last executing test programs: 1m10.928668583s ago: executing program 0 (id=1237): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '&#,!\'\\4'}, 0x1d, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1m10.738882722s ago: executing program 0 (id=1239): io_setup(0x5, &(0x7f0000000240)=0x0) r1 = inotify_init() io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 1m10.418694586s ago: executing program 0 (id=1244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x3) 1m10.262244701s ago: executing program 0 (id=1247): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 1m10.033299526s ago: executing program 0 (id=1251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x0, 0x0, 0x6, 0x4, 0x14, 0x4249}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xf, 0x73, 0x0, @rand_addr=0x64010102, @broadcast}, "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"}}, 0xfce) 1m9.429384968s ago: executing program 0 (id=1259): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000580)=0x9, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x10140, 0x0, 0xffffffffffffff24) 1m8.992999538s ago: executing program 32 (id=1259): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000580)=0x9, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x10140, 0x0, 0xffffffffffffff24) 2.690994238s ago: executing program 2 (id=2108): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) write$ppp(r0, &(0x7f0000000300)="5af9", 0x2) 2.531434777s ago: executing program 2 (id=2110): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r0, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 2.363830181s ago: executing program 2 (id=2114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008d04"]) 2.284328453s ago: executing program 1 (id=2116): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) 2.114593528s ago: executing program 2 (id=2120): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.110337074s ago: executing program 1 (id=2121): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) 1.991820259s ago: executing program 1 (id=2123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r2, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.934809387s ago: executing program 5 (id=2124): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet(0x2, 0x3, 0x6) r2 = dup3(r0, r1, 0x0) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) 1.854442923s ago: executing program 2 (id=2125): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) setuid(0xee00) sendfile(r1, r0, 0x0, 0x23b) 1.806682424s ago: executing program 1 (id=2127): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7e, 0x1000, 0x5c8, 0x7fffffff, 0x6}) syz_open_procfs$namespace(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.755812519s ago: executing program 4 (id=2129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.741744254s ago: executing program 5 (id=2130): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x80, 0xfffc}, 0x7, [0x0, 0x80000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x401, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000001340)=""/104, 0x68}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.628766849s ago: executing program 2 (id=2131): fsopen(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="000e2d00000071"], 0x0, 0x0, 0x0, 0x0}) 1.600383617s ago: executing program 4 (id=2132): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 1.429296916s ago: executing program 3 (id=2133): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x1100020, &(0x7f0000005380)={[{@gid}, {}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 1.399009376s ago: executing program 5 (id=2134): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="180200002000000000000000000000008500000036000000850000000500000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1, r0}, 0x26) 1.225678928s ago: executing program 5 (id=2135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000001c0)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.225002516s ago: executing program 3 (id=2136): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x32, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) io_uring_enter(r1, 0x3516, 0x483, 0x0, 0x0, 0x0) 1.117500713s ago: executing program 5 (id=2137): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mremap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x14002}, 0x0, 0x0) 999.141378ms ago: executing program 1 (id=2138): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 907.048334ms ago: executing program 3 (id=2139): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x2, r1, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) 862.395468ms ago: executing program 5 (id=2140): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 714.650969ms ago: executing program 3 (id=2141): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42581, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000100)={0x224004080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000080)=""/1) 666.116701ms ago: executing program 4 (id=2142): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x0, 0x7, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) 566.940969ms ago: executing program 4 (id=2143): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) splice(r1, 0x0, r0, 0x0, 0xe4d4, 0x4) 453.527135ms ago: executing program 3 (id=2144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 452.890129ms ago: executing program 4 (id=2145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x10}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x1a0, 0x0, 0xfffffffffffffffe}]}) 230.913772ms ago: executing program 3 (id=2146): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x7, 0x2, r1, 0x0}]) syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) 176.349005ms ago: executing program 4 (id=2147): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, &(0x7f0000000180)=0x6}) 0s ago: executing program 1 (id=2148): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) kernel console output (not intermixed with test programs): ngth. [ 107.742846][ T6203] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 107.813594][ T5883] usb 5-1: probing VID:PID(2201:012C) [ 107.843339][ T5883] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 107.882729][ T6245] capability: warning: `syz.3.139' uses deprecated v2 capabilities in a way that may be insecure [ 107.902326][ T5883] vub300 5-1:0.239: probe with driver vub300 failed with error -22 [ 107.927241][ T5883] usb 5-1: USB disconnect, device number 2 [ 108.087216][ T6248] syz.0.141 uses obsolete (PF_INET,SOCK_PACKET) [ 109.756981][ T6290] netlink: 'syz.1.159': attribute type 10 has an invalid length. [ 109.821076][ T6290] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.992819][ T6300] vxcan0: tx address claim with dest, not broadcast [ 111.029956][ T6336] process 'syz.4.182' launched './file2' with NULL argv: empty string added [ 111.366984][ T5890] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.566589][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 111.574428][ T5890] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 111.583473][ T5890] usb 2-1: config 0 has no interface number 0 [ 111.598951][ T5890] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 111.616102][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=229, SerialNumber=2 [ 111.664733][ T5890] usb 2-1: Product: syz [ 111.684228][ T5890] usb 2-1: Manufacturer: syz [ 111.693040][ T5890] usb 2-1: SerialNumber: syz [ 111.710547][ T5890] usb 2-1: config 0 descriptor?? [ 111.724627][ T5890] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 111.736524][ T5876] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.817325][ T6365] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.896543][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 111.916012][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.928367][ T5878] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.949448][ T5890] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 111.951769][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.985002][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 111.987321][ T5890] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 112.014011][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 112.045821][ T5876] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 112.056034][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.106455][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 112.128652][ T5878] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 112.172425][ T5878] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 112.184440][ T5876] hub 5-1:1.0: bad descriptor, ignoring hub [ 112.236423][ T5876] hub 5-1:1.0: probe with driver hub failed with error -5 [ 112.250081][ T5878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 112.256748][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 112.299656][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 112.315346][ T5878] usb 1-1: config 1 has no interface number 0 [ 112.335921][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 112.354112][ T5878] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.370895][ T6369] can0: slcan on ttyS3. [ 112.403014][ T5876] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 112.430555][ T5878] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 112.457918][ T5876] cdc_wdm 5-1:1.0: Unknown control protocol [ 112.463909][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 112.483699][ T5878] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 112.485624][ T5883] usb 2-1: USB disconnect, device number 2 [ 112.508074][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.590276][ T5883] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 112.634878][ T5878] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 112.646526][ T5883] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 112.695134][ T5883] quatech2 2-1:0.51: device disconnected [ 112.713238][ T6369] can0 (unregistered): slcan off ttyS3. [ 112.800441][ T5876] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 112.807122][ T6374] input: syz0 as /devices/virtual/input/input6 [ 112.859312][ T5878] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 113.317719][ T5890] usb 1-1: USB disconnect, device number 2 [ 113.335615][ T5890] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 113.496775][ T5878] usb 5-1: USB disconnect, device number 3 [ 113.656797][ T5883] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.836409][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 113.849181][ T5883] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.883677][ T5883] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.936851][ T5883] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 113.970527][ T5883] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 114.016996][ T5883] usb 2-1: Product: syz [ 114.024334][ T5883] usb 2-1: Manufacturer: syz [ 114.058503][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 114.090371][ T5883] hub 2-1:4.0: USB hub found [ 114.107878][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 114.291415][ T5883] hub 2-1:4.0: 4 ports detected [ 114.312402][ T5883] hub 2-1:4.0: insufficient power available to use all downstream ports [ 114.499008][ T5883] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 114.523740][ T5883] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 114.607299][ T5883] usb 2-1: USB disconnect, device number 3 [ 114.896256][ T5890] kernel write not supported for file /input/event2 (pid: 5890 comm: kworker/1:5) [ 114.981245][ T6439] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.217'. [ 115.343917][ T6456] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 115.656668][ T6465] netlink: 'syz.0.226': attribute type 8 has an invalid length. [ 115.716388][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'. [ 115.768032][ T6465] bridge0: entered allmulticast mode [ 116.620201][ T6492] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 116.634468][ T6491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.235'. [ 116.669608][ T6491] sch_fq: defrate 0 ignored. [ 116.948692][ T5876] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 117.046612][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.121122][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 117.150677][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 117.170691][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 117.190655][ T5876] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 117.206121][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.219133][ T5876] usb 2-1: Product: syz [ 117.223841][ T5876] usb 2-1: Manufacturer: syz [ 117.231150][ T5876] usb 2-1: SerialNumber: syz [ 117.235981][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.254798][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.266078][ T5876] usb 2-1: config 0 descriptor?? [ 117.271819][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.282324][ T6494] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.305318][ T6494] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.312825][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.327841][ T5876] usb 2-1: ucan: probing device on interface #0 [ 117.345282][ T6497] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 117.408606][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.644335][ T10] usb 4-1: USB disconnect, device number 2 [ 117.948176][ T5876] ucan 2-1:0.0: probe with driver ucan failed with error -22 [ 118.101627][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 118.183493][ T5876] usb 2-1: USB disconnect, device number 4 [ 118.574679][ T5876] kernel write not supported for file /media2 (pid: 5876 comm: kworker/0:4) [ 120.722731][ T6612] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 120.950826][ T6620] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 121.358499][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.536430][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 121.544389][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.574098][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 121.615165][ T10] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 121.634189][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 121.683908][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 121.713314][ T10] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 121.722644][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.751864][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 121.759546][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 121.772784][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 121.788363][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 121.812362][ T10] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 122.014145][ T6661] team_slave_0: entered promiscuous mode [ 122.020066][ T6661] team_slave_1: entered promiscuous mode [ 122.036540][ T5878] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 122.093310][ T6665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.315'. [ 122.198453][ T5878] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 122.217290][ T10] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 122.230135][ T5878] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 122.260388][ T5878] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 122.291128][ T5878] usb 2-1: config 220 has no interface number 2 [ 122.316410][ T5878] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 122.355141][ T5878] usb 2-1: config 220 interface 0 has no altsetting 0 [ 122.375051][ T5878] usb 2-1: config 220 interface 76 has no altsetting 0 [ 122.415427][ T5878] usb 2-1: config 220 interface 1 has no altsetting 0 [ 122.453251][ T5878] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 122.482855][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.526945][ T5878] usb 2-1: Product: syz [ 122.543645][ T5878] usb 2-1: Manufacturer: syz [ 122.572348][ T5878] usb 2-1: SerialNumber: syz [ 122.747425][ T43] usb 4-1: USB disconnect, device number 3 [ 122.860593][ T5878] usb 2-1: selecting invalid altsetting 0 [ 122.896989][ T5878] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 122.903415][ T5878] usb 2-1: No valid video chain found. [ 123.010058][ T5878] usb 2-1: selecting invalid altsetting 0 [ 123.024586][ T5878] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 123.082359][ T5878] usb 2-1: USB disconnect, device number 5 [ 123.566570][ T5890] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.740519][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 123.776339][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.805033][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 123.823023][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.842366][ T5890] usb 1-1: config 0 descriptor?? [ 123.898195][ T6708] tipc: Started in network mode [ 123.905329][ T6708] tipc: Node identity ac14140f, cluster identity 4711 [ 123.914314][ T6708] tipc: New replicast peer: 255.255.255.255 [ 123.924590][ T6708] tipc: Enabled bearer , priority 10 [ 123.950010][ T6712] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.336'. [ 124.261006][ T5883] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.279469][ T5890] logitech-djreceiver 0003:046D:C513.0002: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.0-1/input0 [ 124.384410][ T6729] 9pnet_virtio: no channels available for device syz [ 124.458595][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.504496][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.518756][ T5890] usb 1-1: USB disconnect, device number 3 [ 124.531204][ T5883] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 124.547782][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.565718][ T5883] usb 3-1: config 0 descriptor?? [ 124.993420][ T5883] sony 0003:054C:024B.0003: unexpected long global item [ 125.005896][ T5883] sony 0003:054C:024B.0003: parse failed [ 125.012436][ T5883] sony 0003:054C:024B.0003: probe with driver sony failed with error -22 [ 125.041594][ T10] tipc: Node number set to 2886997007 [ 125.188250][ T5890] usb 3-1: USB disconnect, device number 5 [ 125.193587][ T6764] netlink: 'syz.3.360': attribute type 4 has an invalid length. [ 125.422496][ T6773] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 125.485211][ T6775] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 125.519272][ T6775] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 125.626244][ T6781] Zero length message leads to an empty skb [ 126.132834][ T6803] dummy0: entered promiscuous mode [ 126.165900][ T6803] dummy0: left promiscuous mode [ 126.376434][ T6810] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 126.383216][ T6810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.423745][ T6810] vhci_hcd vhci_hcd.0: Device attached [ 126.656527][ T5878] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 126.696793][ T5876] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.902406][ T5876] usb 2-1: config 0 has no interfaces? [ 126.908683][ T5876] usb 2-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 126.926006][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.941904][ T5876] usb 2-1: config 0 descriptor?? [ 127.172547][ T6812] usb 35-1: recv xbuf, 0 [ 127.192650][ T5906] usb 2-1: USB disconnect, device number 6 [ 127.201532][ T36] vhci_hcd: stop threads [ 127.206222][ T36] vhci_hcd: release socket [ 127.228181][ T36] vhci_hcd: disconnect device [ 127.268371][ T5878] vhci_hcd: vhci_device speed not set [ 127.276505][ T5876] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.464026][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.482252][ T5876] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 127.496351][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.508077][ T5876] usb 3-1: config 0 descriptor?? [ 127.626580][ T30] audit: type=1326 audit(1748957674.279:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6860 comm="syz.4.403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11ae18e969 code=0x0 [ 128.146783][ T5876] razer 0003:1532:010E.0004: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 128.316510][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 128.325379][ T6884] netlink: 'syz.0.413': attribute type 3 has an invalid length. [ 128.353059][ T5876] usb 3-1: USB disconnect, device number 6 [ 128.822037][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 129.037217][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 129.196441][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 129.225122][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.245205][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.269343][ T5883] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 129.296354][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.321886][ T5883] usb 1-1: config 0 descriptor?? [ 129.742323][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.752797][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.770605][ T5883] hid (null): global environment stack underflow [ 129.779283][ T5883] hid (null): global environment stack underflow [ 129.786001][ T5883] hid (null): bogus close delimiter [ 129.971111][ T5883] usb 1-1: string descriptor 0 read error: -71 [ 130.030892][ T5883] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 130.056955][ T5883] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -32 [ 130.089055][ T5883] usb 1-1: USB disconnect, device number 4 [ 130.206404][ T5876] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.311560][ T6944] block device autoloading is deprecated and will be removed. [ 130.326065][ T6948] netlink: 44 bytes leftover after parsing attributes in process `syz.1.443'. [ 130.366433][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 130.403509][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.425363][ T5876] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 130.441141][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.454006][ T5876] usb 4-1: config 0 descriptor?? [ 130.480390][ T5876] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 130.835111][ T6969] capability: warning: `syz.0.453' uses 32-bit capabilities (legacy support in use) [ 130.890988][ T6969] program syz.0.453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.053800][ T6975] netlink: 36 bytes leftover after parsing attributes in process `syz.1.455'. [ 131.319083][ T5876] gspca_vc032x: reg_w err -71 [ 131.323924][ T5876] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 131.352882][ T5876] usb 4-1: USB disconnect, device number 4 [ 131.426539][ T5890] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.429649][ T30] audit: type=1326 audit(1748957678.089:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 131.456100][ T30] audit: type=1326 audit(1748957678.089:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 131.477934][ T30] audit: type=1326 audit(1748957678.089:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 131.509571][ T30] audit: type=1326 audit(1748957678.089:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 131.532604][ T30] audit: type=1326 audit(1748957678.089:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 131.556455][ T30] audit: type=1326 audit(1748957678.119:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 131.584529][ T30] audit: type=1326 audit(1748957678.119:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6990 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 131.633981][ T5890] usb 2-1: config 241 has an invalid interface number: 0 but max is -1 [ 131.648898][ T5890] usb 2-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 131.668868][ T5906] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 131.676379][ T5890] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 131.676411][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.684498][ T5890] usbhid 2-1:241.0: couldn't find an input interrupt endpoint [ 131.818211][ T7005] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 131.840175][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 131.851750][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.865374][ T5906] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 131.888284][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.905473][ T5906] usb 3-1: Product: syz [ 131.910373][ T5906] usb 3-1: Manufacturer: syz [ 131.915022][ T5906] usb 3-1: SerialNumber: syz [ 131.915184][ T5890] usb 2-1: USB disconnect, device number 7 [ 131.942162][ T5906] usb 3-1: config 0 descriptor?? [ 132.025710][ T5883] IPVS: starting estimator thread 0... [ 132.072166][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 132.102959][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 132.129873][ T7012] IPVS: using max 25 ests per chain, 60000 per kthread [ 132.382829][ T5906] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 132.507093][ T5890] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.682022][ T5890] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.692220][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.709340][ T5890] usb 5-1: config 0 descriptor?? [ 132.720464][ T5890] cp210x 5-1:0.0: cp210x converter detected [ 132.728432][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.487'. [ 132.740915][ T7041] nbd: couldn't find device at index 131080 [ 132.800029][ T5906] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 132.852331][ T5906] usb 3-1: USB disconnect, device number 7 [ 132.945603][ T7047] futex_wake_op: syz.1.491 tries to shift op by 32; fix this program [ 133.031595][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.039204][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.136887][ T5890] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 133.165989][ T5890] usb 5-1: cp210x converter now attached to ttyUSB0 [ 133.293264][ T7059] wireguard0: entered promiscuous mode [ 133.298921][ T7059] wireguard0: entered allmulticast mode [ 133.376976][ T5890] usb 5-1: USB disconnect, device number 4 [ 133.392748][ T5890] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 133.410993][ T5890] cp210x 5-1:0.0: device disconnected [ 133.774626][ T7084] binder: 7083:7084 ioctl c018620c 200000000700 returned -1 [ 133.986578][ T5890] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.146594][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 134.164070][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 134.202836][ T5890] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 134.217308][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.219015][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 134.225439][ T5890] usb 2-1: Product: syz [ 134.243046][ T5890] usb 2-1: Manufacturer: syz [ 134.247795][ T5890] usb 2-1: SerialNumber: syz [ 134.264263][ T5890] usb 2-1: config 0 descriptor?? [ 134.275365][ T5890] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 134.296736][ T5890] usb 2-1: Detected FT232R [ 134.429216][ T5906] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.485501][ T5890] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 134.603864][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.625324][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.661750][ T5906] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 134.671121][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 134.691604][ T5906] usb 4-1: SerialNumber: syz [ 134.720810][ T5890] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 134.910745][ T5906] usb 4-1: 0:2 : does not exist [ 134.957241][ T5906] usb 4-1: USB disconnect, device number 5 [ 134.980134][ T5890] usb 2-1: USB disconnect, device number 8 [ 135.033845][ T5890] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 135.193295][ T5890] ftdi_sio 2-1:0.0: device disconnected [ 135.846117][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 136.609003][ T5890] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 136.796979][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 136.827079][ T5890] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 136.842614][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.850844][ T5890] usb 3-1: Product: syz [ 136.855165][ T5890] usb 3-1: Manufacturer: syz [ 136.876101][ T5890] usb 3-1: SerialNumber: syz [ 136.886793][ T5890] usb 3-1: config 0 descriptor?? [ 136.907928][ T5890] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 136.913269][ T7192] Falling back ldisc for ptm0. [ 137.125371][ T5890] gspca_sn9c2028: read1 error -32 [ 137.133040][ T5890] gspca_sn9c2028: read1 error -32 [ 137.136954][ T30] audit: type=1400 audit(1748957683.789:10): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=7203 comm="syz.4.563" opid=7203 ocomm="syz.4.563" [ 137.348395][ T5883] usb 3-1: USB disconnect, device number 8 [ 138.977558][ T7268] netlink: 'syz.4.591': attribute type 6 has an invalid length. [ 139.215240][ T7276] use of bytesused == 0 is deprecated and will be removed in the future, [ 139.228296][ T7276] use the actual size instead. [ 139.489974][ T7289] bridge0: port 3(macvlan2) entered blocking state [ 139.497862][ T7289] bridge0: port 3(macvlan2) entered disabled state [ 139.505638][ T7289] macvlan2: entered allmulticast mode [ 139.511824][ T7289] bridge0: entered allmulticast mode [ 139.520843][ T7289] macvlan2: left allmulticast mode [ 139.526059][ T7289] bridge0: left allmulticast mode [ 139.729199][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 139.862254][ T7306] program syz.4.610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.949761][ T5906] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 140.121886][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 140.145327][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 140.180801][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.203736][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.213496][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.228015][ T5906] usb 2-1: Product: syz [ 140.232233][ T5906] usb 2-1: Manufacturer: syz [ 140.239561][ T5906] usb 2-1: SerialNumber: syz [ 140.248837][ T5906] usb 2-1: config 0 descriptor?? [ 140.268275][ T5906] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 140.289370][ T5906] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 140.382386][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 140.383502][ T7329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.622464][ T5876] kernel read not supported for file /usbmon9 (pid: 5876 comm: kworker/0:4) [ 140.889313][ T5906] em28xx 2-1:0.0: chip ID is em2884 [ 141.096726][ T5906] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 141.115551][ T5906] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 141.135327][ T5906] em28xx 2-1:0.0: No AC97 audio processor [ 141.157250][ T5906] usb 2-1: USB disconnect, device number 9 [ 141.187924][ T5906] em28xx 2-1:0.0: Disconnecting em28xx [ 141.237761][ T5906] em28xx 2-1:0.0: Freeing device [ 141.250982][ T7353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.632'. [ 141.302816][ T1004] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.327590][ T5888] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.336207][ T1004] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.576629][ T5888] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.636747][ T5883] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.825567][ T7370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 142.224577][ T7388] overlayfs: missing 'workdir' [ 142.465277][ T7401] kvm: kvm [7399]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x3 [ 143.681175][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 143.850187][ T10] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 143.865545][ T10] usb 4-1: config 0 has no interface number 0 [ 143.879841][ T10] usb 4-1: config 0 interface 98 has no altsetting 0 [ 143.912481][ T10] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 143.943378][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.966569][ T10] usb 4-1: Product: syz [ 143.979987][ T10] usb 4-1: Manufacturer: syz [ 143.984652][ T10] usb 4-1: SerialNumber: syz [ 144.021724][ T10] usb 4-1: config 0 descriptor?? [ 144.249917][ T10] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 144.856418][ T5883] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.887759][ T10] usb 4-1: reset high-speed USB device number 6 using dummy_hcd [ 145.017417][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 145.025378][ T5883] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 145.040189][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.060520][ T5883] pvrusb2: Hardware description: Terratec Grabster AV400 [ 145.072440][ T5883] pvrusb2: ********** [ 145.077955][ T5883] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 145.093460][ T5883] pvrusb2: Important functionality might not be entirely working. [ 145.102304][ T5883] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 145.134623][ T5883] pvrusb2: ********** [ 145.266721][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 145.268417][ T10] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 145.316448][ T10] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 145.316933][ T2347] pvrusb2: Invalid write control endpoint [ 145.333269][ T5906] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 145.364759][ T5906] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 145.474760][ T10] usb 4-1: USB disconnect, device number 6 [ 145.478132][ T2347] pvrusb2: Invalid write control endpoint [ 145.505952][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 145.523290][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 145.560707][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 145.572833][ T2347] pvrusb2: Device being rendered inoperable [ 145.599959][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 145.603863][ T5876] usb 5-1: USB disconnect, device number 5 [ 145.623622][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 145.653326][ T2347] pvrusb2: Attached sub-driver cx25840 [ 145.664256][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 145.683778][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 145.684111][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.702'. [ 145.716465][ T7503] netlink: 'syz.1.702': attribute type 7 has an invalid length. [ 145.724475][ T7503] netlink: 'syz.1.702': attribute type 8 has an invalid length. [ 145.740090][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 145.851106][ T7512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.075993][ T7519] tap0: tun_chr_ioctl cmd 35108 [ 146.370153][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 146.419750][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 146.456424][ T7533] netlink: 2 bytes leftover after parsing attributes in process `syz.2.716'. [ 146.487873][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 146.502947][ T7537] input: syz0 as /devices/virtual/input/input8 [ 146.505162][ T7533] netlink: 2 bytes leftover after parsing attributes in process `syz.2.716'. [ 147.951993][ T7595] netlink: 'syz.3.746': attribute type 11 has an invalid length. [ 148.054033][ T7598] netlink: 104 bytes leftover after parsing attributes in process `syz.2.747'. [ 148.102503][ T7598] netlink: 104 bytes leftover after parsing attributes in process `syz.2.747'. [ 148.137224][ T7598] netlink: 81 bytes leftover after parsing attributes in process `syz.2.747'. [ 148.873009][ T30] audit: type=1326 audit(1748957695.529:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7631 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 148.942101][ T30] audit: type=1326 audit(1748957695.529:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7631 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 148.963434][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.037482][ T30] audit: type=1326 audit(1748957695.529:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7631 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 149.101588][ T30] audit: type=1326 audit(1748957695.529:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7631 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 149.196449][ T30] audit: type=1326 audit(1748957695.529:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7631 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 149.281923][ T30] audit: type=1326 audit(1748957695.529:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7631 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 149.341796][ T7648] loop8: detected capacity change from 0 to 1 [ 149.396458][ T30] audit: type=1326 audit(1748957695.529:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7631 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 149.396496][ T7648] Dev loop8: unable to read RDB block 1 [ 149.446523][ T7648] loop8: unable to read partition table [ 149.452578][ T7648] loop8: partition table beyond EOD, truncated [ 149.465881][ T7648] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 149.481326][ T30] audit: type=1326 audit(1748957695.529:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7631 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 149.520724][ T30] audit: type=1326 audit(1748957695.529:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7631 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 149.566518][ T30] audit: type=1326 audit(1748957695.529:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7631 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 149.781923][ T5883] hid-generic C990:0003:0000.0006: unknown main item tag 0x0 [ 149.794492][ T5883] hid-generic C990:0003:0000.0006: unknown main item tag 0x0 [ 149.809021][ T5883] hid-generic C990:0003:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 150.556849][ T5878] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 150.729010][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 150.755003][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 150.774565][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 150.796123][ T5878] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 150.805936][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.856373][ T5878] usb 5-1: Product: syz [ 150.867081][ T5878] usb 5-1: Manufacturer: syz [ 150.879914][ T5878] usb 5-1: SerialNumber: syz [ 150.912536][ T5878] usb 5-1: config 0 descriptor?? [ 150.942388][ T7693] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.955525][ T7693] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 151.016880][ T5878] usb 5-1: ucan: probing device on interface #0 [ 151.628715][ T5878] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 151.656548][ T5876] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 151.664549][ T5878] usb 5-1: USB disconnect, device number 6 [ 151.822017][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 151.839083][ T5876] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 151.857358][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.868179][ T5876] usb 1-1: Product: syz [ 151.872401][ T5876] usb 1-1: Manufacturer: syz [ 151.877574][ T5876] usb 1-1: SerialNumber: syz [ 151.885422][ T5876] usb 1-1: config 0 descriptor?? [ 151.902732][ T7739] ======================================================= [ 151.902732][ T7739] WARNING: The mand mount option has been deprecated and [ 151.902732][ T7739] and is ignored by this kernel. Remove the mand [ 151.902732][ T7739] option from the mount to silence this warning. [ 151.902732][ T7739] ======================================================= [ 151.905026][ T5876] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.148651][ T5876] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 152.246597][ T5888] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 152.412762][ T5888] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 152.434468][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.442806][ T5888] usb 4-1: Product: syz [ 152.444455][ T43] usb 1-1: USB disconnect, device number 5 [ 152.457933][ T5888] usb 4-1: Manufacturer: syz [ 152.465436][ T5888] usb 4-1: SerialNumber: syz [ 152.477278][ T5888] usb 4-1: config 0 descriptor?? [ 152.493099][ T5888] hub 4-1:0.0: bad descriptor, ignoring hub [ 152.505907][ T5888] hub 4-1:0.0: probe with driver hub failed with error -5 [ 152.524344][ T5888] f81232 4-1:0.0: f81534a converter detected [ 152.554443][ T7765] netlink: 'syz.4.825': attribute type 17 has an invalid length. [ 152.587335][ T7765] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.595342][ T7765] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.728305][ T5888] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 152.757180][ T5888] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 152.866524][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 152.946557][ T5888] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 153.127230][ T5888] usb 4-1: device firmware changed [ 153.144254][ T5888] usb 4-1: USB disconnect, device number 7 [ 153.146216][ T7782] netlink: 68 bytes leftover after parsing attributes in process `syz.4.833'. [ 153.168100][ T5888] f81232 4-1:0.0: device disconnected [ 153.179016][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 153.527643][ T5888] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 153.720926][ T5888] usb 4-1: config 0 has no interfaces? [ 153.731335][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 153.764625][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.785758][ T5888] usb 4-1: Product: syz [ 153.798683][ T5888] usb 4-1: Manufacturer: syz [ 153.805279][ T5888] usb 4-1: SerialNumber: syz [ 153.819474][ T5888] usb 4-1: config 0 descriptor?? [ 154.046463][ T5878] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 154.125936][ T7815] sctp: [Deprecated]: syz.0.847 (pid 7815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.125936][ T7815] Use struct sctp_sack_info instead [ 154.147518][ T5888] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.196586][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 154.203914][ T5878] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 154.223878][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.241661][ T5878] pvrusb2: Hardware description: Terratec Grabster AV400 [ 154.249879][ T5878] pvrusb2: ********** [ 154.253998][ T5878] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 154.264708][ T5878] pvrusb2: Important functionality might not be entirely working. [ 154.274176][ T5878] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 154.285804][ T5878] pvrusb2: ********** [ 154.316769][ T5888] usb 5-1: Using ep0 maxpacket: 32 [ 154.324096][ T5888] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 154.333396][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.350926][ T5888] usb 5-1: config 0 descriptor?? [ 154.451406][ T2347] pvrusb2: Invalid write control endpoint [ 154.548666][ T2347] pvrusb2: Invalid write control endpoint [ 154.576069][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 154.592589][ T5888] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 154.602505][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 154.622989][ T5883] usb 4-1: USB disconnect, device number 8 [ 154.630049][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 154.639511][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 154.676518][ T2347] pvrusb2: Device being rendered inoperable [ 154.683687][ T5888] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 154.692103][ T7809] pvrusb2: Attempted to execute control transfer when device not ok [ 154.701358][ T5888] usb 5-1: media controller created [ 154.708412][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 154.715531][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 154.725753][ T5890] usb 2-1: USB disconnect, device number 10 [ 154.765432][ T2347] pvrusb2: Attached sub-driver cx25840 [ 154.772345][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 154.793965][ T7813] pvrusb2: Attempted to execute control transfer when device not ok [ 154.803600][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.806453][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 154.862920][ T5888] az6027: usb out operation failed. (-71) [ 154.897474][ T5888] az6027: usb out operation failed. (-71) [ 154.908538][ T5888] stb0899_attach: Driver disabled by Kconfig [ 154.914737][ T5888] az6027: no front-end attached [ 154.914737][ T5888] [ 154.923469][ T5888] az6027: usb out operation failed. (-71) [ 154.929500][ T5888] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 154.943882][ T5888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 154.972746][ T5888] dvb-usb: schedule remote query interval to 400 msecs. [ 154.991935][ T5888] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 155.005912][ T5888] usb 5-1: USB disconnect, device number 7 [ 155.113793][ T5888] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 155.236774][ T5878] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 155.376233][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 155.414321][ T5878] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 155.434254][ T5878] usb 3-1: config 0 has no interface number 0 [ 155.451160][ T5878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.472454][ T5878] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.503402][ T5878] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.532214][ T5878] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 155.562044][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.587979][ T5878] usb 3-1: config 0 descriptor?? [ 156.233300][ T5878] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0007/input/input10 [ 156.246412][ T5888] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 156.331863][ T5878] uclogic 0003:28BD:0042.0007: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1 [ 156.431347][ T5888] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.455380][ T5878] usb 3-1: USB disconnect, device number 9 [ 156.455381][ T5888] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 156.455410][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.489890][ T5888] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 156.500066][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.514234][ T5888] usb 2-1: config 0 descriptor?? [ 156.520248][ T7877] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 156.957387][ T5888] holtek_mouse 0003:04D9:A067.0008: unknown main item tag 0x0 [ 156.966233][ T5888] holtek_mouse 0003:04D9:A067.0008: unknown main item tag 0x0 [ 156.974485][ T5888] holtek_mouse 0003:04D9:A067.0008: unknown main item tag 0x0 [ 156.982264][ T5888] holtek_mouse 0003:04D9:A067.0008: unknown main item tag 0x0 [ 156.989926][ T5888] holtek_mouse 0003:04D9:A067.0008: unknown main item tag 0x0 [ 157.015864][ T5888] holtek_mouse 0003:04D9:A067.0008: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input0 [ 157.157628][ T7925] team0: Port device virt_wifi0 added [ 157.170320][ T7925] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 157.181331][ T5878] usb 2-1: USB disconnect, device number 11 [ 157.188672][ T7925] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 157.357178][ T5888] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 157.519072][ T5888] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.528032][ T5888] usb 5-1: config 0 has no interface number 0 [ 157.534208][ T5888] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 157.566391][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.584777][ T5888] usb 5-1: config 0 descriptor?? [ 157.595007][ T5888] usb 5-1: selecting invalid altsetting 1 [ 157.605005][ T5888] dvb_ttusb_budget: ttusb_init_controller: error [ 157.611461][ T5888] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 157.688075][ T5888] DVB: Unable to find symbol cx22700_attach() [ 157.789906][ T5888] DVB: Unable to find symbol tda10046_attach() [ 157.809920][ T5888] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 157.867648][ T5888] usb 5-1: USB disconnect, device number 8 [ 158.827280][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 158.904317][ T7990] loop5: detected capacity change from 0 to 63 [ 159.719838][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 160.152218][ T30] audit: type=1326 audit(1748957706.809:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8045 comm="syz.0.955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f385658e969 code=0x0 [ 160.595468][ T8069] overlayfs: workdir and upperdir must be separate subtrees [ 160.660412][ T8067] block device autoloading is deprecated and will be removed. [ 160.674820][ T8067] syz.4.965: attempt to access beyond end of device [ 160.674820][ T8067] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 160.982222][ T8082] bond0: entered promiscuous mode [ 160.992153][ T8082] bond_slave_0: entered promiscuous mode [ 161.016456][ T8082] bond_slave_1: entered promiscuous mode [ 161.043325][ T8082] dummy0: entered promiscuous mode [ 161.067764][ T8082] batadv0: entered promiscuous mode [ 161.087883][ T8082] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 161.132025][ T8082] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 161.162780][ T8082] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 161.196591][ T8082] bond0: left promiscuous mode [ 161.210169][ T8082] bond_slave_0: left promiscuous mode [ 161.226205][ T8082] bond_slave_1: left promiscuous mode [ 161.249561][ T8082] dummy0: left promiscuous mode [ 161.278686][ T8082] batadv0: left promiscuous mode [ 162.428829][ T8131] netlink: 'syz.0.990': attribute type 2 has an invalid length. [ 162.629514][ T8139] bridge_slave_0: default FDB implementation only supports local addresses [ 163.011085][ T8154] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1000'. [ 163.583488][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1009'. [ 164.415600][ T8210] netlink: 'syz.2.1027': attribute type 4 has an invalid length. [ 164.459856][ T8210] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1027'. [ 164.516157][ T8218] io-wq is not configured for unbound workers [ 164.553894][ T8219] loop6: detected capacity change from 0 to 524287999 [ 165.586433][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 165.767115][ T5879] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 165.936611][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 165.986236][ T5879] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 165.994502][ T5879] usb 3-1: can't read configurations, error -71 [ 166.676655][ T5876] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 166.695008][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 166.860144][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 166.891363][ T5876] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 166.900187][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 166.917078][ T5876] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.939726][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.961411][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.012476][ T5876] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.051896][ T5876] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.074501][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.107579][ T5878] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 167.137391][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.179143][ T5878] usb 1-1: config 0 descriptor?? [ 167.222173][ T5878] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 167.325541][ T8314] program syz.1.1074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.371898][ T5876] usb 5-1: usb_control_msg returned -32 [ 167.395989][ T5876] usbtmc 5-1:16.0: can't read capabilities [ 167.409846][ T5878] gp8psk: usb in 128 operation failed. [ 167.423464][ T5878] gp8psk: usb in 137 operation failed. [ 167.433180][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.452184][ T5878] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 167.469370][ T5878] usb 1-1: media controller created [ 167.509276][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.526492][ T5879] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.552541][ T5878] gp8psk_fe: Frontend attached [ 167.561778][ T5878] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 167.579806][ T5878] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 167.600831][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 167.664027][ T5878] gp8psk: usb in 138 operation failed. [ 167.671437][ T5878] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 167.681187][ T5878] gp8psk: found Genpix USB device pID = 203 (hex) [ 167.688023][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 167.695541][ T5878] usb 1-1: USB disconnect, device number 6 [ 167.706942][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 167.733926][ T5879] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 167.749599][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.771093][ T5879] usb 4-1: Product: syz [ 167.784533][ T5879] usb 4-1: Manufacturer: syz [ 167.797095][ T5879] usb 4-1: SerialNumber: syz [ 167.809218][ T5879] usb 4-1: config 0 descriptor?? [ 167.915563][ T5878] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 168.259328][ T5879] gs_usb 4-1:0.0: Configuring for 3 interfaces [ 168.663463][ T5879] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 168.790755][ T5879] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 168.820998][ T5879] usb 4-1: USB disconnect, device number 9 [ 168.950524][ T8348] atomic_op ffff88802a0bc198 conn xmit_atomic 0000000000000000 [ 169.028385][ T8354] input: syz1 as /devices/virtual/input/input11 [ 169.392558][ T8365] Bluetooth: hci5: Frame reassembly failed (-84) [ 169.404742][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 169.474155][ T5876] usb 5-1: USB disconnect, device number 9 [ 169.671461][ T8380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.332908][ T8411] syzkaller1: entered promiscuous mode [ 170.339622][ T8411] syzkaller1: entered allmulticast mode [ 170.663160][ T8419] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 170.901319][ T43] IPVS: starting estimator thread 0... [ 171.042580][ T8428] IPVS: using max 30 ests per chain, 72000 per kthread [ 171.276462][ T5876] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 171.387760][ T8452] sctp: [Deprecated]: syz.2.1139 (pid 8452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.387760][ T8452] Use struct sctp_sack_info instead [ 171.426877][ T5146] Bluetooth: hci5: command 0x1003 tx timeout [ 171.432469][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 171.446557][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 171.503464][ T5876] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.517836][ T5876] usb 1-1: config 0 has no interface number 0 [ 171.563567][ T5876] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 171.580856][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.602231][ T5876] usb 1-1: Product: syz [ 171.606589][ T5876] usb 1-1: Manufacturer: syz [ 171.611231][ T5876] usb 1-1: SerialNumber: syz [ 171.619534][ T5876] usb 1-1: config 0 descriptor?? [ 171.657394][ T5876] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 171.673263][ T5876] usb 1-1: selecting invalid altsetting 1 [ 171.695079][ T5876] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 171.719870][ T5876] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.751448][ T5876] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 171.786485][ T5876] usb 1-1: media controller created [ 171.841838][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.958559][ T5876] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 171.980321][ T5876] zl10353_read_register: readreg error (reg=127, ret==-71) [ 172.037064][ T5876] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 172.191855][ T5876] usb 1-1: USB disconnect, device number 7 [ 172.378874][ T8478] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1149'. [ 172.504923][ T8456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1142'. [ 172.637740][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'. [ 172.647448][ T8486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1153'. [ 173.534430][ T8506] nullb0: AHDI p1 p2 [ 173.567605][ T8506] nullb0: p1 start 795240812 is beyond EOD, truncated [ 173.837266][ T8513] vlan3: entered promiscuous mode [ 175.252666][ T8551] Trying to write to read-only block-device nullb0 [ 176.219680][ T8592] overlay: filesystem on ./bus is read-only [ 176.426901][ T5890] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 176.522625][ T8598] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1201'. [ 176.534374][ T8598] netlink: 'syz.0.1201': attribute type 7 has an invalid length. [ 176.544500][ T8598] netlink: 'syz.0.1201': attribute type 8 has an invalid length. [ 176.555854][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1201'. [ 176.581951][ T8598] gretap0: entered promiscuous mode [ 176.592772][ T8598] batadv_slave_1: entered promiscuous mode [ 176.596358][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 176.601884][ T8598] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.620609][ T5890] usb 3-1: config 0 has an invalid interface number: 201 but max is 0 [ 176.636335][ T5890] usb 3-1: config 0 has no interface number 0 [ 176.656420][ T5890] usb 3-1: config 0 interface 201 has no altsetting 0 [ 176.687449][ T5890] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=d6.67 [ 176.698773][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.717548][ T5890] usb 3-1: Product: syz [ 176.721778][ T5890] usb 3-1: Manufacturer: syz [ 176.736409][ T5890] usb 3-1: SerialNumber: syz [ 176.740355][ T8600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1202'. [ 176.751854][ T5890] usb 3-1: config 0 descriptor?? [ 176.799399][ T8600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.307529][ T5890] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 177.316418][ T5890] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 177.323314][ T5890] gspca_pac7302 3-1:0.201: probe with driver gspca_pac7302 failed with error -71 [ 177.361483][ T5890] usb 3-1: USB disconnect, device number 12 [ 177.483447][ T8610] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 178.843031][ T8654] can0: slcan on ttyS3. [ 179.038068][ T8654] can0 (unregistered): slcan off ttyS3. [ 179.193438][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1226'. [ 181.487843][ T8729] block nbd3: NBD_DISCONNECT [ 181.512069][ T8729] block nbd3: Send disconnect failed -22 [ 181.520886][ T8728] block nbd3: Disconnected due to user request. [ 181.532791][ T8728] block nbd3: shutting down sockets [ 181.534610][ T5888] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 181.723135][ T5888] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 181.740067][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.756460][ T5888] usb 5-1: Product: syz [ 181.760687][ T5888] usb 5-1: Manufacturer: syz [ 181.765372][ T5888] usb 5-1: SerialNumber: syz [ 181.806732][ T5888] usb 5-1: config 0 descriptor?? [ 181.958062][ T1313] bridge_slave_1: left allmulticast mode [ 181.964038][ T1313] bridge_slave_1: left promiscuous mode [ 181.972129][ T1313] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.994759][ T1313] bridge_slave_0: left allmulticast mode [ 182.006318][ T1313] bridge_slave_0: left promiscuous mode [ 182.012273][ T1313] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.035946][ T5888] usb 5-1: ignoring: probably an ADSL modem [ 182.106574][ T5878] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 182.286404][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 182.308278][ T5878] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 182.336487][ T5878] usb 4-1: config 0 has no interface number 0 [ 182.342669][ T5878] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.394027][ T5878] usb 4-1: config 0 interface 85 has no altsetting 0 [ 182.416177][ T5878] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 182.439029][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.448347][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'. [ 182.457666][ T5878] usb 4-1: Product: syz [ 182.465219][ T5888] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 182.475163][ T5878] usb 4-1: Manufacturer: syz [ 182.489089][ T5878] usb 4-1: SerialNumber: syz [ 182.510586][ T5878] usb 4-1: config 0 descriptor?? [ 182.573795][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 182.576181][ T1313] gretap0 (unregistering): left promiscuous mode [ 182.592255][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 182.602200][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 182.622372][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 182.631153][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.813166][ T1313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.825056][ T1313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.843709][ T1313] bond0 (unregistering): Released all slaves [ 183.138430][ T5878] appletouch 4-1:0.85: Geyser mode initialized. [ 183.154677][ T30] audit: type=1326 audit(1748957729.809:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8762 comm="syz.2.1276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f14dc98e969 code=0x0 [ 183.187329][ T5878] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input12 [ 183.300675][ T1313] batadv_slave_1: left promiscuous mode [ 183.342001][ T1313] hsr_slave_0: left promiscuous mode [ 183.372160][ T1313] hsr_slave_1: left promiscuous mode [ 183.380354][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.396834][ T5890] usb 4-1: USB disconnect, device number 10 [ 183.441041][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.458892][ T5890] appletouch 4-1:0.85: input: appletouch disconnected [ 184.309641][ T5878] usb 5-1: USB disconnect, device number 10 [ 184.421556][ T8791] sctp: [Deprecated]: syz.3.1288 (pid 8791) Use of int in maxseg socket option. [ 184.421556][ T8791] Use struct sctp_assoc_value instead [ 184.641266][ T1313] team0 (unregistering): Port device team_slave_1 removed [ 184.707723][ T5146] Bluetooth: hci1: command tx timeout [ 184.743350][ T1313] team0 (unregistering): Port device team_slave_0 removed [ 185.249352][ T8815] loop8: detected capacity change from 0 to 8 [ 185.271193][ T8815] Dev loop8: unable to read RDB block 8 [ 185.278046][ T8815] loop8: unable to read partition table [ 185.284179][ T8815] loop8: partition table beyond EOD, truncated [ 185.295656][ T8815] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 185.745069][ T8832] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1307'. [ 185.758727][ T8832] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1307'. [ 185.771225][ T8832] netlink: 'syz.2.1307': attribute type 6 has an invalid length. [ 185.791255][ T8832] netlink: 'syz.2.1307': attribute type 5 has an invalid length. [ 185.799135][ T8832] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1307'. [ 186.225099][ T8751] chnl_net:caif_netlink_parms(): no params data found [ 186.284715][ T8849] input: syz1 as /devices/virtual/input/input13 [ 186.430976][ T8850] "syz.2.1315" (8850) uses obsolete ecb(arc4) skcipher [ 186.446721][ T1313] IPVS: stop unused estimator thread 0... [ 186.573919][ T8751] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.609108][ T8751] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.609601][ T8751] bridge_slave_0: entered allmulticast mode [ 186.611718][ T8751] bridge_slave_0: entered promiscuous mode [ 186.615651][ T8751] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.615775][ T8751] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.615941][ T8751] bridge_slave_1: entered allmulticast mode [ 186.618173][ T8751] bridge_slave_1: entered promiscuous mode [ 186.727163][ T8751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.733825][ T8751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.787767][ T5839] Bluetooth: hci1: command tx timeout [ 186.860126][ T8751] team0: Port device team_slave_0 added [ 186.871044][ T8751] team0: Port device team_slave_1 added [ 186.953925][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.976433][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.002396][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.034370][ T8751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.078815][ T8751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.086734][ T8751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.120380][ T8751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.325499][ T8751] hsr_slave_0: entered promiscuous mode [ 187.335863][ T8751] hsr_slave_1: entered promiscuous mode [ 187.345460][ T8751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.353330][ T8751] Cannot create hsr debugfs directory [ 187.566828][ T8889] kvm: apic: phys broadcast and lowest prio [ 187.825892][ T8751] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 187.835521][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1332'. [ 187.861178][ T8751] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 187.903096][ T8751] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 187.950676][ T8751] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 188.067109][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 188.074446][ T5146] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 188.138363][ T8751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.201189][ T43] kernel read not supported for file /video37 (pid: 43 comm: kworker/1:1) [ 188.286009][ T8751] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.340378][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.347643][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.390016][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.398288][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.824022][ T8917] team0 (unregistering): Port device team_slave_0 removed [ 188.841803][ T8917] team0 (unregistering): Port device team_slave_1 removed [ 188.866529][ T5146] Bluetooth: hci1: command tx timeout [ 188.874725][ T8917] team0 (unregistering): Port device virt_wifi0 removed [ 189.285991][ T8933] netlink: 'syz.3.1346': attribute type 64 has an invalid length. [ 189.301332][ T8933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1346'. [ 189.385509][ T8751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.746689][ T5888] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 189.936153][ T5888] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 189.946335][ T5888] usb 4-1: config 0 has no interface number 0 [ 189.952540][ T5888] usb 4-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid maxpacket 49765, setting to 64 [ 190.016466][ T5888] usb 4-1: config 0 interface 235 has no altsetting 0 [ 190.032870][ T5888] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 190.052238][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.079587][ T5888] usb 4-1: Product: syz [ 190.096954][ T5888] usb 4-1: Manufacturer: syz [ 190.101661][ T5888] usb 4-1: SerialNumber: syz [ 190.133634][ T5888] usb 4-1: config 0 descriptor?? [ 190.150736][ T8939] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.173084][ T5888] keyspan 4-1:0.235: Keyspan 1 port adapter converter detected [ 190.192190][ T8751] veth0_vlan: entered promiscuous mode [ 190.209640][ T5888] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 87 [ 190.239469][ T5888] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 7 [ 190.262646][ T5888] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 81 [ 190.271960][ T8751] veth1_vlan: entered promiscuous mode [ 190.298273][ T5888] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 1 [ 190.316543][ T5888] keyspan 4-1:0.235: found no endpoint descriptor for endpoint 85 [ 190.360747][ T5888] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 190.389702][ T8751] veth0_macvtap: entered promiscuous mode [ 190.406616][ T5888] usb 4-1: USB disconnect, device number 11 [ 190.431104][ T8751] veth1_macvtap: entered promiscuous mode [ 190.444192][ T5888] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 190.507065][ T5888] keyspan 4-1:0.235: device disconnected [ 190.584802][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.709198][ T8751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.791458][ T8751] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.899836][ T8751] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.926421][ T8751] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.943795][ T8751] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.956475][ T5146] Bluetooth: hci1: command tx timeout [ 191.360839][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.382352][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.478770][ T8994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.508874][ T8994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.797967][ T5878] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 191.809521][ T5879] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 191.973114][ T5878] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 191.992448][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.001589][ T5878] usb 2-1: Product: syz [ 192.011117][ T5879] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 192.030614][ T5878] usb 2-1: Manufacturer: syz [ 192.036222][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.066775][ T5878] usb 2-1: SerialNumber: syz [ 192.075458][ T5878] usb 2-1: config 0 descriptor?? [ 192.081933][ T5879] usb 5-1: config 0 descriptor?? [ 192.100611][ T5879] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 192.198204][ T9046] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 192.209529][ T9046] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 192.333670][ T9050] input: syz0 as /devices/virtual/input/input14 [ 192.396761][ T5876] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 192.502606][ T5879] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 192.577815][ T5876] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 192.593254][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.606737][ T5876] usb 3-1: config 0 descriptor?? [ 192.615607][ T5876] cp210x 3-1:0.0: cp210x converter detected [ 192.816840][ T5890] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 192.869685][ T9067] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000004 [ 192.904259][ T5879] gspca_cpia1: usb_control_msg 02, error -71 [ 192.910918][ T5879] gspca_cpia1: usb_control_msg 05, error -71 [ 192.917467][ T5879] cpia1 5-1:0.0: unexpected systemstate: 00 [ 192.925292][ T5879] usb 5-1: USB disconnect, device number 11 [ 192.982314][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.993635][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.011924][ T5890] usb 4-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 193.024649][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.029955][ T5876] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 193.044591][ T5890] usb 4-1: config 0 descriptor?? [ 193.152183][ T5878] usb 2-1: f81604_read: reg: 100f failed: -EPROTO [ 193.180478][ T5878] usb 2-1: f81604_read: reg: 200f failed: -EPROTO [ 193.201610][ T5878] usb 2-1: USB disconnect, device number 12 [ 193.215756][ T5878] usb 2-1: f81604_read: reg: 100f failed: -ENODEV [ 193.269598][ T5876] usb 3-1: cp210x converter now attached to ttyUSB0 [ 193.278518][ T5878] usb 2-1: f81604_read: reg: 200f failed: -ENODEV [ 193.482540][ T5890] hid (null): nested delimiters [ 193.486852][ T5876] usb 3-1: USB disconnect, device number 13 [ 193.491087][ T5890] hid-generic 0003:0416:C168.0009: nested delimiters [ 193.500492][ T5890] hid-generic 0003:0416:C168.0009: item 0 1 2 10 parsing failed [ 193.513309][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 193.513735][ T5890] hid-generic 0003:0416:C168.0009: probe with driver hid-generic failed with error -22 [ 193.547376][ T5876] cp210x 3-1:0.0: device disconnected [ 193.695639][ T5890] usb 4-1: USB disconnect, device number 12 [ 193.888823][ T5878] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 194.052732][ T5878] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 194.076420][ T5878] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.091725][ T5878] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.120818][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.136634][ T5878] usb 5-1: Product: syz [ 194.136661][ T5878] usb 5-1: Manufacturer: syz [ 194.136686][ T5878] usb 5-1: SerialNumber: syz [ 194.165440][ T5878] usb 5-1: config 0 descriptor?? [ 194.183203][ T5878] usb 5-1: selecting invalid altsetting 0 [ 194.219674][ T9102] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1403'. [ 194.420429][ T5878] usb 5-1: USB disconnect, device number 12 [ 194.474401][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.482049][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.056415][ T5878] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 195.219518][ T5878] usb 3-1: Using ep0 maxpacket: 32 [ 195.237915][ T5878] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 195.274023][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.299901][ T5878] usb 3-1: config 0 descriptor?? [ 195.321556][ T5878] gspca_main: sq930x-2.14.0 probing 041e:403c [ 195.606507][ T5876] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 195.777535][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 195.790242][ T5876] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 195.816411][ T5876] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 195.826038][ T5876] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 195.835151][ T5876] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 195.850999][ T5876] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 195.861843][ T5876] usb 2-1: config 0 has no interface number 0 [ 195.883188][ T5876] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 195.896336][ T5876] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 195.907752][ T5876] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 195.944160][ T5876] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 195.958459][ T5876] usb 2-1: config 0 interface 125 has no altsetting 0 [ 195.965333][ T5876] usb 2-1: config 0 interface 125 has no altsetting 2 [ 195.981187][ T5876] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 195.991112][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.999226][ T5876] usb 2-1: Product: syz [ 196.003796][ T5876] usb 2-1: Manufacturer: syz [ 196.009868][ T5876] usb 2-1: SerialNumber: syz [ 196.043360][ T5876] usb 2-1: config 0 descriptor?? [ 196.068674][ T5876] usb 2-1: selecting invalid altsetting 2 [ 196.344501][ T5878] gspca_sq930x: ucbus_write failed -71 [ 196.355892][ T5878] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 196.378592][ T5878] usb 3-1: USB disconnect, device number 14 [ 197.103533][ T5876] usb 2-1: USB disconnect, device number 13 [ 197.131191][ T9177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.191163][ T9179] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.236550][ T5888] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 197.416390][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 197.423540][ T5888] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 197.431841][ T5888] usb 4-1: config 0 has no interface number 0 [ 197.440978][ T5888] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 197.450304][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.459093][ T5888] usb 4-1: Product: syz [ 197.463372][ T5888] usb 4-1: Manufacturer: syz [ 197.470191][ T5888] usb 4-1: SerialNumber: syz [ 197.478932][ T5888] usb 4-1: config 0 descriptor?? [ 197.485926][ T5888] smsc95xx v2.0.0 [ 197.666543][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.892745][ T5888] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 197.918145][ T5888] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 198.333852][ T5888] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 198.366696][ T5888] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 198.383686][ T5888] usb 4-1: USB disconnect, device number 13 [ 198.662862][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'. [ 198.876640][ T5876] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 199.048551][ T5876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.066569][ T5876] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 199.093681][ T5146] Bluetooth: hci2: unexpected cc 0x2007 length: 100 > 2 [ 199.096180][ T5876] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 199.114781][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.150351][ T5876] usb 6-1: config 0 descriptor?? [ 199.168270][ T5876] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 199.207951][ T5876] dvb-usb: bulk message failed: -22 (3/0) [ 199.241431][ T5876] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 199.268906][ T5876] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 199.286881][ T5876] usb 6-1: media controller created [ 199.295262][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.337353][ T5876] dvb-usb: bulk message failed: -22 (6/0) [ 199.343642][ T5876] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 199.384264][ T5876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 199.423230][ T5876] dvb-usb: schedule remote query interval to 150 msecs. [ 199.442961][ T5876] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 199.598637][ T5876] dvb-usb: bulk message failed: -22 (1/0) [ 199.607238][ T5876] dvb-usb: error while querying for an remote control event. [ 199.796740][ T5876] dvb-usb: bulk message failed: -22 (1/0) [ 199.810417][ T5876] dvb-usb: error while querying for an remote control event. [ 199.868653][ T5876] usb 6-1: USB disconnect, device number 2 [ 199.905513][ T5876] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 200.336390][ T5918] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 200.507591][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.526375][ T5918] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 200.556339][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.599000][ T5918] usb 2-1: config 0 descriptor?? [ 200.789615][ T9259] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.796201][ T9259] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 200.827916][ T9259] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 200.850951][ T9259] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.881181][ T9259] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 200.933779][ T9259] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 200.984386][ T9259] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.990626][ T9259] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 200.999121][ T9259] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 201.011885][ T9259] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.044890][ T9259] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.067349][ T5918] playstation 0003:054C:0BA0.000A: unknown main item tag 0x0 [ 201.080403][ T9259] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 201.086925][ T5918] playstation 0003:054C:0BA0.000A: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 201.136205][ T9259] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.177710][ T9259] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.222002][ T9259] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 201.264766][ T5918] playstation 0003:054C:0BA0.000A: Failed to retrieve feature with reportID 18: -71 [ 201.287263][ T5918] playstation 0003:054C:0BA0.000A: Failed to retrieve DualShock4 pairing info: -71 [ 201.306404][ T5918] playstation 0003:054C:0BA0.000A: Failed to get MAC address from DualShock4 [ 201.315243][ T5918] playstation 0003:054C:0BA0.000A: Failed to create dualshock4. [ 201.339879][ T5918] playstation 0003:054C:0BA0.000A: probe with driver playstation failed with error -71 [ 201.369535][ T5918] usb 2-1: USB disconnect, device number 14 [ 201.648768][ T9284] kernel read not supported for file /!selinu (pid: 9284 comm: syz.2.1484) [ 201.661172][ T30] audit: type=1800 audit(1748957748.319:23): pid=9284 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1484" name=2173656C696E75FF7F dev="mqueue" ino=23975 res=0 errno=0 [ 201.816516][ T5918] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 201.996872][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 202.013637][ T5918] usb 6-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 202.031423][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.075141][ T5918] usb 6-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 202.102445][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.134465][ T5918] usb 6-1: config 0 descriptor?? [ 202.330688][ T9298] GUP no longer grows the stack in syz.1.1491 (9298): 200000004000-20000000a000 (200000002000) [ 202.341950][ T9298] CPU: 1 UID: 0 PID: 9298 Comm: syz.1.1491 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 202.341980][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.341992][ T9298] Call Trace: [ 202.342001][ T9298] [ 202.342010][ T9298] dump_stack_lvl+0x189/0x250 [ 202.342050][ T9298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.342085][ T9298] ? __pfx__printk+0x10/0x10 [ 202.342103][ T9298] ? find_vma+0xe7/0x160 [ 202.342146][ T9298] __get_user_pages+0x2a60/0x30b0 [ 202.342216][ T9298] ? __pfx___get_user_pages+0x10/0x10 [ 202.342253][ T9298] get_user_pages_remote+0x2f9/0xaa0 [ 202.342276][ T9298] ? __pfx_mtree_load+0x10/0x10 [ 202.342316][ T9298] ? __pfx_get_user_pages_remote+0x10/0x10 [ 202.342353][ T9298] __access_remote_vm+0x215/0x5f0 [ 202.342392][ T9298] ? __pfx___access_remote_vm+0x10/0x10 [ 202.342423][ T9298] ? alloc_pages_noprof+0xbe/0x190 [ 202.342457][ T9298] proc_pid_cmdline_read+0x440/0x840 [ 202.342487][ T9298] ? __asan_memset+0x22/0x50 [ 202.342518][ T9298] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 202.342551][ T9298] ? rw_verify_area+0x258/0x650 [ 202.342581][ T9298] vfs_readv+0x5aa/0x850 [ 202.342612][ T9298] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 202.342644][ T9298] ? __pfx_vfs_readv+0x10/0x10 [ 202.342692][ T9298] ? __fget_files+0x2a/0x420 [ 202.342728][ T9298] ? __fget_files+0x3a0/0x420 [ 202.342755][ T9298] ? __fget_files+0x2a/0x420 [ 202.342805][ T9298] __x64_sys_preadv+0x197/0x2a0 [ 202.342838][ T9298] ? __pfx___x64_sys_preadv+0x10/0x10 [ 202.342862][ T9298] ? rcu_is_watching+0x15/0xb0 [ 202.342900][ T9298] ? do_syscall_64+0xbe/0x3b0 [ 202.342938][ T9298] do_syscall_64+0xfa/0x3b0 [ 202.342967][ T9298] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.342997][ T9298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.343017][ T9298] ? clear_bhb_loop+0x60/0xb0 [ 202.343043][ T9298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.343062][ T9298] RIP: 0033:0x7fd30878e969 [ 202.343082][ T9298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.343099][ T9298] RSP: 002b:00007fd3096ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 202.343121][ T9298] RAX: ffffffffffffffda RBX: 00007fd3089b5fa0 RCX: 00007fd30878e969 [ 202.343134][ T9298] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 202.343146][ T9298] RBP: 00007fd308810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 202.343157][ T9298] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 202.343169][ T9298] R13: 0000000000000000 R14: 00007fd3089b5fa0 R15: 00007ffed2681e78 [ 202.343203][ T9298] [ 202.680230][ T9280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.701867][ T9280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.789687][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.818569][ T5890] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 202.867585][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 202.993645][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.026314][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 203.038305][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 203.043006][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 203.047870][ T5146] Bluetooth: hci3: command 0x0c1a tx timeout [ 203.054580][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.074895][ T5918] usb 6-1: string descriptor 0 read error: -71 [ 203.084400][ T5918] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 203.150737][ T5918] usb 6-1: USB disconnect, device number 3 [ 203.188973][ T5839] Bluetooth: hci1: command 0x0405 tx timeout [ 203.200631][ T5890] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.242677][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.287990][ T5890] usb 5-1: config 0 descriptor?? [ 203.656597][ T5918] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 203.750176][ T5890] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 203.772192][ T5890] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 203.806019][ T5890] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 203.850164][ T5918] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 203.859648][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.891318][ T5918] usb 3-1: config 0 descriptor?? [ 203.902363][ T5918] gspca_main: spca508-2.14.0 probing 8086:0110 [ 204.134555][ T5918] gspca_spca508: reg_read err -32 [ 204.140732][ T5918] gspca_spca508: reg_read err -32 [ 204.151924][ T9330] block nbd5: shutting down sockets [ 204.158788][ T5918] gspca_spca508: reg_read err -32 [ 204.351422][ T9332] Invalid source name [ 204.370020][ T5918] gspca_spca508: reg_read err -71 [ 204.386635][ T5918] gspca_spca508: reg write: error -71 [ 204.396582][ T5918] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 204.417640][ T5918] usb 3-1: USB disconnect, device number 15 [ 204.877014][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.946677][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.106597][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 205.112717][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.266638][ T5839] Bluetooth: hci1: command 0x0405 tx timeout [ 205.294841][ T9353] input: syz1 as /devices/virtual/input/input16 [ 205.873017][ T5878] usb 5-1: USB disconnect, device number 13 [ 206.073504][ T9386] vlan2: entered allmulticast mode [ 206.097163][ T9386] bond0: entered allmulticast mode [ 206.102378][ T9386] bond_slave_0: entered allmulticast mode [ 206.137584][ T9386] bond_slave_1: entered allmulticast mode [ 206.691496][ T9409] program syz.1.1539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.802538][ T9414] loop7: detected capacity change from 0 to 7 [ 206.843630][ T9414] Dev loop7: unable to read RDB block 7 [ 206.863900][ T9414] loop7: AHDI p1 p2 [ 206.868558][ T9414] loop7: partition table partially beyond EOD, truncated [ 206.896322][ T9414] loop7: p1 start 1702000233 is beyond EOD, truncated [ 206.956601][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.966664][ T5876] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 206.986343][ T5876] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 207.026806][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.074379][ T9423] input: syz1 as /devices/virtual/input/input17 [ 207.186739][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 207.193058][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 207.200843][ T5876] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 207.207330][ T5876] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 207.356709][ T5839] Bluetooth: hci1: command 0x0405 tx timeout [ 207.425408][ T9436] binder: 9434:9436 ioctl c018620b 200000000700 returned -14 [ 207.932052][ T9454] syzkaller1: entered promiscuous mode [ 207.952560][ T9454] syzkaller1: entered allmulticast mode [ 208.076682][ T5878] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 208.109616][ T9460] input: syz1 as /devices/virtual/input/input18 [ 208.256935][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 208.285299][ T5878] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 208.311150][ T5878] usb 2-1: config 0 has no interface number 0 [ 208.328503][ T5878] usb 2-1: config 0 interface 32 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 208.350659][ T5878] usb 2-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=15.e8 [ 208.367507][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.381804][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 208.390825][ T5878] usb 2-1: Product: syz [ 208.395131][ T5878] usb 2-1: Manufacturer: syz [ 208.409043][ T5878] usb 2-1: SerialNumber: syz [ 208.427711][ T5878] usb 2-1: config 0 descriptor?? [ 208.434589][ T9450] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 208.475522][ T5878] s2255 2-1:0.32: Could not find bulk-in endpoint [ 208.486695][ T5878] Sensoray 2255 driver load failed: 0xfffffff4 [ 208.496336][ T5878] s2255 2-1:0.32: probe with driver s2255 failed with error -12 [ 208.543377][ T9473] netlink: 'syz.5.1569': attribute type 10 has an invalid length. [ 208.562335][ T9473] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1569'. [ 208.592669][ T9473] dummy0: entered promiscuous mode [ 208.604613][ T9473] bridge0: port 3(dummy0) entered blocking state [ 208.632574][ T9473] bridge0: port 3(dummy0) entered disabled state [ 208.650059][ T9473] dummy0: entered allmulticast mode [ 208.690462][ T9473] bridge0: port 3(dummy0) entered blocking state [ 208.697113][ T9473] bridge0: port 3(dummy0) entered forwarding state [ 208.718665][ T5918] usb 2-1: USB disconnect, device number 15 [ 209.266453][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.276661][ T5876] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 209.282840][ T5876] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 209.835949][ T5906] usb 4-1: [UEAGLE-ATM] firmware is not available [ 209.857762][ T5890] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 209.972863][ T9527] sctp: [Deprecated]: syz.3.1593 (pid 9527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.972863][ T9527] Use struct sctp_sack_info instead [ 210.037624][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 210.056036][ T5890] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 210.065504][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.083406][ T5890] usb 2-1: Product: syz [ 210.088014][ T5890] usb 2-1: Manufacturer: syz [ 210.092752][ T5890] usb 2-1: SerialNumber: syz [ 210.105663][ T5890] usb 2-1: config 0 descriptor?? [ 210.114755][ T5890] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 210.130001][ T5890] usb 2-1: Detected FT232H [ 210.325389][ T5890] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 210.712969][ T9537] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 210.756912][ T5890] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 210.955469][ T43] usb 2-1: USB disconnect, device number 16 [ 210.992003][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 211.016776][ T43] ftdi_sio 2-1:0.0: device disconnected [ 211.146582][ T9555] syzkaller1: entered promiscuous mode [ 211.155222][ T9555] syzkaller1: entered allmulticast mode [ 211.349190][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 211.361005][ T5876] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 211.374302][ T5876] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 212.236549][ T5890] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 212.386430][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 212.402441][ T5890] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 212.419939][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.457425][ T5890] usb 2-1: config 0 descriptor?? [ 212.477623][ T5890] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 212.786702][ T5839] Bluetooth: hci1: command 0x0405 tx timeout [ 212.793910][ T5876] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 212.814511][ T5876] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 213.511466][ T5890] gspca_sonixj: reg_w1 err -71 [ 213.536637][ T5890] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 213.558831][ T5890] usb 2-1: USB disconnect, device number 17 [ 214.133007][ T9630] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (20) [ 214.403948][ T9639] netlink: 'syz.1.1641': attribute type 29 has an invalid length. [ 214.416074][ T9639] netlink: 'syz.1.1641': attribute type 29 has an invalid length. [ 214.445318][ T9639] netlink: 492 bytes leftover after parsing attributes in process `syz.1.1641'. [ 214.781774][ T9651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1646'. [ 214.810658][ T9651] netlink: 'syz.2.1646': attribute type 7 has an invalid length. [ 214.825327][ T9651] netlink: 'syz.2.1646': attribute type 8 has an invalid length. [ 214.849565][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1646'. [ 214.890662][ T9651] erspan0: entered promiscuous mode [ 214.906372][ T5890] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 214.916130][ T9651] gretap0: entered promiscuous mode [ 214.957097][ T9651] erspan0: left promiscuous mode [ 214.977780][ T9651] gretap0: left promiscuous mode [ 215.110259][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.146305][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 215.181988][ T5890] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 215.217455][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.248188][ T5890] usb 2-1: config 0 descriptor?? [ 215.408499][ T9665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.595791][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1656'. [ 215.605841][ T9669] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 215.677252][ T9671] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.686612][ T9671] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.695426][ T9671] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.704428][ T9671] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.761644][ T9671] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.770838][ T9671] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.779860][ T9671] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.788876][ T9671] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.928326][ T5890] Bluetooth: Can't get version to change to load ram patch err [ 215.935989][ T5890] Bluetooth: Loading sysconfig file failed [ 215.968079][ T5890] ath3k 2-1:0.0: probe with driver ath3k failed with error -71 [ 215.982253][ T5890] usb 2-1: USB disconnect, device number 18 [ 216.218144][ T9686] Invalid option length (1045426) for dns_resolver key [ 216.497511][ T43] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 216.677270][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 216.694181][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.732279][ T43] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 216.751488][ T9698] netlink: 'syz.5.1668': attribute type 29 has an invalid length. [ 216.770295][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.788625][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.788686][ T9698] netlink: 'syz.5.1668': attribute type 29 has an invalid length. [ 216.816404][ T43] usb 5-1: Product: syz [ 216.831896][ T43] usb 5-1: Manufacturer: syz [ 216.845538][ T43] usb 5-1: SerialNumber: syz [ 216.862474][ T9698] netlink: 508 bytes leftover after parsing attributes in process `syz.5.1668'. [ 217.139025][ T43] cdc_ncm 5-1:1.0: bind() failure [ 217.171508][ T43] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 217.190322][ T43] cdc_ncm 5-1:1.1: bind() failure [ 217.211165][ T43] usb 5-1: USB disconnect, device number 14 [ 217.361723][ T9714] sctp: [Deprecated]: syz.3.1674 (pid 9714) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.361723][ T9714] Use struct sctp_sack_info instead [ 217.438504][ T9718] loop2: detected capacity change from 0 to 7 [ 217.460868][ T9718] Dev loop2: unable to read RDB block 7 [ 217.469816][ T9718] loop2: unable to read partition table [ 217.481332][ T9718] loop2: partition table beyond EOD, truncated [ 217.498941][ T9718] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 217.885191][ T30] audit: type=1326 audit(1748957764.539:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9726 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 217.959098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 217.971912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 217.976367][ T30] audit: type=1326 audit(1748957764.539:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9726 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 218.007877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 218.035477][ T30] audit: type=1326 audit(1748957764.539:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9726 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 218.066208][ T30] audit: type=1326 audit(1748957764.539:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9726 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd30872ab39 code=0x7ffc0000 [ 218.079955][ T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 218.114395][ T30] audit: type=1326 audit(1748957764.539:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9726 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd30872ab39 code=0x7ffc0000 [ 218.183033][ T30] audit: type=1326 audit(1748957764.539:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9726 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 218.272648][ T30] audit: type=1326 audit(1748957764.539:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9726 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 218.315729][ T43] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 218.337461][ T30] audit: type=1326 audit(1748957764.539:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9726 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30878e969 code=0x7ffc0000 [ 218.339850][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.382088][ T9739] random: crng reseeded on system resumption [ 218.397325][ T30] audit: type=1326 audit(1748957764.539:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9726 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd30872ab39 code=0x7ffc0000 [ 218.412041][ T43] usb 5-1: config 0 descriptor?? [ 218.431017][ T30] audit: type=1326 audit(1748957764.539:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9726 comm="syz.1.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd30872ab39 code=0x7ffc0000 [ 218.435016][ T43] cp210x 5-1:0.0: cp210x converter detected [ 218.856421][ T43] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 218.870907][ T9743] syzkaller1: entered promiscuous mode [ 218.881881][ T9743] syzkaller1: entered allmulticast mode [ 218.888958][ T43] usb 5-1: cp210x converter now attached to ttyUSB0 [ 219.176418][ T43] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 219.225090][ T5918] usb 5-1: USB disconnect, device number 15 [ 219.240466][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 219.269843][ T5918] cp210x 5-1:0.0: device disconnected [ 219.345527][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.369332][ T43] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 219.386613][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.413948][ T43] usb 3-1: config 0 descriptor?? [ 219.852117][ T43] playstation 0003:054C:0BA0.000C: item fetching failed at offset 5/7 [ 219.887205][ T43] playstation 0003:054C:0BA0.000C: Parse failed [ 219.916426][ T43] playstation 0003:054C:0BA0.000C: probe with driver playstation failed with error -22 [ 220.103432][ T5876] usb 3-1: USB disconnect, device number 16 [ 220.122028][ T9787] sctp: [Deprecated]: syz.1.1707 (pid 9787) Use of int in maxseg socket option. [ 220.122028][ T9787] Use struct sctp_assoc_value instead [ 221.897957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.061587][ T9869] fuse: Bad value for 'fd' [ 222.539073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.656752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.656826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.796596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.876796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 222.876966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 223.551345][ T9902] ip6gre1: entered promiscuous mode [ 224.354974][ T9919] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1766'. [ 225.021252][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 225.260128][ T9863] syz.5.1741 (9863): drop_caches: 1 [ 225.290460][ T9867] syz.5.1741 (9867): drop_caches: 1 [ 225.504630][ T9950] C: renamed from team_slave_0 (while UP) [ 225.531348][ T9950] netlink: 'syz.2.1781': attribute type 4 has an invalid length. [ 225.550625][ T9950] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1781'. [ 225.560420][ T9950] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 225.584608][ T9953] program syz.5.1782 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.626468][ T5879] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 226.816305][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 226.829995][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.867351][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.892483][ T5879] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 226.916373][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.944398][ T5879] usb 3-1: config 0 descriptor?? [ 226.983603][ T9989] tipc: Started in network mode [ 226.996687][ T9989] tipc: Node identity 2000007, cluster identity 4711 [ 227.003480][ T9989] tipc: Node number set to 33554439 [ 227.027850][ T9989] tipc: Cannot configure node identity twice [ 227.271581][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1803'. [ 227.401098][ T5879] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 227.674475][ T5879] usb 3-1: USB disconnect, device number 17 [ 228.436351][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 228.608849][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 228.643298][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.678307][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 228.697366][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 228.728173][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.750304][ T43] usb 2-1: config 0 descriptor?? [ 228.777438][ T43] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 228.879407][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 228.898804][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 228.930643][ T9] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 228.950582][ T9] usb 3-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 228.971497][ T9] usb 3-1: Product: syz [ 228.975858][ T9] usb 3-1: Manufacturer: syz [ 228.984006][ T9] usb 3-1: SerialNumber: syz [ 229.004852][ T9] usb 3-1: config 0 descriptor?? [ 229.243638][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 229.574286][ T43] gspca_vc032x: reg_w err -71 [ 229.586572][ T43] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 229.607727][ T43] usb 2-1: USB disconnect, device number 19 [ 229.716579][ T5876] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 229.895012][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.905860][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.918889][ T5876] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 229.928759][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 229.936912][ T5876] usb 5-1: SerialNumber: syz [ 230.045298][ T9] gspca_sunplus: reg_w_riv err -71 [ 230.069363][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 230.084080][ T9] usb 3-1: USB disconnect, device number 18 [ 230.182656][ T5876] usb 5-1: 0:2 : does not exist [ 230.249336][ T5876] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 230.337752][ T5876] usb 5-1: USB disconnect, device number 16 [ 230.764180][ T43] kernel write not supported for file /254/net/ip_vs_stats (pid: 43 comm: kworker/1:1) [ 230.965279][ T3459] Bluetooth: hci5: Frame reassembly failed (-84) [ 231.419183][T10114] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 231.426578][ T43] IPVS: starting estimator thread 0... [ 231.526560][T10119] IPVS: using max 30 ests per chain, 72000 per kthread [ 232.271562][T10152] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 232.584125][T10161] vlan2: entered promiscuous mode [ 232.597163][T10161] macvtap0: entered promiscuous mode [ 232.970331][T10179] program syz.2.1880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.026667][ T5146] Bluetooth: hci5: command 0x1003 tx timeout [ 233.026690][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 233.173181][T10183] netlink: 'syz.3.1883': attribute type 10 has an invalid length. [ 233.224416][T10183] hsr_slave_0: left promiscuous mode [ 233.251477][T10183] hsr_slave_1: left promiscuous mode [ 233.811444][T10210] tipc: Started in network mode [ 233.817071][T10210] tipc: Node identity 7, cluster identity 4711 [ 233.823278][T10210] tipc: Node number set to 7 [ 234.562023][T10229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 235.333609][T10252] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 235.393039][T10252] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 237.042146][T10317] Bluetooth: MGMT ver 1.23 [ 237.091410][T10321] overlayfs: failed to clone upperpath [ 237.289124][T10326] loop8: detected capacity change from 0 to 8 [ 237.334159][T10326] Dev loop8: unable to read RDB block 8 [ 237.373036][T10326] loop8: unable to read partition table [ 237.386929][T10326] loop8: partition table beyond EOD, truncated [ 237.407110][T10326] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 237.606961][T10338] netlink: 'syz.2.1952': attribute type 1 has an invalid length. [ 237.635371][T10338] netlink: 'syz.2.1952': attribute type 2 has an invalid length. [ 237.674135][T10339] netlink: 'syz.2.1952': attribute type 1 has an invalid length. [ 237.702911][T10339] netlink: 'syz.2.1952': attribute type 2 has an invalid length. [ 237.984423][T10349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.236544][ T5876] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 239.429181][ T5876] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.452045][ T5876] usb 2-1: config 0 has no interface number 0 [ 239.468919][ T5876] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 239.509912][ T5876] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 239.533402][ T5876] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 239.563300][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.600410][ T5876] usb 2-1: config 0 descriptor?? [ 239.627066][T10382] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.662731][ T5876] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 239.902527][ T5918] usb 2-1: USB disconnect, device number 20 [ 240.045712][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1986'. [ 240.723544][T10435] program syz.4.1994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.072118][T10443] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1998'. [ 241.110593][T10443] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1998'. [ 241.186560][ T43] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 241.356402][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 241.390516][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 241.423708][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 241.454535][ T43] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 241.468482][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.492497][ T43] usb 5-1: Product: syz [ 241.512011][ T43] usb 5-1: Manufacturer: syz [ 241.534166][ T43] usb 5-1: SerialNumber: syz [ 241.565779][ T43] usb 5-1: config 0 descriptor?? [ 241.591565][T10439] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 241.616130][T10439] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 241.652238][ T43] usb 5-1: ucan: probing device on interface #0 [ 242.279502][T10474] netlink: 'syz.3.2012': attribute type 3 has an invalid length. [ 242.320725][ T43] ucan 5-1:0.0 can0: registered device [ 242.407266][T10479] netlink: 'syz.2.2014': attribute type 29 has an invalid length. [ 242.497118][ T43] ucan 5-1:0.0 can0: firmware string: [ 242.719971][ T5918] usb 5-1: USB disconnect, device number 17 [ 243.353037][T10514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2030'. [ 243.404942][T10515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2030'. [ 243.914676][T10537] pim6reg: entered allmulticast mode [ 243.939453][T10537] pim6reg: left allmulticast mode [ 243.970654][T10546] loop8: detected capacity change from 0 to 7 [ 243.999155][T10546] Dev loop8: unable to read RDB block 7 [ 244.015221][T10546] loop8: AHDI p3 [ 244.029347][T10546] loop8: partition table partially beyond EOD, truncated [ 244.980263][T10593] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2067'. [ 245.230108][ T5878] kernel write not supported for file /sysvipc/sem (pid: 5878 comm: kworker/0:5) [ 245.762434][T10622] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.728887][ T43] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 246.866670][ T5878] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 246.896327][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 246.904421][ T43] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 246.918232][ T5876] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 246.920936][ T43] usb 5-1: config 0 has no interface number 0 [ 246.950211][ T43] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.977229][ T43] usb 5-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.001479][ T43] usb 5-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.036315][ T43] usb 5-1: config 0 interface 2 has no altsetting 0 [ 247.039607][ T5878] usb 6-1: config index 0 descriptor too short (expected 30768, got 18) [ 247.042990][ T43] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 247.043020][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.073359][ T43] usb 5-1: config 0 descriptor?? [ 247.080150][ T5878] usb 6-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 247.089638][ T5878] usb 6-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 247.100607][ T5878] usb 6-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 247.111172][ T5878] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 247.120722][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.131948][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.142216][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 247.163555][ T5876] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 247.174603][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.205046][ T5876] usb 2-1: config 0 descriptor?? [ 247.398472][ T5878] usb 6-1: string descriptor 0 read error: -22 [ 247.528136][ T43] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 247.545709][ T43] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 247.565996][ T43] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 247.576136][ T43] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 247.606705][ T43] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 247.613839][ T43] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 247.631855][ T43] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 247.639519][ T9] usb 6-1: USB disconnect, device number 4 [ 247.650579][ T43] uclogic 0003:5543:0781.000E: No inputs registered, leaving [ 247.662290][T10678] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 247.678570][ T43] uclogic 0003:5543:0781.000E: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.4-1/input2 [ 247.685485][ T5876] viewsonic 0003:0543:E621.000F: hidraw1: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.1-1/input0 [ 247.762730][ T43] usb 5-1: USB disconnect, device number 18 [ 247.887291][ T5876] usb 2-1: USB disconnect, device number 21 [ 248.328796][T10690] dlm: non-version read from control device 4 [ 248.755062][T10705] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2117'. [ 248.841939][T10716] tipc: New replicast peer: 0.0.0.0 [ 248.852397][T10716] tipc: Enabled bearer , priority 10 [ 249.127750][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2128'. [ 249.144371][T10733] input: syz0 as /devices/virtual/input/input19 [ 249.171145][T10732] vlan2: entered promiscuous mode [ 249.179608][T10732] batadv0: entered promiscuous mode [ 249.476613][ T5876] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 249.656360][ T5876] usb 3-1: Using ep0 maxpacket: 16 [ 249.678325][ T5876] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 249.708282][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.750932][ T5876] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 249.786483][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.819535][ T5876] usb 3-1: Product: syz [ 249.823777][ T5876] usb 3-1: Manufacturer: syz [ 249.853883][ T5876] usb 3-1: SerialNumber: syz [ 249.878465][ T5876] usb 3-1: config 0 descriptor?? [ 249.904740][ T5876] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 249.935530][ T5876] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 250.261622][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 250.261673][ T30] audit: type=1326 audit(1748957796.919:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10764 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 250.326721][ T30] audit: type=1326 audit(1748957796.919:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10764 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 250.370721][ T30] audit: type=1326 audit(1748957796.919:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10764 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 250.418061][ T30] audit: type=1326 audit(1748957796.919:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10764 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 250.475547][ T30] audit: type=1326 audit(1748957796.919:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10764 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 250.523957][ T5876] em28xx 3-1:0.0: chip ID is em28174 [ 250.557431][ T30] audit: type=1326 audit(1748957796.919:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10764 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 250.595256][ T30] audit: type=1326 audit(1748957796.919:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10764 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 250.631060][ T30] audit: type=1326 audit(1748957796.919:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10764 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 250.653499][ T30] audit: type=1326 audit(1748957796.919:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10764 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 250.700953][ T30] audit: type=1326 audit(1748957796.929:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10764 comm="syz.4.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11ae18e969 code=0x7ffc0000 [ 250.744983][ T5876] usb 3-1: USB disconnect, device number 19 [ 250.760814][ T5876] em28xx 3-1:0.0: Disconnecting em28xx [ 250.781888][ T5876] em28xx 3-1:0.0: Freeing device [ 261.026596][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 355.836186][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 355.843209][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10757/1:b..l P10773/1:b..l [ 355.852918][ C1] rcu: (detected by 1, t=10502 jiffies, g=40333, q=178 ncpus=2) [ 355.860658][ C1] task:syz.4.2147 state:R running task stack:26888 pid:10773 tgid:10772 ppid:5825 task_flags:0x40044c flags:0x00004000 [ 355.874766][ C1] Call Trace: [ 355.878078][ C1] [ 355.881042][ C1] __schedule+0x16a2/0x4cb0 [ 355.885596][ C1] ? free_pages_and_swap_cache+0x4be/0x520 [ 355.891444][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 355.897404][ C1] ? preempt_schedule_common+0x83/0xd0 [ 355.902895][ C1] ? __pfx___schedule+0x10/0x10 [ 355.907869][ C1] ? do_raw_spin_lock+0x121/0x290 [ 355.912960][ C1] ? preempt_schedule+0xae/0xc0 [ 355.917940][ C1] preempt_schedule_common+0x83/0xd0 [ 355.923286][ C1] preempt_schedule+0xae/0xc0 [ 355.927996][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 355.933413][ C1] preempt_schedule_thunk+0x16/0x30 [ 355.938652][ C1] _raw_spin_unlock+0x3f/0x50 [ 355.943381][ C1] unmap_page_range+0x3842/0x41c0 [ 355.948496][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 355.953914][ C1] ? unmap_vmas+0x144/0x580 [ 355.958446][ C1] unmap_vmas+0x399/0x580 [ 355.962813][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 355.967726][ C1] exit_mmap+0x248/0xb50 [ 355.972026][ C1] ? uprobe_clear_state+0x20f/0x290 [ 355.977290][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 355.982096][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 355.987789][ C1] ? __pfx_exit_aio+0x10/0x10 [ 355.992514][ C1] ? uprobe_clear_state+0x274/0x290 [ 355.997740][ C1] ? mm_update_next_owner+0xa7/0x870 [ 356.003069][ C1] __mmput+0x118/0x420 [ 356.007210][ C1] exit_mm+0x1da/0x2c0 [ 356.011312][ C1] ? __pfx_exit_mm+0x10/0x10 [ 356.015932][ C1] ? rcu_is_watching+0x15/0xb0 [ 356.020733][ C1] do_exit+0x640/0x22e0 [ 356.024926][ C1] ? cgroup_freezing+0x20/0x360 [ 356.029810][ C1] ? __pfx_do_exit+0x10/0x10 [ 356.034432][ C1] ? cgroup_freezing+0x20/0x360 [ 356.039310][ C1] ? cgroup_freezing+0x20/0x360 [ 356.044275][ C1] ? cgroup_freezing+0x20/0x360 [ 356.049169][ C1] do_group_exit+0x21c/0x2d0 [ 356.053789][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.059032][ C1] get_signal+0x125e/0x1310 [ 356.063595][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 356.069179][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 356.075373][ C1] ? __fget_files+0x2a/0x420 [ 356.080014][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 356.085511][ C1] exit_to_user_mode_loop+0x75/0x110 [ 356.090833][ C1] do_syscall_64+0x2bd/0x3b0 [ 356.095497][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.100727][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.106816][ C1] ? clear_bhb_loop+0x60/0xb0 [ 356.111526][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.117446][ C1] RIP: 0033:0x7f11ae18e969 [ 356.121885][ C1] RSP: 002b:00007f11af0310e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 356.130332][ C1] RAX: fffffffffffffe00 RBX: 00007f11ae3b5fa8 RCX: 00007f11ae18e969 [ 356.138353][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f11ae3b5fa8 [ 356.146369][ C1] RBP: 00007f11ae3b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 356.154373][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11ae3b5fac [ 356.162376][ C1] R13: 0000000000000000 R14: 00007ffc7fa14a10 R15: 00007ffc7fa14af8 [ 356.170399][ C1] [ 356.173453][ C1] task:syz.5.2140 state:R running task stack:26888 pid:10757 tgid:10755 ppid:8751 task_flags:0x40054c flags:0x00004000 [ 356.186985][ C1] Call Trace: [ 356.190288][ C1] [ 356.193251][ C1] __schedule+0x16a2/0x4cb0 [ 356.197811][ C1] ? __lock_acquire+0xab9/0xd20 [ 356.202694][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 356.208018][ C1] ? __pfx___schedule+0x10/0x10 [ 356.212907][ C1] ? bad_range+0x8b/0x2c0 [ 356.217276][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 356.222598][ C1] preempt_schedule_irq+0xb5/0x150 [ 356.227750][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 356.233505][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 356.240138][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 356.245979][ C1] irqentry_exit+0x6f/0x90 [ 356.250432][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.256443][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 356.261757][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 0b ab fa 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 356.281388][ C1] RSP: 0018:ffffc9000f03f178 EFLAGS: 00000206 [ 356.287492][ C1] RAX: c000c69b4c82d100 RBX: 0000000000000000 RCX: c000c69b4c82d100 [ 356.295488][ C1] RDX: 0000000000000000 RSI: ffffffff8db48dd1 RDI: ffffffff8be1a180 [ 356.303480][ C1] RBP: ffffffff81728e15 R08: 0000000000000000 R09: ffffffff81728e15 [ 356.311564][ C1] R10: ffffc9000f03f338 R11: ffffffff81ace730 R12: 0000000000000002 [ 356.319560][ C1] R13: ffffffff8e13f140 R14: 0000000000000000 R15: 0000000000000246 [ 356.327558][ C1] ? unwind_next_frame+0xa5/0x2390 [ 356.332712][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 356.338890][ C1] ? unwind_next_frame+0xa5/0x2390 [ 356.344052][ C1] ? unwind_next_frame+0xa5/0x2390 [ 356.349192][ C1] ? call_rcu+0x142/0x990 [ 356.353555][ C1] ? unwind_next_frame+0xa5/0x2390 [ 356.358708][ C1] unwind_next_frame+0xc2/0x2390 [ 356.363939][ C1] ? unwind_next_frame+0xa5/0x2390 [ 356.369088][ C1] ? unwind_next_frame+0xa5/0x2390 [ 356.374240][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 356.379638][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 356.385861][ C1] arch_stack_walk+0x11c/0x150 [ 356.390668][ C1] ? call_rcu+0x142/0x990 [ 356.395034][ C1] stack_trace_save+0x9c/0xe0 [ 356.399738][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 356.405129][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 356.410364][ C1] ? kernel_text_address+0xa5/0xe0 [ 356.415516][ C1] kasan_save_stack+0x3e/0x60 [ 356.420219][ C1] ? kasan_save_stack+0x3e/0x60 [ 356.425106][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 356.430499][ C1] ? call_rcu+0x142/0x990 [ 356.434920][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 356.440145][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 356.446324][ C1] call_rcu+0x142/0x990 [ 356.450527][ C1] ? __pfx_call_rcu+0x10/0x10 [ 356.455251][ C1] ? exit_mmap+0x53f/0xb50 [ 356.459711][ C1] kmem_cache_free+0x309/0x400 [ 356.464511][ C1] exit_mmap+0x53f/0xb50 [ 356.468784][ C1] ? uprobe_clear_state+0x20f/0x290 [ 356.474018][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 356.478897][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 356.484590][ C1] ? __pfx_exit_aio+0x10/0x10 [ 356.489310][ C1] ? uprobe_clear_state+0x274/0x290 [ 356.494542][ C1] ? mm_update_next_owner+0xa7/0x870 [ 356.499857][ C1] __mmput+0x118/0x420 [ 356.503971][ C1] exit_mm+0x1da/0x2c0 [ 356.508073][ C1] ? __pfx_exit_mm+0x10/0x10 [ 356.512693][ C1] ? rcu_is_watching+0x15/0xb0 [ 356.517493][ C1] do_exit+0x640/0x22e0 [ 356.521687][ C1] ? cgroup_freezing+0x20/0x360 [ 356.526571][ C1] ? __pfx_do_exit+0x10/0x10 [ 356.531189][ C1] ? cgroup_freezing+0x20/0x360 [ 356.536066][ C1] ? cgroup_freezing+0x20/0x360 [ 356.540939][ C1] ? cgroup_freezing+0x20/0x360 [ 356.545829][ C1] do_group_exit+0x21c/0x2d0 [ 356.550449][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.555681][ C1] get_signal+0x125e/0x1310 [ 356.560243][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 356.565827][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 356.572034][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 356.577526][ C1] exit_to_user_mode_loop+0x75/0x110 [ 356.582846][ C1] do_syscall_64+0x2bd/0x3b0 [ 356.587473][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.592706][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.598800][ C1] ? clear_bhb_loop+0x60/0xb0 [ 356.603508][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.609431][ C1] RIP: 0033:0x7f6728f8e969 [ 356.613871][ C1] RSP: 002b:00007f6729e4d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 356.622312][ C1] RAX: fffffffffffffe00 RBX: 00007f67291b6088 RCX: 00007f6728f8e969 [ 356.630307][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f67291b6088 [ 356.638299][ C1] RBP: 00007f67291b6080 R08: 0000000000000000 R09: 0000000000000000 [ 356.646297][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f67291b608c [ 356.654291][ C1] R13: 0000000000000000 R14: 00007ffceb2d4800 R15: 00007ffceb2d48e8 [ 356.662321][ C1] [ 356.665366][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g40333 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 356.677736][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=18799 [ 356.685661][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g40333 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 356.697053][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 356.707042][ C1] rcu: RCU grace-period kthread stack dump: [ 356.712948][ C1] task:rcu_preempt state:I stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 356.724912][ C1] Call Trace: [ 356.728216][ C1] [ 356.731185][ C1] __schedule+0x16a2/0x4cb0 [ 356.735736][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 356.740994][ C1] ? schedule+0x165/0x360 [ 356.745374][ C1] ? __lock_acquire+0xab9/0xd20 [ 356.750263][ C1] ? __pfx___schedule+0x10/0x10 [ 356.755170][ C1] ? schedule+0x91/0x360 [ 356.759454][ C1] schedule+0x165/0x360 [ 356.763652][ C1] schedule_timeout+0x12b/0x270 [ 356.768537][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 356.773943][ C1] ? __pfx_process_timeout+0x10/0x10 [ 356.779264][ C1] ? prepare_to_swait_event+0x341/0x380 [ 356.784843][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 356.789739][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 356.794706][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.799938][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 356.805266][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 356.810508][ C1] ? finish_swait+0xcd/0x1f0 [ 356.815129][ C1] rcu_gp_kthread+0x99/0x390 [ 356.819750][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 356.825054][ C1] ? __kthread_parkme+0x7b/0x200 [ 356.830032][ C1] ? __kthread_parkme+0x1a1/0x200 [ 356.835098][ C1] kthread+0x711/0x8a0 [ 356.839197][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 356.844428][ C1] ? __pfx_kthread+0x10/0x10 [ 356.849049][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.854277][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.859509][ C1] ? __pfx_kthread+0x10/0x10 [ 356.864126][ C1] ret_from_fork+0x3f9/0x770 [ 356.868749][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 356.873903][ C1] ? __switch_to_asm+0x39/0x70 [ 356.878691][ C1] ? __switch_to_asm+0x33/0x70 [ 356.883486][ C1] ? __pfx_kthread+0x10/0x10 [ 356.888103][ C1] ret_from_fork_asm+0x1a/0x30 [ 356.892908][ C1] [ 356.895949][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 356.902289][ C1] Sending NMI from CPU 1 to CPUs 0: [ 356.907522][ C0] NMI backtrace for cpu 0 [ 356.907536][ C0] CPU: 0 UID: 0 PID: 10774 Comm: syz.3.2146 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 356.907555][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 356.907565][ C0] RIP: 0010:mark_lock+0x3c/0x190 [ 356.907587][ C0] Code: 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 d3 e5 25 ff 1f 00 00 48 0f a3 05 b4 3f 02 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 30 93 41 93 eb 48 83 3d fb ce [ 356.907601][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00000003 [ 356.907616][ C0] RAX: 0000000000000007 RBX: 0000000000000009 RCX: 0000000000000009 [ 356.907626][ C0] RDX: 0000000000000008 RSI: ffff88807cd7c740 RDI: ffff88807cd7bc00 [ 356.907637][ C0] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff897d2de8 [ 356.907648][ C0] R10: dffffc0000000000 R11: ffffed100415525e R12: 0000000000000003 [ 356.907658][ C0] R13: 0000000000000001 R14: ffff88807cd7c740 R15: 0000000000000002 [ 356.907669][ C0] FS: 00007fa215b226c0(0000) GS:ffff888125c93000(0000) knlGS:0000000000000000 [ 356.907682][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.907693][ C0] CR2: 000000110c3ee3e7 CR3: 00000000741f6000 CR4: 00000000003526f0 [ 356.907710][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.907719][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.907729][ C0] Call Trace: [ 356.907736][ C0] [ 356.907744][ C0] __lock_acquire+0x6a8/0xd20 [ 356.907767][ C0] ? advance_sched+0x9f8/0xc90 [ 356.907785][ C0] lock_acquire+0x120/0x360 [ 356.907804][ C0] ? advance_sched+0x9f8/0xc90 [ 356.907824][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 356.907840][ C0] ? advance_sched+0x9f8/0xc90 [ 356.907858][ C0] advance_sched+0xa14/0xc90 [ 356.907875][ C0] ? advance_sched+0x9f8/0xc90 [ 356.907897][ C0] ? __pfx_advance_sched+0x10/0x10 [ 356.907915][ C0] __hrtimer_run_queues+0x529/0xc60 [ 356.907943][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 356.907963][ C0] ? read_tsc+0x9/0x20 [ 356.907983][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 356.908013][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 356.908037][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 356.908059][ C0] [ 356.908064][ C0] [ 356.908070][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.908087][ C0] RIP: 0010:in_gate_area_no_mm+0x4/0x60 [ 356.908105][ C0] Code: c6 44 89 f0 5b 41 5e 41 5f 5d e9 87 b4 2c 0a cc 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 <55> 53 48 89 fb e8 82 c7 8c 00 8b 2d fc fa 83 0c bf 02 00 00 00 89 [ 356.908117][ C0] RSP: 0018:ffffc9000ba0ed10 EFLAGS: 00000246 [ 356.908130][ C0] RAX: 0000000000000000 RBX: 00007fa214d8e969 RCX: fa39fc891b479201 [ 356.908141][ C0] RDX: 0000000000000002 RSI: ffffffff8db48dd1 RDI: 00007fa214d8e969 [ 356.908152][ C0] RBP: 0000000000000001 R08: 0000000000000022 R09: ffffffff81728e15 [ 356.908162][ C0] R10: ffffc9000ba0edb8 R11: ffffffff81ace730 R12: ffff88807cd7bc00 [ 356.908173][ C0] R13: ffff88807a11c880 R14: dffffc0000000000 R15: 1ffff92001741db6 [ 356.908187][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 356.908203][ C0] ? unwind_next_frame+0xa5/0x2390 [ 356.908228][ C0] kernel_text_address+0x2d/0xe0 [ 356.908247][ C0] __kernel_text_address+0xd/0x40 [ 356.908264][ C0] unwind_get_return_address+0x4d/0x90 [ 356.908285][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 356.908300][ C0] arch_stack_walk+0xfc/0x150 [ 356.908327][ C0] stack_trace_save+0x9c/0xe0 [ 356.908343][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 356.908359][ C0] ? __kernel_text_address+0xd/0x40 [ 356.908383][ C0] ? unwind_get_return_address+0x4d/0x90 [ 356.908403][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 356.908419][ C0] kasan_save_track+0x3e/0x80 [ 356.908436][ C0] ? kasan_save_track+0x3e/0x80 [ 356.908452][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 356.908469][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 356.908487][ C0] ? ref_tracker_alloc+0x133/0x460 [ 356.908503][ C0] ? neigh_parms_alloc+0x1f4/0x510 [ 356.908517][ C0] ? inetdev_init+0x128/0x500 [ 356.908536][ C0] ? inetdev_event+0x301/0x15b0 [ 356.908555][ C0] ? notifier_call_chain+0x1b6/0x3e0 [ 356.908575][ C0] ? register_netdevice+0x1608/0x1ae0 [ 356.908594][ C0] ? __ip_tunnel_create+0x3e7/0x560 [ 356.908607][ C0] ? ip_tunnel_init_net+0x2ba/0x800 [ 356.908621][ C0] ? ops_init+0x35c/0x5c0 [ 356.908635][ C0] ? setup_net+0x219/0x4b0 [ 356.908649][ C0] ? copy_net_ns+0x31b/0x4d0 [ 356.908662][ C0] ? create_new_namespaces+0x3f3/0x720 [ 356.908681][ C0] ? copy_namespaces+0x438/0x4b0 [ 356.908698][ C0] ? copy_process+0x1733/0x3c00 [ 356.908719][ C0] ? kernel_clone+0x224/0x7f0 [ 356.908732][ C0] ? __x64_sys_clone+0x18b/0x1e0 [ 356.908747][ C0] ? do_syscall_64+0xfa/0x3b0 [ 356.908769][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.908798][ C0] __kasan_kmalloc+0x93/0xb0 [ 356.908817][ C0] __kmalloc_cache_noprof+0x230/0x3d0 [ 356.908835][ C0] ? ref_tracker_alloc+0x133/0x460 [ 356.908851][ C0] ref_tracker_alloc+0x133/0x460 [ 356.908868][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 356.908885][ C0] ? rcu_is_watching+0x15/0xb0 [ 356.908907][ C0] ? trace_kmalloc+0x1f/0xd0 [ 356.908924][ C0] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 356.908943][ C0] ? kmemdup_noprof+0x55/0x70 [ 356.908960][ C0] neigh_parms_alloc+0x1f4/0x510 [ 356.908977][ C0] inetdev_init+0x128/0x500 [ 356.908998][ C0] inetdev_event+0x301/0x15b0 [ 356.909020][ C0] ? __pfx_inetdev_event+0x10/0x10 [ 356.909043][ C0] notifier_call_chain+0x1b6/0x3e0 [ 356.909068][ C0] register_netdevice+0x1608/0x1ae0 [ 356.909092][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 356.909112][ C0] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 356.909134][ C0] ? alloc_netdev_mqs+0xe41/0x11e0 [ 356.909152][ C0] ? __ip_tunnel_create+0x3ba/0x560 [ 356.909169][ C0] __ip_tunnel_create+0x3e7/0x560 [ 356.909185][ C0] ? __pfx___ip_tunnel_create+0x10/0x10 [ 356.909200][ C0] ? net_generic+0x1e/0x240 [ 356.909223][ C0] ip_tunnel_init_net+0x2ba/0x800 [ 356.909240][ C0] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 356.909261][ C0] ops_init+0x35c/0x5c0 [ 356.909280][ C0] setup_net+0x219/0x4b0 [ 356.909296][ C0] ? __pfx_setup_net+0x10/0x10 [ 356.909311][ C0] ? copy_net_ns+0x304/0x4d0 [ 356.909325][ C0] ? down_read_killable+0x1d1/0x350 [ 356.909342][ C0] copy_net_ns+0x31b/0x4d0 [ 356.909359][ C0] create_new_namespaces+0x3f3/0x720 [ 356.909387][ C0] ? security_capable+0x7e/0x2e0 [ 356.909406][ C0] ? copy_namespaces+0x5c/0x4b0 [ 356.909425][ C0] copy_namespaces+0x438/0x4b0 [ 356.909445][ C0] copy_process+0x1733/0x3c00 [ 356.909466][ C0] ? page_table_check_set+0x18d/0x730 [ 356.909492][ C0] ? copy_process+0x97f/0x3c00 [ 356.909515][ C0] ? __pfx_copy_process+0x10/0x10 [ 356.909538][ C0] ? __handle_mm_fault+0x3ce3/0x5620 [ 356.909558][ C0] kernel_clone+0x224/0x7f0 [ 356.909574][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 356.909596][ C0] __x64_sys_clone+0x18b/0x1e0 [ 356.909611][ C0] ? count_memcg_event_mm+0x21/0x260 [ 356.909629][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 356.909651][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 356.909671][ C0] ? do_syscall_64+0xbe/0x3b0 [ 356.909693][ C0] do_syscall_64+0xfa/0x3b0 [ 356.909714][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.909734][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.909749][ C0] ? clear_bhb_loop+0x60/0xb0 [ 356.909766][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.909781][ C0] RIP: 0033:0x7fa214d8e969 [ 356.909795][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.909808][ C0] RSP: 002b:00007fa215b21fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 356.909823][ C0] RAX: ffffffffffffffda RBX: 00007fa214fb6080 RCX: 00007fa214d8e969 [ 356.909834][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000648e7000 [ 356.909844][ C0] RBP: 00007fa214e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 356.909854][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 356.909864][ C0] R13: 0000000000000001 R14: 00007fa214fb6080 R15: 00007ffced6b7368 [ 356.909880][ C0]