last executing test programs: 13.541225848s ago: executing program 2 (id=2777): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r2, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x304}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={r2, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000540)=0x9c) 13.500941909s ago: executing program 2 (id=2778): gettid() prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1d4}}, 0x0) getpid() 12.248438964s ago: executing program 2 (id=2790): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000300)={0xff7ffffc}) 11.481251318s ago: executing program 2 (id=2793): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8.517167421s ago: executing program 0 (id=2804): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x3, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = io_uring_setup(0x58b3, &(0x7f0000000040)={0x0, 0xd3fd, 0x2, 0x6, 0x1e5}) syz_io_uring_setup(0x1810, &(0x7f00000000c0)={0x0, 0xc49d, 0x1000, 0x0, 0x3b9, 0x0, r1}, &(0x7f0000000140), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x48043, 0x14a) execveat(r2, &(0x7f0000000200)='./file1\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) r5 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) socket$phonet(0x23, 0x2, 0x1) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) 7.851846724s ago: executing program 2 (id=2805): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="1b009d53e0ad26f8cc18d50e9e63366bdb2b1acbf504f1c19ff6255b1bc129fed968033b02422afeefbc5d412991c575e7c09300822fc4c8090505aec480188b77c84eeedbaa4c3c332d3afc1d", 0x4d}], 0x1) 6.817489338s ago: executing program 0 (id=2809): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r2, 0xfff9}, 0x8) 6.817079639s ago: executing program 0 (id=2811): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="f359", 0x2}], 0x1, 0x12, 0x0) 6.731263699s ago: executing program 0 (id=2813): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x0, 0xf423c, 0x0, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 4.832812878s ago: executing program 4 (id=2815): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x440, 0x270, 0x0, 0xffffffff, 0x270, 0xe0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, &(0x7f00000000c0), {[{{@ip={@broadcast, @remote, 0xff000000, 0xffffffff, 'veth0_virt_wifi\x00', 'gre0\x00', {0xff}, {0xff}, 0xff, 0x3, 0x61}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x5, 0xb}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xffffffff, 'syz1\x00', {0x80000000}}}}, {{@ip={@private=0xa010102, @remote, 0xff000000, 0xff000000, 'virt_wifi0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x50}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1d, @local, @local, @icmp_id=0x66, @icmp_id=0x64}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0xd5eb8dee18062a61, 0x0, 0x5, 0x1, 0x4, 0x1], 0x0, 0x3}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x17, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @gre_key=0x9, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x2, 0x2}}, @common=@ah={{0x30}, {[0x5, 0x5]}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@local, @ipv4=@private=0xa010102, @icmp_id=0x66, @gre_key=0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2800a000}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r5, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/21, 0x15}, 0x9}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.748890868s ago: executing program 0 (id=2816): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x4) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.148721701s ago: executing program 2 (id=2819): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00fdfffd5fff70968915626e0000000000fbff00081a9d7fcf0c4e1c9e71bbadc696fcf82cd00e6dbba027559f05b7150950ecae0064e8f8f0789cf8aec4dbe9fbc4964cc63a174ee96513c4c13b1a68d203f8e873f7d82de0bad40e916c17f2c8d62ae601b53940e5779e075fce750c178e8f35c06770b6860413f8c7db287b790f59dcb9eaac3d14", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @local}, 0x2}}, 0x26) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x3, 0x20000000, 0x4) 4.048539951s ago: executing program 4 (id=2822): setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) sendto$inet(r3, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040)=0x3bc6, 0x4) 3.873269702s ago: executing program 1 (id=2823): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140), 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x202, 0x0) 3.607921673s ago: executing program 3 (id=2824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone3(&(0x7f0000000440)={0x2000c000, 0x0, 0x0, &(0x7f0000000280), {0x10}, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x58) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 2.964741816s ago: executing program 1 (id=2825): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}}, 0x24000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.861090767s ago: executing program 3 (id=2826): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x3, 0x0, 0xa, 0x1ff, 0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.797872817s ago: executing program 1 (id=2827): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x0, 0xf423c, 0x0, 0x0, 0x6}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 2.320410549s ago: executing program 3 (id=2828): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x538, 0x22b, 0x258, 0x538, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xa8, 0xc8, 0x340, {0x1e0002a8, 0x7203000000000000}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @remote, [0x0, 0x0, 0xffffff00], [], 'team_slave_1\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r0 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r0, 0x3a, 0x1, 0x0, 0x20000000) 1.764941052s ago: executing program 3 (id=2829): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000003c0)={0x2}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_dev$vim2m(0x0, 0x8000, 0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') linkat(r4, &(0x7f0000000200)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') 1.685344642s ago: executing program 1 (id=2830): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f00000010c0)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000140)=[@iv={0x10, 0x29}], 0x10, 0x20040000}], 0x1, 0x8850) 929.750505ms ago: executing program 1 (id=2831): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd7002f9dbdf6506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) 886.102265ms ago: executing program 3 (id=2832): r0 = creat(0x0, 0x27a) write$qrtrtun(r0, 0x0, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0xfffff7e6, 0xb2ba, 0x8, 0xf, 0xfffffffb, 0x8000}, [@TCA_NETEM_RATE={0x14, 0x6, {0xbe30, 0x200, 0x7, 0x2}}]}}}]}, 0x60}}, 0x44080) dup(r1) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, 0x0) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000) sendmmsg$inet6(r1, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 828.607816ms ago: executing program 0 (id=2833): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000980)={0x60, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) 769.128856ms ago: executing program 1 (id=2834): syz_open_dev$media(&(0x7f00000001c0), 0x4, 0x68040) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x600000b, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) 663.237897ms ago: executing program 4 (id=2835): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 607.790907ms ago: executing program 4 (id=2836): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@updsa={0x138, 0x1a, 0x1, 0x70bd26, 0x25dfdbfd, {{@in=@multicast2, @in=@remote, 0x4e24, 0x7fff, 0x4e23, 0x6, 0xa, 0x20, 0x80, 0x33}, {@in6=@loopback, 0x4d2, 0x3c}, @in6=@rand_addr=' \x01\x00', {0xfffffffffffffff7, 0x80000001, 0x6, 0xff, 0xfff, 0x3, 0x3876, 0x7f}, {0x6, 0x10, 0x3, 0x3}, {0xffffffff, 0x7fffffff, 0x200}, 0x70bd2d, 0x3505, 0x2, 0x2, 0xf7, 0x15}, [@algo_auth={0x48, 0x1, {{'streebog512\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 541.210847ms ago: executing program 4 (id=2837): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a7, 0x8000000}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000380)=0x2) 538.960007ms ago: executing program 4 (id=2838): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newspdinfo={0x14, 0x24, 0x1, 0x2000}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 0s ago: executing program 3 (id=2839): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x204101, 0x0) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x6000) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r0) ioctl$TUNSETOWNER(r0, 0xff08, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs(r4, 0x0) r5 = open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r5, 0x200004) read$FUSE(r3, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) sendfile(r3, r5, 0x0, 0x80001d00c0d1) setsockopt(r3, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000d94c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000d96c0)={0x1d92, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x81, "149d3448098eac"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000db6c0)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {r8}], 0x8, "ff0cd8c9bcb714"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{0x0, 0xfffffffffffffffd, 0x9, 0xfffffffffffffa54, 0x6, 0x3, 0x0, 0x3, 0xff, 0x8, 0xa0, 0x384, 0x3, 0x3, 0x7}, 0x8, [0x0]}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) kernel console output (not intermixed with test programs): 1-1:0.132: No AC97 audio processor [ 259.168316][ T5132] usb 1-1: Decoder not found [ 259.191591][ T5132] em28xx 1-1:0.132: failed to create media graph [ 259.217871][ T5132] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 259.265800][ T5132] em28xx 1-1:0.132: Remote control support is not available for this card. [ 259.304812][ T1110] em28xx 1-1:0.132: Closing input extension [ 259.355659][ T1110] em28xx 1-1:0.132: Freeing device [ 262.288292][ T6696] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 262.294831][ T6696] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 262.342256][ T6696] vhci_hcd vhci_hcd.0: Device attached [ 262.356994][ T6704] vhci_hcd: connection closed [ 262.359134][ T4222] vhci_hcd: stop threads [ 262.378914][ T4222] vhci_hcd: release socket [ 262.383375][ T4222] vhci_hcd: disconnect device [ 263.911976][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 264.858828][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 264.908943][ T6743] input: syz0 as /devices/virtual/input/input11 [ 264.978953][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.189315][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'. [ 265.315653][ T7] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 265.326298][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.336641][ T7] usb 1-1: Product: syz [ 265.341323][ T7] usb 1-1: Manufacturer: syz [ 265.345934][ T7] usb 1-1: SerialNumber: syz [ 265.699424][ T7] usb 1-1: config 0 descriptor?? [ 265.769142][ T7] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 265.968363][ T7] pegasus_notetaker: probe of 1-1:0.0 failed with error -22 [ 265.988393][ T7] usb 1-1: USB disconnect, device number 8 [ 266.401695][ T6766] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 266.408239][ T6766] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 266.437554][ T6766] vhci_hcd vhci_hcd.0: Device attached [ 266.629465][ T4249] vhci_hcd: vhci_device speed not set [ 266.799274][ T4249] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 267.503400][ T6767] vhci_hcd: connection closed [ 267.514919][ T6770] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 267.551022][ T407] vhci_hcd: stop threads [ 267.555394][ T407] vhci_hcd: release socket [ 267.567845][ T407] vhci_hcd: disconnect device [ 267.902077][ T7] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 269.008840][ T7] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 269.017388][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.035234][ T7] usb 1-1: config 0 has no interface number 0 [ 269.058273][ T6803] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 270.111816][ T3532] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 270.149261][ T7] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 270.160926][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.172502][ T7] usb 1-1: Product: syz [ 270.176710][ T7] usb 1-1: Manufacturer: syz [ 270.181398][ T7] usb 1-1: SerialNumber: syz [ 270.195386][ T7] usb 1-1: config 0 descriptor?? [ 270.538785][ T3532] usb 2-1: Using ep0 maxpacket: 16 [ 270.559012][ T7] usb 1-1: probing VID:PID(0424:012C) [ 270.573472][ T7] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 270.585319][ T7] vub300: probe of 1-1:0.133 failed with error -22 [ 270.607878][ T7] usb 1-1: USB disconnect, device number 9 [ 270.668867][ T3532] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.135692][ T3532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 271.146690][ T3532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 271.156377][ T3532] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 271.166169][ T3532] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.243127][ T6825] netlink: 'syz.4.811': attribute type 1 has an invalid length. [ 271.291788][ T3532] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 271.305241][ T3532] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 271.319015][ T3532] usb 2-1: Manufacturer: syz [ 271.325890][ T3532] usb 2-1: config 0 descriptor?? [ 271.411051][ T6832] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 271.417595][ T6832] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.428555][ T6832] vhci_hcd vhci_hcd.0: Device attached [ 271.663535][ T24] vhci_hcd: vhci_device speed not set [ 271.769332][ T24] usb 33-1: new full-speed USB device number 7 using vhci_hcd [ 272.147260][ T6833] vhci_hcd: connection reset by peer [ 272.153197][ T9] vhci_hcd: stop threads [ 272.158914][ T3532] rc_core: IR keymap rc-hauppauge not found [ 272.164199][ T9] vhci_hcd: release socket [ 272.164856][ T3532] Registered IR keymap rc-empty [ 272.186611][ T9] vhci_hcd: disconnect device [ 272.196549][ T3532] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 272.212050][ T6842] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 272.239362][ T3532] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 272.280610][ T3532] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 272.326123][ T3532] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 272.473410][ T3532] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 272.508819][ T3532] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 272.619226][ T3532] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 272.680909][ T3532] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 272.729561][ T3532] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 272.779161][ T3532] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 272.829207][ T3532] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.163333][ T4249] vhci_hcd: vhci_device speed not set [ 273.248842][ T3532] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.289519][ T3532] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.328894][ T3532] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 273.361234][ T3532] mceusb 2-1:0.0: Registered 鑐殀⍻⦮嚺㝥邈䭥轟톧ﭭவ䲂麻忴Ṍ笈哴Ž with mce emulator interface version 1 [ 273.418804][ T3532] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 273.483197][ T3532] usb 2-1: USB disconnect, device number 7 [ 274.516469][ T6877] binder: 6876:6877 unknown command 1074553620 [ 274.564237][ T6877] binder: 6876:6877 ioctl c0306201 200001c0 returned -22 [ 276.222249][ T6891] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 276.228806][ T6891] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 276.320894][ T6891] vhci_hcd vhci_hcd.0: Device attached [ 276.518070][ T6894] vhci_hcd: connection closed [ 276.518404][ T4280] vhci_hcd: stop threads [ 276.518815][ T7] vhci_hcd: vhci_device speed not set [ 276.523668][ T4280] vhci_hcd: release socket [ 276.591835][ T4280] vhci_hcd: disconnect device [ 276.598780][ T7] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 276.889932][ T24] vhci_hcd: vhci_device speed not set [ 277.772156][ T6917] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.460455][ T6956] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 281.467009][ T6956] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 281.561721][ T6956] vhci_hcd vhci_hcd.0: Device attached [ 281.762025][ T7] vhci_hcd: vhci_device speed not set [ 281.781961][ T4175] vhci_hcd: vhci_device speed not set [ 281.879579][ T4175] usb 33-1: new full-speed USB device number 8 using vhci_hcd [ 283.194319][ T6957] vhci_hcd: connection reset by peer [ 283.203575][ T407] vhci_hcd: stop threads [ 283.207912][ T407] vhci_hcd: release socket [ 283.223150][ T407] vhci_hcd: disconnect device [ 283.950803][ T7003] netlink: 536 bytes leftover after parsing attributes in process `syz.3.868'. [ 283.981116][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 285.256013][ T7015] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 285.262575][ T7015] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 285.276990][ T7015] vhci_hcd vhci_hcd.0: Device attached [ 285.484393][ T7018] vhci_hcd: connection closed [ 285.484620][ T4279] vhci_hcd: stop threads [ 285.494555][ T24] vhci_hcd: vhci_device speed not set [ 285.500195][ T4279] vhci_hcd: release socket [ 285.526363][ T4279] vhci_hcd: disconnect device [ 285.695162][ T24] usb 35-1: new full-speed USB device number 6 using vhci_hcd [ 285.703063][ T24] usb 35-1: enqueue for inactive port 0 [ 285.811056][ T24] vhci_hcd: vhci_device speed not set [ 287.828851][ T4175] vhci_hcd: vhci_device speed not set [ 288.058786][ T7067] 9pnet: p9_errstr2errno: server reported unknown error [ 288.453243][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 288.738834][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 288.873358][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 143, changing to 11 [ 288.895347][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 8708, setting to 1024 [ 289.074065][ T7081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.095427][ T7081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.108307][ T24] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 289.124923][ T7081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.137641][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.148409][ T24] usb 1-1: Product: syz [ 289.156339][ T24] usb 1-1: Manufacturer: syz [ 289.165310][ T7081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.177536][ T24] usb 1-1: SerialNumber: syz [ 289.196293][ T24] usb 1-1: config 0 descriptor?? [ 289.254529][ T24] hub 1-1:0.0: bad descriptor, ignoring hub [ 289.268783][ T24] hub: probe of 1-1:0.0 failed with error -5 [ 289.286389][ T24] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 289.537826][ T4219] usb 1-1: USB disconnect, device number 10 [ 290.856909][ T7089] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 290.863462][ T7089] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 290.885044][ T7089] vhci_hcd vhci_hcd.0: Device attached [ 291.096355][ T4219] vhci_hcd: vhci_device speed not set [ 291.179032][ T4219] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 291.365882][ T7094] vhci_hcd: connection reset by peer [ 291.390681][ T407] vhci_hcd: stop threads [ 291.394972][ T407] vhci_hcd: release socket [ 291.414828][ T407] vhci_hcd: disconnect device [ 293.113976][ T3532] kernel write not supported for file /snd/pcmC0D0p (pid: 3532 comm: kworker/1:3) [ 294.314048][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 294.536390][ T7137] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 294.542951][ T7137] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 294.561780][ T7137] vhci_hcd vhci_hcd.0: Device attached [ 294.690365][ T7138] vhci_hcd: connection closed [ 294.690580][ T4222] vhci_hcd: stop threads [ 294.707591][ T4222] vhci_hcd: release socket [ 294.729023][ T4222] vhci_hcd: disconnect device [ 294.778604][ T4215] vhci_hcd: vhci_device speed not set [ 295.985648][ T7155] tmpfs: Unknown parameter 'usrquota' [ 296.324927][ T4219] vhci_hcd: vhci_device speed not set [ 298.140575][ T7186] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 298.147130][ T7186] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 298.185071][ T7186] vhci_hcd vhci_hcd.0: Device attached [ 298.713586][ T4219] vhci_hcd: vhci_device speed not set [ 298.751784][ T7187] vhci_hcd: connection closed [ 298.752165][ T4290] vhci_hcd: stop threads [ 298.765938][ T4290] vhci_hcd: release socket [ 298.774324][ T4290] vhci_hcd: disconnect device [ 298.789112][ T4219] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 301.536133][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'. [ 301.577371][ T7235] netlink: 72 bytes leftover after parsing attributes in process `syz.2.941'. [ 302.644143][ T7246] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 302.650702][ T7246] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 302.882140][ T7246] vhci_hcd vhci_hcd.0: Device attached [ 302.984576][ T7251] vhci_hcd: connection closed [ 302.984806][ T4279] vhci_hcd: stop threads [ 302.993918][ T4279] vhci_hcd: release socket [ 302.998346][ T4279] vhci_hcd: disconnect device [ 303.784289][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 303.919209][ T4219] vhci_hcd: vhci_device speed not set [ 304.119547][ T7268] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 307.023632][ T7302] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 307.030173][ T7302] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 307.062378][ T7312] netlink: 104 bytes leftover after parsing attributes in process `syz.0.964'. [ 307.186109][ T7302] vhci_hcd vhci_hcd.0: Device attached [ 307.441621][ T7] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 307.599625][ T7311] vhci_hcd: connection closed [ 307.600194][ T4222] vhci_hcd: stop threads [ 307.644494][ T4222] vhci_hcd: release socket [ 307.702957][ T4219] vhci_hcd: vhci_device speed not set [ 307.862977][ T4219] usb 37-1: new full-speed USB device number 5 using vhci_hcd [ 307.880242][ T4222] vhci_hcd: disconnect device [ 307.888863][ T4219] usb 37-1: enqueue for inactive port 0 [ 307.982032][ T4219] vhci_hcd: vhci_device speed not set [ 308.583234][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.672375][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.858773][ T7] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 308.867847][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 309.591699][ T7] usb 5-1: Product: syz [ 309.596065][ T7] usb 5-1: Manufacturer: syz [ 309.816174][ T7] usb 5-1: SerialNumber: syz [ 309.881807][ T7] usb 5-1: config 0 descriptor?? [ 309.966108][ T7337] crypto_alloc_aead failed rc=-2 [ 310.252165][ T7] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 310.279183][ T7] radio-si470x: probe of 5-1:0.0 failed with error -5 [ 310.306885][ T7] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 310.345274][ T7] usb 5-1: USB disconnect, device number 11 [ 310.659487][ T4175] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 312.703616][ T4175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.714903][ T4175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.735225][ T4175] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 312.765448][ T4175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.799638][ T4175] usb 2-1: config 0 descriptor?? [ 313.040722][ T7391] netlink: 'syz.2.987': attribute type 4 has an invalid length. [ 313.208868][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 313.468824][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 313.644239][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 313.657949][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 313.670187][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 313.682262][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 313.762008][ T7383] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 313.768547][ T7383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 313.792590][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 313.806910][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 313.807037][ T7383] vhci_hcd vhci_hcd.0: Device attached [ 313.808977][ T4175] usbhid 2-1:0.0: can't add hid device: -71 [ 313.829725][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 313.844536][ T7389] vhci_hcd: connection closed [ 313.844753][ T4290] vhci_hcd: stop threads [ 313.858844][ T4290] vhci_hcd: release socket [ 313.863577][ T4290] vhci_hcd: disconnect device [ 313.887938][ T4175] usbhid: probe of 2-1:0.0 failed with error -71 [ 313.898939][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 313.950620][ T4175] usb 2-1: USB disconnect, device number 8 [ 313.989312][ T24] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 314.008609][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 314.054139][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 314.090653][ T24] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 314.358968][ T24] usb 1-1: string descriptor 0 read error: -22 [ 314.373375][ T24] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 314.412254][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.655965][ T24] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 315.385776][ T24] usb 1-1: USB disconnect, device number 11 [ 317.089333][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.095970][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.450220][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1002'. [ 318.217053][ T7451] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 318.223602][ T7451] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 318.365502][ T7451] vhci_hcd vhci_hcd.0: Device attached [ 318.588985][ T7] vhci_hcd: vhci_device speed not set [ 319.180608][ T7] usb 35-1: new full-speed USB device number 7 using vhci_hcd [ 319.578790][ T4219] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 319.833642][ T7454] vhci_hcd: connection reset by peer [ 319.845825][ T9] vhci_hcd: stop threads [ 319.859049][ T9] vhci_hcd: release socket [ 319.888305][ T9] vhci_hcd: disconnect device [ 319.978956][ T4219] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.008794][ T4219] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 320.028801][ T4219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.056313][ T4219] usb 5-1: config 0 descriptor?? [ 320.100811][ T4219] pwc: Askey VC010 type 2 USB webcam detected. [ 320.559536][ T4219] pwc: recv_control_msg error -32 req 02 val 2b00 [ 320.609104][ T4219] pwc: recv_control_msg error -32 req 02 val 2700 [ 320.679091][ T4219] pwc: recv_control_msg error -32 req 02 val 2c00 [ 320.778834][ T4219] pwc: recv_control_msg error -32 req 04 val 1000 [ 320.818867][ T4219] pwc: recv_control_msg error -32 req 04 val 1300 [ 320.858904][ T4219] pwc: recv_control_msg error -32 req 04 val 1400 [ 320.902164][ T4219] pwc: recv_control_msg error -32 req 02 val 2000 [ 320.949015][ T4219] pwc: recv_control_msg error -32 req 02 val 2100 [ 321.712708][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 321.978799][ T4219] pwc: recv_control_msg error -71 req 02 val 2500 [ 321.988910][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 321.999037][ T4219] pwc: recv_control_msg error -71 req 02 val 2400 [ 322.146631][ T4219] pwc: recv_control_msg error -71 req 02 val 2600 [ 322.170269][ T4219] pwc: recv_control_msg error -71 req 02 val 2900 [ 322.188843][ T4219] pwc: recv_control_msg error -71 req 02 val 2800 [ 322.209109][ T4219] pwc: recv_control_msg error -71 req 04 val 1100 [ 322.219006][ T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 322.233023][ T4219] pwc: recv_control_msg error -71 req 04 val 1200 [ 322.240465][ T24] usb 1-1: config 0 has no interface number 0 [ 322.282609][ T4219] pwc: Registered as video103. [ 322.308484][ T4219] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 322.450230][ T24] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 322.511455][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.780446][ T24] usb 1-1: Product: syz [ 322.801950][ T4219] usb 5-1: USB disconnect, device number 12 [ 322.811442][ T24] usb 1-1: Manufacturer: syz [ 322.826592][ T24] usb 1-1: SerialNumber: syz [ 322.862324][ T24] usb 1-1: config 0 descriptor?? [ 322.910636][ T24] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 323.090213][ T7514] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 323.096769][ T7514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 323.106217][ T7514] vhci_hcd vhci_hcd.0: Device attached [ 323.235785][ T7517] vhci_hcd: connection closed [ 323.236005][ T4607] vhci_hcd: stop threads [ 323.245404][ T4607] vhci_hcd: release socket [ 323.250088][ T4607] vhci_hcd: disconnect device [ 323.298924][ T3532] vhci_hcd: vhci_device speed not set [ 323.338816][ T24] gspca_spca1528: reg_w err -71 [ 323.368806][ T24] spca1528: probe of 1-1:0.1 failed with error -71 [ 323.376253][ T4219] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 323.401389][ T24] usb 1-1: USB disconnect, device number 12 [ 323.628827][ T4219] usb 5-1: Using ep0 maxpacket: 8 [ 323.708873][ T4175] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 323.757147][ T4219] usb 5-1: config 0 has no interfaces? [ 323.762845][ T4219] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 323.772385][ T4219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.783077][ T4219] usb 5-1: config 0 descriptor?? [ 323.968850][ T4175] usb 2-1: Using ep0 maxpacket: 32 [ 324.168506][ T7511] udc-core: couldn't find an available UDC or it's busy [ 324.339326][ T7] vhci_hcd: vhci_device speed not set [ 324.345252][ T4175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.018893][ T7511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 325.025596][ T4175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.049101][ T4175] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 325.058180][ T4175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.076823][ T4175] usb 2-1: config 0 descriptor?? [ 325.118832][ T4219] usb 5-1: USB disconnect, device number 13 [ 325.162435][ T4175] hub 2-1:0.0: USB hub found [ 325.203380][ T7539] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.412679][ T4175] hub 2-1:0.0: 1 port detected [ 326.975625][ T5287] hub 2-1:0.0: activate --> -90 [ 327.078240][ T7561] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 327.084779][ T7561] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 327.103349][ T7561] vhci_hcd vhci_hcd.0: Device attached [ 327.159807][ T5287] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 327.257833][ T7571] vhci_hcd: connection closed [ 327.258057][ T4222] vhci_hcd: stop threads [ 327.271458][ T4222] vhci_hcd: release socket [ 327.296664][ T4222] vhci_hcd: disconnect device [ 327.319327][ T4175] vhci_hcd: vhci_device speed not set [ 327.478967][ T4219] usb 2-1: USB disconnect, device number 9 [ 327.954559][ T7584] netlink: 'syz.1.1042': attribute type 1 has an invalid length. [ 328.968372][ T7588] sp0: Synchronizing with TNC [ 329.197312][ T7592] sp0: Synchronizing with TNC [ 330.480945][ T7617] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 330.487481][ T7617] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 330.517460][ T7617] vhci_hcd vhci_hcd.0: Device attached [ 330.525592][ T7623] vhci_hcd: connection closed [ 330.525952][ T9] vhci_hcd: stop threads [ 330.537700][ T9] vhci_hcd: release socket [ 330.552458][ T9] vhci_hcd: disconnect device [ 330.561698][ T7629] netlink: 'syz.4.1056': attribute type 1 has an invalid length. [ 330.577500][ T7629] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1056'. [ 332.808760][ T3532] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 333.678927][ T3532] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 333.698293][ T3532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.737330][ T3532] usb 2-1: config 0 descriptor?? [ 333.840349][ T3532] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 334.107777][ T3532] gp8psk: usb in 128 operation failed. [ 334.128857][ T3532] gp8psk: usb in 137 operation failed. [ 334.134387][ T3532] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 334.228612][ T3532] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 334.427108][ T3532] usb 2-1: media controller created [ 334.860670][ T3532] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.877832][ T3532] gp8psk_fe: Frontend attached [ 334.886478][ T3532] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 334.895744][ T3532] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 335.470615][ T3532] gp8psk: usb in 138 operation failed. [ 335.572964][ T3532] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 335.788785][ T3532] gp8psk: found Genpix USB device pID = 203 (hex) [ 335.887605][ T7685] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 335.894150][ T7685] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 335.910176][ T3532] usb 2-1: USB disconnect, device number 10 [ 335.933369][ T7685] vhci_hcd vhci_hcd.0: Device attached [ 336.047137][ T7690] vhci_hcd: connection closed [ 336.051145][ T4865] vhci_hcd: stop threads [ 336.176237][ T3532] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 336.193748][ T4865] vhci_hcd: release socket [ 336.205892][ T4865] vhci_hcd: disconnect device [ 337.088764][ T4219] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 337.348745][ T4219] usb 5-1: Using ep0 maxpacket: 16 [ 337.469814][ T4219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.494740][ T4219] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.515181][ T4219] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 337.540546][ T4219] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.576284][ T4219] usb 5-1: config 0 descriptor?? [ 338.111214][ T4219] sony 0003:054C:05C4.0004: hidraw0: USB HID v80.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 338.157908][ T4219] sony 0003:054C:05C4.0004: failed to claim input [ 340.018899][ T4219] usb 5-1: USB disconnect, device number 14 [ 340.330067][ T7745] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 340.336613][ T7745] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 340.504434][ T7745] vhci_hcd vhci_hcd.0: Device attached [ 340.598455][ T7758] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 340.608911][ T7758] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 340.625724][ T7758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 340.634181][ T7758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 340.858949][ T3532] vhci_hcd: vhci_device speed not set [ 340.928930][ T3532] usb 37-1: new full-speed USB device number 7 using vhci_hcd [ 341.207710][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 342.709477][ T7749] vhci_hcd: connection reset by peer [ 342.726133][ T4290] vhci_hcd: stop threads [ 342.730663][ T4290] vhci_hcd: release socket [ 342.953845][ T4290] vhci_hcd: disconnect device [ 345.287451][ T7820] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 345.294004][ T7820] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 346.062011][ T7820] vhci_hcd vhci_hcd.0: Device attached [ 346.211368][ T7823] vhci_hcd: connection closed [ 346.211705][ T4607] vhci_hcd: stop threads [ 346.226054][ T4607] vhci_hcd: release socket [ 346.231435][ T4607] vhci_hcd: disconnect device [ 346.268808][ T4249] vhci_hcd: vhci_device speed not set [ 346.319891][ T3532] vhci_hcd: vhci_device speed not set [ 347.698476][ T7854] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1120'. [ 347.739658][ T7854] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 349.944099][ T7887] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 349.950653][ T7887] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 349.965109][ T7887] vhci_hcd vhci_hcd.0: Device attached [ 350.158845][ T24] vhci_hcd: vhci_device speed not set [ 350.228864][ T24] usb 35-1: new full-speed USB device number 8 using vhci_hcd [ 350.269718][ T7888] vhci_hcd: connection closed [ 350.272592][ T4222] vhci_hcd: stop threads [ 350.288760][ T4222] vhci_hcd: release socket [ 350.328915][ T4222] vhci_hcd: disconnect device [ 352.298806][ T3532] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 352.558783][ T3532] usb 3-1: Using ep0 maxpacket: 32 [ 352.928800][ T3532] usb 3-1: config 1 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 352.961126][ T3532] usb 3-1: config 1 interface 0 altsetting 33 bulk endpoint 0x82 has invalid maxpacket 1024 [ 352.997795][ T3532] usb 3-1: config 1 interface 0 altsetting 33 bulk endpoint 0x3 has invalid maxpacket 64 [ 353.034119][ T3532] usb 3-1: config 1 interface 0 has no altsetting 0 [ 353.208946][ T3532] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.225407][ T3532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.244156][ T3532] usb 3-1: Product: syz [ 353.253646][ T3532] usb 3-1: Manufacturer: 钞葉ᓦ䴒ຜ䐹禆怯澀含츭ﾸᲆё↧ﮋ鼴ꥺ녈瘱곿᪏♌偶왯銑紙䈬⬩榠뀀为楢嵝篞ᖓ笼஬䫡萝ᔑ鶝卪洣䫵麐艑䡈王㣤 [ 353.291757][ T3532] usb 3-1: SerialNumber: syz [ 353.319500][ T7900] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 353.328852][ T7900] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 354.498918][ T3532] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 354.534563][ T3532] usb 3-1: USB disconnect, device number 12 [ 355.634427][ T24] vhci_hcd: vhci_device speed not set [ 356.019269][ T4249] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 356.373083][ T4249] usb 4-1: Using ep0 maxpacket: 8 [ 356.519145][ T4249] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.554065][ T4249] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 356.645891][ T4249] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 356.703590][ T4249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.803475][ T4249] usb 4-1: config 0 descriptor?? [ 356.870947][ T4249] qmi_wwan 4-1:0.0: bogus CDC Union: master=0, slave=64 [ 356.897508][ T4249] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 357.090487][ T7981] tipc: Started in network mode [ 357.145069][ T7981] tipc: Node identity 1, cluster identity 4711 [ 357.230280][ T7981] tipc: Node number set to 1 [ 357.368942][ T1110] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 358.041374][ T1110] usb 5-1: Using ep0 maxpacket: 8 [ 359.167842][ T4249] usb 4-1: USB disconnect, device number 7 [ 359.428917][ T1110] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 359.443544][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.463994][ T1110] usb 5-1: Product: syz [ 359.468364][ T1110] usb 5-1: Manufacturer: syz [ 359.478571][ T1110] usb 5-1: SerialNumber: syz [ 359.491909][ T1110] usb 5-1: config 0 descriptor?? [ 359.748996][ T1110] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 361.547561][ T8033] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1178'. [ 362.588892][ T1110] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 362.627510][ T1110] usb 5-1: USB disconnect, device number 15 [ 362.787894][ T8051] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 362.794420][ T8051] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 362.806075][ T8051] vhci_hcd vhci_hcd.0: Device attached [ 363.019002][ T4249] vhci_hcd: vhci_device speed not set [ 363.160992][ T4249] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 363.495339][ T5132] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 363.505351][ T8052] vhci_hcd: connection reset by peer [ 363.511334][ T4264] vhci_hcd: stop threads [ 363.516743][ T4264] vhci_hcd: release socket [ 363.537969][ T4264] vhci_hcd: disconnect device [ 364.078750][ T5132] usb 3-1: Using ep0 maxpacket: 32 [ 364.198857][ T5132] usb 3-1: config 3 has an invalid interface number: 202 but max is 0 [ 364.207806][ T5132] usb 3-1: config 3 has no interface number 0 [ 364.788960][ T5132] usb 3-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=b0.61 [ 364.807313][ T5132] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.834014][ T5132] usb 3-1: Product: syz [ 364.997660][ T5132] usb 3-1: Manufacturer: syz [ 365.003048][ T5132] usb 3-1: SerialNumber: syz [ 365.268849][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 365.298958][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 365.998873][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 366.280181][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 366.975547][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 367.021172][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 367.116941][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 367.153382][ T8102] netlink: 'syz.4.1197': attribute type 10 has an invalid length. [ 367.277634][ T8102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.317660][ T8102] team0: Port device batadv0 added [ 367.564535][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 367.669212][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 367.839221][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 368.088814][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 368.188814][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 368.241973][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 368.497880][ T4249] vhci_hcd: vhci_device speed not set [ 369.020315][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 369.103972][ T8120] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 369.110516][ T8120] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 369.140444][ T8120] vhci_hcd vhci_hcd.0: Device attached [ 369.160577][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 369.208842][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 369.329020][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 369.344915][ T8125] vhci_hcd: connection closed [ 369.345265][ T4237] vhci_hcd: stop threads [ 369.348766][ T5287] vhci_hcd: vhci_device speed not set [ 369.358934][ T4237] vhci_hcd: release socket [ 369.365363][ T4237] vhci_hcd: disconnect device [ 369.617873][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 369.658918][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 369.919804][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 369.949096][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 369.988482][ T5287] usb 37-1: new full-speed USB device number 8 using vhci_hcd [ 370.005246][ T8139] netdevsim netdevsim0: Direct firmware load for printk failed with error -2 [ 370.014216][ T8139] netdevsim netdevsim0: Falling back to sysfs fallback for: printk [ 370.580773][ T5287] usb 37-1: enqueue for inactive port 0 [ 370.618849][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 370.658785][ T5287] vhci_hcd: vhci_device speed not set [ 371.106587][ T150] nbd_handle_cmd: 2 callbacks suppressed [ 371.106613][ T150] block nbd3: Attempted send on invalid socket [ 371.678755][ T150] print_req_error: 36 callbacks suppressed [ 371.678774][ T150] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 371.787593][ T1665] block nbd3: Attempted send on invalid socket [ 371.794293][ T1665] blk_update_request: I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 371.806209][ T8151] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 371.828824][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 371.845703][ T1665] block nbd3: Attempted send on invalid socket [ 371.851951][ T1665] blk_update_request: I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 371.863602][ T8151] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 371.946388][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 371.979155][ T8151] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 372.474762][ T8151] UDF-fs: Scanning with blocksize 512 failed [ 372.492228][ T150] block nbd3: Attempted send on invalid socket [ 372.498576][ T150] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.550402][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 372.668636][ T150] block nbd3: Attempted send on invalid socket [ 372.674881][ T150] blk_update_request: I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.698908][ T8151] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 372.740328][ T150] block nbd3: Attempted send on invalid socket [ 372.746588][ T150] blk_update_request: I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 372.759984][ T8151] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 372.772401][ T8151] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 372.780128][ T8151] UDF-fs: Scanning with blocksize 1024 failed [ 372.782296][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 372.798241][ T150] block nbd3: Attempted send on invalid socket [ 372.804828][ T150] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.514694][ T1665] block nbd3: Attempted send on invalid socket [ 373.521059][ T1665] blk_update_request: I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.538908][ T8151] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 373.542853][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 373.668821][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 373.693390][ T1665] block nbd3: Attempted send on invalid socket [ 373.699990][ T1665] blk_update_request: I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.713054][ T8151] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 373.723124][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 373.729079][ T8151] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 373.748875][ T5132] ax88179_178a 3-1:3.202 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 373.777740][ T5132] ax88179_178a 3-1:3.202 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, ASIX AX88178A USB 2.0 Gigabit Ethernet, 16:c9:43:02:6d:04 [ 373.795184][ T5132] usb 3-1: USB disconnect, device number 13 [ 373.801510][ T5132] ax88179_178a 3-1:3.202 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, ASIX AX88178A USB 2.0 Gigabit Ethernet [ 373.819835][ T8151] UDF-fs: Scanning with blocksize 2048 failed [ 373.831227][ T1665] block nbd3: Attempted send on invalid socket [ 373.837451][ T1665] blk_update_request: I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 373.849397][ T8151] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 373.860047][ T8151] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 373.870136][ T8151] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 373.878296][ T8151] UDF-fs: Scanning with blocksize 4096 failed [ 373.889064][ T8151] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 375.190107][ T8202] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 375.196739][ T8202] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 375.734717][ T8202] vhci_hcd vhci_hcd.0: Device attached [ 375.845659][ T8204] vhci_hcd: connection closed [ 375.845945][ T4264] vhci_hcd: stop threads [ 375.860325][ T4264] vhci_hcd: release socket [ 375.875447][ T4264] vhci_hcd: disconnect device [ 375.971820][ T1110] vhci_hcd: vhci_device speed not set [ 379.094716][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.101080][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.211128][ T8260] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 381.217674][ T8260] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 381.226553][ T8260] vhci_hcd vhci_hcd.0: Device attached [ 381.448800][ T13] vhci_hcd: vhci_device speed not set [ 382.021194][ T13] usb 37-1: new full-speed USB device number 9 using vhci_hcd [ 382.032513][ T8265] vhci_hcd: connection closed [ 382.039437][ T4264] vhci_hcd: stop threads [ 382.048369][ T4264] vhci_hcd: release socket [ 382.075957][ T4264] vhci_hcd: disconnect device [ 383.798543][ T8302] loop6: detected capacity change from 0 to 524287999 [ 383.839572][ C1] print_req_error: 2 callbacks suppressed [ 383.839588][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 383.856336][ C1] buffer_io_error: 24 callbacks suppressed [ 383.856351][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.375890][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.387241][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.491872][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.502832][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.541229][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.552210][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.593838][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.604814][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.613209][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.624153][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.634412][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 384.645356][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 385.118904][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.129895][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 385.143607][ T8302] ldm_validate_partition_table(): Disk read failed. [ 385.450564][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.461550][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 385.682559][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 385.693536][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 385.706252][ T8302] Dev loop6: unable to read RDB block 0 [ 385.722630][ T8302] loop6: unable to read partition table [ 385.728464][ T8302] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 387.109875][ T4175] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 387.218842][ T13] vhci_hcd: vhci_device speed not set [ 387.508783][ T4175] usb 2-1: Using ep0 maxpacket: 32 [ 387.818884][ T4175] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 387.828983][ T4175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.838019][ T4175] usb 2-1: Product: syz [ 387.843169][ T4175] usb 2-1: Manufacturer: syz [ 387.848504][ T4175] usb 2-1: SerialNumber: syz [ 387.863089][ T4175] usb 2-1: config 0 descriptor?? [ 387.921602][ T4175] usb 2-1: selecting invalid altsetting 3 [ 387.928229][ T4175] comedi comedi0: could not set alternate setting 3 in high speed [ 387.948597][ T4175] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 387.960350][ T4175] usbdux: probe of 2-1:0.0 failed with error -22 [ 388.226891][ T4175] usb 2-1: USB disconnect, device number 11 [ 391.798980][ T13] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 392.098758][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 392.328842][ T13] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 392.336871][ T13] usb 3-1: config 0 has no interface number 0 [ 392.425651][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1285'. [ 392.436307][ T8417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1285'. [ 392.641851][ T13] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 392.651133][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.662112][ T13] usb 3-1: Product: syz [ 392.666284][ T13] usb 3-1: Manufacturer: syz [ 392.670914][ T13] usb 3-1: SerialNumber: syz [ 392.678064][ T13] usb 3-1: config 0 descriptor?? [ 392.760409][ T8422] overlayfs: failed to clone upperpath [ 392.841715][ T13] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 394.894165][ T5132] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 395.003635][ T13] gspca_spca1528: reg_r err -71 [ 395.008571][ T13] spca1528: probe of 3-1:0.1 failed with error -71 [ 395.047342][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 395.047355][ T26] audit: type=1326 audit(1733763244.093:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8450 comm="syz.1.1298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54ba525ed9 code=0x0 [ 395.093828][ T13] usb 3-1: USB disconnect, device number 14 [ 395.099259][ T8452] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 395.106265][ T8452] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 395.116545][ T8452] vhci_hcd vhci_hcd.0: Device attached [ 395.216350][ T8453] vhci_hcd: connection closed [ 395.216589][ T4607] vhci_hcd: stop threads [ 395.226415][ T4607] vhci_hcd: release socket [ 395.231958][ T4607] vhci_hcd: disconnect device [ 395.298926][ T5132] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.309337][ T4215] vhci_hcd: vhci_device speed not set [ 395.468913][ T5132] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 395.481421][ T5132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.489605][ T5132] usb 4-1: Product: syz [ 395.493823][ T5132] usb 4-1: Manufacturer: syz [ 395.498442][ T5132] usb 4-1: SerialNumber: syz [ 395.509011][ T5132] usb 4-1: config 0 descriptor?? [ 395.551049][ T5132] ims_pcu: probe of 4-1:0.0 failed with error -22 [ 396.317761][ T4290] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 396.359853][ T4290] Bluetooth: hci5: Frame reassembly failed (-84) [ 396.425652][ T5132] usb 4-1: USB disconnect, device number 8 [ 397.099535][ T8469] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 398.091169][ T4215] Bluetooth: hci5: command 0x1003 tx timeout [ 398.139636][ T4188] Bluetooth: hci5: sending frame failed (-49) [ 399.159948][ T4249] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 399.397241][ T8484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1306'. [ 399.779538][ T4249] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.826348][ T4249] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 400.159122][ T3532] Bluetooth: hci5: command 0x1001 tx timeout [ 400.166146][ T4188] Bluetooth: hci5: sending frame failed (-49) [ 400.177786][ T4249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.188615][ T4249] usb 4-1: config 0 descriptor?? [ 400.230844][ T4249] pwc: Askey VC010 type 2 USB webcam detected. [ 400.468895][ T3532] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 400.738720][ T3532] usb 5-1: Using ep0 maxpacket: 16 [ 400.939102][ T4249] pwc: recv_control_msg error -32 req 02 val 2b00 [ 400.998953][ T4249] pwc: recv_control_msg error -32 req 02 val 2700 [ 401.059798][ T4249] pwc: recv_control_msg error -32 req 02 val 2c00 [ 401.139105][ T4249] pwc: recv_control_msg error -32 req 04 val 1000 [ 401.242471][ T4249] pwc: recv_control_msg error -32 req 04 val 1300 [ 401.288843][ T4249] pwc: recv_control_msg error -32 req 04 val 1400 [ 401.338849][ T4249] pwc: recv_control_msg error -32 req 02 val 2000 [ 401.398800][ T4249] pwc: recv_control_msg error -32 req 02 val 2100 [ 401.493183][ T3532] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.503702][ T3532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.515002][ T3532] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 401.525940][ T3532] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 401.535724][ T3532] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.548230][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 401.558927][ T4249] pwc: recv_control_msg error -32 req 04 val 1500 [ 401.650500][ T3532] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 401.699225][ T3532] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 401.792153][ T3532] usb 5-1: Manufacturer: syz [ 401.898996][ T3532] usb 5-1: config 0 descriptor?? [ 402.238888][ T1110] Bluetooth: hci5: command 0x1009 tx timeout [ 402.308200][ T4249] pwc: recv_control_msg error -32 req 02 val 2400 [ 402.318852][ T3532] rc_core: IR keymap rc-hauppauge not found [ 402.329742][ T3532] Registered IR keymap rc-empty [ 402.334745][ T3532] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 402.358818][ T4249] pwc: recv_control_msg error -32 req 02 val 2600 [ 402.403841][ T4249] pwc: recv_control_msg error -32 req 02 val 2900 [ 402.453618][ T4249] pwc: recv_control_msg error -32 req 02 val 2800 [ 402.498794][ T4249] pwc: recv_control_msg error -32 req 04 val 1100 [ 402.504500][ T3532] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 402.540377][ T3532] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 402.545200][ T4249] pwc: Registered as video103. [ 402.555567][ T3532] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 402.560746][ T4249] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 403.262786][ T3532] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.302201][ T3532] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.360383][ T3532] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.367374][ T4249] usb 4-1: USB disconnect, device number 9 [ 403.418954][ T3532] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.459764][ T3532] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.519151][ T3532] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.549343][ T3532] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.588809][ T3532] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 403.668779][ T4219] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 403.906434][ T3532] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 404.076045][ T26] audit: type=1326 audit(1733763253.123:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.0.1328" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f153cfe7ed9 code=0x0 [ 404.223099][ T26] audit: type=1326 audit(1733763253.273:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8547 comm="syz.0.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f153cfe7ed9 code=0x7fc00000 [ 404.398794][ T3532] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 404.515813][ T8557] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1331'. [ 404.563293][ T3532] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 404.572515][ T3532] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 404.589612][ T3532] usb 5-1: USB disconnect, device number 16 [ 404.768769][ T4219] usb 2-1: Using ep0 maxpacket: 8 [ 405.059361][ T4219] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 405.142131][ T4219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.312412][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1332'. [ 405.321578][ T4219] usb 2-1: Product: syz [ 405.325794][ T4219] usb 2-1: Manufacturer: syz [ 405.383483][ T4219] usb 2-1: SerialNumber: syz [ 405.403305][ T4219] usb 2-1: config 0 descriptor?? [ 405.658831][ T4219] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 405.748738][ T13] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 405.988712][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 406.129658][ T13] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.149120][ T13] usb 5-1: config 0 has no interface number 0 [ 406.353298][ T13] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 406.362631][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.375273][ T13] usb 5-1: Product: syz [ 406.379499][ T13] usb 5-1: Manufacturer: syz [ 406.388671][ T13] usb 5-1: SerialNumber: syz [ 406.414234][ T13] usb 5-1: config 0 descriptor?? [ 406.588527][ T13] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 406.789042][ T13] gspca_spca1528: reg_w err -71 [ 406.833937][ T13] spca1528: probe of 5-1:0.1 failed with error -71 [ 406.988105][ T13] usb 5-1: USB disconnect, device number 17 [ 407.741647][ T8588] sctp: failed to load transform for md5: -4 [ 407.993114][ T4219] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 408.701388][ T4219] dvbdev: DVB: registering new adapter (Terratec H7) [ 408.708488][ T4219] usb 2-1: media controller created [ 409.146284][ T4219] usb read operation failed. (-71) [ 409.216078][ T4219] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5 [ 409.313104][ T4219] usb 2-1: USB disconnect, device number 12 [ 410.180240][ T4607] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 411.206481][ T8639] cgroup2: Unknown parameter 'pids_localevents' [ 411.718875][ T407] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 411.792686][ T407] Bluetooth: hci6: Frame reassembly failed (-84) [ 412.845921][ T5132] Bluetooth: hci5: command 0x1003 tx timeout [ 412.852084][ T8642] ceph: No mds server is up or the cluster is laggy [ 412.859423][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 412.876402][ T4248] libceph: connect (1)[c::]:6789 error -101 [ 412.907140][ T8651] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 412.928353][ T4248] libceph: mon0 (1)[c::]:6789 connect error [ 413.167655][ T8652] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.176882][ T8652] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.185803][ T8652] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.194683][ T8652] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 413.234162][ T4248] libceph: connect (1)[c::]:6789 error -101 [ 413.645696][ T4248] libceph: mon0 (1)[c::]:6789 connect error [ 413.758776][ T3532] Bluetooth: hci6: command 0x1003 tx timeout [ 413.776869][ T4185] Bluetooth: hci6: sending frame failed (-49) [ 414.878792][ T3532] Bluetooth: hci5: command 0x1001 tx timeout [ 414.888939][ T4185] Bluetooth: hci5: sending frame failed (-49) [ 416.072263][ T5132] Bluetooth: hci6: command 0x1001 tx timeout [ 416.078438][ T4185] Bluetooth: hci6: sending frame failed (-49) [ 417.570820][ T5132] Bluetooth: hci5: command 0x1009 tx timeout [ 417.602198][ T8676] device vlan2 entered promiscuous mode [ 417.891035][ T4248] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 418.215374][ T4248] usb 2-1: Using ep0 maxpacket: 16 [ 418.769032][ T5132] Bluetooth: hci6: command 0x1009 tx timeout [ 419.115013][ T8690] overlayfs: missing 'lowerdir' [ 419.769131][ T4248] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 419.778206][ T4248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.798795][ T4248] usb 2-1: Product: syz [ 419.802978][ T4248] usb 2-1: Manufacturer: syz [ 419.811124][ T4248] usb 2-1: SerialNumber: syz [ 419.819749][ T4248] usb 2-1: config 0 descriptor?? [ 419.869737][ T4248] usb-storage 2-1:0.0: USB Mass Storage device detected [ 420.014248][ T4248] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 420.043107][ T4248] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 5.15.173-syzkaller) [ 420.043107][ T4248] Please send a copy of this message to and [ 420.839062][ T4248] usb 2-1: USB disconnect, device number 13 [ 421.772138][ T24] libceph: connect (1)[c::]:6789 error -101 [ 421.788409][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 421.847483][ T8710] ceph: No mds server is up or the cluster is laggy [ 422.163823][ T24] libceph: connect (1)[c::]:6789 error -101 [ 422.357442][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 425.830835][ T8772] device wireguard0 entered promiscuous mode [ 426.052468][ T4248] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 427.458839][ T4248] usb 2-1: Using ep0 maxpacket: 8 [ 428.408792][ T4248] usb 2-1: unable to read config index 0 descriptor/all [ 428.423906][ T4248] usb 2-1: can't read configurations, error -71 [ 431.383858][ T8831] netlink: 'syz.3.1418': attribute type 4 has an invalid length. [ 431.625433][ T8831] syz.3.1418 (8831) used greatest stack depth: 19376 bytes left [ 431.798178][ T8857] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1431'. [ 431.831069][ T8860] binder: 8850:8860 ioctl c0306201 20000680 returned -14 [ 433.657649][ T4219] Bluetooth: hci5: command 0x1003 tx timeout [ 433.667768][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 434.103204][ T8868] ALSA: mixer_oss: invalid OSS volume '' [ 434.388783][ T4219] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 434.595793][ T8887] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1442'. [ 434.638968][ T4219] usb 3-1: Using ep0 maxpacket: 8 [ 435.688786][ T4215] Bluetooth: hci5: command 0x1001 tx timeout [ 435.694895][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 435.701689][ T4219] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.717282][ T4219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.726798][ T4219] usb 3-1: Product: syz [ 435.731387][ T4219] usb 3-1: Manufacturer: syz [ 435.735998][ T4219] usb 3-1: SerialNumber: syz [ 435.742729][ T4219] usb 3-1: config 0 descriptor?? [ 435.999037][ T4219] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 436.342658][ T8929] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 437.759160][ T4215] Bluetooth: hci5: command 0x1009 tx timeout [ 438.238820][ T4219] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 438.247607][ T4219] usb 3-1: USB disconnect, device number 15 [ 439.666671][ T8955] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 439.673213][ T8955] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 439.688182][ T8955] vhci_hcd vhci_hcd.0: Device attached [ 439.777823][ T8956] vhci_hcd: connection closed [ 439.778050][ T9] vhci_hcd: stop threads [ 439.838177][ T9] vhci_hcd: release socket [ 439.852473][ T9] vhci_hcd: disconnect device [ 439.878950][ T4219] vhci_hcd: vhci_device speed not set [ 439.921405][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.928756][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.947085][ T1107] hid-generic 0000:0003:0000.0005: item fetching failed at offset 0/2 [ 442.999250][ T1107] hid-generic: probe of 0000:0003:0000.0005 failed with error -22 [ 443.721282][ T4222] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 446.097349][ T3532] Bluetooth: hci5: command 0x1003 tx timeout [ 446.104018][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 446.558770][ T3532] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 446.566582][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 446.849074][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 446.849114][ T3532] usb 5-1: Using ep0 maxpacket: 8 [ 446.979619][ T3532] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 447.009551][ T24] usb 2-1: config 2 has an invalid interface number: 20 but max is 0 [ 447.042045][ T24] usb 2-1: config 2 has no interface number 0 [ 447.407050][ T24] usb 2-1: config 2 interface 20 has no altsetting 0 [ 447.479104][ T3532] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 447.490569][ T3532] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 447.500657][ T3532] usb 5-1: Product: syz [ 447.505037][ T3532] usb 5-1: Manufacturer: syz [ 447.514536][ T3532] usb 5-1: SerialNumber: syz [ 447.569527][ T24] usb 2-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=5b.01 [ 447.604040][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.777998][ T24] usb 2-1: Product: syz [ 447.827576][ T24] usb 2-1: Manufacturer: syz [ 447.874786][ T24] usb 2-1: SerialNumber: syz [ 447.929013][ T3532] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 447.964179][ T3532] usb 5-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 448.256194][ T3532] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 448.264827][ T3532] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 448.275341][ T9053] Bluetooth: hci5: command 0x1001 tx timeout [ 448.281870][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 448.289181][ T3532] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 448.297491][ T3532] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 448.313977][ T3532] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 448.329098][ T3532] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 448.351343][ T3532] usb 5-1: USB disconnect, device number 18 [ 448.372907][ T3532] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 448.444039][ T3532] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 448.455249][ T3532] visor 5-1:1.0: device disconnected [ 448.551481][ T9071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1508'. [ 448.635324][ T24] usb 2-1: bad CDC descriptors [ 448.642079][ T24] usb 2-1: bad CDC descriptors [ 448.647200][ T24] cdc_acm 2-1:2.20: Zero length descriptor references [ 448.654334][ T24] cdc_acm: probe of 2-1:2.20 failed with error -22 [ 448.663983][ T24] usb 2-1: USB disconnect, device number 16 [ 448.700620][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 451.039441][ T4215] Bluetooth: hci5: command 0x1009 tx timeout [ 456.987805][ T9192] binder: 9162:9192 ioctl 4018620d 0 returned -22 [ 457.041077][ T9192] binder: 9162:9192 ioctl c0306201 0 returned -14 [ 457.154730][ T3532] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 457.438913][ T3532] usb 4-1: Using ep0 maxpacket: 8 [ 457.629447][ T3532] usb 4-1: config 0 has no interfaces? [ 457.636799][ T3532] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 457.691350][ T3532] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.897103][ T3532] usb 4-1: config 0 descriptor?? [ 459.134923][ T9210] udc-core: couldn't find an available UDC or it's busy [ 459.306592][ T9210] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 460.710528][ T1107] usb 4-1: USB disconnect, device number 10 [ 463.669478][ T1107] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 464.863108][ T1107] usb 5-1: Using ep0 maxpacket: 8 [ 464.989233][ T1107] usb 5-1: config 0 has no interfaces? [ 464.995903][ T1107] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 465.149126][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.341331][ T1107] usb 5-1: config 0 descriptor?? [ 465.702764][ T21] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 465.809022][ T5287] usb 5-1: USB disconnect, device number 19 [ 466.678718][ T21] usb 4-1: Using ep0 maxpacket: 16 [ 466.799184][ T21] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.809496][ T21] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 466.821099][ T21] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 466.838223][ T21] usb 4-1: config 0 interface 0 has no altsetting 0 [ 466.845594][ T21] usb 4-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 466.882671][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.913096][ T21] usb 4-1: config 0 descriptor?? [ 467.548772][ T21] usbhid 4-1:0.0: can't add hid device: -71 [ 467.587483][ T21] usbhid: probe of 4-1:0.0 failed with error -71 [ 467.822618][ T21] usb 4-1: USB disconnect, device number 11 [ 472.621345][ T9372] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 472.627933][ T9372] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 473.212544][ T9372] vhci_hcd vhci_hcd.0: Device attached [ 473.401402][ T9378] vhci_hcd: connection closed [ 473.404945][ T4280] vhci_hcd: stop threads [ 473.419753][ T4280] vhci_hcd: release socket [ 473.424436][ T4280] vhci_hcd: disconnect device [ 473.509738][ T4249] vhci_hcd: vhci_device speed not set [ 480.939172][ T9462] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 484.137837][ T9485] binder: 9484:9485 unknown command 1074553619 [ 484.148865][ T9485] binder: 9484:9485 ioctl c0306201 20000580 returned -22 [ 485.186223][ T9494] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 485.192788][ T9494] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 485.528077][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 486.452688][ T9494] vhci_hcd vhci_hcd.0: Device attached [ 486.668739][ T4219] vhci_hcd: vhci_device speed not set [ 486.738772][ T4219] usb 37-1: new full-speed USB device number 10 using vhci_hcd [ 486.757357][ T9524] netlink: 1304 bytes leftover after parsing attributes in process `syz.4.1649'. [ 488.201614][ T9500] vhci_hcd: connection reset by peer [ 488.207275][ T407] vhci_hcd: stop threads [ 488.212988][ T407] vhci_hcd: release socket [ 488.230307][ T407] vhci_hcd: disconnect device [ 492.518747][ T4219] vhci_hcd: vhci_device speed not set [ 492.628859][ T9585] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 492.635502][ T9585] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 492.882627][ T9586] vhci_hcd: connection closed [ 492.909065][ T9585] vhci_hcd vhci_hcd.0: Device attached [ 493.011216][ T4222] vhci_hcd: stop threads [ 493.233529][ T4222] vhci_hcd: release socket [ 493.238077][ T4222] vhci_hcd: disconnect device [ 493.264353][ T4219] vhci_hcd: vhci_device speed not set [ 497.386016][ T9643] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.1687'. [ 497.395209][ T9643] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.1687'. [ 499.293196][ T9679] binder: 9673:9679 ioctl c0306201 0 returned -14 [ 499.307422][ T9679] netlink: 'syz.3.1693': attribute type 3 has an invalid length. [ 499.315634][ T9679] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1693'. [ 501.638404][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.644772][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.888706][ T4219] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 502.063821][ T4248] libceph: connect (1)[c::]:6789 error -101 [ 502.130633][ T4248] libceph: mon0 (1)[c::]:6789 connect error [ 502.341137][ T4219] usb 4-1: device not accepting address 12, error -71 [ 503.070857][ T1107] libceph: connect (1)[c::]:6789 error -101 [ 503.109979][ T9701] ceph: No mds server is up or the cluster is laggy [ 503.130715][ T1107] libceph: mon0 (1)[c::]:6789 connect error [ 504.310731][ T9745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1718'. [ 505.974390][ T4219] libceph: connect (1)[c::]:6789 error -101 [ 505.983095][ T4219] libceph: mon0 (1)[c::]:6789 connect error [ 506.604649][ T24] libceph: connect (1)[c::]:6789 error -101 [ 506.612363][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 506.690196][ T9766] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 506.696725][ T9766] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 506.719069][ T9775] vhci_hcd: connection closed [ 506.721850][ T9766] vhci_hcd vhci_hcd.0: Device attached [ 506.749736][ T4280] vhci_hcd: stop threads [ 506.754038][ T4280] vhci_hcd: release socket [ 506.767145][ T9772] ceph: No mds server is up or the cluster is laggy [ 506.772767][ T4280] vhci_hcd: disconnect device [ 509.346018][ T4249] libceph: connect (1)[c::]:6789 error -101 [ 509.353352][ T4249] libceph: mon0 (1)[c::]:6789 connect error [ 509.397693][ T9828] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1742'. [ 509.407798][ T9822] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1742'. [ 509.472512][ T9822] netlink: 'syz.3.1742': attribute type 4 has an invalid length. [ 510.099183][ T9818] ceph: No mds server is up or the cluster is laggy [ 510.174367][ T4249] libceph: connect (1)[c::]:6789 error -101 [ 510.181390][ T4249] libceph: mon0 (1)[c::]:6789 connect error [ 510.906980][ T9839] xt_CT: No such helper "pptp" [ 512.682424][ T9848] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 512.688975][ T9848] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 512.697784][ T9848] vhci_hcd vhci_hcd.0: Device attached [ 512.998746][ T24] vhci_hcd: vhci_device speed not set [ 513.049410][ T9858] vhci_hcd: connection closed [ 513.068899][ T24] usb 37-1: new full-speed USB device number 11 using vhci_hcd [ 513.090464][ T4237] vhci_hcd: stop threads [ 513.094869][ T4237] vhci_hcd: release socket [ 513.102946][ T4237] vhci_hcd: disconnect device [ 518.238876][ T24] vhci_hcd: vhci_device speed not set [ 518.302225][ T9934] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 518.308767][ T9934] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 518.350645][ T9934] vhci_hcd vhci_hcd.0: Device attached [ 519.252672][ T24] vhci_hcd: vhci_device speed not set [ 519.343185][ T24] usb 37-1: device descriptor read/64, error -110 [ 519.403802][ T9973] sctp: [Deprecated]: syz.3.1777 (pid 9973) Use of int in max_burst socket option. [ 519.403802][ T9973] Use struct sctp_assoc_value instead [ 519.746148][ T24] vhci_hcd: vhci_device speed not set [ 520.835269][ T24] usb 37-1: new full-speed USB device number 12 using vhci_hcd [ 521.046714][ T9955] vhci_hcd: connection reset by peer [ 522.520716][ T4314] vhci_hcd: stop threads [ 522.532193][ T4314] vhci_hcd: release socket [ 522.542460][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 522.548725][ T4314] vhci_hcd: disconnect device [ 522.918824][ T1107] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 524.769373][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 525.399433][ T1107] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 525.418752][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 525.429258][ T1107] usb 3-1: Product: syz [ 525.438690][ T1107] usb 3-1: Manufacturer: syz [ 525.448753][ T1107] usb 3-1: SerialNumber: syz [ 525.456413][ T1107] usb 3-1: config 0 descriptor?? [ 525.638212][ T1107] usb 3-1: USB disconnect, device number 16 [ 527.282708][ T24] vhci_hcd: vhci_device speed not set [ 527.928962][ T4218] Bluetooth: hci5: command 0x1003 tx timeout [ 527.938016][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 528.140066][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.297256][T10083] netlink: 'syz.3.1814': attribute type 3 has an invalid length. [ 529.717093][T10096] print_req_error: 7 callbacks suppressed [ 529.717131][T10096] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 529.734878][T10096] EXT4-fs (loop4): unable to read superblock [ 530.265795][ T4218] Bluetooth: hci5: command 0x1001 tx timeout [ 530.283946][ T4189] Bluetooth: hci5: sending frame failed (-49) [ 533.394535][ T4248] Bluetooth: hci5: command 0x1009 tx timeout [ 533.685163][T10131] sp0: Synchronizing with TNC [ 533.943623][T10130] [U] [ 538.385582][T10179] ptrace attach of "./syz-executor exec"[10182] was attempted by "./syz-executor exec"[10179] [ 539.597290][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1853'. [ 540.625016][ T3532] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 541.808742][ T3532] usb 4-1: config 1 interface 0 has no altsetting 0 [ 541.968799][ T3532] usb 4-1: New USB device found, idVendor=046d, idProduct=101a, bcdDevice= 0.40 [ 541.988460][ T3532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.657631][ T3532] usb 4-1: Product: syz [ 542.689981][ T3532] usb 4-1: Manufacturer: syz [ 542.762058][ T3532] usb 4-1: SerialNumber: syz [ 542.918730][ T3532] usb 4-1: can't set config #1, error -71 [ 542.925709][ T3532] usb 4-1: USB disconnect, device number 14 [ 544.484737][T10247] ptrace attach of "./syz-executor exec"[10248] was attempted by "./syz-executor exec"[10247] [ 552.723887][ T4218] Bluetooth: hci4: command 0x0405 tx timeout [ 553.232971][ T5287] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 553.836814][T10368] binder_alloc: 10366: binder_alloc_buf size 68856 failed, no address space [ 553.846551][T10368] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 8184 (num: 1 largest: 8184) [ 554.098803][ T5287] usb 3-1: Using ep0 maxpacket: 32 [ 554.418965][ T5287] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.717071][ T5287] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 555.726418][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.828828][ T5287] usb 3-1: Product: syz [ 555.833088][ T5287] usb 3-1: Manufacturer: syz [ 555.837758][ T5287] usb 3-1: SerialNumber: syz [ 555.866284][ T5287] usb 3-1: config 0 descriptor?? [ 555.920624][ T5287] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 555.953708][ T5287] gspca_sunplus: reg_r err -71 [ 562.915578][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.942271][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.378766][T10462] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1937'. [ 565.798741][ T5287] sunplus: probe of 3-1:0.0 failed with error -71 [ 565.829792][ T5287] usb 3-1: USB disconnect, device number 17 [ 566.249037][ T5287] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 566.558617][ T5287] usb 3-1: Using ep0 maxpacket: 16 [ 567.118837][ T5287] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 567.145480][ T5287] usb 3-1: config 8 has no interface number 0 [ 567.356845][ T5287] usb 3-1: config 8 interface 206 has no altsetting 0 [ 567.749431][ T5287] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 567.813906][T10514] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1955'. [ 567.946825][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.114472][ T5287] usb 3-1: Product: syz [ 568.205868][ T5287] usb 3-1: Manufacturer: syz [ 568.441767][ T5287] usb 3-1: SerialNumber: syz [ 568.654240][ T5287] usb 3-1: can't set config #8, error -71 [ 568.661304][ T5287] usb 3-1: USB disconnect, device number 18 [ 576.990154][T10583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.998124][T10583] IPv6: NLM_F_CREATE should be set when creating new route [ 585.062674][T10714] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2021'. [ 593.213817][T10790] input input18: cannot allocate more than FF_MAX_EFFECTS effects [ 593.332942][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 594.259208][ T4364] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 594.318737][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 594.470428][ T24] usb 3-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 594.494422][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 594.538681][ T4364] usb 4-1: Using ep0 maxpacket: 16 [ 594.558081][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.678948][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.690683][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 594.740180][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.757091][ T24] usb 3-1: config 0 descriptor?? [ 594.779122][ T4364] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 594.978725][ T4364] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 595.031555][ T4364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.048682][ T4364] usb 4-1: Product: syz [ 595.057548][ T4364] usb 4-1: Manufacturer: syz [ 595.078759][ T4364] usb 4-1: SerialNumber: syz [ 595.127688][ T4364] usb 4-1: config 0 descriptor?? [ 595.232506][ T24] wacom 0003:056A:00D0.0006: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 595.244169][ T4364] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 595.305324][ T24] wacom 0003:056A:00D0.0006: hidraw0: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.2-1/input0 [ 595.354062][ T24] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D0.0006/input/input19 [ 595.444541][ T5287] usb 4-1: USB disconnect, device number 15 [ 595.458919][ T4279] usb 4-1: Failed to submit usb control message: -71 [ 595.470894][ T4279] usb 4-1: unable to send the bmi data to the device: -71 [ 595.485911][ T4279] usb 4-1: unable to get target info from device [ 595.520111][ T4279] usb 4-1: could not get target info (-71) [ 595.527381][ T24] usb 3-1: USB disconnect, device number 19 [ 595.564934][ T4279] usb 4-1: could not probe fw (-71) [ 598.477348][T10873] input input22: cannot allocate more than FF_MAX_EFFECTS effects [ 599.780911][ T4219] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 600.058761][ T4219] usb 3-1: Using ep0 maxpacket: 16 [ 600.188956][ T4219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 600.409160][ T4219] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 600.418358][ T4219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.437804][ T4219] usb 3-1: Product: syz [ 600.457946][ T4219] usb 3-1: Manufacturer: syz [ 600.481632][ T4219] usb 3-1: SerialNumber: syz [ 600.509704][ T4219] usb 3-1: config 0 descriptor?? [ 600.583854][ T4219] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 600.825579][ T4219] usb 3-1: USB disconnect, device number 20 [ 600.848827][ T9] usb 3-1: Failed to submit usb control message: -71 [ 600.856206][ T9] usb 3-1: unable to send the bmi data to the device: -71 [ 600.926110][T10916] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2087'. [ 601.081178][ T9] usb 3-1: unable to get target info from device [ 601.260255][ T9] usb 3-1: could not get target info (-71) [ 601.534867][ T9] usb 3-1: could not probe fw (-71) [ 603.424932][ T21] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 603.878869][ T21] usb 5-1: Using ep0 maxpacket: 16 [ 604.108765][ T21] usb 5-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 604.136138][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 255 [ 604.267671][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.279690][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.290011][ T21] usb 5-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 604.383250][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.692560][ T21] usb 5-1: config 0 descriptor?? [ 606.076715][ T21] wacom 0003:056A:00D0.0007: Unknown device_type for 'HID 056a:00d0'. Assuming pen. [ 606.088247][ T21] wacom 0003:056A:00D0.0007: hidraw0: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.4-1/input0 [ 606.112197][ T21] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D0.0007/input/input23 [ 607.203612][ T21] usb 5-1: USB disconnect, device number 20 [ 607.598896][ T4218] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 607.848661][ T4218] usb 4-1: Using ep0 maxpacket: 8 [ 607.990961][ T4218] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 608.020723][ T4218] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 608.108628][ T4218] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 608.178777][ T4218] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.273107][ T4218] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 608.492218][ T4218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.238894][ T4218] usb 4-1: GET_CAPABILITIES returned 0 [ 609.244795][ T4218] usbtmc 4-1:16.0: can't read capabilities [ 609.617664][ T4218] usb 4-1: USB disconnect, device number 16 [ 612.257429][T11061] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 614.956489][T11112] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.968161][T11112] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.386005][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2164'. [ 615.421799][T11116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.547610][T11116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.592604][T11116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.604326][T11116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.678124][T11112] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.701716][T11112] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.828289][T11112] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.844965][T11112] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.984449][T11112] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.999148][T11112] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.712077][T11133] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.733078][T11112] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.749337][T11133] F2FS-fs (loop1): Unable to read 1th superblock [ 616.756471][T11133] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.768163][T11112] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.785671][T11112] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.796372][T11133] F2FS-fs (loop1): Unable to read 2th superblock [ 616.804387][T11112] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.813572][T11134] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.818200][T11112] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.835472][T11112] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.848817][T11134] F2FS-fs (loop1): Unable to read 1th superblock [ 616.855447][T11134] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 616.867509][T11112] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.876378][T11112] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.885292][T11134] F2FS-fs (loop1): Unable to read 2th superblock [ 620.249142][T11196] tipc: Started in network mode [ 620.262622][T11196] tipc: Node identity , cluster identity 4711 [ 620.520103][T11196] tipc: Failed to obtain node identity [ 620.615623][T11196] tipc: Enabling of bearer rejected, failed to enable media [ 623.857985][T11233] ptrace attach of "./syz-executor exec"[11234] was attempted by "./syz-executor exec"[11233] [ 623.880027][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2202'. [ 624.361682][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.371370][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.319393][T11259] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.2207' sets config #0 [ 626.332495][T11259] netlink: 'syz.4.2207': attribute type 1 has an invalid length. [ 626.968724][ T26] audit: type=1326 audit(1733763475.383:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c74e2ed9 code=0x7ffc0000 [ 627.052328][ T26] audit: type=1326 audit(1733763475.383:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c74e2ed9 code=0x7ffc0000 [ 627.080952][ T26] audit: type=1326 audit(1733763475.383:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f79c74e2ed9 code=0x7ffc0000 [ 627.103536][ T26] audit: type=1326 audit(1733763475.383:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c74e2ed9 code=0x7ffc0000 [ 627.134709][ T26] audit: type=1326 audit(1733763475.383:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c74e2ed9 code=0x7ffc0000 [ 627.157992][ T26] audit: type=1326 audit(1733763475.383:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79c74e2ed9 code=0x7ffc0000 [ 627.181142][ T26] audit: type=1326 audit(1733763475.383:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c74e2ed9 code=0x7ffc0000 [ 627.198639][ T5287] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 627.738613][ T26] audit: type=1326 audit(1733763475.383:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c74e2ed9 code=0x7ffc0000 [ 627.775869][ T26] audit: type=1326 audit(1733763475.383:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79c74e2ed9 code=0x7ffc0000 [ 627.799928][ T26] audit: type=1326 audit(1733763475.383:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11252 comm="syz.4.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c74e2ed9 code=0x7ffc0000 [ 629.979480][T11295] serio: Serial port ptm0 [ 630.104953][T11301] device bridge0 entered promiscuous mode [ 630.126333][T11300] device bridge0 left promiscuous mode [ 631.460460][T11322] 9pnet: Unknown protocol version 9p200 [ 638.827003][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2263'. [ 639.313965][T11425] netlink: 1788 bytes leftover after parsing attributes in process `syz.2.2266'. [ 646.836670][T11480] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 646.914858][T11480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 646.972361][T11480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 647.138319][T11490] netlink: 'syz.1.2289': attribute type 28 has an invalid length. [ 659.576304][T11643] device vlan3 entered promiscuous mode [ 659.898733][ T4218] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 660.378595][ T4218] usb 4-1: Using ep0 maxpacket: 8 [ 660.477883][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2345'. [ 660.613792][ T4218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 660.750310][ T4218] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 660.761603][ T4218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.866774][ T4218] usb 4-1: config 0 descriptor?? [ 661.122797][T11672] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2352'. [ 661.187603][ T4218] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 661.856081][ T7] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 662.119893][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 662.509393][ T7] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 662.565273][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.796113][ T7] usb 3-1: config 0 descriptor?? [ 663.001603][ T4218] usb 4-1: USB disconnect, device number 18 [ 663.040426][ T4218] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 663.309085][ T21] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 663.535631][T11700] netlink: 'syz.0.2359': attribute type 4 has an invalid length. [ 663.608817][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 663.760655][ T21] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 663.866440][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 663.966279][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 664.200069][ T21] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 664.215315][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.224576][ T21] usb 5-1: Product: syz [ 664.232908][ T21] usb 5-1: Manufacturer: syz [ 664.238928][ T21] usb 5-1: SerialNumber: syz [ 664.247992][ T21] usb 5-1: config 0 descriptor?? [ 664.264078][T11713] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2364'. [ 665.374037][ T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 665.384266][ T7] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 665.396109][ T7] asix: probe of 3-1:0.0 failed with error -71 [ 665.406462][ T7] usb 3-1: USB disconnect, device number 21 [ 667.038930][ T4219] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 667.110039][ T3532] usb 5-1: USB disconnect, device number 21 [ 667.508912][ T4219] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 667.556847][ T4219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.584993][ T4219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.661767][T11754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2376'. [ 669.364399][ T4219] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 669.568752][ T4219] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 669.595498][ T4219] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 669.769418][ T4219] usb 4-1: config 0 descriptor?? [ 669.788714][ T4219] usb 4-1: can't set config #0, error -71 [ 669.796304][ T4219] usb 4-1: USB disconnect, device number 19 [ 672.242337][T11794] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 672.388882][ T4219] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 672.718776][ T4219] usb 4-1: Using ep0 maxpacket: 8 [ 672.786790][ T4219] usb 4-1: device descriptor read/all, error -71 [ 673.008741][ T4249] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 673.479138][ T4249] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 673.550596][ T4249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.550852][ T4249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.550953][ T4249] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 673.648863][ T4249] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 673.648954][ T4249] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 673.648996][ T4249] usb 5-1: Manufacturer: syz [ 673.730008][ T4249] usb 5-1: config 0 descriptor?? [ 674.218652][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 674.290298][ T4249] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 674.306427][ T4249] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 674.346100][ T4249] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 675.796940][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2403'. [ 675.814696][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 676.092255][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 676.113421][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 676.152332][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 676.177473][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 676.234458][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 676.271217][ T4249] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 676.321017][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.078754][ T24] usb 3-1: can't set config #16, error -71 [ 677.089130][ T24] usb 3-1: USB disconnect, device number 22 [ 677.207978][T11873] tipc: Enabled bearer , priority 10 [ 678.583941][ T4218] usb 5-1: USB disconnect, device number 22 [ 678.777960][T11894] overlayfs: failed to clone upperpath [ 678.835289][T11898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 678.867724][T11898] overlayfs: missing 'lowerdir' [ 680.208594][ T4218] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 680.332188][T11935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2440'. [ 680.568716][ T4218] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 680.587767][ T4218] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.599471][ T4218] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 680.611085][ T4218] usb 3-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 680.634697][ T4218] usb 3-1: config 0 interface 0 has no altsetting 0 [ 681.518797][ T4218] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 681.536230][ T4218] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 681.555247][ T4218] usb 3-1: Product: syz [ 681.563229][T11966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2451'. [ 681.580738][ T4218] usb 3-1: Manufacturer: syz [ 681.595754][ T4218] usb 3-1: SerialNumber: syz [ 681.615441][ T4218] usb 3-1: config 0 descriptor?? [ 681.741965][T11974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 681.749233][T11974] IPv6: NLM_F_CREATE should be set when creating new route [ 682.409563][ T4218] ldusb 3-1:0.0: Interrupt in endpoint not found [ 682.419315][ T4218] usb 3-1: USB disconnect, device number 23 [ 682.965219][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2460'. [ 684.508252][T12015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2470'. [ 684.634621][T12025] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 685.702158][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.708861][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.487824][T12101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2496'. [ 691.464141][T12115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2501'. [ 691.861783][ T1107] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 696.818790][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 697.094088][T12170] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 697.239192][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 697.258785][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 697.268030][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.292760][ T24] usb 4-1: config 0 descriptor?? [ 697.645817][T12173] overlayfs: overlapping lowerdir path [ 697.693471][T12164] udc-core: couldn't find an available UDC or it's busy [ 697.728120][T12164] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 697.764006][ T1107] usb 4-1: USB disconnect, device number 22 [ 706.513128][T12266] overlayfs: failed to clone upperpath [ 708.148880][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 708.148919][ T26] audit: type=1326 audit(1733763557.163:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.2.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c994eed9 code=0x7ffc0000 [ 709.369022][ T4219] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 709.404251][ T26] audit: type=1326 audit(1733763557.173:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.2.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c994eed9 code=0x7ffc0000 [ 709.426999][ T26] audit: type=1326 audit(1733763557.173:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.2.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe9c994eed9 code=0x7ffc0000 [ 709.467320][ T26] audit: type=1326 audit(1733763557.173:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.2.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c994eed9 code=0x7ffc0000 [ 709.526578][T12301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2561'. [ 709.561375][ T26] audit: type=1326 audit(1733763557.173:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.2.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c994eed9 code=0x7ffc0000 [ 709.646566][ T26] audit: type=1326 audit(1733763557.173:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.2.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9c994eed9 code=0x7ffc0000 [ 709.670353][T12309] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2564'. [ 709.678682][ T4219] usb 4-1: Using ep0 maxpacket: 16 [ 709.680774][ T26] audit: type=1326 audit(1733763557.173:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.2.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c994eed9 code=0x7ffc0000 [ 709.729509][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'. [ 709.747920][ T26] audit: type=1326 audit(1733763557.173:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12285 comm="syz.2.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c994eed9 code=0x7ffc0000 [ 710.778706][ T4219] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 710.787791][ T4219] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 710.968545][ T4219] usb 4-1: Product: syz [ 710.972753][ T4219] usb 4-1: Manufacturer: syz [ 710.990666][ T4219] usb 4-1: config 0 descriptor?? [ 711.018665][ T4219] usb 4-1: can't set config #0, error -71 [ 711.026986][ T4219] usb 4-1: USB disconnect, device number 23 [ 712.256318][T12348] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 712.449303][T12348] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2576'. [ 712.597861][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2578'. [ 712.857369][T12370] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2581'. [ 714.198846][ T4364] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 717.449746][T12461] xt_limit: Overflow, try lower: 6/2147483648 [ 717.698718][T12456] program syz.4.2607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 721.628643][ T24] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 722.059336][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x99, skipping [ 722.281988][ T24] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 722.295516][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.314046][ T24] usb 4-1: Product: syz [ 722.318361][ T24] usb 4-1: Manufacturer: syz [ 722.325939][ T24] usb 4-1: SerialNumber: syz [ 722.335753][ T24] usb 4-1: config 0 descriptor?? [ 722.451260][ T24] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 722.877813][ T24] usb 4-1: USB disconnect, device number 24 [ 723.062379][ T4219] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 723.642626][T12553] xt_l2tp: v2 sid > 0xffff: 4294967292 [ 723.964693][ T4219] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 723.973219][ T4219] usb 3-1: config 0 has no interface number 0 [ 723.979609][ T4219] usb 3-1: config 0 interface 235 has no altsetting 0 [ 724.148925][ T4219] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 724.162738][ T4219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.871535][ T4219] usb 3-1: Product: syz [ 724.875755][ T4219] usb 3-1: Manufacturer: syz [ 724.978534][ T4219] usb 3-1: SerialNumber: syz [ 724.997036][ T4219] usb 3-1: config 0 descriptor?? [ 725.040443][ T4219] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 725.058577][ T4219] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 725.066464][ T4219] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 725.075813][ T4219] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 725.084019][ T4219] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 725.105643][ T4219] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 2 [ 725.125902][ T4219] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 725.140168][ T4219] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 5 [ 725.151698][ T4219] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 725.204930][ T4172] syz-executor (4172) used greatest stack depth: 19160 bytes left [ 725.246290][ T4219] usb 3-1: USB disconnect, device number 26 [ 725.257929][ T4219] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 725.267757][ T4219] keyspan 3-1:0.235: device disconnected [ 726.085455][ T4290] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.036314][T12596] capability: warning: `syz.3.2646' uses 32-bit capabilities (legacy support in use) [ 727.388986][ T4249] Bluetooth: hci0: command 0x0409 tx timeout [ 727.405045][ T4290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.811132][ T4290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.272844][ T4290] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.448596][ T4219] Bluetooth: hci0: command 0x041b tx timeout [ 729.710598][T12576] chnl_net:caif_netlink_parms(): no params data found [ 729.850245][T12576] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.990745][T12576] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.999223][T12576] device bridge_slave_0 entered promiscuous mode [ 730.009317][T12576] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.016502][T12576] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.025776][T12576] device bridge_slave_1 entered promiscuous mode [ 730.829284][T12576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.858303][T12576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.079228][T12576] team0: Port device team_slave_0 added [ 731.528560][ T4219] Bluetooth: hci0: command 0x040f tx timeout [ 731.538332][T12576] team0: Port device team_slave_1 added [ 731.687550][T12576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.718582][T12576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.888969][T12576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.914133][T12576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.941849][T12576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.141215][T12576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.750049][T12576] device hsr_slave_0 entered promiscuous mode [ 732.765972][T12576] device hsr_slave_1 entered promiscuous mode [ 732.774646][T12576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 732.783888][T12576] Cannot create hsr debugfs directory [ 733.829652][ T3532] Bluetooth: hci0: command 0x0419 tx timeout [ 734.158869][T12671] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2668'. [ 737.366775][T12576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 737.383009][T12576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 737.395292][T12576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 737.433008][T12576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 738.182871][ T4290] device hsr_slave_0 left promiscuous mode [ 738.205403][ T4290] device hsr_slave_1 left promiscuous mode [ 738.214326][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 738.256119][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.273426][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 738.294271][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.352619][ T4290] device bridge_slave_1 left promiscuous mode [ 738.361249][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.376014][T12738] program syz.3.2689 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 738.399516][ T4290] device bridge_slave_0 left promiscuous mode [ 738.406496][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.659193][ T4364] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 738.798070][ T4290] rdma_rxe: ignoring netdev event = 10 for bond0 [ 738.942980][ T4290] device veth1_macvtap left promiscuous mode [ 738.960305][ T4290] device veth0_macvtap left promiscuous mode [ 738.970490][ T4290] device veth1_vlan left promiscuous mode [ 738.976478][ T4290] device veth0_vlan left promiscuous mode [ 738.986844][ T4364] usb 3-1: Using ep0 maxpacket: 8 [ 739.483698][ T4364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 739.493547][ T4364] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC7, skipping [ 739.520813][T12754] mmap: syz.1.2692 (12754) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 739.547216][ T4290] infiniband syz0: set down [ 739.736453][ T4290] bond1 (unregistering): Released all slaves [ 739.810637][T12760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2694'. [ 742.141166][ T4364] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 742.148929][ T4290] team0 (unregistering): Port device team_slave_1 removed [ 742.154612][ T4364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.166321][ T4364] usb 3-1: Product: syz [ 742.171191][ T4364] usb 3-1: Manufacturer: syz [ 742.188098][ T4364] usb 3-1: config 0 descriptor?? [ 742.200194][ T4290] team0 (unregistering): Port device team_slave_0 removed [ 743.000916][ T4290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.075749][ T4290] rdma_rxe: ignoring netdev event = 12 for bond0 [ 743.362753][ T21] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 743.408642][ T4364] usb 3-1: can't set config #0, error -71 [ 743.437141][ T21] Bluetooth: hci1: Injecting HCI hardware error event [ 743.450470][ T4364] usb 3-1: USB disconnect, device number 27 [ 743.478077][T12577] Bluetooth: hci1: hardware error 0x00 [ 743.495472][ T4290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.165902][ T4290] rdma_rxe: ignoring netdev event = 8 for bond0 [ 744.173243][ T4290] rdma_rxe: ignoring netdev event = 18 for bond0 [ 744.186489][ T4290] rdma_rxe: ignoring netdev event = 12 for bond0 [ 744.331478][ T4607] smc: removing ib device syz0 [ 744.331881][ T4290] bond0 (unregistering): Released all slaves [ 744.564192][T12470] bond0 speed is unknown, defaulting to 1000 [ 744.622193][ T4249] infiniband syz0: ib_query_port failed (-19) [ 745.139668][T12576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.219927][ T4364] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 745.242278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 745.259206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 745.426336][T12576] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.558640][ T4364] usb 3-1: Using ep0 maxpacket: 16 [ 745.642423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 745.705885][ T4364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.742475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 745.842645][ T4364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.907298][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.914431][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.036412][ T4364] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 746.129932][ T4364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.192368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 746.208520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 746.219304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 746.234633][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.241762][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.253108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 746.262232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 746.267175][ T4364] usb 3-1: config 0 descriptor?? [ 746.287687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 746.322297][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 746.350079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 746.382088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 746.429081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 746.517070][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 746.540988][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 746.552864][T12576] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 746.627693][T12576] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 746.689157][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 746.718224][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 746.935118][ T4364] corsair 0003:1B1C:1B02.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 747.078176][ T4219] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 747.156960][ T4219] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 747.208970][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.215489][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.268427][ T3532] usb 3-1: USB disconnect, device number 28 [ 747.449824][T12576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.468119][T10739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 748.403899][T10739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 748.595032][T10739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 748.604016][T10739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 749.905811][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 751.275767][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 751.314444][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 751.505974][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 751.529023][T12576] device veth0_vlan entered promiscuous mode [ 751.533780][T12470] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 752.028986][ T4364] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 752.071578][T12576] device veth1_vlan entered promiscuous mode [ 752.279012][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 752.479039][ T4364] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 752.481243][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 752.497439][ T4364] usb 5-1: config 0 has no interface number 0 [ 752.526167][ T4364] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 752.593157][ T4364] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 752.645398][ T4364] usb 5-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 752.657685][ T4364] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 752.671167][ T4364] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 752.680424][ T4364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.681117][T12576] device veth0_macvtap entered promiscuous mode [ 752.690204][ T4364] usb 5-1: config 0 descriptor?? [ 752.708633][T12470] usb 4-1: Using ep0 maxpacket: 8 [ 752.964055][T12891] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 752.964708][T12470] usb 4-1: device descriptor read/all, error -71 [ 753.165785][T12891] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 753.183659][T12576] device veth1_macvtap entered promiscuous mode [ 753.237436][ T4364] ldusb 5-1:0.55: Interrupt in endpoint not found [ 753.358641][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2737'. [ 753.375868][T12909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2737'. [ 753.384972][T12909] bond0: option ad_select: unable to set because the bond device is up [ 753.485041][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.496154][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.506221][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.616136][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.807137][ T3532] usb 5-1: USB disconnect, device number 23 [ 753.824815][T12576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.889257][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.028832][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.075404][T12576] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.088067][T12576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.105371][T12576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.113914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 754.123200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 754.151121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 754.170053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 754.275036][T12576] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.288608][T12576] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.308495][T12576] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.317249][T12576] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.665474][ T4607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.702684][ T4607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.216773][ T4280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.260862][ T4280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.669814][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 756.942194][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 759.271627][T12961] input: syz0 as /devices/virtual/input/input26 [ 759.280251][T12961] input: failed to attach handler leds to device input26, error: -6 [ 759.747793][T12961] ceph: No mds server is up or the cluster is laggy [ 759.943494][T12969] overlayfs: failed to clone upperpath [ 760.237045][T12986] netlink: 'syz.2.2759': attribute type 7 has an invalid length. [ 761.525295][T13004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.534303][T13004] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 761.548511][T13004] bond0: (slave sit0): Error -95 calling set_mac_address [ 763.505934][ T21] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 764.009071][ T21] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 764.092251][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.125054][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.146079][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 764.453018][ T21] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 764.463312][ T21] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 764.472289][ T21] usb 4-1: Manufacturer: syz [ 764.482021][ T21] usb 4-1: config 0 descriptor?? [ 764.772625][T13056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2778'. [ 765.068752][T13056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2778'. [ 765.110160][ T21] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 765.118339][ T21] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 765.176734][ T21] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 765.499536][T13088] device veth1_macvtap left promiscuous mode [ 766.047992][T13088] device veth1_macvtap entered promiscuous mode [ 766.164518][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 768.571406][ T4248] usb 4-1: USB disconnect, device number 27 [ 769.258586][T13162] bridge0: port 3(erspan0) entered blocking state [ 769.273704][T13162] bridge0: port 3(erspan0) entered disabled state [ 769.300536][T13162] device erspan0 entered promiscuous mode [ 769.328341][T13162] bridge0: port 3(erspan0) entered blocking state [ 769.335511][T13162] bridge0: port 3(erspan0) entered forwarding state [ 771.135789][ T4248] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 772.826681][T13193] 9pnet: p9_fd_create_tcp (13193): problem connecting socket to 127.0.0.1 [ 776.109395][T13247] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 777.178548][ T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 777.418554][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 777.698733][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 777.714224][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.148403][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 882.155400][ C0] rcu: 1-...!: (0 ticks this GP) idle=ef3/1/0x4000000000000000 softirq=36744/36744 fqs=0 [ 882.167036][ C0] (detected by 0, t=10502 jiffies, g=47525, q=226) [ 882.173639][ C0] Sending NMI from CPU 0 to CPUs 1: [ 882.178861][ C1] NMI backtrace for cpu 1 [ 882.178877][ C1] CPU: 1 PID: 13224 Comm: syz.2.2819 Not tainted 5.15.173-syzkaller #0 [ 882.178893][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 882.178908][ C1] RIP: 0010:__kasan_check_read+0x6/0x10 [ 882.178932][ C1] Code: 41 5e 41 5f 5d c3 48 c7 c7 57 e0 3c 8c eb 0a 48 c7 c7 8f e0 3c 8c 4c 89 fe e8 66 25 73 08 31 db eb d7 cc cc 89 f6 48 8b 0c 24 <31> d2 e9 63 ef ff ff 0f 1f 00 89 f6 48 8b 0c 24 ba 01 00 00 00 e9 [ 882.178944][ C1] RSP: 0018:ffffc90000dd0a10 EFLAGS: 00000006 [ 882.178957][ C1] RAX: 0000000000000024 RBX: 0000000000000910 RCX: ffffffff81632d68 [ 882.178968][ C1] RDX: 0000000000000008 RSI: 0000000000000008 RDI: ffffffff90988220 [ 882.178977][ C1] RBP: 0000000000000008 R08: dffffc0000000000 R09: fffffbfff2131045 [ 882.178988][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 882.178997][ C1] R13: dffffc0000000000 R14: 0000000000000100 R15: ffff88802a57c670 [ 882.179008][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 882.179020][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 882.179031][ C1] CR2: 000055555f4bd808 CR3: 00000000641bc000 CR4: 00000000003526e0 [ 882.179044][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 882.179052][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 882.179061][ C1] Call Trace: [ 882.179068][ C1] [ 882.179075][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 882.179091][ C1] ? read_lock_is_recursive+0x10/0x10 [ 882.179107][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 882.179127][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 882.179143][ C1] ? nmi_handle+0xf7/0x370 [ 882.179159][ C1] ? __kasan_check_read+0x6/0x10 [ 882.179172][ C1] ? default_do_nmi+0x62/0x150 [ 882.179188][ C1] ? exc_nmi+0xa8/0x100 [ 882.179201][ C1] ? end_repeat_nmi+0x16/0x31 [ 882.179219][ C1] ? mark_lock+0x98/0x340 [ 882.179233][ C1] ? __kasan_check_read+0x6/0x10 [ 882.179247][ C1] ? __kasan_check_read+0x6/0x10 [ 882.179261][ C1] ? __kasan_check_read+0x6/0x10 [ 882.179275][ C1] [ 882.179279][ C1] [ 882.179283][ C1] mark_lock+0x98/0x340 [ 882.179298][ C1] __lock_acquire+0xc97/0x1ff0 [ 882.179316][ C1] lock_acquire+0x1db/0x4f0 [ 882.179329][ C1] ? advance_sched+0x47/0x940 [ 882.179347][ C1] ? read_lock_is_recursive+0x10/0x10 [ 882.179360][ C1] ? read_lock_is_recursive+0x10/0x10 [ 882.179374][ C1] ? __hrtimer_run_queues+0x48c/0xcf0 [ 882.179388][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 882.179403][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 882.179418][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 882.179434][ C1] _raw_spin_lock+0x2a/0x40 [ 882.179448][ C1] ? advance_sched+0x47/0x940 [ 882.179461][ C1] advance_sched+0x47/0x940 [ 882.179475][ C1] ? _raw_spin_unlock+0x40/0x40 [ 882.179492][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 882.179506][ C1] __hrtimer_run_queues+0x598/0xcf0 [ 882.179526][ C1] ? hrtimer_interrupt+0x980/0x980 [ 882.179539][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 882.179557][ C1] hrtimer_interrupt+0x392/0x980 [ 882.179578][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 882.179598][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 882.179614][ C1] [ 882.179618][ C1] [ 882.179622][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 882.179640][ C1] RIP: 0010:stack_trace_consume_entry+0xed/0x270 [ 882.179657][ C1] Code: 00 00 00 00 00 fc ff df 48 8b 1b 45 8d 70 01 41 0f b6 04 17 84 c0 0f 85 2d 01 00 00 45 89 31 4a 8d 1c c3 48 89 d8 48 c1 e8 03 <80> 3c 10 00 74 1a 4d 89 cf 48 89 df 49 89 d6 49 89 f5 e8 dc 41 5c [ 882.179668][ C1] RSP: 0018:ffffc900033cecf0 EFLAGS: 00000a02 [ 882.179681][ C1] RAX: 1ffff92000679de9 RBX: ffffc900033cef48 RCX: 0000000080000000 [ 882.179691][ C1] RDX: dffffc0000000000 RSI: ffffffff81dba718 RDI: ffffc900033cee2c [ 882.179702][ C1] RBP: ffffc900033cee28 R08: 0000000000000009 R09: ffffc900033cee30 [ 882.179711][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000679dc5 [ 882.179721][ C1] R13: 1ffff92000679dc5 R14: 000000000000000a R15: 1ffff92000679dc6 [ 882.179735][ C1] ? dput+0xd8/0x1a0 [ 882.179753][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 882.179767][ C1] arch_stack_walk+0x101/0x140 [ 882.179785][ C1] ? dput+0xd8/0x1a0 [ 882.179800][ C1] stack_trace_save+0x113/0x1c0 [ 882.179815][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 882.179834][ C1] save_stack+0xf6/0x1e0 [ 882.179849][ C1] ? __reset_page_owner+0x180/0x180 [ 882.179862][ C1] ? free_unref_page_prepare+0xc34/0xcf0 [ 882.179877][ C1] ? free_unref_page_list+0x1f7/0x8e0 [ 882.179889][ C1] ? release_pages+0x1bb9/0x1f40 [ 882.179911][ C1] ? __pagevec_release+0x80/0xf0 [ 882.179925][ C1] ? shmem_undo_range+0x67a/0x1b50 [ 882.179938][ C1] ? shmem_evict_inode+0x21b/0xa00 [ 882.179952][ C1] ? evict+0x529/0x930 [ 882.179965][ C1] ? __dentry_kill+0x436/0x650 [ 882.179979][ C1] ? dentry_kill+0xbb/0x290 [ 882.179996][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 882.180010][ C1] ? sched_clock_cpu+0x15/0x3b0 [ 882.180028][ C1] __reset_page_owner+0x52/0x180 [ 882.180043][ C1] free_unref_page_prepare+0xc34/0xcf0 [ 882.180061][ C1] free_unref_page_list+0x1f7/0x8e0 [ 882.180077][ C1] ? free_unref_page_commit+0x500/0x500 [ 882.180090][ C1] ? __mem_cgroup_uncharge_list+0xf8/0x150 [ 882.180107][ C1] ? uncharge_batch+0x490/0x490 [ 882.180123][ C1] ? _raw_spin_unlock+0x40/0x40 [ 882.180139][ C1] ? __mod_zone_page_state+0x8a/0xc0 [ 882.180156][ C1] release_pages+0x1bb9/0x1f40 [ 882.180175][ C1] ? lru_cache_disable+0x30/0x30 [ 882.180190][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 882.180204][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 882.180221][ C1] __pagevec_release+0x80/0xf0 [ 882.180237][ C1] shmem_undo_range+0x67a/0x1b50 [ 882.180256][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 882.180279][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 882.180291][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 882.180309][ C1] shmem_evict_inode+0x21b/0xa00 [ 882.180325][ C1] ? _raw_spin_unlock+0x24/0x40 [ 882.180339][ C1] ? inode_wait_for_writeback+0x21f/0x280 [ 882.180354][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 882.180370][ C1] ? bit_waitqueue+0x30/0x30 [ 882.180383][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 882.180398][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 882.180413][ C1] evict+0x529/0x930 [ 882.180427][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 882.180442][ C1] ? mode_strip_sgid+0x210/0x210 [ 882.180458][ C1] ? _raw_spin_unlock+0x24/0x40 [ 882.180475][ C1] __dentry_kill+0x436/0x650 [ 882.180492][ C1] dentry_kill+0xbb/0x290 [ 882.180508][ C1] dput+0xd8/0x1a0 [ 882.180522][ C1] __fput+0x636/0x8e0 [ 882.180542][ C1] task_work_run+0x129/0x1a0 [ 882.180560][ C1] do_exit+0x6a3/0x2480 [ 882.180580][ C1] ? put_task_struct+0x80/0x80 [ 882.180596][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 882.180615][ C1] do_group_exit+0x144/0x310 [ 882.180630][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 882.180645][ C1] get_signal+0xc66/0x14e0 [ 882.180665][ C1] arch_do_signal_or_restart+0xc3/0x1890 [ 882.180686][ C1] ? __sys_recvmmsg+0x270/0x270 [ 882.180705][ C1] ? get_sigframe_size+0x10/0x10 [ 882.180720][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 882.180732][ C1] ? fd_install+0x2b1/0x4c0 [ 882.180751][ C1] ? __x64_sys_recvmmsg+0x195/0x240 [ 882.180766][ C1] ? exit_to_user_mode_loop+0x39/0x130 [ 882.180781][ C1] exit_to_user_mode_loop+0x97/0x130 [ 882.180796][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 882.180810][ C1] syscall_exit_to_user_mode+0x5d/0x240 [ 882.180827][ C1] do_syscall_64+0x47/0xb0 [ 882.180839][ C1] ? clear_bhb_loop+0x15/0x70 [ 882.180855][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 882.180871][ C1] RIP: 0033:0x7fe9c994eed9 [ 882.180883][ C1] Code: Unable to access opcode bytes at RIP 0x7fe9c994eeaf. [ 882.180890][ C1] RSP: 002b:00007fe9c77a4058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 882.180910][ C1] RAX: 0000000000010106 RBX: 00007fe9c9b15080 RCX: 00007fe9c994eed9 [ 882.180920][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 882.180930][ C1] RBP: 00007fe9c99c2cc8 R08: 0000000000000000 R09: 0000000000000000 [ 882.180938][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 882.180947][ C1] R13: 0000000000000000 R14: 00007fe9c9b15080 R15: 00007ffd41c3dce8 [ 882.180962][ C1] [ 882.181854][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g47525 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 883.005661][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=40621 [ 883.013545][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g47525 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 883.024907][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 883.034869][ C0] rcu: RCU grace-period kthread stack dump: [ 883.040748][ C0] task:rcu_preempt state:I stack:27064 pid: 15 ppid: 2 flags:0x00004000 [ 883.049964][ C0] Call Trace: [ 883.053240][ C0] [ 883.056170][ C0] __schedule+0x12c4/0x45b0 [ 883.060673][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 883.066575][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 883.072494][ C0] ? __mod_timer+0xa8e/0xeb0 [ 883.077103][ C0] ? release_firmware_map_entry+0x190/0x190 [ 883.083000][ C0] ? mod_timer_pending+0x20/0x20 [ 883.087936][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 883.093312][ C0] schedule+0x11b/0x1f0 [ 883.097466][ C0] schedule_timeout+0x1b9/0x300 [ 883.102317][ C0] ? console_conditional_schedule+0x40/0x40 [ 883.108212][ C0] ? update_process_times+0x200/0x200 [ 883.113628][ C0] ? prepare_to_swait_event+0x321/0x340 [ 883.119350][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 883.124388][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 883.129624][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 883.134938][ C0] ? rcu_gp_init+0xdae/0x1140 [ 883.139618][ C0] ? rcu_gp_init+0x1140/0x1140 [ 883.144385][ C0] ? finish_swait+0xc5/0x1d0 [ 883.149062][ C0] rcu_gp_kthread+0xa4/0x360 [ 883.153659][ C0] ? _raw_spin_unlock+0x40/0x40 [ 883.158507][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 883.163618][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 883.169509][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 883.174534][ C0] kthread+0x3f6/0x4f0 [ 883.178600][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 883.183708][ C0] ? kthread_blkcg+0xd0/0xd0 [ 883.188300][ C0] ret_from_fork+0x1f/0x30 [ 883.192788][ C0] [ 883.195811][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 883.202120][ C0] Sending NMI from CPU 0 to CPUs 1: [ 883.207415][ C1] NMI backtrace for cpu 1 [ 883.207425][ C1] CPU: 1 PID: 13224 Comm: syz.2.2819 Not tainted 5.15.173-syzkaller #0 [ 883.207439][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 883.207448][ C1] RIP: 0010:kasan_check_range+0x1ac/0x290 [ 883.207466][ C1] Code: 4c 89 d5 48 8d 5d 07 48 85 ed 48 0f 49 dd 48 83 e3 f8 48 29 dd 74 12 41 80 39 00 0f 85 a2 00 00 00 49 ff c1 48 ff cd 75 ee 5b <41> 5e 41 5f 5d c3 45 84 f6 75 61 41 f7 c6 00 ff 00 00 75 5d 41 f7 [ 883.207478][ C1] RSP: 0018:ffffc90000dd0b40 EFLAGS: 00000056 [ 883.207491][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8162bd7c [ 883.207501][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e0a58a8 [ 883.207510][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff1c14b16 [ 883.207526][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920001ba174 [ 883.207536][ C1] R13: dffffc0000000000 R14: fffffbfff1c14b16 R15: dffffc0000000000 [ 883.207547][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 883.207560][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 883.207570][ C1] CR2: 000055555f4bd808 CR3: 00000000641bc000 CR4: 00000000003526e0 [ 883.207583][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 883.207592][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 883.207601][ C1] Call Trace: [ 883.207607][ C1] [ 883.207613][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 883.207629][ C1] ? read_lock_is_recursive+0x10/0x10 [ 883.207645][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 883.207660][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 883.207681][ C1] ? __kasan_check_read+0x6/0x10 [ 883.207695][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 883.207710][ C1] ? nmi_handle+0xf7/0x370 [ 883.207725][ C1] ? kasan_check_range+0x1ac/0x290 [ 883.207738][ C1] ? __kasan_check_read+0x6/0x10 [ 883.207751][ C1] ? default_do_nmi+0x62/0x150 [ 883.207767][ C1] ? exc_nmi+0xa8/0x100 [ 883.207780][ C1] ? end_repeat_nmi+0x16/0x31 [ 883.207800][ C1] ? lock_acquire+0xcc/0x4f0 [ 883.207813][ C1] ? kasan_check_range+0x1ac/0x290 [ 883.207827][ C1] ? kasan_check_range+0x1ac/0x290 [ 883.207842][ C1] ? kasan_check_range+0x1ac/0x290 [ 883.207855][ C1] [ 883.207859][ C1] [ 883.207865][ C1] lock_acquire+0xcc/0x4f0 [ 883.207880][ C1] ? read_lock_is_recursive+0x10/0x10 [ 883.207894][ C1] ? rcu_lock_release+0x5/0x20 [ 883.207909][ C1] ? __netif_schedule+0xc0/0x310 [ 883.207924][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 883.207941][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 883.207959][ C1] _raw_spin_lock_irq+0xcf/0x110 [ 883.207974][ C1] ? __hrtimer_run_queues+0x662/0xcf0 [ 883.207988][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 883.208008][ C1] __hrtimer_run_queues+0x662/0xcf0 [ 883.208031][ C1] ? hrtimer_interrupt+0x980/0x980 [ 883.208043][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 883.208063][ C1] hrtimer_interrupt+0x392/0x980 [ 883.208087][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 883.208107][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 883.208123][ C1] [ 883.208127][ C1] [ 883.208132][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 883.208149][ C1] RIP: 0010:stack_trace_consume_entry+0xed/0x270 [ 883.208165][ C1] Code: 00 00 00 00 00 fc ff df 48 8b 1b 45 8d 70 01 41 0f b6 04 17 84 c0 0f 85 2d 01 00 00 45 89 31 4a 8d 1c c3 48 89 d8 48 c1 e8 03 <80> 3c 10 00 74 1a 4d 89 cf 48 89 df 49 89 d6 49 89 f5 e8 dc 41 5c [ 883.208177][ C1] RSP: 0018:ffffc900033cecf0 EFLAGS: 00000a02 [ 883.208189][ C1] RAX: 1ffff92000679de9 RBX: ffffc900033cef48 RCX: 0000000080000000 [ 883.208199][ C1] RDX: dffffc0000000000 RSI: ffffffff81dba718 RDI: ffffc900033cee2c [ 883.208210][ C1] RBP: ffffc900033cee28 R08: 0000000000000009 R09: ffffc900033cee30 [ 883.208220][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000679dc5 [ 883.208230][ C1] R13: 1ffff92000679dc5 R14: 000000000000000a R15: 1ffff92000679dc6 [ 883.208244][ C1] ? dput+0xd8/0x1a0 [ 883.208264][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 883.208279][ C1] arch_stack_walk+0x101/0x140 [ 883.208297][ C1] ? dput+0xd8/0x1a0 [ 883.208313][ C1] stack_trace_save+0x113/0x1c0 [ 883.208329][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 883.208349][ C1] save_stack+0xf6/0x1e0 [ 883.208365][ C1] ? __reset_page_owner+0x180/0x180 [ 883.208378][ C1] ? free_unref_page_prepare+0xc34/0xcf0 [ 883.208392][ C1] ? free_unref_page_list+0x1f7/0x8e0 [ 883.208405][ C1] ? release_pages+0x1bb9/0x1f40 [ 883.208421][ C1] ? __pagevec_release+0x80/0xf0 [ 883.208434][ C1] ? shmem_undo_range+0x67a/0x1b50 [ 883.208448][ C1] ? shmem_evict_inode+0x21b/0xa00 [ 883.208462][ C1] ? evict+0x529/0x930 [ 883.208474][ C1] ? __dentry_kill+0x436/0x650 [ 883.208488][ C1] ? dentry_kill+0xbb/0x290 [ 883.208505][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 883.208525][ C1] ? sched_clock_cpu+0x15/0x3b0 [ 883.208544][ C1] __reset_page_owner+0x52/0x180 [ 883.208560][ C1] free_unref_page_prepare+0xc34/0xcf0 [ 883.208578][ C1] free_unref_page_list+0x1f7/0x8e0 [ 883.208595][ C1] ? free_unref_page_commit+0x500/0x500 [ 883.208608][ C1] ? __mem_cgroup_uncharge_list+0xf8/0x150 [ 883.208624][ C1] ? uncharge_batch+0x490/0x490 [ 883.208640][ C1] ? _raw_spin_unlock+0x40/0x40 [ 883.208657][ C1] ? __mod_zone_page_state+0x8a/0xc0 [ 883.208674][ C1] release_pages+0x1bb9/0x1f40 [ 883.208695][ C1] ? lru_cache_disable+0x30/0x30 [ 883.208711][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 883.208725][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 883.208743][ C1] __pagevec_release+0x80/0xf0 [ 883.208759][ C1] shmem_undo_range+0x67a/0x1b50 [ 883.208780][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 883.208806][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 883.208819][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 883.208839][ C1] shmem_evict_inode+0x21b/0xa00 [ 883.208855][ C1] ? _raw_spin_unlock+0x24/0x40 [ 883.208868][ C1] ? inode_wait_for_writeback+0x21f/0x280 [ 883.208886][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 883.208902][ C1] ? bit_waitqueue+0x30/0x30 [ 883.208915][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 883.208931][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 883.208947][ C1] evict+0x529/0x930 [ 883.208960][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 883.208977][ C1] ? mode_strip_sgid+0x210/0x210 [ 883.208994][ C1] ? _raw_spin_unlock+0x24/0x40 [ 883.209012][ C1] __dentry_kill+0x436/0x650 [ 883.209030][ C1] dentry_kill+0xbb/0x290 [ 883.209046][ C1] dput+0xd8/0x1a0 [ 883.209060][ C1] __fput+0x636/0x8e0 [ 883.209083][ C1] task_work_run+0x129/0x1a0 [ 883.209101][ C1] do_exit+0x6a3/0x2480 [ 883.209122][ C1] ? put_task_struct+0x80/0x80 [ 883.209138][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 883.209159][ C1] do_group_exit+0x144/0x310 [ 883.209175][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 883.209191][ C1] get_signal+0xc66/0x14e0 [ 883.209212][ C1] arch_do_signal_or_restart+0xc3/0x1890 [ 883.209234][ C1] ? __sys_recvmmsg+0x270/0x270 [ 883.209253][ C1] ? get_sigframe_size+0x10/0x10 [ 883.209269][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 883.209281][ C1] ? fd_install+0x2b1/0x4c0 [ 883.209301][ C1] ? __x64_sys_recvmmsg+0x195/0x240 [ 883.209317][ C1] ? exit_to_user_mode_loop+0x39/0x130 [ 883.209332][ C1] exit_to_user_mode_loop+0x97/0x130 [ 883.209346][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 883.209361][ C1] syscall_exit_to_user_mode+0x5d/0x240 [ 883.209377][ C1] do_syscall_64+0x47/0xb0 [ 883.209390][ C1] ? clear_bhb_loop+0x15/0x70 [ 883.209406][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 883.209422][ C1] RIP: 0033:0x7fe9c994eed9 [ 883.209433][ C1] Code: Unable to access opcode bytes at RIP 0x7fe9c994eeaf. [ 883.209440][ C1] RSP: 002b:00007fe9c77a4058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 883.209454][ C1] RAX: 0000000000010106 RBX: 00007fe9c9b15080 RCX: 00007fe9c994eed9 [ 883.209463][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 883.209472][ C1] RBP: 00007fe9c99c2cc8 R08: 0000000000000000 R09: 0000000000000000 [ 883.209481][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 883.209490][ C1] R13: 0000000000000000 R14: 00007fe9c9b15080 R15: 00007ffd41c3dce8 [ 883.209506][ C1]