488.448840][T19927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.508987][T19927] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.564198][T20257] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.572684][T20257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.582223][T20257] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.582391][T20257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.227333][T19927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.319538][T19927] veth0_vlan: entered promiscuous mode [ 492.384717][T19927] veth1_vlan: entered promiscuous mode [ 492.473673][T19927] veth0_macvtap: entered promiscuous mode [ 492.487784][T19927] veth1_macvtap: entered promiscuous mode [ 493.521380][T19927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.542843][T19927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.592575][ T1348] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.592822][ T1348] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.592874][ T1348] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.592907][ T1348] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.044302][ T1446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.044322][ T1446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.152717][ T1348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.152739][ T1348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.615187][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 498.630515][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 498.641396][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 498.643755][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 498.652641][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 500.792034][ T59] Bluetooth: hci3: command tx timeout [ 502.513984][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.514080][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.871265][ T59] Bluetooth: hci3: command tx timeout [ 503.037724][T21724] netlink: 'syz.5.7489': attribute type 1 has an invalid length. [ 503.037792][T21724] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.7489'. [ 504.357040][ T1408] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.954816][ T59] Bluetooth: hci3: command tx timeout [ 507.113597][ T59] Bluetooth: hci3: command tx timeout [ 507.220858][ T1408] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.713101][ T1408] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.802073][T21610] chnl_net:caif_netlink_parms(): no params data found [ 508.154865][ T1408] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.851648][T21610] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.851795][T21610] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.851977][T21610] bridge_slave_0: entered allmulticast mode [ 510.855217][T21610] bridge_slave_0: entered promiscuous mode [ 510.916893][T21610] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.917111][T21610] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.917338][T21610] bridge_slave_1: entered allmulticast mode [ 510.920063][T21610] bridge_slave_1: entered promiscuous mode [ 512.235631][T21610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.260483][T21951] ------------[ cut here ]------------ [ 512.260506][T21951] WARNING: CPU: 1 PID: 21951 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 512.260554][T21951] Modules linked in: [ 512.260587][T21951] CPU: 1 UID: 0 PID: 21951 Comm: syz.5.7597 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 512.260613][T21951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 512.260630][T21951] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 512.260657][T21951] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 512.260675][T21951] RSP: 0018:ffffc90005ef78e0 EFLAGS: 00010283 [ 512.260693][T21951] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 512.260708][T21951] RDX: ffffc90006341000 RSI: 00000000000000ac RDI: 00000000000000ad [ 512.260723][T21951] RBP: ffffc90005ef7a70 R08: 0000000000000000 R09: 0000000000000000 [ 512.260737][T21951] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 512.260753][T21951] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888026866791 [ 512.260766][T21951] FS: 00007f1d3d2166c0(0000) GS:ffff888127117000(0000) knlGS:0000000000000000 [ 512.260784][T21951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.260798][T21951] CR2: 00007f21efaa5f80 CR3: 00000000650de000 CR4: 00000000003526f0 [ 512.260816][T21951] Call Trace: [ 512.260830][T21951] [ 512.260846][T21951] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 512.260930][T21951] ? __pfx_cgroup_freeze+0x10/0x10 [ 512.260953][T21951] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 512.260979][T21951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.261006][T21951] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 512.261039][T21951] ? mutex_lock_nested+0x154/0x1d0 [ 512.261061][T21951] ? cgroup_kn_lock_live+0x13c/0x230 [ 512.261103][T21951] cgroup_freeze_write+0x156/0x1c0 [ 512.261128][T21951] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 512.261147][T21951] ? kernfs_root+0x1c/0x230 [ 512.261165][T21951] ? kernfs_root+0x1c/0x230 [ 512.261186][T21951] ? kernfs_root+0x1ea/0x230 [ 512.261205][T21951] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 512.261234][T21951] cgroup_file_write+0x39b/0x740 [ 512.261272][T21951] ? __pfx_cgroup_file_write+0x10/0x10 [ 512.261318][T21951] ? __pfx_cgroup_file_write+0x10/0x10 [ 512.261343][T21951] kernfs_fop_write_iter+0x3b0/0x540 [ 512.261379][T21951] vfs_write+0x5d5/0xb40 [ 512.261410][T21951] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 512.261438][T21951] ? __pfx_vfs_write+0x10/0x10 [ 512.261458][T21951] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 512.261496][T21951] ? mutex_lock_nested+0x154/0x1d0 [ 512.261518][T21951] ? fdget_pos+0x253/0x320 [ 512.261557][T21951] ksys_write+0x14b/0x260 [ 512.261584][T21951] ? __pfx_ksys_write+0x10/0x10 [ 512.261605][T21951] ? rcu_is_watching+0x15/0xb0 [ 512.261636][T21951] ? do_syscall_64+0xbe/0x3b0 [ 512.261661][T21951] do_syscall_64+0xfa/0x3b0 [ 512.261680][T21951] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.261710][T21951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.261730][T21951] ? clear_bhb_loop+0x60/0xb0 [ 512.261755][T21951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.261772][T21951] RIP: 0033:0x7f1d3efaeec9 [ 512.261790][T21951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.261806][T21951] RSP: 002b:00007f1d3d216038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 512.261828][T21951] RAX: ffffffffffffffda RBX: 00007f1d3f205fa0 RCX: 00007f1d3efaeec9 [ 512.261844][T21951] RDX: 0000000000000012 RSI: 0000200000000340 RDI: 0000000000000007 [ 512.261858][T21951] RBP: 00007f1d3f031f91 R08: 0000000000000000 R09: 0000000000000000 [ 512.261869][T21951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.261881][T21951] R13: 00007f1d3f206038 R14: 00007f1d3f205fa0 R15: 00007ffe8390da48 [ 512.261913][T21951] [ 512.261930][T21951] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 512.261945][T21951] CPU: 1 UID: 0 PID: 21951 Comm: syz.5.7597 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 512.261967][T21951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 512.261977][T21951] Call Trace: [ 512.261986][T21951] [ 512.261994][T21951] dump_stack_lvl+0x99/0x250 [ 512.262017][T21951] ? __asan_memcpy+0x40/0x70 [ 512.262038][T21951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.262058][T21951] ? __pfx__printk+0x10/0x10 [ 512.262100][T21951] vpanic+0x281/0x750 [ 512.262122][T21951] ? __pfx__printk+0x10/0x10 [ 512.262146][T21951] ? __pfx_vpanic+0x10/0x10 [ 512.262167][T21951] ? is_bpf_text_address+0x26/0x2b0 [ 512.262203][T21951] panic+0xb9/0xc0 [ 512.262223][T21951] ? __pfx_panic+0x10/0x10 [ 512.262269][T21951] __warn+0x31b/0x4b0 [ 512.262287][T21951] ? cgroup_freeze+0x80a/0xf90 [ 512.262316][T21951] ? cgroup_freeze+0x80a/0xf90 [ 512.262343][T21951] report_bug+0x2be/0x4f0 [ 512.262371][T21951] ? cgroup_freeze+0x80a/0xf90 [ 512.262398][T21951] ? cgroup_freeze+0x80a/0xf90 [ 512.262423][T21951] ? cgroup_freeze+0x80c/0xf90 [ 512.262450][T21951] handle_bug+0x84/0x160 [ 512.262473][T21951] exc_invalid_op+0x1a/0x50 [ 512.262495][T21951] asm_exc_invalid_op+0x1a/0x20 [ 512.262513][T21951] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 512.262539][T21951] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 e1 43 67 00 e9 da f9 ff ff e8 17 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 512.262556][T21951] RSP: 0018:ffffc90005ef78e0 EFLAGS: 00010283 [ 512.262573][T21951] RAX: ffffffff81b6c6a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 512.262587][T21951] RDX: ffffc90006341000 RSI: 00000000000000ac RDI: 00000000000000ad [ 512.262602][T21951] RBP: ffffc90005ef7a70 R08: 0000000000000000 R09: 0000000000000000 [ 512.262615][T21951] R10: dffffc0000000000 R11: fffffbfff1d6d2a7 R12: dffffc0000000000 [ 512.262631][T21951] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888026866791 [ 512.262655][T21951] ? cgroup_freeze+0x809/0xf90 [ 512.262696][T21951] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 512.262730][T21951] ? __pfx_cgroup_freeze+0x10/0x10 [ 512.262754][T21951] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 512.262784][T21951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 512.262812][T21951] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 512.262849][T21951] ? mutex_lock_nested+0x154/0x1d0 [ 512.262872][T21951] ? cgroup_kn_lock_live+0x13c/0x230 [ 512.262909][T21951] cgroup_freeze_write+0x156/0x1c0 [ 512.262932][T21951] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 512.262950][T21951] ? kernfs_root+0x1c/0x230 [ 512.262967][T21951] ? kernfs_root+0x1c/0x230 [ 512.262988][T21951] ? kernfs_root+0x1ea/0x230 [ 512.263007][T21951] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 512.263029][T21951] cgroup_file_write+0x39b/0x740 [ 512.263067][T21951] ? __pfx_cgroup_file_write+0x10/0x10 [ 512.263111][T21951] ? __pfx_cgroup_file_write+0x10/0x10 [ 512.263137][T21951] kernfs_fop_write_iter+0x3b0/0x540 [ 512.263172][T21951] vfs_write+0x5d5/0xb40 [ 512.263203][T21951] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 512.263237][T21951] ? __pfx_vfs_write+0x10/0x10 [ 512.263258][T21951] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 512.263296][T21951] ? mutex_lock_nested+0x154/0x1d0 [ 512.263319][T21951] ? fdget_pos+0x253/0x320 [ 512.263357][T21951] ksys_write+0x14b/0x260 [ 512.263385][T21951] ? __pfx_ksys_write+0x10/0x10 [ 512.263407][T21951] ? rcu_is_watching+0x15/0xb0 [ 512.263440][T21951] ? do_syscall_64+0xbe/0x3b0 [ 512.263461][T21951] do_syscall_64+0xfa/0x3b0 [ 512.263478][T21951] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.263504][T21951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.263523][T21951] ? clear_bhb_loop+0x60/0xb0 [ 512.263545][T21951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.263561][T21951] RIP: 0033:0x7f1d3efaeec9 [ 512.263579][T21951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.263595][T21951] RSP: 002b:00007f1d3d216038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 512.263613][T21951] RAX: ffffffffffffffda RBX: 00007f1d3f205fa0 RCX: 00007f1d3efaeec9 [ 512.263628][T21951] RDX: 0000000000000012 RSI: 0000200000000340 RDI: 0000000000000007 [ 512.263641][T21951] RBP: 00007f1d3f031f91 R08: 0000000000000000 R09: 0000000000000000 [ 512.263653][T21951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.263665][T21951] R13: 00007f1d3f206038 R14: 00007f1d3f205fa0 R15: 00007ffe8390da48 [ 512.263695][T21951] [ 512.264007][T21951] Kernel Offset: disabled