last executing test programs: 26m26.359196761s ago: executing program 0 (id=6786): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000005c0)=@abs, 0x6e) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x1}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) 26m26.130577212s ago: executing program 0 (id=6791): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x3c}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x40}}], 0x2, 0x4001c00) 26m25.990809086s ago: executing program 0 (id=6794): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/raw6\x00') read$usbmon(r0, &(0x7f00000005c0)=""/225, 0xe1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000"], 0x48) 26m25.866857032s ago: executing program 0 (id=6797): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 26m25.217859308s ago: executing program 0 (id=6808): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) 26m24.974816258s ago: executing program 0 (id=6813): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r0, 0x89f0, &(0x7f0000000040)={0x40, 0x4, 0x1, 0x0, 0xd, "884039cd7300", 0x0, 0x6}) 26m9.892050899s ago: executing program 32 (id=6813): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r0, 0x89f0, &(0x7f0000000040)={0x40, 0x4, 0x1, 0x0, 0xd, "884039cd7300", 0x0, 0x6}) 9.658494976s ago: executing program 3 (id=28189): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000018000000324900008200000001"], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/4\x00') read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) 8.870215239s ago: executing program 3 (id=28199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="fa82", 0xfdef}], 0x1}, 0x20000000) 7.957681811s ago: executing program 3 (id=28205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x20, 0x15, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040810}, 0x24040808) 6.599243592s ago: executing program 3 (id=28220): r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) msgrcv(r0, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="fdd825000000625d"], 0x8, 0x8fa2496c381b7ad5) 4.461342838s ago: executing program 3 (id=28245): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x189}}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x20044002) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)="13", 0x1, 0x3ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 3.345251883s ago: executing program 2 (id=28256): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) 3.194009376s ago: executing program 5 (id=28259): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0x6, 0x1, 0x0, [{@broadcast, 0xffffaa7e}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.66750269s ago: executing program 4 (id=28263): gettid() timer_create(0xb, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) 2.45224987s ago: executing program 4 (id=28265): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)={0x50, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x50}}, 0x0) 2.1953661s ago: executing program 2 (id=28267): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x9, 0x4, 0x3d, 0x9, 0x1}) 2.050969853s ago: executing program 1 (id=28268): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x5, r1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) 2.050765266s ago: executing program 4 (id=28269): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.782095887s ago: executing program 2 (id=28270): setreuid(0xee01, 0xee00) sendmsg(0xffffffffffffffff, 0x0, 0x4) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000007a80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18010000000000002900000036"], 0x338}}], 0x1, 0x20000000) 1.772929413s ago: executing program 5 (id=28271): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000640), 0x0) 1.75558834s ago: executing program 1 (id=28272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a210200000000000000000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e5414000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 1.580688723s ago: executing program 2 (id=28273): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x1a) 1.437955585s ago: executing program 5 (id=28274): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000600) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) 1.437745285s ago: executing program 1 (id=28275): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) shutdown(r0, 0x1) write(r0, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) 1.246130601s ago: executing program 2 (id=28276): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000140)={@my=0x1, 0x800}) 1.238020496s ago: executing program 3 (id=28277): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0xd993, 0x10000, 0x2, 0x800264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 1.156481493s ago: executing program 5 (id=28278): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x239, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1ef) 1.052052955s ago: executing program 1 (id=28279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000240)) 944.677019ms ago: executing program 2 (id=28280): r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x400000, 0x40, 0x29}, &(0x7f0000000100)='./file0\x00', 0x30, 0x0, 0x12345}) io_uring_enter(r0, 0x47ba, 0xda2a, 0x62, 0x0, 0x0) 775.458305ms ago: executing program 4 (id=28281): syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) 775.356755ms ago: executing program 1 (id=28282): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180005"], 0x4c}}, 0x0) 640.102849ms ago: executing program 5 (id=28283): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 568.788156ms ago: executing program 1 (id=28284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x80}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4000804) 316.706914ms ago: executing program 4 (id=28285): r0 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000280)={0x1d, r2}, 0x10) 23.792125ms ago: executing program 4 (id=28286): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f00000001c0)="61df712bc884fe68a02780b605a7", 0x0, 0x77ff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=28287): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xffffffb6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x810) kernel console output (not intermixed with test programs): 94967295 subj=_ pid=11874 comm="syz.3.18254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 981.813359][ T5891] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 981.976028][ T5890] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 982.002102][ T5983] usb 6-1: USB disconnect, device number 51 [ 982.130201][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 982.130240][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 982.130271][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 982.133544][ T5890] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 982.133578][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.133607][ T5890] usb 3-1: Product: syz [ 982.133623][ T5890] usb 3-1: Manufacturer: syz [ 982.133639][ T5890] usb 3-1: SerialNumber: syz [ 982.152649][ T5890] usb 3-1: config 0 descriptor?? [ 982.862829][T11925] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.18279'. [ 982.884189][T11925] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.18279'. [ 982.884216][T11925] netlink: 204 bytes leftover after parsing attributes in process `syz.5.18279'. [ 985.885868][T10782] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 986.036655][T10782] usb 4-1: Using ep0 maxpacket: 16 [ 986.041470][T10782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.041505][T10782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.041548][T10782] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 986.041574][T10782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.091818][T10782] usb 4-1: config 0 descriptor?? [ 986.571522][T10782] macally 0003:060B:0001.0043: unknown main item tag 0x0 [ 986.571563][T10782] macally 0003:060B:0001.0043: unknown main item tag 0x0 [ 986.571594][T10782] macally 0003:060B:0001.0043: unknown main item tag 0x0 [ 986.571624][T10782] macally 0003:060B:0001.0043: unknown main item tag 0x0 [ 986.571654][T10782] macally 0003:060B:0001.0043: unknown main item tag 0x0 [ 986.571683][T10782] macally 0003:060B:0001.0043: unknown main item tag 0x0 [ 986.571714][T10782] macally 0003:060B:0001.0043: unknown main item tag 0x0 [ 986.571744][T10782] macally 0003:060B:0001.0043: unknown main item tag 0x0 [ 986.571773][T10782] macally 0003:060B:0001.0043: unknown main item tag 0x0 [ 986.571802][T10782] macally 0003:060B:0001.0043: unknown main item tag 0x0 [ 986.675685][T10782] macally 0003:060B:0001.0043: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.3-1/input0 [ 986.720707][T10782] usb 4-1: USB disconnect, device number 68 [ 988.715889][ T9784] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 988.875992][ T9784] usb 4-1: Using ep0 maxpacket: 8 [ 988.878646][ T9784] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 988.878711][ T9784] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 988.878737][ T9784] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 988.878763][ T9784] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 988.878790][ T9784] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 988.878843][ T9784] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 988.878869][ T9784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.198526][ T9784] usb 4-1: usb_control_msg returned -32 [ 989.198570][ T9784] usbtmc 4-1:16.0: can't read capabilities [ 990.235783][ T452] nci: nci_rx_work: unknown MT 0x1 [ 990.740501][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 991.074546][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.167283][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.489042][ T9784] usb 4-1: USB disconnect, device number 69 [ 992.666768][ T5890] iguanair 3-1:0.0: failed to get version [ 992.667252][ T5890] iguanair 3-1:0.0: probe with driver iguanair failed with error -110 [ 992.688352][ T5890] usb 3-1: USB disconnect, device number 90 [ 995.734106][T12335] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 998.424679][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.797447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 999.560704][T12442] input: syz0 as /devices/virtual/input/input74 [ 1000.526073][T10782] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1000.675941][T10782] usb 4-1: Using ep0 maxpacket: 16 [ 1000.693770][T10782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.693837][T10782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1000.693867][T10782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1000.693891][T10782] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1000.693916][T10782] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.698652][T10782] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1000.698684][T10782] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1000.698707][T10782] usb 4-1: Manufacturer: syz [ 1000.777915][T10782] usb 4-1: config 0 descriptor?? [ 1001.176862][T12496] input: syz0 as /devices/virtual/input/input76 [ 1001.192475][T10782] rc_core: IR keymap rc-hauppauge not found [ 1001.192497][T10782] Registered IR keymap rc-empty [ 1001.192662][T10782] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1001.205893][T10782] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1001.227504][T10782] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1001.230779][T10782] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input75 [ 1001.276145][T10782] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1001.296200][T10782] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1001.316149][T10782] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1001.336034][T10782] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1001.355977][T10782] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1001.376114][T10782] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1001.396696][T10782] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1001.416015][T10782] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1001.436002][T10782] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1001.456051][T10782] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1001.481094][T10782] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1001.481189][T10782] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1001.561635][ T5890] usb 4-1: USB disconnect, device number 70 [ 1002.325962][T10782] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1002.518048][T10782] usb 6-1: Using ep0 maxpacket: 32 [ 1002.520974][T10782] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1002.521002][T10782] usb 6-1: config 0 has no interface number 0 [ 1002.524279][T10782] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1002.524309][T10782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.524331][T10782] usb 6-1: Product: syz [ 1002.524346][T10782] usb 6-1: Manufacturer: syz [ 1002.524362][T10782] usb 6-1: SerialNumber: syz [ 1002.614542][T10782] usb 6-1: config 0 descriptor?? [ 1002.620861][T10782] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1002.884862][T10782] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1002.935619][T10782] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1003.295980][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1003.296726][T10782] usb 6-1: USB disconnect, device number 52 [ 1003.322480][T10782] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1003.346357][T10782] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1003.348357][T10782] quatech2 6-1:0.51: device disconnected [ 1005.762165][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18629'. [ 1006.254365][T12682] pimreg: entered allmulticast mode [ 1006.276205][T12682] pimreg: left allmulticast mode [ 1007.249156][T12720] team0: Device gtp1 is of different type [ 1009.197153][ T5891] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1009.348735][ T5891] usb 4-1: Using ep0 maxpacket: 8 [ 1009.354296][ T5891] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1009.354329][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.354352][ T5891] usb 4-1: Product: syz [ 1009.354368][ T5891] usb 4-1: Manufacturer: syz [ 1009.354385][ T5891] usb 4-1: SerialNumber: syz [ 1009.399092][ T5891] usb 4-1: config 0 descriptor?? [ 1009.623479][ T5891] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1009.992689][T12824] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1010.087294][T12824] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1010.632390][ T5891] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1010.656747][ T5891] usb 4-1: USB disconnect, device number 71 [ 1011.375914][ T7294] Bluetooth: hci3: command 0x0406 tx timeout [ 1011.536013][ T5982] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1011.690501][ T5982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.693608][ T5982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1011.693641][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.693664][ T5982] usb 4-1: Product: syz [ 1011.693681][ T5982] usb 4-1: Manufacturer: syz [ 1011.693697][ T5982] usb 4-1: SerialNumber: syz [ 1012.241502][T12889] binder: 12887:12889 ioctl c0306201 2000000003c0 returned -14 [ 1012.794599][ T5982] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1012.794642][ T5982] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1012.794663][ T5982] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1012.998791][ T5982] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 1013.305973][ T5982] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1013.340390][ T5982] usb 4-1: USB disconnect, device number 72 [ 1013.342884][ T5982] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1016.615408][T13084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18827'. [ 1016.615441][T13084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18827'. [ 1018.785847][ T5891] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1018.940809][ T5891] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 1018.940839][ T5891] usb 3-1: config 7 has no interface number 0 [ 1018.944280][ T5891] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1018.944314][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.944338][ T5891] usb 3-1: Product: syz [ 1018.944354][ T5891] usb 3-1: Manufacturer: syz [ 1018.944370][ T5891] usb 3-1: SerialNumber: syz [ 1019.147472][ T991] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1019.180018][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1019.187785][T13208] sctp: [Deprecated]: syz.5.18884 (pid 13208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1019.187785][T13208] Use struct sctp_sack_info instead [ 1019.212116][ T5891] as10x_usb: device has been detected [ 1019.213123][ T5891] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1019.299467][ T5891] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1019.308620][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1019.308662][ T991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.310322][ T991] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1019.310355][ T991] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1019.310379][ T991] usb 4-1: Manufacturer: syz [ 1019.340951][ T991] usb 4-1: config 0 descriptor?? [ 1019.439588][ T5891] as10x_usb: error during firmware upload part1 [ 1019.450724][ T5891] Registered device Elgato EyeTV DTT Deluxe [ 1019.511696][ T5891] usb 3-1: USB disconnect, device number 91 [ 1019.681068][ T5891] Unregistered device Elgato EyeTV DTT Deluxe [ 1019.693776][ T5891] as10x_usb: device has been disconnected [ 1020.252542][ T991] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0044/input/input77 [ 1020.332834][ T991] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0044/input/input78 [ 1020.375614][ T991] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0044/input/input79 [ 1020.485507][ T991] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0044/input/input80 [ 1020.544928][ T991] uclogic 0003:256C:006D.0044: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 1020.567089][ T991] usb 4-1: USB disconnect, device number 73 [ 1020.816785][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.816814][ C0] bridge0: topology change detected, propagating [ 1022.305959][ T991] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1022.458624][ T991] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.458653][ T991] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1022.463252][ T991] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1022.463285][ T991] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.463307][ T991] usb 6-1: Product: syz [ 1022.463323][ T991] usb 6-1: Manufacturer: syz [ 1022.463339][ T991] usb 6-1: SerialNumber: syz [ 1022.710170][ T991] usb 6-1: 0:2 : does not exist [ 1022.715109][ T991] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1022.777786][ T991] usb 6-1: USB disconnect, device number 53 [ 1024.075857][ T991] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1024.225923][ T991] usb 3-1: Using ep0 maxpacket: 32 [ 1024.228302][ T991] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1024.228329][ T991] usb 3-1: config 0 has no interface number 0 [ 1024.231539][ T991] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1024.231569][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.231591][ T991] usb 3-1: Product: syz [ 1024.231609][ T991] usb 3-1: Manufacturer: syz [ 1024.231625][ T991] usb 3-1: SerialNumber: syz [ 1024.241856][ T991] usb 3-1: config 0 descriptor?? [ 1024.254343][ T991] smsc95xx v2.0.0 [ 1024.688219][ T991] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1024.688253][ T991] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1025.095120][ T991] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1025.095441][ T991] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1025.132357][ T991] usb 3-1: USB disconnect, device number 92 [ 1026.358359][ C0] vkms_vblank_simulate: vblank timer overrun [ 1027.196041][ T9784] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1027.351686][ T9784] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.351716][ T9784] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1027.351740][ T9784] usb 6-1: config 1 has no interface number 0 [ 1027.351814][ T9784] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.351845][ T9784] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1027.351867][ T9784] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 1027.351909][ T9784] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 1027.355283][ T9784] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1027.355317][ T9784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.355340][ T9784] usb 6-1: Product: syz [ 1027.355356][ T9784] usb 6-1: Manufacturer: syz [ 1027.355372][ T9784] usb 6-1: SerialNumber: syz [ 1027.717984][T13602] netlink: 96 bytes leftover after parsing attributes in process `syz.3.19075'. [ 1028.494536][ T9784] cdc_ncm 6-1:1.1: bind() failure [ 1028.698262][ T5891] usb 6-1: USB disconnect, device number 54 [ 1030.066846][T13711] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19126'. [ 1033.163719][T13832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.178130][T13832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.991343][T14050] input: syz1 as /devices/virtual/input/input81 [ 1039.596029][ T991] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1039.758471][ T991] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.758501][ T991] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1039.762362][ T991] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1039.762395][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.762417][ T991] usb 3-1: Product: syz [ 1039.762434][ T991] usb 3-1: Manufacturer: syz [ 1039.762451][ T991] usb 3-1: SerialNumber: syz [ 1040.051866][ T991] usb 3-1: 0:2 : does not exist [ 1040.068919][ T991] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1040.140531][ T991] usb 3-1: USB disconnect, device number 93 [ 1040.291273][T14144] netlink: 104 bytes leftover after parsing attributes in process `syz.3.19335'. [ 1041.065911][ T5983] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1041.221107][ T5983] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.221149][ T5983] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1041.221181][ T5983] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1041.221220][ T5983] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 1041.221247][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.237094][ T5983] usb 3-1: config 0 descriptor?? [ 1041.685203][ T5983] hid_parser_main: 1260 callbacks suppressed [ 1041.685243][ T5983] sunplus 0003:04FC:05D8.0045: unknown main item tag 0x0 [ 1041.685281][ T5983] sunplus 0003:04FC:05D8.0045: unknown main item tag 0x0 [ 1041.685311][ T5983] sunplus 0003:04FC:05D8.0045: unknown main item tag 0x0 [ 1041.685340][ T5983] sunplus 0003:04FC:05D8.0045: unknown main item tag 0x0 [ 1041.685369][ T5983] sunplus 0003:04FC:05D8.0045: unknown main item tag 0x0 [ 1041.690812][ T5983] sunplus 0003:04FC:05D8.0045: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.2-1/input0 [ 1041.815453][T14212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1041.874826][ T991] usb 3-1: USB disconnect, device number 94 [ 1042.458875][T14249] bridge0: port 4(syz_tun) entered blocking state [ 1042.459180][T14249] bridge0: port 4(syz_tun) entered disabled state [ 1042.459538][T14249] syz_tun: entered allmulticast mode [ 1042.487484][T14249] syz_tun: entered promiscuous mode [ 1042.489383][T14249] bridge0: port 4(syz_tun) entered blocking state [ 1042.489530][T14249] bridge0: port 4(syz_tun) entered forwarding state [ 1042.797399][ T991] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1042.960398][ T991] usb 3-1: Using ep0 maxpacket: 8 [ 1042.963165][ T991] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.963238][ T991] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1042.963266][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.973832][ T991] usb 3-1: config 0 descriptor?? [ 1043.025247][ T991] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1044.215763][ T991] gspca_vc032x: reg_w err -71 [ 1044.215873][ T991] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1044.230086][ T991] usb 3-1: USB disconnect, device number 95 [ 1045.888129][T14398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1047.028702][T14448] netlink: 128 bytes leftover after parsing attributes in process `syz.2.19481'. [ 1047.034705][T14448] netlink: 128 bytes leftover after parsing attributes in process `syz.2.19481'. [ 1047.971434][T14487] netlink: 'syz.2.19501': attribute type 1 has an invalid length. [ 1048.036625][T14487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1048.190534][T14489] bond3: (slave ip6gretap3): making interface the new active one [ 1048.197300][T14489] bond3: (slave ip6gretap3): Enslaving as an active interface with an up link [ 1048.946038][ T991] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1049.108446][ T991] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.108493][ T991] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1049.113117][ T991] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1049.113151][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.113174][ T991] usb 3-1: Product: syz [ 1049.113190][ T991] usb 3-1: Manufacturer: syz [ 1049.113206][ T991] usb 3-1: SerialNumber: syz [ 1049.122069][ T991] usb 3-1: config 0 descriptor?? [ 1049.162559][ T991] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1049.199679][ T991] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1049.200677][ T991] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1049.200752][ T991] usb 3-1: media controller created [ 1049.323454][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1049.466041][ T991] DVB: Unable to find symbol tda10046_attach() [ 1049.466059][ T991] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1049.466077][ T991] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1050.474540][ T991] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1050.484384][ T991] usb 3-1: USB disconnect, device number 96 [ 1052.233940][T14640] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1056.056112][T14816] serio: Serial port ttyS3 [ 1056.364077][ T38] audit: type=1326 audit(1311.935:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14830 comm="syz.2.19659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b376f749 code=0x7ffc0000 [ 1056.364141][ T38] audit: type=1326 audit(1311.935:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14830 comm="syz.2.19659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f48b376f749 code=0x7ffc0000 [ 1056.364190][ T38] audit: type=1326 audit(1311.935:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14830 comm="syz.2.19659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b376f749 code=0x7ffc0000 [ 1056.664672][T14841] netlink: 'syz.2.19663': attribute type 12 has an invalid length. [ 1056.664698][T14841] netlink: 'syz.2.19663': attribute type 29 has an invalid length. [ 1056.664715][T14841] netlink: 148 bytes leftover after parsing attributes in process `syz.2.19663'. [ 1056.664751][T14841] netlink: 'syz.2.19663': attribute type 2 has an invalid length. [ 1056.664766][T14841] netlink: 'syz.2.19663': attribute type 3 has an invalid length. [ 1056.664781][T14841] netlink: 15 bytes leftover after parsing attributes in process `syz.2.19663'. [ 1057.734444][T14886] input: syz1 as /devices/virtual/input/input82 [ 1058.788926][T14927] kvm: apic: phys broadcast and lowest prio [ 1059.469860][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19725'. [ 1059.469900][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19725'. [ 1059.868723][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.962737][ T991] kernel write not supported for file /media2 (pid: 991 comm: kworker/0:2) [ 1060.047659][T14999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1061.069104][T15055] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3944. macoff=96 [ 1062.602665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1062.602828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1062.602924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1062.603116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1062.603204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1062.603291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1062.603377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1063.542193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1064.201994][ T991] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1064.374303][ T991] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1064.374362][ T991] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1064.374388][ T991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.415937][ T991] usb 6-1: config 0 descriptor?? [ 1064.417547][T15143] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1064.862420][ T991] elan 0003:04F3:0755.0046: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1065.082306][T10782] usb 6-1: USB disconnect, device number 55 [ 1067.351151][ C1] Unknown status report in ack skb [ 1068.656862][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19879'. [ 1068.656907][T15310] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19879'. [ 1069.324011][ T38] audit: type=1326 audit(1324.891:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15332 comm="syz.5.19890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7fc00000 [ 1069.958432][ T38] audit: type=1326 audit(1325.532:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15332 comm="syz.5.19890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fac7f56f749 code=0x7fc00000 [ 1071.351656][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19932'. [ 1072.055704][T15454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19949'. [ 1073.091572][T15505] netlink: 'syz.5.19970': attribute type 4 has an invalid length. [ 1073.093782][T15505] netlink: 'syz.5.19970': attribute type 4 has an invalid length. [ 1075.355981][T15620] fuse: Bad value for 'fd' [ 1081.578029][T15893] loop9: detected capacity change from 0 to 7 [ 1081.581189][T15893] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 1081.581230][T15893] loop9: partition table partially beyond EOD, truncated [ 1081.581345][T15893] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 1082.564229][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20175'. [ 1082.845957][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20183'. [ 1082.845987][T15963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20183'. [ 1082.846017][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20183'. [ 1083.086012][T15963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20183'. [ 1083.086042][T15963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20183'. [ 1083.086071][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20183'. [ 1083.417275][T15991] overlayfs: failed to clone upperpath [ 1084.142686][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20216'. [ 1084.465488][T16047] veth1_to_bond: entered allmulticast mode [ 1084.467178][T16047] veth1_to_bond: entered promiscuous mode [ 1084.468474][T16046] veth1_to_bond: left promiscuous mode [ 1084.468699][T16046] veth1_to_bond: left allmulticast mode [ 1085.951443][T16114] netlink: 'syz.3.20258': attribute type 83 has an invalid length. [ 1086.230946][ T5983] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1086.380867][ T5983] usb 3-1: Using ep0 maxpacket: 8 [ 1086.383561][ T5983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.383620][ T5983] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1086.383647][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.433220][ T5983] usb 3-1: config 0 descriptor?? [ 1086.439247][ T5983] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1086.699298][T16146] 9pnet_fd: Insufficient options for proto=fd [ 1087.675452][ T5983] gspca_vc032x: reg_w err -71 [ 1087.675552][ T5983] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1087.740952][ T5983] usb 3-1: USB disconnect, device number 97 [ 1090.025535][T16273] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1090.069377][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20333'. [ 1090.076900][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20333'. [ 1090.349728][T16291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20341'. [ 1092.098032][ T5982] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1092.251239][ T5982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.251303][ T5982] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1092.251329][ T5982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.291416][ T5982] usb 6-1: config 0 descriptor?? [ 1092.308062][ T5982] pwc: Askey VC010 type 2 USB webcam detected. [ 1092.716590][ T5982] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1092.727743][ T5982] pwc: recv_control_msg error -32 req 02 val 2700 [ 1092.729648][ T5982] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1092.730399][ T5982] pwc: recv_control_msg error -32 req 04 val 1000 [ 1092.931794][ T5982] pwc: recv_control_msg error -71 req 04 val 1400 [ 1092.932326][ T5982] pwc: recv_control_msg error -71 req 02 val 2000 [ 1092.932828][ T5982] pwc: recv_control_msg error -71 req 02 val 2100 [ 1092.933320][ T5982] pwc: recv_control_msg error -71 req 04 val 1500 [ 1092.933805][ T5982] pwc: recv_control_msg error -71 req 02 val 2500 [ 1092.934276][ T5982] pwc: recv_control_msg error -71 req 02 val 2400 [ 1092.934752][ T5982] pwc: recv_control_msg error -71 req 02 val 2600 [ 1092.935235][ T5982] pwc: recv_control_msg error -71 req 02 val 2900 [ 1092.935718][ T5982] pwc: recv_control_msg error -71 req 02 val 2800 [ 1092.936416][ T5982] pwc: recv_control_msg error -71 req 04 val 1100 [ 1092.936888][ T5982] pwc: recv_control_msg error -71 req 04 val 1200 [ 1093.031680][ T5982] pwc: Registered as video103. [ 1093.034962][ T5982] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input83 [ 1093.052734][T16400] netlink: 'syz.3.20389': attribute type 6 has an invalid length. [ 1093.067054][ T5982] usb 6-1: USB disconnect, device number 56 [ 1093.366977][T16415] netlink: 27 bytes leftover after parsing attributes in process `syz.2.20398'. [ 1093.584964][T16428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1094.214952][T16461] evm: overlay not supported [ 1095.878075][ C0] vkms_vblank_simulate: vblank timer overrun [ 1096.462303][T16537] 9pnet_fd: p9_fd_create_tcp (16537): problem connecting socket to 127.0.0.1 [ 1097.194548][T16571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20474'. [ 1097.261933][T16571] veth1_macvtap: left promiscuous mode [ 1097.353846][ C0] vkms_vblank_simulate: vblank timer overrun [ 1100.212055][T16703] tipc: Enabled bearer , priority 7 [ 1101.327836][ T5983] tipc: Node number set to 4278190080 [ 1102.622198][T16830] overlayfs: failed to clone upperpath [ 1102.713450][ T7294] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1107.490297][ T5983] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1107.640303][ T5983] usb 6-1: Using ep0 maxpacket: 32 [ 1107.644702][ T5983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1107.644739][ T5983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1107.644794][ T5983] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1107.644819][ T5983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.652077][ T5983] usb 6-1: config 0 descriptor?? [ 1107.653664][T17019] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1107.657043][ T5983] hub 6-1:0.0: USB hub found [ 1107.894762][ T5983] hub 6-1:0.0: 1 port detected [ 1108.709151][ T5982] usb 6-1: reset high-speed USB device number 57 using dummy_hcd [ 1109.439096][ T9784] hid-generic 0000:0000:0000.0047: unknown main item tag 0x0 [ 1109.484236][ T5983] usb 6-1: USB disconnect, device number 57 [ 1109.500744][ T9784] hid-generic 0000:0000:0000.0047: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1110.907127][T17177] tipc: Failed to remove unknown binding: 66,1,1/4278190080:1380353637/1380353639 [ 1110.907174][T17177] tipc: Failed to remove unknown binding: 66,1,1/4278190080:1380353637/1380353639 [ 1111.298346][ T5983] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1111.451928][ T5983] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1111.451966][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 1111.455150][ T5983] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1111.455183][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.455207][ T5983] usb 3-1: Product: syz [ 1111.455224][ T5983] usb 3-1: Manufacturer: syz [ 1111.455351][ T5983] usb 3-1: SerialNumber: syz [ 1111.515648][ T5983] usb 3-1: config 0 descriptor?? [ 1111.900563][T17206] all: renamed from lo (while UP) [ 1112.031072][ T991] usb 3-1: USB disconnect, device number 98 [ 1112.342584][ T38] audit: type=1326 audit(1367.943:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17225 comm="syz.3.20785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1112.342646][ T38] audit: type=1326 audit(1367.943:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17225 comm="syz.3.20785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1112.342694][ T38] audit: type=1326 audit(1367.943:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17225 comm="syz.3.20785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1112.342742][ T38] audit: type=1326 audit(1367.943:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17225 comm="syz.3.20785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1112.342788][ T38] audit: type=1326 audit(1367.943:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17225 comm="syz.3.20785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1112.343063][ T38] audit: type=1326 audit(1367.943:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17225 comm="syz.3.20785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1112.343422][ T38] audit: type=1326 audit(1367.943:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17225 comm="syz.3.20785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1112.343823][ T38] audit: type=1326 audit(1367.943:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17225 comm="syz.3.20785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1112.344108][ T38] audit: type=1326 audit(1367.943:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17225 comm="syz.3.20785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1112.344627][ T38] audit: type=1326 audit(1367.943:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17225 comm="syz.3.20785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1115.385582][T17364] tipc: Failed to remove unknown binding: 66,1,1/0:2583747161/2583747163 [ 1115.385627][T17364] tipc: Failed to remove unknown binding: 66,1,1/0:2583747161/2583747163 [ 1115.567379][T17369] loop2: detected capacity change from 0 to 7 [ 1115.571211][T17369] Dev loop2: unable to read RDB block 7 [ 1115.571263][T17369] loop2: unable to read partition table [ 1115.571504][T17369] loop2: partition table beyond EOD, truncated [ 1115.571525][T17369] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1121.275498][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.783840][T17576] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20948'. [ 1123.891395][T17581] Invalid ELF header magic: != ELF [ 1124.772375][T17621] netlink: 7 bytes leftover after parsing attributes in process `syz.2.20970'. [ 1125.018362][T17631] overlayfs: failed to clone lowerpath [ 1126.165095][T17678] pim6reg1: entered promiscuous mode [ 1126.165126][T17678] pim6reg1: entered allmulticast mode [ 1130.194190][T17772] fuse: root generation should be zero [ 1134.067180][ T5891] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1134.219395][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.219434][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.219460][ T5891] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1134.219506][ T5891] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1134.219532][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.281978][ T5891] usb 6-1: config 0 descriptor?? [ 1134.754490][ T5891] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1136.867421][ T9784] kernel write not supported for file bpf-prog (pid: 9784 comm: kworker/1:0) [ 1136.950006][ T5891] usb 6-1: USB disconnect, device number 58 [ 1137.945922][ T5891] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1138.075092][ T5891] usb 6-1: device descriptor read/64, error -71 [ 1138.219806][T18074] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21170'. [ 1138.326070][ T5891] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1138.454855][ T5891] usb 6-1: device descriptor read/64, error -71 [ 1138.565186][ T5891] usb usb6-port1: attempt power cycle [ 1138.914715][ T5891] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1138.936540][ T5891] usb 6-1: device descriptor read/8, error -71 [ 1139.184527][ T5891] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1139.206481][ T5891] usb 6-1: device descriptor read/8, error -71 [ 1139.316342][ T5891] usb usb6-port1: unable to enumerate USB device [ 1139.644213][ T5983] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1139.796375][ T5983] usb 3-1: Using ep0 maxpacket: 16 [ 1139.800811][ T5983] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1139.800842][ T5983] usb 3-1: config 1 has no interface number 1 [ 1139.800892][ T5983] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1139.800916][ T5983] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1139.800963][ T5983] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1139.864114][ T5983] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1139.864147][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.864170][ T5983] usb 3-1: Product: syz [ 1139.864187][ T5983] usb 3-1: Manufacturer: syz [ 1139.864204][ T5983] usb 3-1: SerialNumber: syz [ 1140.293457][ T5983] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 1141.104506][ T5983] usb 3-1: current rate 9338526 is different from the runtime rate 9338507 [ 1141.390856][ T5983] usb 3-1: USB disconnect, device number 99 [ 1141.787857][T18244] syz_tun: entered allmulticast mode [ 1141.814863][T18243] syz_tun: left allmulticast mode [ 1142.550537][T18287] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.21274'. [ 1143.092724][ T5891] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1143.255457][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 1143.259169][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.259205][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.259249][ T5891] usb 3-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 1143.259276][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.265405][ T5891] usb 3-1: config 0 descriptor?? [ 1143.735271][ T5891] logitech-hidpp-device 0003:046D:C091.0049: collection stack underflow [ 1143.735311][ T5891] logitech-hidpp-device 0003:046D:C091.0049: item 0 2 0 12 parsing failed [ 1143.736197][ T5891] logitech-hidpp-device 0003:046D:C091.0049: hidpp_probe:parse failed [ 1143.736308][ T5891] logitech-hidpp-device 0003:046D:C091.0049: probe with driver logitech-hidpp-device failed with error -22 [ 1144.005819][ T5891] usb 3-1: USB disconnect, device number 100 [ 1144.702505][ T5891] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 1144.856463][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1144.856502][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1144.856545][ T5891] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1144.856571][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.873166][ T5891] usb 6-1: config 0 descriptor?? [ 1145.355190][ T5891] usbhid 6-1:0.0: can't add hid device: -71 [ 1145.355325][ T5891] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1145.360891][ T5891] usb 6-1: USB disconnect, device number 63 [ 1146.390074][T18467] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21361'. [ 1146.423206][ T5891] kernel read not supported for file [fscontext] (pid: 5891 comm: kworker/0:6) [ 1147.844682][T18550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21395'. [ 1148.544696][T18585] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21417'. [ 1151.477808][T18709] bond0: (slave dummy0): Releasing backup interface [ 1153.353089][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21507'. [ 1157.535425][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21573'. [ 1159.264136][T19006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21610'. [ 1161.767673][T19103] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1164.667480][ T9784] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1165.000626][ T9784] usb 3-1: Using ep0 maxpacket: 8 [ 1165.149378][ T9784] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1165.167604][ T9784] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1165.167859][ T9784] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1165.168112][ T9784] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1165.168475][ T9784] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1165.169357][ T9784] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1165.169627][ T9784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.579957][ T9784] usb 3-1: GET_CAPABILITIES returned 0 [ 1165.580008][ T9784] usbtmc 3-1:16.0: can't read capabilities [ 1165.744813][T19241] kvm: pic: level sensitive irq not supported [ 1165.744881][T19241] kvm: pic: level sensitive irq not supported [ 1165.745665][T19241] kvm: pic: single mode not supported [ 1165.745722][T19241] kvm: pic: single mode not supported [ 1165.746053][T19241] kvm: pic: single mode not supported [ 1165.746064][T19241] kvm: pic: level sensitive irq not supported [ 1165.746109][T19241] kvm: pic: single mode not supported [ 1165.746120][T19241] kvm: pic: level sensitive irq not supported [ 1165.746214][T19241] kvm: pic: single mode not supported [ 1165.746226][T19241] kvm: pic: level sensitive irq not supported [ 1165.746270][T19241] kvm: pic: single mode not supported [ 1165.746281][T19241] kvm: pic: level sensitive irq not supported [ 1165.747062][T19241] kvm: pic: single mode not supported [ 1165.747107][T19241] kvm: pic: single mode not supported [ 1165.747430][T19241] kvm: pic: single mode not supported [ 1165.747475][T19241] kvm: pic: single mode not supported [ 1165.747940][T19241] kvm: pic: level sensitive irq not supported [ 1165.747987][T19241] kvm: pic: level sensitive irq not supported [ 1165.749404][T19241] kvm: pic: level sensitive irq not supported [ 1165.749452][T19241] kvm: pic: level sensitive irq not supported [ 1165.802381][ T5891] usb 3-1: USB disconnect, device number 101 [ 1169.989458][ T5890] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1170.145504][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 1170.148917][ T5890] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1170.148946][ T5890] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1170.148970][ T5890] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1170.149029][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1170.149055][ T5890] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1170.149082][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1170.149129][ T5890] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1170.149768][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.175572][ T5890] usb 3-1: config 0 descriptor?? [ 1170.434636][ T5890] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 102 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1170.460581][ T5890] usb 3-1: USB disconnect, device number 102 [ 1170.485374][ T5890] usblp0: removed [ 1170.919633][ T5890] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1171.069509][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 1171.071903][ T5890] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1171.071932][ T5890] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1171.071955][ T5890] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1171.072012][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1171.072037][ T5890] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1171.072064][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1171.072111][ T5890] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1171.072137][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.087615][ T5890] usb 3-1: config 0 descriptor?? [ 1171.309269][ T5890] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 103 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1171.509516][ T5870] usb 3-1: USB disconnect, device number 103 [ 1171.515551][ T5870] usblp0: removed [ 1173.478442][T19531] loop2: detected capacity change from 0 to 7 [ 1173.480392][T19531] Dev loop2: unable to read RDB block 7 [ 1173.480449][T19531] loop2: unable to read partition table [ 1173.480718][T19531] loop2: partition table beyond EOD, truncated [ 1173.480740][T19531] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1176.018640][ T5983] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1176.174597][ T5983] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1176.174631][ T5983] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.174654][ T5983] usb 6-1: Product: syz [ 1176.174670][ T5983] usb 6-1: Manufacturer: syz [ 1176.174687][ T5983] usb 6-1: SerialNumber: syz [ 1176.214224][ T5983] usb 6-1: config 0 descriptor?? [ 1176.230110][ T5983] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1177.321863][T19650] loop2: detected capacity change from 0 to 7 [ 1177.323170][T19650] loop2: [ 1177.323204][T19650] loop2: partition table partially beyond EOD, truncated [ 1177.863372][ T5983] usb 6-1: USB disconnect, device number 64 [ 1178.916805][T19712] tipc: Started in network mode [ 1178.916843][T19712] tipc: Node identity ac14140f, cluster identity 4711 [ 1178.917278][T19712] tipc: New replicast peer: 255.255.255.83 [ 1178.917772][T19712] tipc: Enabled bearer , priority 7 [ 1180.142500][ T5870] tipc: Node number set to 2886997007 [ 1182.699038][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.082470][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 1184.082493][ T38] audit: type=1326 audit(1695.705:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19915 comm="syz.5.22036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1184.089915][ T38] audit: type=1326 audit(1695.705:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19915 comm="syz.5.22036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1184.089980][ T38] audit: type=1326 audit(1695.715:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19915 comm="syz.5.22036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1184.096922][ T38] audit: type=1326 audit(1695.715:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19915 comm="syz.5.22036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1184.096990][ T38] audit: type=1326 audit(1695.715:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19915 comm="syz.5.22036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1184.097044][ T38] audit: type=1326 audit(1695.715:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19915 comm="syz.5.22036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1184.097353][ T38] audit: type=1326 audit(1695.715:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19915 comm="syz.5.22036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1184.099632][ T38] audit: type=1326 audit(1695.725:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19915 comm="syz.5.22036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1184.100025][ T38] audit: type=1326 audit(1695.725:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19915 comm="syz.5.22036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1184.100769][ T38] audit: type=1326 audit(1695.725:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19915 comm="syz.5.22036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1187.016036][T19956] netem: incorrect ge model size [ 1187.016073][T19956] netem: change failed [ 1187.378211][T19968] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1188.566160][T20007] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22081'. [ 1188.643780][T20005] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1193.744440][T20077] syz.5.22109 (20077): drop_caches: 2 [ 1193.884035][T20100] syz.2.22121 (20100): drop_caches: 2 [ 1194.461503][T20151] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1198.489622][T20279] veth0: entered promiscuous mode [ 1198.524028][T20279] bond0: (slave vlan3): Enslaving as an active interface with a down link [ 1199.500210][ T9784] libceph: connect (1)[c::]:6789 error -13 [ 1199.501228][ T9784] libceph: mon0 (1)[c::]:6789 connect error [ 1199.507301][T20317] ceph: No mds server is up or the cluster is laggy [ 1199.529659][ T9784] libceph: connect (1)[c::]:6789 error -13 [ 1199.529880][ T9784] libceph: mon0 (1)[c::]:6789 connect error [ 1201.014142][T20380] netlink: 'syz.5.22248': attribute type 1 has an invalid length. [ 1207.094098][T20534] ceph: No mds server is up or the cluster is laggy [ 1208.097799][T20561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22328'. [ 1210.107830][ T5870] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1210.260130][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.260167][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1210.260210][ T5870] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1210.260236][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.270809][ T5870] usb 6-1: config 0 descriptor?? [ 1210.681455][ T5870] steelseries 0003:1038:1410.004A: unknown main item tag 0x1 [ 1210.682008][ T5870] steelseries 0003:1038:1410.004A: missing HID_OUTPUT_REPORT 0 [ 1210.897859][ T5870] usb 6-1: USB disconnect, device number 65 [ 1213.864688][T20670] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1213.864725][T20670] overlayfs: failed to set xattr on upper [ 1213.864734][T20670] overlayfs: ...falling back to redirect_dir=nofollow. [ 1213.864744][T20670] overlayfs: ...falling back to index=off. [ 1213.864753][T20670] overlayfs: ...falling back to uuid=null. [ 1213.950244][T20673] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1216.170183][T20740] overlayfs: failed to clone upperpath [ 1216.197615][ T9784] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1216.367597][ T9784] usb 3-1: Using ep0 maxpacket: 32 [ 1216.392953][ T9784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.392990][ T9784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.393041][ T9784] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1216.393068][ T9784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.450166][ T9784] usb 3-1: config 0 descriptor?? [ 1217.892039][ T9784] savu 0003:1E7D:2D5A.004B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1217.925795][ T9784] usb 3-1: USB disconnect, device number 104 [ 1218.193127][T20781] o2cb: This node has not been configured. [ 1218.193142][T20781] o2cb: Cluster check failed. Fix errors before retrying. [ 1218.193250][T20781] (syz.3.22425,20781,1):user_dlm_register:674 ERROR: status = -22 [ 1218.193287][T20781] (syz.3.22425,20781,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1218.536098][T20795] netlink: 'syz.3.22432': attribute type 12 has an invalid length. [ 1221.186876][T20846] binder: 20845:20846 ioctl c0306201 200000000300 returned -14 [ 1221.482462][T20871] syz_tun: entered allmulticast mode [ 1221.518733][T20869] syz_tun: left allmulticast mode [ 1223.462795][T20917] kvm: pic: non byte read [ 1223.463087][T20917] kvm: pic: non byte read [ 1223.463338][T20917] kvm: pic: non byte read [ 1223.463581][T20917] kvm: pic: non byte read [ 1223.463778][T20917] pic_ioport_write: 114 callbacks suppressed [ 1223.463798][T20917] kvm: pic: level sensitive irq not supported [ 1223.463857][T20917] kvm: pic: non byte read [ 1223.464100][T20917] kvm: pic: non byte read [ 1223.464350][T20917] kvm: pic: non byte read [ 1223.464592][T20917] kvm: pic: non byte read [ 1223.464842][T20917] kvm: pic: non byte read [ 1223.465083][T20917] kvm: pic: non byte read [ 1223.465517][T20917] pic_ioport_write: 102 callbacks suppressed [ 1223.465534][T20917] kvm: pic: single mode not supported [ 1223.465543][T20917] kvm: pic: level sensitive irq not supported [ 1223.465786][T20917] kvm: pic: single mode not supported [ 1223.466036][T20917] kvm: pic: single mode not supported [ 1223.577099][T20917] kvm: pic: level sensitive irq not supported [ 1223.577362][T20917] kvm: pic: single mode not supported [ 1223.594242][T20917] kvm: pic: single mode not supported [ 1223.594429][T20917] kvm: pic: level sensitive irq not supported [ 1223.595086][T20917] kvm: pic: single mode not supported [ 1223.595098][T20917] kvm: pic: level sensitive irq not supported [ 1223.595586][T20917] kvm: pic: single mode not supported [ 1223.595598][T20917] kvm: pic: level sensitive irq not supported [ 1223.595844][T20917] kvm: pic: single mode not supported [ 1223.596567][T20917] kvm: pic: level sensitive irq not supported [ 1223.608257][T20917] kvm: pic: single mode not supported [ 1223.608277][T20917] kvm: pic: level sensitive irq not supported [ 1223.608581][T20917] kvm: pic: single mode not supported [ 1223.609395][T20917] kvm: pic: level sensitive irq not supported [ 1224.268467][ T5982] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1224.417670][ T5982] usb 3-1: Using ep0 maxpacket: 16 [ 1224.422363][ T5982] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.422401][ T5982] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1224.422439][ T5982] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1224.422464][ T5982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.469042][ T5982] usb 3-1: config 0 descriptor?? [ 1224.959949][ T5982] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 1224.959979][ T5982] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 1224.960000][ T5982] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 1224.960020][ T5982] nzxt-smart2 0003:1E71:2009.004C: unknown main item tag 0x0 [ 1225.008244][ T5982] nzxt-smart2 0003:1E71:2009.004C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1225.265930][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1225.275182][ T5982] usb 3-1: USB disconnect, device number 105 [ 1243.887683][ T5890] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1244.038045][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 1244.065260][ T5890] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1244.065292][ T5890] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1244.081095][ T5890] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1244.081134][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.081160][ T5890] usb 6-1: Product: syz [ 1244.081179][ T5890] usb 6-1: Manufacturer: syz [ 1244.081198][ T5890] usb 6-1: SerialNumber: syz [ 1244.134350][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.258671][T21424] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1244.354584][ T5890] usb 6-1: 0:2 : does not exist [ 1244.395907][ T5890] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1244.514405][ T5890] usb 6-1: USB disconnect, device number 66 [ 1245.528962][T21464] tipc: Enabling of bearer rejected, failed to enable media [ 1249.543126][ T5890] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1249.717903][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 1249.733005][ T5890] usb 6-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 1249.733038][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.733061][ T5890] usb 6-1: Product: syz [ 1249.733078][ T5890] usb 6-1: Manufacturer: syz [ 1249.733095][ T5890] usb 6-1: SerialNumber: syz [ 1249.762107][ T5890] usb 6-1: config 0 descriptor?? [ 1249.792274][ T5890] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 1250.188448][ T5890] gspca_sn9c20x: Write register 1001 failed -71 [ 1250.188486][ T5890] gspca_sn9c20x: Device initialization failed [ 1250.188576][ T5890] gspca_sn9c20x 6-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 1250.202294][ T5890] usb 6-1: USB disconnect, device number 67 [ 1256.391681][ T5870] usb 3-1: new low-speed USB device number 106 using dummy_hcd [ 1256.517717][ T5870] usb 3-1: device descriptor read/64, error -71 [ 1256.789945][ T5870] usb 3-1: new low-speed USB device number 107 using dummy_hcd [ 1256.917678][ T5870] usb 3-1: device descriptor read/64, error -71 [ 1257.037115][ T5870] usb usb3-port1: attempt power cycle [ 1257.417823][ T5870] usb 3-1: new low-speed USB device number 108 using dummy_hcd [ 1257.438699][ T5870] usb 3-1: device descriptor read/8, error -71 [ 1257.680088][ T5870] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 1257.702038][ T5870] usb 3-1: device descriptor read/8, error -71 [ 1257.830637][ T5870] usb usb3-port1: unable to enumerate USB device [ 1259.206985][T21739] kvm: requested 137447 ns i8254 timer period limited to 200000 ns [ 1259.324840][T21739] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 1259.324972][T21739] kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 1259.325098][T21739] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 1261.445497][ T446] Bluetooth: hci0: Frame reassembly failed (-84) [ 1263.876296][ T5807] Bluetooth: hci0: command 0x1003 tx timeout [ 1263.880465][ T7294] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1287.913014][ C0] vkms_vblank_simulate: vblank timer overrun [ 1288.748739][ C0] vkms_vblank_simulate: vblank timer overrun [ 1289.249792][ C0] vkms_vblank_simulate: vblank timer overrun [ 1290.603788][T22229] pim6reg: entered allmulticast mode [ 1290.620490][T22229] netlink: 'syz.5.23036': attribute type 10 has an invalid length. [ 1290.620540][T22229] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1290.642247][T22229] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1290.643080][T22229] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1290.643328][T22229] team0: Failed to send options change via netlink (err -105) [ 1290.643350][T22229] team0: Port device netdevsim0 added [ 1291.067923][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.097755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.257383][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.483561][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.822851][ C0] vkms_vblank_simulate: vblank timer overrun [ 1291.961249][T22263] binder: 22258:22263 ioctl c0306201 200000000300 returned -11 [ 1292.111415][ C0] vkms_vblank_simulate: vblank timer overrun [ 1295.285052][ C1] vkms_vblank_simulate: vblank timer overrun [ 1296.181320][ C1] vkms_vblank_simulate: vblank timer overrun [ 1297.163656][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.239793][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.403637][ C1] vkms_vblank_simulate: vblank timer overrun [ 1298.910058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1301.107512][ C1] vkms_vblank_simulate: vblank timer overrun [ 1301.344232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.257366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1302.645992][T22399] netlink: 64 bytes leftover after parsing attributes in process `syz.1.23102'. [ 1304.030769][T22411] tmpfs: Unsupported parameter 'huge' [ 1306.407849][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.857754][ T5870] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1307.056464][ T5870] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1307.056498][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.056521][ T5870] usb 3-1: Product: syz [ 1307.056537][ T5870] usb 3-1: Manufacturer: syz [ 1307.056554][ T5870] usb 3-1: SerialNumber: syz [ 1308.271821][ T5870] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1308.271891][ T5870] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1309.599545][ T5870] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1309.600277][ T5870] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1310.078983][ T5870] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 1310.079049][ T5870] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1310.083205][ T5870] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1310.764125][ T5870] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1311.158568][ T5870] usb 3-1: USB disconnect, device number 110 [ 1313.194188][T22536] comedi comedi0: Minor 47 could not be opened [ 1319.461869][T22599] qnx6: unable to read the first superblock [ 1319.478249][T22599] qnx6: unable to read the first superblock [ 1319.478297][T22599] qnx6: unable to read the first superblock [ 1327.167723][ T5870] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1327.327948][ T5870] usb 6-1: Using ep0 maxpacket: 8 [ 1327.331137][ T5870] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1327.331173][ T5870] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1327.331203][ T5870] usb 6-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 1327.331220][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.339902][ T5870] usb 6-1: config 0 descriptor?? [ 1329.081208][ T5870] usb 6-1: USB disconnect, device number 68 [ 1347.297729][ T5890] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1347.447691][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 1347.450160][ T5890] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1347.450191][ T5890] usb 6-1: config 0 has no interface number 0 [ 1347.450248][ T5890] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1347.453375][ T5890] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1347.453406][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.453430][ T5890] usb 6-1: Product: syz [ 1347.453453][ T5890] usb 6-1: Manufacturer: syz [ 1347.453470][ T5890] usb 6-1: SerialNumber: syz [ 1348.501833][ T5890] usb 6-1: config 0 descriptor?? [ 1348.698669][T22893] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1349.109990][T22893] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1350.177647][ T9784] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1350.353362][ T9784] usb 3-1: config index 0 descriptor too short (expected 72, got 10) [ 1350.353384][ T9784] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1350.353398][ T9784] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1350.355140][ T9784] usb 3-1: config index 1 descriptor too short (expected 72, got 10) [ 1350.355169][ T9784] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1350.355190][ T9784] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1350.357375][ T9784] usb 3-1: config index 2 descriptor too short (expected 72, got 10) [ 1350.357404][ T9784] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1350.357426][ T9784] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1350.380684][ T9784] usb 3-1: config index 3 descriptor too short (expected 72, got 10) [ 1350.380720][ T9784] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1350.380743][ T9784] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1350.382268][ T9784] usb 3-1: config index 4 descriptor too short (expected 72, got 10) [ 1350.382299][ T9784] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1350.382322][ T9784] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1350.392013][ T9784] usb 3-1: config index 5 descriptor too short (expected 72, got 10) [ 1350.392048][ T9784] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 1350.392071][ T9784] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1350.598662][T22946] futex_wake_op: syz.2.23329 tries to shift op by 144; fix this program [ 1350.635627][ T9784] usb 3-1: string descriptor 0 read error: -71 [ 1350.636094][ T9784] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1350.636123][ T9784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.691673][ T9784] usb 3-1: can't set config #1, error -71 [ 1350.719174][ T9784] usb 3-1: USB disconnect, device number 111 [ 1351.772265][ T5890] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1351.772568][ T5890] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1351.797406][ T5890] usb 6-1: USB disconnect, device number 69 [ 1352.422151][ C1] vkms_vblank_simulate: vblank timer overrun [ 1352.840627][ C1] vkms_vblank_simulate: vblank timer overrun [ 1353.197051][ C1] vkms_vblank_simulate: vblank timer overrun [ 1353.564034][ C1] vkms_vblank_simulate: vblank timer overrun [ 1353.960914][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.212265][T23056] KVM: debugfs: duplicate directory 23056-7 [ 1358.656089][T23076] overlayfs: failed to clone upperpath [ 1358.872080][T23082] kvm: MONITOR instruction emulated as NOP! [ 1364.446144][T23139] netlink: 52 bytes leftover after parsing attributes in process `syz.3.23405'. [ 1367.055538][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1385.829892][T23362] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1385.835631][T23362] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1388.414264][ T38] kauditd_printk_skb: 25 callbacks suppressed [ 1388.414285][ T38] audit: type=1800 audit(1900.025:4038): pid=23386 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.23510" name="bus" dev="tmpfs" ino=16574 res=0 errno=0 [ 1400.256326][T23507] netlink: 'syz.3.23558': attribute type 10 has an invalid length. [ 1400.308883][T23511] netlink: 'syz.3.23558': attribute type 10 has an invalid length. [ 1400.325530][T23507] team0: Port device dummy0 added [ 1400.398372][T23511] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1400.468289][T23511] team0: Failed to send options change via netlink (err -105) [ 1400.468549][T23511] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1400.479854][T23511] team0: Port device dummy0 removed [ 1400.523301][T23511] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1403.732419][T23553] netlink: 'syz.3.23574': attribute type 2 has an invalid length. [ 1405.479203][ C0] vkms_vblank_simulate: vblank timer overrun [ 1405.901607][ C0] vkms_vblank_simulate: vblank timer overrun [ 1406.214032][ C0] vkms_vblank_simulate: vblank timer overrun [ 1407.054379][ C0] vkms_vblank_simulate: vblank timer overrun [ 1407.108159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1407.518069][ C0] vkms_vblank_simulate: vblank timer overrun [ 1409.546902][ C0] vkms_vblank_simulate: vblank timer overrun [ 1410.391485][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.622633][T23687] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1411.626809][ C0] vkms_vblank_simulate: vblank timer overrun [ 1411.777818][T23684] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1413.261637][ T5891] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1413.262030][ T5891] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1413.262406][ T5891] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1413.262779][ T5891] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1413.262798][ T5891] rtc rtc0: __rtc_set_alarm: err=-22 [ 1413.667691][ T38] audit: type=1800 audit(1924.975:4039): pid=23718 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.23635" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1420.638141][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064cba400: rx timeout, send abort [ 1421.329833][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064cba400: abort rx timeout. Force session deactivation [ 1423.083077][ T38] audit: type=1800 audit(1934.695:4040): pid=23781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.23661" name="bus" dev="ramfs" ino=182907 res=0 errno=0 [ 1423.230688][T23800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23670'. [ 1423.230774][T23800] bridge_slave_1: left promiscuous mode [ 1423.230984][T23800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.355192][T23800] bridge_slave_0: left allmulticast mode [ 1423.355216][T23800] bridge_slave_0: left promiscuous mode [ 1423.355453][T23800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.478074][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1439.909586][T23992] input: syz1 as /devices/virtual/input/input84 [ 1460.853689][T24331] syz_tun: entered allmulticast mode [ 1460.873765][T24331] pimreg: entered allmulticast mode [ 1460.903163][T24329] syz_tun: left allmulticast mode [ 1468.612672][ T5982] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1469.897575][ T5982] usb 6-1: Using ep0 maxpacket: 32 [ 1469.900523][ T5982] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1469.900553][ T5982] usb 6-1: config 0 has no interface number 0 [ 1469.900589][ T5982] usb 6-1: config 0 interface 69 has no altsetting 0 [ 1471.180836][ T5982] usb 6-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=f8.b5 [ 1471.180871][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.180894][ T5982] usb 6-1: Product: syz [ 1471.180910][ T5982] usb 6-1: Manufacturer: syz [ 1471.534030][ C0] vkms_vblank_simulate: vblank timer overrun [ 1471.665900][ C0] vkms_vblank_simulate: vblank timer overrun [ 1472.072200][ C0] vkms_vblank_simulate: vblank timer overrun [ 1472.502761][ T5982] usb 6-1: config 0 descriptor?? [ 1472.503290][ T5982] usb 6-1: can't set config #0, error -71 [ 1472.505250][ T5982] usb 6-1: USB disconnect, device number 70 [ 1472.785245][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.593937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.796407][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.978409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.667985][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.852692][ C0] vkms_vblank_simulate: vblank timer overrun [ 1474.917848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.863009][ C0] vkms_vblank_simulate: vblank timer overrun [ 1490.558452][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.180021][T24660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1502.456752][ T38] audit: type=1804 audit(2014.075:4041): pid=24735 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.24041" name="/newroot/1987/file0" dev="tmpfs" ino=10199 res=1 errno=0 [ 1508.846512][T24807] usb usb8: usbfs: process 24807 (syz.5.24065) did not claim interface 0 before use [ 1519.589789][T24921] netlink: 64 bytes leftover after parsing attributes in process `syz.2.24110'. [ 1522.780676][T24976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24129'. [ 1543.838637][T25257] overlayfs: failed to clone upperpath [ 1545.764729][T25293] No source specified [ 1551.337330][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1563.127508][ T5982] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1563.277467][ T5982] usb 6-1: Using ep0 maxpacket: 8 [ 1563.283447][ T5982] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1563.283480][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.283504][ T5982] usb 6-1: Product: syz [ 1563.283521][ T5982] usb 6-1: Manufacturer: syz [ 1563.283537][ T5982] usb 6-1: SerialNumber: syz [ 1563.557054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1564.269176][ C0] vkms_vblank_simulate: vblank timer overrun [ 1565.035714][ C0] vkms_vblank_simulate: vblank timer overrun [ 1565.064185][ C0] vkms_vblank_simulate: vblank timer overrun [ 1565.095687][ C0] vkms_vblank_simulate: vblank timer overrun [ 1565.140740][ C0] vkms_vblank_simulate: vblank timer overrun [ 1565.198225][ C0] vkms_vblank_simulate: vblank timer overrun [ 1565.409031][ C0] vkms_vblank_simulate: vblank timer overrun [ 1565.482292][ T5982] mxuport 6-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 1565.482401][ T5982] mxuport 6-1:254.0: probe with driver mxuport failed with error -5 [ 1565.487929][ T5982] usb 6-1: USB disconnect, device number 71 [ 1566.334105][ C0] vkms_vblank_simulate: vblank timer overrun [ 1566.581030][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.202946][T25608] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1574.067120][T25721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24426'. [ 1577.238229][T25755] fuse: Bad value for 'fd' [ 1579.697455][T25801] overlayfs: failed to clone upperpath [ 1585.107809][ T5891] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1585.261028][ T5891] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1585.261822][ T5891] usb 6-1: not running at top speed; connect to a high speed hub [ 1585.263446][ T5891] usb 6-1: config 1 has an invalid interface number: 138 but max is 0 [ 1585.263475][ T5891] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1585.263496][ T5891] usb 6-1: config 1 has no interface number 0 [ 1585.263546][ T5891] usb 6-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1585.263582][ T5891] usb 6-1: config 1 interface 138 has no altsetting 0 [ 1585.266736][ T5891] usb 6-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1585.266766][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.266789][ T5891] usb 6-1: Product: syz [ 1585.266805][ T5891] usb 6-1: Manufacturer: syz [ 1585.266821][ T5891] usb 6-1: SerialNumber: syz [ 1585.758621][ T5891] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1585.758683][ T5891] usb 6-1: MIDIStreaming interface descriptor not found [ 1586.422302][ T5891] usb 6-1: USB disconnect, device number 72 [ 1597.880467][T26222] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24640'. [ 1605.141681][ T38] audit: type=1326 audit(2116.765:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26339 comm="syz.3.24690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x0 [ 1607.056483][ C0] vkms_vblank_simulate: vblank timer overrun [ 1607.147992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1607.435020][ C0] vkms_vblank_simulate: vblank timer overrun [ 1607.882992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.346071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.541563][ C0] vkms_vblank_simulate: vblank timer overrun [ 1608.910351][T26392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24709'. [ 1609.652946][ C0] vkms_vblank_simulate: vblank timer overrun [ 1610.265354][ C0] vkms_vblank_simulate: vblank timer overrun [ 1612.791406][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1620.699133][T26544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24771'. [ 1629.097569][ T5891] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1629.251489][ T5891] usb 6-1: Using ep0 maxpacket: 8 [ 1629.254794][ T5891] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1629.256425][ T5891] usb 6-1: config 248 has an invalid interface number: 3 but max is 2 [ 1629.256452][ T5891] usb 6-1: config 248 has an invalid interface number: 190 but max is 2 [ 1629.256475][ T5891] usb 6-1: config 248 has an invalid interface number: 111 but max is 2 [ 1629.256497][ T5891] usb 6-1: config 248 has no interface number 0 [ 1629.256516][ T5891] usb 6-1: config 248 has no interface number 1 [ 1629.256534][ T5891] usb 6-1: config 248 has no interface number 2 [ 1629.256602][ T5891] usb 6-1: config 248 interface 3 has no altsetting 0 [ 1629.256623][ T5891] usb 6-1: config 248 interface 190 has no altsetting 0 [ 1629.256653][ T5891] usb 6-1: config 248 interface 111 has no altsetting 0 [ 1630.298639][ T5891] usb 6-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=91.28 [ 1630.298673][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.298695][ T5891] usb 6-1: Product: syz [ 1630.298711][ T5891] usb 6-1: Manufacturer: syz [ 1630.298728][ T5891] usb 6-1: SerialNumber: syz [ 1631.378584][ T5891] usb 6-1: USB disconnect, device number 73 [ 1643.008041][T23095] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1644.037601][T23095] usb 6-1: Using ep0 maxpacket: 32 [ 1644.041285][T23095] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1644.043653][T23095] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1644.043681][T23095] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1644.043704][T23095] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1644.043728][T23095] usb 6-1: config 128 has no interface number 0 [ 1644.043780][T23095] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1644.043811][T23095] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1644.043838][T23095] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1644.995088][T23095] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1644.995123][T23095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.995150][T23095] usb 6-1: Product: syz [ 1644.995164][T23095] usb 6-1: Manufacturer: syz [ 1644.995180][T23095] usb 6-1: SerialNumber: syz [ 1645.663655][T23095] usb 6-1: USB disconnect, device number 74 [ 1647.875854][T26895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24920'. [ 1653.537523][T23095] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 1653.690196][T23095] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1653.690228][T23095] usb 6-1: config 0 has no interface number 0 [ 1653.690279][T23095] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1653.690311][T23095] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1653.690339][T23095] usb 6-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 1653.690368][T23095] usb 6-1: config 0 interface 2 has no altsetting 0 [ 1653.693617][T23095] usb 6-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 1653.693650][T23095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.693671][T23095] usb 6-1: Product: syz [ 1653.693697][T23095] usb 6-1: Manufacturer: syz [ 1653.693714][T23095] usb 6-1: SerialNumber: syz [ 1653.785463][T23095] usb 6-1: config 0 descriptor?? [ 1653.793158][T26954] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1653.793331][T26954] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1654.033025][T23095] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1654.095310][T23095] usb 6-1: USB disconnect, device number 75 [ 1655.345281][T27025] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.317884][T27184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25055'. [ 1671.476838][T27203] netlink: 192 bytes leftover after parsing attributes in process `syz.5.25062'. [ 1674.238439][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.344806][T27287] overlay: Bad value for 'workdir' [ 1680.027664][T27388] netlink: 192 bytes leftover after parsing attributes in process `syz.2.25155'. [ 1681.867128][T27430] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 1681.867160][T27430] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 1684.359547][T27470] netlink: 132 bytes leftover after parsing attributes in process `syz.5.25196'. [ 1684.557822][T27474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25198'. [ 1684.557855][T27474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25198'. [ 1684.557882][T27474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25198'. [ 1687.629658][T27510] IPv6: Can't replace route, no match found [ 1691.512742][T27566] netlink: 144 bytes leftover after parsing attributes in process `syz.2.25241'. [ 1692.492736][T27584] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.25251'. [ 1692.492792][T27584] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1692.797964][T27591] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.25255'. [ 1692.798493][T27591] : entered promiscuous mode [ 1692.798704][T27591] bond_slave_1: entered promiscuous mode [ 1697.109782][T27648] cgroup2: Unknown parameter 'freezer' [ 1699.477927][T27690] : entered promiscuous mode [ 1699.999617][T27696] bond0: (slave bond_slave_1): Releasing backup interface [ 1700.133551][T27705] netlink: 10 bytes leftover after parsing attributes in process `syz.2.25308'. [ 1701.892665][T27740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25327'. [ 1701.892694][T27740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25327'. [ 1703.348127][T27754] geneve2: entered promiscuous mode [ 1703.348156][T27754] geneve2: entered allmulticast mode [ 1704.167910][T27768] tmpfs: Bad value for 'mpol' [ 1704.193238][T27770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25342'. [ 1706.393902][ T7294] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 1708.787769][T27848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25379'. [ 1708.944730][T27851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.25381'. [ 1709.744787][T27867] netlink: 'syz.2.25387': attribute type 1 has an invalid length. [ 1710.481759][T27881] netlink: 4988 bytes leftover after parsing attributes in process `syz.5.25395'. [ 1711.019327][ T38] audit: type=1326 audit(2222.645:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27895 comm="syz.5.25402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1711.027965][ T38] audit: type=1326 audit(2222.645:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27895 comm="syz.5.25402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1711.029974][ T38] audit: type=1326 audit(2222.655:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27895 comm="syz.5.25402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1711.031330][ T38] audit: type=1326 audit(2222.655:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27895 comm="syz.5.25402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1711.031656][ T38] audit: type=1326 audit(2222.655:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27895 comm="syz.5.25402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1711.354471][T27897] bond4: option packets_per_slave: invalid value (1464008704) [ 1711.354500][T27897] bond4: option packets_per_slave: allowed values 0 - 65535 [ 1711.355892][ T38] audit: type=1326 audit(2222.975:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27902 comm="syz.5.25405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1711.387735][ T38] audit: type=1326 audit(2222.975:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27902 comm="syz.5.25405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1711.423452][ T38] audit: type=1326 audit(2223.045:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27902 comm="syz.5.25405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1711.424361][ T38] audit: type=1326 audit(2223.045:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27902 comm="syz.5.25405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1711.793637][T27897] bond4 (unregistering): Released all slaves [ 1716.224602][T28008] netlink: 16 bytes leftover after parsing attributes in process `syz.5.25456'. [ 1720.237492][T28074] netlink: 288 bytes leftover after parsing attributes in process `syz.5.25489'. [ 1720.237524][T28074] netlink: 12 bytes leftover after parsing attributes in process `syz.5.25489'. [ 1720.237542][T28074] netlink: 16 bytes leftover after parsing attributes in process `syz.5.25489'. [ 1722.105284][T28111] bond0: (slave veth1_macvtap): Error: Device is in use and cannot be enslaved [ 1725.554601][T28171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.25532'. [ 1727.207157][T28211] geneve4: entered promiscuous mode [ 1733.367055][T28330] ./file0: Can't lookup blockdev [ 1735.654739][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.050352][T28380] netlink: 'syz.5.25633': attribute type 25 has an invalid length. [ 1736.257480][T28386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.25632'. [ 1744.994879][T28542] netlink: 'syz.2.25708': attribute type 1 has an invalid length. [ 1744.994907][T28542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25708'. [ 1752.875734][T28647] bridge0: entered promiscuous mode [ 1752.875772][T28647] bridge0: entered allmulticast mode [ 1754.530336][T28683] NILFS (nbd5): device size too small [ 1754.636002][T28681] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1754.771541][T28681] bond5 (unregistering): Released all slaves [ 1754.908329][T28692] netlink: 'syz.5.25779': attribute type 2 has an invalid length. [ 1754.908357][T28692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25779'. [ 1762.764945][T28842] netlink: 24 bytes leftover after parsing attributes in process `syz.5.25854'. [ 1765.439351][T28889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.25877'. [ 1766.477598][T28911] netlink: 'syz.5.25888': attribute type 12 has an invalid length. [ 1767.622699][ C1] vkms_vblank_simulate: vblank timer overrun [ 1767.753476][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.356788][ C1] vkms_vblank_simulate: vblank timer overrun [ 1768.450436][T28936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1768.450458][T28936] IPv6: NLM_F_CREATE should be set when creating new route [ 1768.450537][T28936] IPv6: NLM_F_CREATE should be set when creating new route [ 1769.893728][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.127125][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.726638][T28979] ip6erspan0: entered allmulticast mode [ 1772.998672][T29006] netlink: 'syz.5.25933': attribute type 7 has an invalid length. [ 1772.998700][T29006] netlink: 'syz.5.25933': attribute type 8 has an invalid length. [ 1776.411688][T29062] netlink: 'syz.2.25960': attribute type 5 has an invalid length. [ 1776.411714][T29062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25960'. [ 1777.116467][T29074] Mount JFS Failure: -5 [ 1777.998988][T29094] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.25976'. [ 1777.999418][T29094] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 1780.626963][T29138] hsr0: entered promiscuous mode [ 1780.627220][T29138] macsec0: entered promiscuous mode [ 1780.642903][T29138] macsec0: entered allmulticast mode [ 1780.642926][T29138] hsr0: entered allmulticast mode [ 1780.642942][T29138] hsr_slave_0: entered allmulticast mode [ 1780.642963][T29138] hsr_slave_1: entered allmulticast mode [ 1781.201194][T29138] hsr0: left allmulticast mode [ 1781.201220][T29138] hsr_slave_0: left allmulticast mode [ 1781.201242][T29138] hsr_slave_1: left allmulticast mode [ 1782.927464][T29119] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1783.077409][T29119] usb 6-1: Using ep0 maxpacket: 8 [ 1783.163530][T29119] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1783.163561][T29119] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1783.163582][T29119] usb 6-1: config 0 has no interface number 0 [ 1783.163635][T29119] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1783.163664][T29119] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1783.163688][T29119] usb 6-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 1783.163714][T29119] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1783.166676][T29119] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1783.166708][T29119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1783.166730][T29119] usb 6-1: SerialNumber: syz [ 1783.299599][T29119] usb 6-1: config 0 descriptor?? [ 1783.352020][T29119] hso 6-1:0.1: Failed to find BULK OUT ep [ 1783.594979][T29183] usb 6-1: USB disconnect, device number 76 [ 1784.701709][ T38] audit: type=1326 audit(2296.325:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29208 comm="syz.5.26029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1784.702043][ T38] audit: type=1326 audit(2296.325:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29208 comm="syz.5.26029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1784.757915][ T38] audit: type=1326 audit(2296.385:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29208 comm="syz.5.26029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1784.758203][ T38] audit: type=1326 audit(2296.385:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29208 comm="syz.5.26029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1784.758354][ T38] audit: type=1326 audit(2296.385:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29208 comm="syz.5.26029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1784.758963][ T38] audit: type=1326 audit(2296.385:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29208 comm="syz.5.26029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1784.759118][ T38] audit: type=1326 audit(2296.385:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29208 comm="syz.5.26029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1784.759276][ T38] audit: type=1326 audit(2296.385:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29208 comm="syz.5.26029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1786.953303][T29257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26053'. [ 1786.953347][T29257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26053'. [ 1786.982833][T29257] gretap0: entered promiscuous mode [ 1787.331553][T29257] gretap0: left promiscuous mode [ 1787.578682][ T5890] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1787.778974][ T5890] usb 6-1: Using ep0 maxpacket: 8 [ 1787.781841][ T5890] usb 6-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1787.781880][ T5890] usb 6-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1787.781911][ T5890] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1787.781951][ T5890] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 1787.781977][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.796289][ T5890] usb 6-1: config 0 descriptor?? [ 1788.792134][ T5890] playstation 0003:054C:09CC.004E: hidraw0: USB HID vff.ed Device [HID 054c:09cc] on usb-dummy_hcd.5-1/input0 [ 1788.875094][ T5890] playstation 0003:054C:09CC.004E: Failed to retrieve feature with reportID 18: -71 [ 1788.875128][ T5890] playstation 0003:054C:09CC.004E: Failed to retrieve DualShock4 pairing info: -71 [ 1788.875184][ T5890] playstation 0003:054C:09CC.004E: Failed to get MAC address from DualShock4 [ 1788.875207][ T5890] playstation 0003:054C:09CC.004E: Failed to create dualshock4. [ 1788.879130][ T5890] playstation 0003:054C:09CC.004E: probe with driver playstation failed with error -71 [ 1788.907651][ T5890] usb 6-1: USB disconnect, device number 77 [ 1790.192073][T29324] sg_write: process 5279 (syz.5.26084) changed security contexts after opening file descriptor, this is not allowed. [ 1795.140468][T29386] usb usb8: usbfs: process 29386 (syz.5.26113) did not claim interface 0 before use [ 1796.876241][T29399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1797.098535][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.813470][T29521] overlay: Unknown parameter '\' [ 1802.954324][ C1] vkms_vblank_simulate: vblank timer overrun [ 1803.371320][T29552] tmpfs: Bad value for 'mpol' [ 1803.681846][ C1] vkms_vblank_simulate: vblank timer overrun [ 1803.895735][ C1] vkms_vblank_simulate: vblank timer overrun [ 1804.307719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1804.678790][ C1] vkms_vblank_simulate: vblank timer overrun [ 1807.067554][T23095] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1807.220229][T23095] usb 6-1: Using ep0 maxpacket: 32 [ 1807.222897][T23095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1807.223002][T23095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1807.257116][T23095] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1807.257148][T23095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.257170][T23095] usb 6-1: Product: syz [ 1807.257186][T23095] usb 6-1: Manufacturer: syz [ 1807.257202][T23095] usb 6-1: SerialNumber: syz [ 1807.321182][T23095] usb 6-1: config 0 descriptor?? [ 1807.410706][T23095] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1807.767412][T22762] usb 6-1: Failed to submit usb control message: -71 [ 1807.767455][T22762] usb 6-1: unable to send the bmi data to the device: -71 [ 1807.767476][T22762] usb 6-1: unable to get target info from device [ 1807.767506][T22762] usb 6-1: could not get target info (-71) [ 1807.768126][T22762] usb 6-1: could not probe fw (-71) [ 1807.851449][T29119] usb 6-1: USB disconnect, device number 78 [ 1809.060215][T29633] netlink: 'syz.5.26229': attribute type 1 has an invalid length. [ 1812.173478][T29702] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1813.161102][T29723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26271'. [ 1813.164451][T29723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26271'. [ 1820.430689][T29859] nbd: must specify a size in bytes for the device [ 1823.116936][T29919] block nbd5: not configured, cannot reconfigure [ 1824.219586][ T38] audit: type=1326 audit(2335.825:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29942 comm="syz.5.26380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1824.219649][ T38] audit: type=1326 audit(2335.845:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29942 comm="syz.5.26380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1824.219700][ T38] audit: type=1326 audit(2335.845:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29942 comm="syz.5.26380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1824.219748][ T38] audit: type=1326 audit(2335.845:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29942 comm="syz.5.26380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1824.219795][ T38] audit: type=1326 audit(2335.845:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29942 comm="syz.5.26380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1824.219842][ T38] audit: type=1326 audit(2335.845:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29942 comm="syz.5.26380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1824.219887][ T38] audit: type=1326 audit(2335.845:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29942 comm="syz.5.26380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1824.219932][ T38] audit: type=1326 audit(2335.845:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29942 comm="syz.5.26380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7f56f749 code=0x7ffc0000 [ 1825.572337][T29970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1826.517835][T29119] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1826.672440][T29119] usb 6-1: Using ep0 maxpacket: 32 [ 1826.675069][T29119] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 1826.675098][T29119] usb 6-1: config 4 has no interface number 0 [ 1826.675155][T29119] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.675185][T29119] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1826.675230][T29119] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1826.675255][T29119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.790288][T29119] hub 6-1:4.128: USB hub found [ 1826.995906][T29119] hub 6-1:4.128: 2 ports detected [ 1826.995976][T29119] hub 6-1:4.128: Using single TT (err -22) [ 1827.202593][T29119] hub 6-1:4.128: hub_hub_status failed (err = -71) [ 1827.202625][T29119] hub 6-1:4.128: config failed, can't get hub status (err -71) [ 1827.291878][T29119] usb 6-1: USB disconnect, device number 79 [ 1830.797612][T29119] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1831.233931][T29119] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 1831.233965][T29119] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.233994][T29119] usb 6-1: Product: syz [ 1831.234010][T29119] usb 6-1: Manufacturer: syz [ 1831.234026][T29119] usb 6-1: SerialNumber: syz [ 1831.788691][T29119] usb 6-1: config 0 descriptor?? [ 1832.629679][T29119] mos7840 6-1:0.0: required endpoints missing [ 1832.717775][T29119] usb 6-1: USB disconnect, device number 80 [ 1833.232637][T30101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26457'. [ 1833.718042][T30114] netlink: 68 bytes leftover after parsing attributes in process `syz.2.26466'. [ 1836.248081][ T9784] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1836.407363][ T9784] usb 6-1: Using ep0 maxpacket: 32 [ 1836.409795][ T9784] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1836.409825][ T9784] usb 6-1: config 0 has no interface number 0 [ 1836.413328][ T9784] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1836.413365][ T9784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.413388][ T9784] usb 6-1: Product: syz [ 1836.413404][ T9784] usb 6-1: Manufacturer: syz [ 1836.413420][ T9784] usb 6-1: SerialNumber: syz [ 1836.485514][ T9784] usb 6-1: config 0 descriptor?? [ 1836.503361][ T9784] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1836.877169][ T9784] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1836.940588][ T9784] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1837.121602][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1837.327199][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1837.359271][T29119] usb 6-1: USB disconnect, device number 81 [ 1837.424846][T29119] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1837.470811][T29119] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1837.471532][T29119] quatech2 6-1:0.51: device disconnected [ 1839.366337][T30237] netlink: 52 bytes leftover after parsing attributes in process `syz.5.26523'. [ 1839.366365][T30237] netlink: 76 bytes leftover after parsing attributes in process `syz.5.26523'. [ 1847.045995][T30363] tipc: Enabling not permitted [ 1847.046034][T30363] tipc: Enabling of bearer rejected, failed to enable media [ 1858.534517][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1867.126650][ C1] vkms_vblank_simulate: vblank timer overrun [ 1867.362747][ C1] vkms_vblank_simulate: vblank timer overrun [ 1868.682888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1868.814854][T30713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26752'. [ 1868.814882][T30713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26752'. [ 1868.814912][T30713] netlink: 'syz.2.26752': attribute type 11 has an invalid length. [ 1869.229169][T30719] netlink: 32 bytes leftover after parsing attributes in process `syz.2.26754'. [ 1877.211144][ T38] audit: type=1326 audit(2388.805:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30874 comm="syz.2.26828" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48b376f749 code=0x0 [ 1877.881453][T30892] netlink: 'syz.5.26835': attribute type 62 has an invalid length. [ 1881.248321][T30969] netlink: 'syz.2.26872': attribute type 11 has an invalid length. [ 1881.248349][T30969] netlink: 'syz.2.26872': attribute type 4 has an invalid length. [ 1881.248365][T30969] netlink: 199768 bytes leftover after parsing attributes in process `syz.2.26872'. [ 1881.249894][ T38] audit: type=1326 audit(2392.875:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30934 comm="syz.3.26855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1881.252421][ T38] audit: type=1326 audit(2392.875:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30934 comm="syz.3.26855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1881.453959][ T38] audit: type=1326 audit(2393.075:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30934 comm="syz.3.26855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1881.480527][ T38] audit: type=1326 audit(2393.075:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30934 comm="syz.3.26855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1881.482902][ T38] audit: type=1326 audit(2393.105:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30934 comm="syz.3.26855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1881.484301][ T38] audit: type=1326 audit(2393.105:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30934 comm="syz.3.26855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1881.487296][ T38] audit: type=1326 audit(2393.105:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30934 comm="syz.3.26855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1881.581009][ T38] audit: type=1326 audit(2393.205:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30934 comm="syz.3.26855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd702f5f749 code=0x7ffc0000 [ 1891.817378][T23095] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1891.980592][T23095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1891.980630][T23095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1891.980656][T23095] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1891.980702][T23095] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1891.980728][T23095] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.051991][T23095] usb 6-1: config 0 descriptor?? [ 1892.494721][T23095] aureal 0003:0755:2626.004F: unknown main item tag 0x0 [ 1892.494765][T23095] aureal 0003:0755:2626.004F: unknown main item tag 0x0 [ 1892.494796][T23095] aureal 0003:0755:2626.004F: unknown main item tag 0x0 [ 1892.494825][T23095] aureal 0003:0755:2626.004F: unknown main item tag 0x0 [ 1892.494854][T23095] aureal 0003:0755:2626.004F: unknown main item tag 0x0 [ 1892.494883][T23095] aureal 0003:0755:2626.004F: unknown main item tag 0x0 [ 1892.494912][T23095] aureal 0003:0755:2626.004F: unknown main item tag 0x0 [ 1892.494942][T23095] aureal 0003:0755:2626.004F: unknown main item tag 0x0 [ 1892.494970][T23095] aureal 0003:0755:2626.004F: unknown main item tag 0x0 [ 1892.495000][T23095] aureal 0003:0755:2626.004F: unknown main item tag 0x0 [ 1892.607195][T23095] aureal 0003:0755:2626.004F: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.5-1/input0 [ 1892.695578][T23095] usb 6-1: USB disconnect, device number 82 [ 1895.337752][T29119] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1895.508622][T29119] usb 6-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 1895.508657][T29119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.539734][T29119] usb 6-1: config 0 descriptor?? [ 1895.865449][T29119] usb 6-1: string descriptor 0 read error: -71 [ 1895.904481][T29119] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1895.977159][T29119] usb-storage 6-1:0.0: Quirks match for vid 05ab pid 0060: 2 [ 1896.128133][T29119] usb 6-1: USB disconnect, device number 83 [ 1898.905272][T31349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27060'. [ 1898.905303][T31349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27060'. [ 1899.972708][ T38] audit: type=1326 audit(2411.595:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31382 comm="syz.2.27076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b376f749 code=0x7ffc0000 [ 1899.973039][ T38] audit: type=1326 audit(2411.595:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31382 comm="syz.2.27076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b376f749 code=0x7ffc0000 [ 1900.086476][ T38] audit: type=1326 audit(2411.705:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31382 comm="syz.2.27076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f48b376f749 code=0x7ffc0000 [ 1900.086922][ T38] audit: type=1326 audit(2411.705:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31382 comm="syz.2.27076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b376f749 code=0x7ffc0000 [ 1900.087106][ T38] audit: type=1326 audit(2411.705:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31382 comm="syz.2.27076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b376f749 code=0x7ffc0000 [ 1903.633725][T31463] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 1903.663521][T31458] IPVS: stopping backup sync thread 31463 ... [ 1907.558784][T31558] netlink: 72 bytes leftover after parsing attributes in process `syz.2.27160'. [ 1912.500867][T31671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27215'. [ 1913.592232][T31703] netlink: 'syz.5.27232': attribute type 2 has an invalid length. [ 1916.835462][T31769] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 1919.604129][T31834] program syz.5.27296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1919.703117][T31838] sch_fq: defrate 64 ignored. [ 1920.093302][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.807019][T31887] netlink: 24 bytes leftover after parsing attributes in process `syz.5.27321'. [ 1928.227410][ T9784] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1928.387444][ T9784] usb 6-1: Using ep0 maxpacket: 32 [ 1928.390240][ T9784] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1928.390276][ T9784] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1928.390332][ T9784] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1928.390357][ T9784] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.396107][ T9784] usb 6-1: config 0 descriptor?? [ 1928.996433][ T9784] uclogic 0003:145F:0212.0050: interface is invalid, ignoring [ 1929.211954][ T9784] usb 6-1: USB disconnect, device number 84 [ 1931.027471][ T5890] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1931.517489][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 1931.617047][ T5890] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1931.617079][ T5890] usb 6-1: config 0 has no interface number 0 [ 1931.620644][ T5890] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1931.620683][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.620706][ T5890] usb 6-1: Product: syz [ 1931.620724][ T5890] usb 6-1: Manufacturer: syz [ 1931.620743][ T5890] usb 6-1: SerialNumber: syz [ 1932.255864][ T5890] usb 6-1: config 0 descriptor?? [ 1932.445583][ T5890] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1933.241435][ T5890] gspca_spca1528: reg_w err -71 [ 1933.989262][ T5890] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1933.995191][ T5890] usb 6-1: USB disconnect, device number 85 [ 1934.613793][T32150] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 1935.697839][T29183] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1935.862180][T29183] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1935.862216][T29183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.885504][T29183] usb 6-1: config 0 descriptor?? [ 1935.909033][T29183] cp210x 6-1:0.0: cp210x converter detected [ 1936.113640][T29183] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1936.113672][T29183] cp210x 6-1:0.0: querying part number failed [ 1936.138886][T29183] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1936.824154][T32182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27455'. [ 1938.578364][T23095] usb 6-1: USB disconnect, device number 86 [ 1938.646162][T23095] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1938.646749][T23095] cp210x 6-1:0.0: device disconnected [ 1939.628210][T32223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1939.628245][T32223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1939.923040][T32223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1939.923074][T32223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1940.475020][T32223] batman_adv: batadv0: Interface deactivated: gretap1 [ 1940.475052][T32223] batman_adv: batadv0: Removing interface: gretap1 [ 1940.773654][T32243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27493'. [ 1944.090147][T23095] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1944.162755][T32298] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1944.279080][T23095] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1944.279148][T23095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1944.280747][T23095] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1944.280777][T23095] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1944.280800][T23095] usb 6-1: Manufacturer: syz [ 1944.288632][T23095] usb 6-1: config 0 descriptor?? [ 1944.827363][T23095] rc_core: IR keymap rc-hauppauge not found [ 1944.827386][T23095] Registered IR keymap rc-empty [ 1944.828983][T23095] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1944.832263][T23095] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input88 [ 1944.926185][T23095] usb 6-1: USB disconnect, device number 87 [ 1946.373100][T32357] netlink: 100 bytes leftover after parsing attributes in process `syz.2.27547'. [ 1946.643072][T32366] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1948.261126][T32390] program syz.5.27564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1948.607842][T32398] netlink: 152 bytes leftover after parsing attributes in process `syz.5.27569'. [ 1948.607904][T32398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27569'. [ 1949.680248][T32419] netlink: 44 bytes leftover after parsing attributes in process `syz.5.27577'. [ 1968.405352][ T300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27743'. [ 1975.297563][ T425] netlink: 'syz.2.27801': attribute type 4 has an invalid length. [ 1975.297588][ T425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.27801'. [ 1976.814661][ T484] tipc: New replicast peer: 255.255.255.255 [ 1976.859561][ T484] tipc: Enabled bearer , priority 7 [ 1976.878180][ T484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27822'. [ 1976.878210][ T484] tipc: Disabling bearer [ 1977.130231][T29183] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1977.300948][T29183] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1977.300980][T29183] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1977.306218][T29183] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1977.306250][T29183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1977.306272][T29183] usb 6-1: SerialNumber: syz [ 1977.641515][T29183] usb 6-1: 0:2 : does not exist [ 1977.734088][T29183] usb 6-1: USB disconnect, device number 88 [ 1981.498366][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.952530][ T579] team0: No ports can be present during mode change [ 1982.379761][ T584] netlink: 'syz.5.27876': attribute type 46 has an invalid length. [ 1982.379789][ T584] netlink: 212868 bytes leftover after parsing attributes in process `syz.5.27876'. [ 1986.804670][ T684] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.27925'. [ 1986.804807][ T684] openvswitch: netlink: Message has 16 unknown bytes. [ 1989.657774][ T740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27948'. [ 1989.657872][ T740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27948'. [ 1991.756836][ T768] sctp: [Deprecated]: syz.5.27962 (pid 768) Use of int in max_burst socket option. [ 1991.756836][ T768] Use struct sctp_assoc_value instead [ 1994.597655][ T813] netlink: 96 bytes leftover after parsing attributes in process `syz.5.27981'. [ 1996.736325][ T858] program syz.5.28003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2003.697698][T23095] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 2003.857773][T23095] usb 6-1: Using ep0 maxpacket: 32 [ 2003.895157][T23095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2003.895195][T23095] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2003.895240][T23095] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2003.895265][T23095] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.948300][T23095] usb 6-1: config 0 descriptor?? [ 2003.954794][T23095] hub 6-1:0.0: USB hub found [ 2004.237356][T23095] hub 6-1:0.0: 1 port detected [ 2004.685463][T23095] usb 6-1: USB disconnect, device number 89 [ 2010.760283][ T7294] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 2010.760316][ T7294] CPU: 1 UID: 0 PID: 7294 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2010.760343][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2010.760359][ T7294] Workqueue: hci2 hci_rx_work [ 2010.760393][ T7294] Call Trace: [ 2010.760403][ T7294] [ 2010.760416][ T7294] dump_stack_lvl+0x189/0x250 [ 2010.760459][ T7294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2010.760505][ T7294] ? __pfx__printk+0x10/0x10 [ 2010.760541][ T7294] ? kernfs_path_from_node+0x2c/0x280 [ 2010.760572][ T7294] ? kernfs_path_from_node+0x243/0x280 [ 2010.760595][ T7294] ? kernfs_path_from_node+0x2c/0x280 [ 2010.760625][ T7294] sysfs_create_dir_ns+0x259/0x280 [ 2010.760650][ T7294] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2010.760680][ T7294] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2010.760709][ T7294] ? rt_spin_unlock+0x161/0x200 [ 2010.760740][ T7294] kobject_add_internal+0x5a5/0xb50 [ 2010.760775][ T7294] kobject_add+0x155/0x220 [ 2010.760805][ T7294] ? __pfx_kobject_add+0x10/0x10 [ 2010.760837][ T7294] ? get_device_parent+0x370/0x3a0 [ 2010.760874][ T7294] device_add+0x408/0xb50 [ 2010.760911][ T7294] hci_conn_add_sysfs+0xd5/0x1e0 [ 2010.760942][ T7294] le_conn_complete_evt+0xf39/0x1500 [ 2010.760991][ T7294] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2010.761026][ T7294] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2010.761060][ T7294] ? lockdep_hardirqs_on+0x9c/0x150 [ 2010.761099][ T7294] ? skb_pull_data+0xfb/0x200 [ 2010.761138][ T7294] hci_le_enh_conn_complete_evt+0x189/0x470 [ 2010.761172][ T7294] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 2010.761210][ T7294] hci_event_packet+0x78f/0x1200 [ 2010.761242][ T7294] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2010.761278][ T7294] ? __pfx_hci_event_packet+0x10/0x10 [ 2010.761318][ T7294] ? hci_send_to_monitor+0xe2/0x570 [ 2010.761357][ T7294] hci_rx_work+0x46a/0xe80 [ 2010.761393][ T7294] ? process_scheduled_works+0x9ef/0x17b0 [ 2010.761425][ T7294] process_scheduled_works+0xae1/0x17b0 [ 2010.761494][ T7294] ? __pfx_process_scheduled_works+0x10/0x10 [ 2010.761544][ T7294] worker_thread+0x8a0/0xda0 [ 2010.761578][ T7294] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2010.761623][ T7294] ? __kthread_parkme+0x7b/0x200 [ 2010.761666][ T7294] kthread+0x711/0x8a0 [ 2010.761705][ T7294] ? __pfx_worker_thread+0x10/0x10 [ 2010.761733][ T7294] ? __pfx_kthread+0x10/0x10 [ 2010.761765][ T7294] ? rt_spin_unlock+0x150/0x200 [ 2010.761798][ T7294] ? rt_spin_unlock+0x161/0x200 [ 2010.761824][ T7294] ? __pfx_kthread+0x10/0x10 [ 2010.761860][ T7294] ret_from_fork+0x4bc/0x870 [ 2010.761892][ T7294] ? __pfx_ret_from_fork+0x10/0x10 [ 2010.761929][ T7294] ? __switch_to_asm+0x39/0x70 [ 2010.761952][ T7294] ? __switch_to_asm+0x33/0x70 [ 2010.761974][ T7294] ? __pfx_kthread+0x10/0x10 [ 2010.762009][ T7294] ret_from_fork_asm+0x1a/0x30 [ 2010.762056][ T7294] [ 2010.762209][ T7294] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 2010.762257][ T7294] Bluetooth: hci2: failed to register connection device [ 2014.502507][T23095] kernel read not supported for file bpf-prog (pid: 23095 comm: kworker/1:1) [ 2015.834022][ T1270] 9pnet_fd: Insufficient options for proto=fd [ 2017.961406][ T38] audit: type=1326 audit(2529.585:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1304 comm="syz.2.28200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b376f749 code=0x7fc00000 [ 2019.038435][ T1347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28205'. [ 2019.748042][ T1362] binder: 1359:1362 ioctl 541b 0 returned -22 [ 2024.446840][ T5807] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2024.846041][ T1474] input: syz1 as /devices/virtual/input/input89 [ 2025.315516][ T1483] cgroup: fork rejected by pids controller in /syz5 [ 2026.041321][T20613] ------------[ cut here ]------------ [ 2026.041348][T20613] WARNING: CPU: 1 PID: 20613 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 2026.041399][T20613] Modules linked in: [ 2026.041420][T20613] CPU: 1 UID: 0 PID: 20613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2026.041448][T20613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2026.041463][T20613] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 2026.041496][T20613] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 42 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 2026.041516][T20613] RSP: 0018:ffffc9001e257d00 EFLAGS: 00010287 [ 2026.041544][T20613] RAX: c3ec46f133a1e900 RBX: ffff88814d1be900 RCX: 0000000000000000 [ 2026.041561][T20613] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 2026.041578][T20613] RBP: ffffc9001e257e68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 2026.041595][T20613] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff11004ba71fd [ 2026.041613][T20613] R13: 0000000000004300 R14: ffff88814d1be908 R15: ffff88803340da00 [ 2026.041630][T20613] FS: 0000555575f1b500(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 2026.041652][T20613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2026.041668][T20613] CR2: 00007fac802f7d60 CR3: 000000003949c000 CR4: 00000000003526f0 [ 2026.041688][T20613] Call Trace: [ 2026.041697][T20613] [ 2026.041710][T20613] do_exit+0x105/0x2300 [ 2026.041755][T20613] ? rt_mutex_slowunlock+0x493/0x8a0 [ 2026.041789][T20613] ? __pfx_do_exit+0x10/0x10 [ 2026.041823][T20613] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2026.041863][T20613] ? rt_spin_unlock+0x161/0x200 [ 2026.041894][T20613] do_group_exit+0x21c/0x2d0 [ 2026.041923][T20613] __x64_sys_exit_group+0x3f/0x40 [ 2026.041945][T20613] x64_sys_call+0x21f7/0x2200 [ 2026.041969][T20613] do_syscall_64+0xfa/0xfa0 [ 2026.042002][T20613] ? lockdep_hardirqs_on+0x9c/0x150 [ 2026.042035][T20613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2026.042059][T20613] ? clear_bhb_loop+0x60/0xb0 [ 2026.042088][T20613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2026.042110][T20613] RIP: 0033:0x7fac7f56f749 [ 2026.042131][T20613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2026.042150][T20613] RSP: 002b:00007ffc297ea788 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2026.042173][T20613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac7f56f749 [ 2026.042189][T20613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 2026.042204][T20613] RBP: 00007fac7f5f5888 R08: 00007ffc297e8526 R09: 00000000000927c0 [ 2026.042221][T20613] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 2026.042235][T20613] R13: 00000000000927c0 R14: 00000000001ee5e1 R15: 00007ffc297ea940 [ 2026.042273][T20613] [ 2026.042293][T20613] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2026.042309][T20613] CPU: 1 UID: 0 PID: 20613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2026.042335][T20613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2026.042349][T20613] Call Trace: [ 2026.042358][T20613] [ 2026.042368][T20613] dump_stack_lvl+0x99/0x250 [ 2026.042404][T20613] ? __asan_memcpy+0x40/0x70 [ 2026.042432][T20613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2026.042467][T20613] ? __pfx__printk+0x10/0x10 [ 2026.042510][T20613] vpanic+0x237/0x6d0 [ 2026.042540][T20613] ? __pfx_vpanic+0x10/0x10 [ 2026.042575][T20613] panic+0xb9/0xc0 [ 2026.042597][T20613] ? __pfx_panic+0x10/0x10 [ 2026.042637][T20613] __warn+0x31b/0x4b0 [ 2026.042658][T20613] ? kcov_task_exit+0x13c/0x150 [ 2026.042692][T20613] ? kcov_task_exit+0x13c/0x150 [ 2026.042722][T20613] report_bug+0x2be/0x4f0 [ 2026.042755][T20613] ? kcov_task_exit+0x13c/0x150 [ 2026.042787][T20613] ? kcov_task_exit+0x13c/0x150 [ 2026.042818][T20613] ? kcov_task_exit+0x13e/0x150 [ 2026.042849][T20613] handle_bug+0x84/0x160 [ 2026.042873][T20613] exc_invalid_op+0x1a/0x50 [ 2026.042897][T20613] asm_exc_invalid_op+0x1a/0x20 [ 2026.042919][T20613] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 2026.042949][T20613] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 42 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 2026.042969][T20613] RSP: 0018:ffffc9001e257d00 EFLAGS: 00010287 [ 2026.042988][T20613] RAX: c3ec46f133a1e900 RBX: ffff88814d1be900 RCX: 0000000000000000 [ 2026.043005][T20613] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 2026.043021][T20613] RBP: ffffc9001e257e68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 2026.043037][T20613] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff11004ba71fd [ 2026.043054][T20613] R13: 0000000000004300 R14: ffff88814d1be908 R15: ffff88803340da00 [ 2026.043080][T20613] ? rt_spin_lock+0x1c1/0x3e0 [ 2026.043119][T20613] do_exit+0x105/0x2300 [ 2026.043163][T20613] ? rt_mutex_slowunlock+0x493/0x8a0 [ 2026.043195][T20613] ? __pfx_do_exit+0x10/0x10 [ 2026.043231][T20613] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2026.043269][T20613] ? rt_spin_unlock+0x161/0x200 [ 2026.043301][T20613] do_group_exit+0x21c/0x2d0 [ 2026.043330][T20613] __x64_sys_exit_group+0x3f/0x40 [ 2026.043352][T20613] x64_sys_call+0x21f7/0x2200 [ 2026.043376][T20613] do_syscall_64+0xfa/0xfa0 [ 2026.043409][T20613] ? lockdep_hardirqs_on+0x9c/0x150 [ 2026.043443][T20613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2026.043467][T20613] ? clear_bhb_loop+0x60/0xb0 [ 2026.043496][T20613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2026.043519][T20613] RIP: 0033:0x7fac7f56f749 [ 2026.043545][T20613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2026.043564][T20613] RSP: 002b:00007ffc297ea788 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2026.043587][T20613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac7f56f749 [ 2026.043604][T20613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 2026.043619][T20613] RBP: 00007fac7f5f5888 R08: 00007ffc297e8526 R09: 00000000000927c0 [ 2026.043635][T20613] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 2026.043650][T20613] R13: 00000000000927c0 R14: 00000000001ee5e1 R15: 00007ffc297ea940 [ 2026.043688][T20613] [ 2026.044036][T20613] Kernel Offset: disabled