last executing test programs: 7.389634408s ago: executing program 3 (id=737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, 0x0}, 0x20) 7.162548025s ago: executing program 3 (id=741): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) r2 = fcntl$dupfd(r0, 0x0, r0) read$snapshot(r2, 0x0, 0xffffffbf) 6.663957881s ago: executing program 4 (id=748): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000001340)={0x40, 0x0, 0x8, {0x8, 0xc, "392cdaab1802"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "030000"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001740)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x20, 0x1, 0x3, "3b4581"}, 0x0}) 5.404035303s ago: executing program 2 (id=754): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r2, 0x1, {0x0, 0x0, 0x2}, 0x1}, 0x18) close(0x3) 5.362915758s ago: executing program 3 (id=755): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) syz_usb_connect(0x5, 0x1e0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e235e3209a060100c551010203010902"], 0x0) mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000002c0)='syscall\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000340)=""/242, 0xf2}], 0x1, 0x401, 0x5) 4.824135805s ago: executing program 2 (id=756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0x7, 0x6, 0x3000000002, 0xffffffffffffffed]}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000000)={[0x3333f000, 0xd000, 0x100000, 0x10000], 0x4, 0x44}) 4.43257324s ago: executing program 1 (id=759): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 4.253483979s ago: executing program 2 (id=761): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x7800, 0x8000, 0x80000001, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3.968592684s ago: executing program 2 (id=762): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 3.953649789s ago: executing program 4 (id=763): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) 3.7664523s ago: executing program 2 (id=764): socket$inet(0x2, 0x2, 0x6a113fc2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 3.313096522s ago: executing program 3 (id=765): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 3.048055739s ago: executing program 1 (id=767): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x80000000, 0x4) 3.015142919s ago: executing program 3 (id=768): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x7302, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.010265773s ago: executing program 0 (id=769): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r3, 0xc, 0xa, 0x78, 0x5, 0xb16}, 0x14) 2.800388441s ago: executing program 1 (id=770): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x6) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x21) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x21) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2.71388671s ago: executing program 4 (id=771): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) 2.650690566s ago: executing program 0 (id=772): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x104, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000005}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.515024527s ago: executing program 1 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2.378944722s ago: executing program 3 (id=774): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a", 0x23}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 2.308607242s ago: executing program 0 (id=775): r0 = socket$inet6(0xa, 0x5, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r0, 0xfffffeff) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0x544}], 0x1, 0x0, 0x0) 2.220515536s ago: executing program 1 (id=776): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, 0x0) dup(0xffffffffffffffff) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x7) 1.171871614s ago: executing program 0 (id=777): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x4, 0x101801) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) 1.00859128s ago: executing program 4 (id=778): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 947.879144ms ago: executing program 0 (id=779): r0 = socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) close_range(r0, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 915.86598ms ago: executing program 4 (id=780): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xffff}}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 128.622463ms ago: executing program 2 (id=781): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 84.288664ms ago: executing program 4 (id=782): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="b1", 0x1}], 0x1}}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 36.498978ms ago: executing program 1 (id=783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000054) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=784): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 77.477739][ T5825] cgroup: Unknown subsys name 'net' [ 77.705781][ T5825] cgroup: Unknown subsys name 'cpuset' [ 77.761669][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.388143][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.539912][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.546949][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.550876][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.559557][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.561699][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.562500][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.562783][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.563732][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.566400][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.569606][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.569858][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.573140][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.575071][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.577324][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.578417][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.578905][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.580371][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.581879][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.582053][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.603666][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.606388][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.608072][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.609898][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.631845][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.633473][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.569681][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 84.587660][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 84.613076][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 84.859214][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 84.980292][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 85.608733][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.608860][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.609364][ T5836] bridge_slave_0: entered allmulticast mode [ 85.622602][ T5845] Bluetooth: hci0: command tx timeout [ 85.623666][ T5836] bridge_slave_0: entered promiscuous mode [ 85.702194][ T5845] Bluetooth: hci3: command tx timeout [ 85.702289][ T5845] Bluetooth: hci2: command tx timeout [ 85.702338][ T5845] Bluetooth: hci1: command tx timeout [ 85.725834][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.725967][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.726155][ T5838] bridge_slave_0: entered allmulticast mode [ 85.728730][ T5838] bridge_slave_0: entered promiscuous mode [ 85.762150][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.762289][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.762478][ T5836] bridge_slave_1: entered allmulticast mode [ 85.765272][ T5836] bridge_slave_1: entered promiscuous mode [ 85.778211][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.778338][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.778500][ T5837] bridge_slave_0: entered allmulticast mode [ 85.781193][ T5848] Bluetooth: hci4: command tx timeout [ 85.781493][ T5837] bridge_slave_0: entered promiscuous mode [ 85.785168][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.785304][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.785482][ T5838] bridge_slave_1: entered allmulticast mode [ 85.788123][ T5838] bridge_slave_1: entered promiscuous mode [ 86.103333][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.103476][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.103717][ T5837] bridge_slave_1: entered allmulticast mode [ 86.106470][ T5837] bridge_slave_1: entered promiscuous mode [ 86.630045][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.630378][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.630558][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.630733][ T5847] bridge_slave_0: entered allmulticast mode [ 86.639389][ T5847] bridge_slave_0: entered promiscuous mode [ 86.657207][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.733780][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.733919][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.734102][ T5849] bridge_slave_0: entered allmulticast mode [ 86.736857][ T5849] bridge_slave_0: entered promiscuous mode [ 86.746000][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.746251][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.746381][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.746542][ T5847] bridge_slave_1: entered allmulticast mode [ 86.749372][ T5847] bridge_slave_1: entered promiscuous mode [ 86.825891][ T9] cfg80211: failed to load regulatory.db [ 86.840372][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.855043][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.855371][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.855498][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.855672][ T5849] bridge_slave_1: entered allmulticast mode [ 86.858332][ T5849] bridge_slave_1: entered promiscuous mode [ 87.064173][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.493679][ T5836] team0: Port device team_slave_0 added [ 87.497044][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.499416][ T5838] team0: Port device team_slave_0 added [ 87.595032][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.596936][ T5836] team0: Port device team_slave_1 added [ 87.599294][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.602153][ T5838] team0: Port device team_slave_1 added [ 87.605597][ T5837] team0: Port device team_slave_0 added [ 87.625563][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.701292][ T5848] Bluetooth: hci0: command tx timeout [ 87.782112][ T5848] Bluetooth: hci1: command tx timeout [ 87.782147][ T5848] Bluetooth: hci2: command tx timeout [ 87.782168][ T5848] Bluetooth: hci3: command tx timeout [ 87.861097][ T5845] Bluetooth: hci4: command tx timeout [ 87.884630][ T5837] team0: Port device team_slave_1 added [ 88.517286][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.517298][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.517311][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.520437][ T5847] team0: Port device team_slave_0 added [ 88.523442][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.523463][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.523485][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.660178][ T5849] team0: Port device team_slave_0 added [ 88.662320][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.662334][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.662357][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.665088][ T5847] team0: Port device team_slave_1 added [ 88.666243][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.666253][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.666275][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.668047][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.668058][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.668080][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.675033][ T5849] team0: Port device team_slave_1 added [ 88.702996][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.703012][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.703035][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.152438][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.152449][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.152462][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.250907][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.250920][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.251402][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.392537][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.392552][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.392575][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.393657][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.393666][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.393679][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.557178][ T5838] hsr_slave_0: entered promiscuous mode [ 89.558209][ T5838] hsr_slave_1: entered promiscuous mode [ 89.594636][ T5836] hsr_slave_0: entered promiscuous mode [ 89.595965][ T5836] hsr_slave_1: entered promiscuous mode [ 89.596973][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 89.597060][ T5836] Cannot create hsr debugfs directory [ 89.701478][ T5837] hsr_slave_0: entered promiscuous mode [ 89.702855][ T5837] hsr_slave_1: entered promiscuous mode [ 89.703731][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 89.703752][ T5837] Cannot create hsr debugfs directory [ 89.781125][ T5845] Bluetooth: hci0: command tx timeout [ 89.861326][ T5845] Bluetooth: hci3: command tx timeout [ 89.861357][ T5845] Bluetooth: hci2: command tx timeout [ 89.861377][ T5845] Bluetooth: hci1: command tx timeout [ 89.951975][ T5848] Bluetooth: hci4: command tx timeout [ 90.349633][ T5847] hsr_slave_0: entered promiscuous mode [ 90.350448][ T5847] hsr_slave_1: entered promiscuous mode [ 90.351842][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 90.351865][ T5847] Cannot create hsr debugfs directory [ 90.363889][ T5849] hsr_slave_0: entered promiscuous mode [ 90.365132][ T5849] hsr_slave_1: entered promiscuous mode [ 90.365973][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 90.365994][ T5849] Cannot create hsr debugfs directory [ 91.782946][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.821884][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.861526][ T5848] Bluetooth: hci0: command tx timeout [ 91.861604][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.922448][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.941270][ T5848] Bluetooth: hci1: command tx timeout [ 91.941301][ T5848] Bluetooth: hci2: command tx timeout [ 91.941321][ T5848] Bluetooth: hci3: command tx timeout [ 92.023135][ T5845] Bluetooth: hci4: command tx timeout [ 92.045082][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.089686][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.133407][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.177779][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.345928][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.376962][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.416618][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.462338][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.612871][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.650635][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.698204][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.747826][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.919076][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.960219][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.960489][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.008872][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.049770][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.170213][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.190883][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.241901][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.242110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.301841][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.301984][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.359818][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.413236][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.413450][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.428156][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.467625][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.467957][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.559919][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.588935][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.617158][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.617379][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.708338][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.708579][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.793599][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.828608][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.882250][ T1425] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.882402][ T1425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.973270][ T1425] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.973490][ T1425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.047749][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.119613][ T4404] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.119827][ T4404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.183105][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.185219][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.189754][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.533780][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.573125][ T5838] veth0_vlan: entered promiscuous mode [ 94.641727][ T5838] veth1_vlan: entered promiscuous mode [ 94.834717][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.905009][ T5836] veth0_vlan: entered promiscuous mode [ 94.922168][ T5838] veth0_macvtap: entered promiscuous mode [ 94.954155][ T5838] veth1_macvtap: entered promiscuous mode [ 94.971424][ T5836] veth1_vlan: entered promiscuous mode [ 94.976346][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.094740][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.166901][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.227601][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.234211][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.247833][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.254446][ T5849] veth0_vlan: entered promiscuous mode [ 95.268425][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.285168][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.309473][ T5836] veth0_macvtap: entered promiscuous mode [ 95.376831][ T5849] veth1_vlan: entered promiscuous mode [ 95.390892][ T5836] veth1_macvtap: entered promiscuous mode [ 95.622070][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.684205][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.689923][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.689949][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.767581][ T4404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.803305][ T4404] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.810713][ T5837] veth0_vlan: entered promiscuous mode [ 95.817753][ T4404] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.845664][ T4404] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.846317][ T5849] veth0_macvtap: entered promiscuous mode [ 95.873581][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.873600][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.957364][ T5849] veth1_macvtap: entered promiscuous mode [ 95.977925][ T5847] veth0_vlan: entered promiscuous mode [ 95.979606][ T5837] veth1_vlan: entered promiscuous mode [ 96.161738][ T5847] veth1_vlan: entered promiscuous mode [ 96.183004][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.261951][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.281288][ T1456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.281306][ T1456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.314206][ T4404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.328266][ T4404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.342672][ T4404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.384414][ T4404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.436598][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.436618][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.483267][ T5959] Bluetooth: MGMT ver 1.23 [ 96.518513][ T5837] veth0_macvtap: entered promiscuous mode [ 96.648470][ T5837] veth1_macvtap: entered promiscuous mode [ 96.663491][ T5847] veth0_macvtap: entered promiscuous mode [ 96.756514][ T5847] veth1_macvtap: entered promiscuous mode [ 96.946791][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.011056][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.011076][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.056123][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.073409][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.212982][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.258060][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.309624][ T1292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.314074][ T1292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.341154][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.341174][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.350703][ T1292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.397717][ T1292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.484137][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.504671][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.506290][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.548209][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.753517][ T5929] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.958522][ T5929] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.958553][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 97.958588][ T5929] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 97.958610][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.996593][ T5929] usb 3-1: config 0 descriptor?? [ 97.999366][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.999385][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.165830][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.165852][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.269240][ T1456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.269266][ T1456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.354252][ T5979] syz.1.11 (5979) used greatest stack depth: 18840 bytes left [ 98.357491][ T5929] usbhid 3-1:0.0: can't add hid device: -71 [ 98.357619][ T5929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 98.410575][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.410595][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.436117][ T5929] usb 3-1: USB disconnect, device number 2 [ 99.713981][ T6001] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 99.783244][ T6004] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 100.633907][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21'. [ 101.030333][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 101.030374][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 105.001025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.572636][ T6088] GUP no longer grows the stack in syz.0.49 (6088): 200000004000-20000000a000 (200000002000) [ 105.572693][ T6088] CPU: 1 UID: 0 PID: 6088 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 105.572717][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.572735][ T6088] Call Trace: [ 105.572743][ T6088] [ 105.572752][ T6088] dump_stack_lvl+0x189/0x250 [ 105.572800][ T6088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.572830][ T6088] ? __pfx__printk+0x10/0x10 [ 105.572849][ T6088] ? find_vma+0xe7/0x160 [ 105.572890][ T6088] __get_user_pages+0x237e/0x2b60 [ 105.572953][ T6088] get_user_pages_remote+0x2f1/0xad0 [ 105.572980][ T6088] ? __pfx_mtree_load+0x10/0x10 [ 105.573016][ T6088] ? __pfx_get_user_pages_remote+0x10/0x10 [ 105.573047][ T6088] ? __access_remote_vm+0x367/0x7d0 [ 105.573081][ T6088] __access_remote_vm+0x211/0x7d0 [ 105.573121][ T6088] ? __pfx___access_remote_vm+0x10/0x10 [ 105.573154][ T6088] ? set_page_refcounted+0xa0/0x1e0 [ 105.573183][ T6088] ? alloc_pages_noprof+0xe4/0x1e0 [ 105.573213][ T6088] proc_pid_cmdline_read+0x433/0x810 [ 105.573242][ T6088] ? __asan_memset+0x22/0x50 [ 105.573270][ T6088] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 105.573301][ T6088] ? rw_verify_area+0x2ac/0x4e0 [ 105.573328][ T6088] vfs_readv+0x5b0/0x850 [ 105.573357][ T6088] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 105.573389][ T6088] ? __pfx_vfs_readv+0x10/0x10 [ 105.573429][ T6088] ? __fget_files+0x2a/0x420 [ 105.573470][ T6088] ? __fget_files+0x3a6/0x420 [ 105.573494][ T6088] ? __fget_files+0x2a/0x420 [ 105.573528][ T6088] __x64_sys_preadv+0x19a/0x2a0 [ 105.573558][ T6088] ? __pfx___x64_sys_preadv+0x10/0x10 [ 105.573582][ T6088] ? rcu_is_watching+0x15/0xb0 [ 105.573616][ T6088] ? do_syscall_64+0xbe/0x3b0 [ 105.573638][ T6088] do_syscall_64+0xfa/0x3b0 [ 105.573655][ T6088] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.573683][ T6088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.573701][ T6088] ? clear_bhb_loop+0x60/0xb0 [ 105.573727][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.573746][ T6088] RIP: 0033:0x7f6f22d2eba9 [ 105.573771][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.573787][ T6088] RSP: 002b:00007f6f20f8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 105.573810][ T6088] RAX: ffffffffffffffda RBX: 00007f6f22f75fa0 RCX: 00007f6f22d2eba9 [ 105.573825][ T6088] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 105.573838][ T6088] RBP: 00007f6f22db1e19 R08: 0000000021000008 R09: 0000000000000000 [ 105.573850][ T6088] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000 [ 105.573862][ T6088] R13: 00007f6f22f76038 R14: 00007f6f22f75fa0 R15: 00007ffc1775a708 [ 105.573895][ T6088] [ 106.861200][ T6107] kvm_intel: kvm [6106]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x3a [ 108.441369][ T6128] netlink: 'syz.1.63': attribute type 15 has an invalid length. [ 110.120979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.331001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.331450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.332600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.333718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.334873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.336007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.361005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.361540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.283101][ T5841] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 111.353810][ T6166] netlink: 452 bytes leftover after parsing attributes in process `syz.2.75'. [ 111.441117][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 111.578732][ T5841] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 111.578749][ T5841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.578759][ T5841] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.578769][ T5841] usb 4-1: config 1 has no interface number 1 [ 111.578794][ T5841] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 111.578815][ T5841] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.583675][ T5841] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.583704][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.583722][ T5841] usb 4-1: Product: syz [ 111.583735][ T5841] usb 4-1: Manufacturer: syz [ 111.583747][ T5841] usb 4-1: SerialNumber: syz [ 111.924744][ T5841] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 111.924773][ T5841] usb 4-1: found format II with max.bitrate = 0, frame size=0 [ 111.924794][ T5841] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 112.357643][ T5841] usb 4-1: USB disconnect, device number 2 [ 112.406185][ T37] audit: type=1326 audit(1757843659.547:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.1.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 112.406780][ T37] audit: type=1326 audit(1757843659.547:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.1.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 112.406823][ T37] audit: type=1326 audit(1757843659.547:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6174 comm="syz.1.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 112.885558][ T37] audit: type=1326 audit(1757843660.007:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6178 comm="syz.0.82" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f22d2eba9 code=0x0 [ 112.906309][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.211133][ T5929] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.351106][ T5855] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.374541][ T5929] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 114.374570][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.416851][ T5929] usb 4-1: config 0 descriptor?? [ 114.430692][ T5929] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 114.511774][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 114.515813][ T5855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.515870][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.515896][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 114.515917][ T5855] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 114.515939][ T5855] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.533867][ T5855] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 114.533896][ T5855] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 114.533915][ T5855] usb 3-1: Manufacturer: syz [ 114.649021][ T5855] usb 3-1: config 0 descriptor?? [ 115.004806][ T6217] netlink: 'syz.0.92': attribute type 1 has an invalid length. [ 115.004829][ T6217] netlink: 'syz.0.92': attribute type 4 has an invalid length. [ 115.004841][ T6217] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.92'. [ 115.241074][ T5855] rc_core: IR keymap rc-hauppauge not found [ 115.241094][ T5855] Registered IR keymap rc-empty [ 115.241723][ T5855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.267682][ T5855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.316325][ T5855] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 115.338372][ T5855] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 115.403583][ T5855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.424751][ T5855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.441497][ T5855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.461533][ T5855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.481271][ T5855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.519696][ T5855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.533196][ T5855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.554348][ T5855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.571404][ T5855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.601197][ T5855] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 115.692573][ T5929] usb 4-1: USB disconnect, device number 3 [ 115.769231][ T5855] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 115.769256][ T5855] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.853547][ T5855] usb 3-1: USB disconnect, device number 3 [ 116.080764][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.96'. [ 116.353713][ T5929] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.051140][ T5929] usb 5-1: Using ep0 maxpacket: 32 [ 117.053648][ T5929] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 117.053671][ T5929] usb 5-1: config 0 has no interface number 0 [ 117.067151][ T5929] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 117.067181][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.067200][ T5929] usb 5-1: Product: syz [ 117.067212][ T5929] usb 5-1: Manufacturer: syz [ 117.067225][ T5929] usb 5-1: SerialNumber: syz [ 117.178152][ T5929] usb 5-1: config 0 descriptor?? [ 117.189079][ T5929] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 117.388754][ T37] audit: type=1326 audit(1757843664.517:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 117.388804][ T37] audit: type=1326 audit(1757843664.527:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 117.443449][ T37] audit: type=1326 audit(1757843664.527:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 117.443495][ T37] audit: type=1326 audit(1757843664.587:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 117.443535][ T37] audit: type=1326 audit(1757843664.587:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 117.460766][ T37] audit: type=1326 audit(1757843664.587:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 117.460817][ T37] audit: type=1326 audit(1757843664.587:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 117.465806][ T37] audit: type=1326 audit(1757843664.607:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 117.465853][ T37] audit: type=1326 audit(1757843664.607:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 117.465978][ T5855] usb 5-1: USB disconnect, device number 2 [ 117.475414][ T37] audit: type=1326 audit(1757843664.617:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 117.475461][ T37] audit: type=1326 audit(1757843664.617:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 117.475498][ T37] audit: type=1326 audit(1757843664.617:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6247 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 119.395784][ T6303] tipc: Failed to remove unknown binding: 66,1,1/0:2720471315/2720471317 [ 119.395825][ T6303] tipc: Failed to remove unknown binding: 66,1,1/0:2720471315/2720471317 [ 119.801150][ T5681] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.985750][ T5681] usb 3-1: Using ep0 maxpacket: 32 [ 119.994460][ T5681] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 119.994502][ T5681] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 119.994542][ T5681] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 119.994567][ T5681] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 119.994593][ T5681] usb 3-1: config 0 interface 0 has no altsetting 0 [ 119.997642][ T5681] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 119.997669][ T5681] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 119.997689][ T5681] usb 3-1: Product: syz [ 119.997702][ T5681] usb 3-1: Manufacturer: syz [ 119.997715][ T5681] usb 3-1: SerialNumber: syz [ 120.032387][ T5681] usb 3-1: config 0 descriptor?? [ 120.039841][ T5681] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 120.186552][ T6312] input: syz1 as /devices/virtual/input/input6 [ 120.458810][ T5681] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 120.972239][ T6323] ldusb 3-1:0.0: Write buffer overflow, 2147479232 bytes dropped [ 121.847456][ T6333] veth0: entered promiscuous mode [ 121.878751][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 122.606590][ T6017] usb 3-1: USB disconnect, device number 4 [ 122.606627][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 122.743176][ T6017] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 122.812707][ T5855] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 122.963535][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.963570][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.963606][ T5855] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.963629][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.999797][ T5855] usb 4-1: config 0 descriptor?? [ 123.020395][ T5855] hub 4-1:0.0: USB hub found [ 123.161190][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.233718][ T5855] hub 4-1:0.0: 1 port detected [ 123.251258][ T6017] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 123.311124][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 123.314681][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 123.314710][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.352703][ T9] usb 1-1: config 0 descriptor?? [ 123.421139][ T6017] usb 3-1: Using ep0 maxpacket: 16 [ 123.451444][ T6017] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 123.451469][ T6017] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.451487][ T6017] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.495929][ T6017] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.496017][ T6017] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.496037][ T6017] usb 3-1: Product: syz [ 123.496050][ T6017] usb 3-1: Manufacturer: syz [ 123.496063][ T6017] usb 3-1: SerialNumber: syz [ 123.611137][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 123.723768][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.728862][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 123.729168][ T9] usb 1-1: media controller created [ 123.816914][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.850365][ T5841] hub 4-1:0.0: activate --> -90 [ 124.066199][ T6017] usb 3-1: 0:2 : does not exist [ 124.279172][ T5841] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 124.279198][ T5841] hub_port_connect: 4 callbacks suppressed [ 124.279210][ T5841] usb 4-1-port1: connect-debounce failed [ 124.324128][ T5841] usb 4-1: Failed to suspend device, error -71 [ 124.411471][ T989] usb 4-1: USB disconnect, device number 4 [ 124.444974][ T6357] capability: warning: `syz.1.135' uses 32-bit capabilities (legacy support in use) [ 124.715633][ T6017] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 124.764249][ T6017] usb 3-1: USB disconnect, device number 5 [ 124.781096][ T9] stb0899_attach: Driver disabled by Kconfig [ 124.781111][ T9] az6027: no front-end attached [ 124.781111][ T9] [ 124.790652][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 124.826035][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 124.829818][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 124.829841][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 124.947257][ T6185] udevd[6185]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.004124][ T49] usb 1-1: USB disconnect, device number 2 [ 125.330346][ T49] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 125.361131][ T5841] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.531153][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 125.604150][ T5841] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 125.604180][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.604199][ T5841] usb 5-1: Product: syz [ 125.604212][ T5841] usb 5-1: Manufacturer: syz [ 125.604225][ T5841] usb 5-1: SerialNumber: syz [ 125.623622][ T5841] usb 5-1: config 0 descriptor?? [ 125.898742][ T5841] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 126.367157][ T5841] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 126.431486][ T5841] usb 5-1: USB disconnect, device number 3 [ 130.261514][ T989] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 130.411889][ T989] usb 3-1: Using ep0 maxpacket: 8 [ 130.416662][ T989] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 130.416688][ T989] usb 3-1: config 0 has no interface number 0 [ 130.416747][ T989] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.416768][ T989] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 130.416788][ T989] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.416811][ T989] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.416847][ T989] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 130.416869][ T989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.426324][ T989] usb 3-1: config 0 descriptor?? [ 130.543644][ T989] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 130.755236][ T5841] usb 3-1: USB disconnect, device number 6 [ 130.922587][ T5841] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 132.912172][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.912269][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.919432][ T1322] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 132.972437][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 133.121314][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 133.123653][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.123683][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.123704][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.123743][ T9] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 133.123765][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.189572][ T9] usb 5-1: config 0 descriptor?? [ 133.643027][ T9] hid (null): bogus close delimiter [ 133.719236][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 133.719276][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 133.719303][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 133.719328][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 133.719353][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 133.719377][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 133.719404][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 133.719430][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 133.719454][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 133.719478][ T9] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 133.821440][ T9] cougar 0003:060B:500A.0001: bogus close delimiter [ 133.821463][ T9] cougar 0003:060B:500A.0001: item 0 2 2 10 parsing failed [ 133.822454][ T9] cougar 0003:060B:500A.0001: parse failed [ 133.822561][ T9] cougar 0003:060B:500A.0001: probe with driver cougar failed with error -22 [ 133.885190][ T9] usb 5-1: USB disconnect, device number 4 [ 133.940825][ T6513] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 134.671452][ T5855] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.781181][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.841525][ T5855] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 134.841564][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.860308][ T5855] usb 2-1: config 0 descriptor?? [ 134.879411][ T5855] gspca_main: spca508-2.14.0 probing 8086:0110 [ 134.943165][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 134.968856][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.968912][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.968939][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.968960][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 134.968981][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.970699][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.970724][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.970743][ T9] usb 3-1: Manufacturer: syz [ 135.051273][ T5681] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.079913][ T9] usb 3-1: config 0 descriptor?? [ 135.141397][ T5855] gspca_spca508: reg_read err -32 [ 135.214843][ T5855] gspca_spca508: reg_read err -32 [ 135.230583][ T5855] gspca_spca508: reg_read err -32 [ 135.235229][ T5681] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.235309][ T5681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.235328][ T5681] usb 4-1: Product: syz [ 135.235341][ T5681] usb 4-1: Manufacturer: syz [ 135.235354][ T5681] usb 4-1: SerialNumber: syz [ 135.236536][ T5855] gspca_spca508: reg_read err -32 [ 135.260783][ T5855] gspca_spca508: reg_read err -32 [ 135.413132][ T9] rc_core: IR keymap rc-hauppauge not found [ 135.413153][ T9] Registered IR keymap rc-empty [ 135.413292][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.431165][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.452836][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 135.482621][ T5855] gspca_spca508: reg write: error -71 [ 135.482761][ T5855] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 135.512100][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 135.527572][ T5855] usb 2-1: USB disconnect, device number 2 [ 135.560188][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.586154][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.601253][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.623988][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.624180][ T6548] syz.4.193 uses obsolete (PF_INET,SOCK_PACKET) [ 135.641113][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.661118][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.681185][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.701117][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.721112][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.741706][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 135.800551][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 135.800627][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 135.907430][ T10] libceph: connect (1)[c::]:6789 error -101 [ 135.919719][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 135.932778][ T9] usb 3-1: USB disconnect, device number 7 [ 135.961847][ T10] libceph: connect (1)[c::]:6789 error -101 [ 135.962060][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 136.038379][ T6539] ceph: No mds server is up or the cluster is laggy [ 136.314217][ T6553] netlink: 'syz.1.194': attribute type 2 has an invalid length. [ 136.328560][ T6553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.194'. [ 136.513973][ T5681] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 136.514013][ T5681] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 137.095659][ T5681] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 137.162209][ T5681] usb 4-1: USB disconnect, device number 5 [ 137.213219][ T5681] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 138.049950][ T6582] kvm: emulating exchange as write [ 138.355611][ T6592] trusted_key: syz.1.209 sent an empty control message without MSG_MORE. [ 139.746446][ T6613] loop4: detected capacity change from 0 to 7 [ 139.792730][ T6613] Dev loop4: unable to read RDB block 7 [ 139.792774][ T6613] loop4: unable to read partition table [ 139.793159][ T6613] loop4: partition table beyond EOD, truncated [ 139.793191][ T6613] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 139.971711][ T37] audit: type=1326 audit(1757843687.117:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.1.219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4d633eba9 code=0x0 [ 141.536613][ T6633] gtp0: entered promiscuous mode [ 141.572206][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 141.825324][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 143.686620][ T6659] tipc: Started in network mode [ 143.686652][ T6659] tipc: Node identity fffeffff, cluster identity 4711 [ 143.686666][ T6659] tipc: Node number set to 4294901759 [ 144.088442][ T6668] input: syz1 as /devices/virtual/input/input9 [ 144.261034][ T5841] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 144.420278][ T5841] usb 2-1: config index 0 descriptor too short (expected 14385, got 36) [ 144.420303][ T5841] usb 2-1: config 52 has too many interfaces: 52, using maximum allowed: 32 [ 144.420322][ T5841] usb 2-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config [ 144.420340][ T5841] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 52 [ 144.475781][ T5841] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 144.475812][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.475832][ T5841] usb 2-1: Product: syz [ 144.475939][ T5841] usb 2-1: Manufacturer: syz [ 144.475953][ T5841] usb 2-1: SerialNumber: syz [ 144.825992][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.826639][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.845243][ T9] hid_parser_main: 48 callbacks suppressed [ 144.845263][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 144.845292][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 144.845317][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 144.845341][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 144.845367][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 144.845392][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 144.845423][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 144.845447][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 144.845472][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 144.845497][ T9] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 144.902845][ T9] hid-generic 0006:0004:0009.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 144.957533][ T5841] usb 2-1: USB disconnect, device number 3 [ 145.310184][ T6684] fido_id[6684]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 145.338293][ T6689] Driver unsupported XDP return value 0 on prog (id 45) dev N/A, expect packet loss! [ 145.468812][ T6694] vcan0: tx drop: invalid sa for name 0xbffffffffffffffd [ 145.748919][ T6700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.431092][ T5681] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 146.581169][ T5681] usb 3-1: Using ep0 maxpacket: 8 [ 146.588953][ T5681] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 146.588981][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.589000][ T5681] usb 3-1: Product: syz [ 146.589014][ T5681] usb 3-1: Manufacturer: syz [ 146.589027][ T5681] usb 3-1: SerialNumber: syz [ 146.644404][ T5681] usb 3-1: config 0 descriptor?? [ 146.861201][ T5681] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 147.081162][ T5681] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 147.108086][ T5681] usb 3-1: USB disconnect, device number 8 [ 147.481505][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.483340][ T6736] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.224215][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 148.545463][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.545523][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 148.545549][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 148.545574][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 148.545595][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 148.570295][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 148.570322][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 148.570341][ T10] usb 1-1: Product: syz [ 148.570354][ T10] usb 1-1: Manufacturer: syz [ 148.570367][ T10] usb 1-1: SerialNumber: syz [ 148.576781][ T10] usb 1-1: config 0 descriptor?? [ 148.892168][ T10] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 148.892194][ T10] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 149.111079][ T10] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 149.111103][ T10] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 149.111121][ T10] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 149.297925][ T10] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 150.090071][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.107437][ T10] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 150.107790][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 150.163383][ T10] usb 1-1: USB disconnect, device number 3 [ 150.189282][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.541028][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'. [ 153.541815][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.548938][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 153.549563][ T6783] Zero length message leads to an empty skb [ 153.583806][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.585708][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.588540][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.218227][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.371135][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 154.373240][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.373257][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.373279][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 154.373291][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.380835][ T6837] mmap: syz.0.301 (6837) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.389232][ T10] usb 3-1: config 0 descriptor?? [ 154.841808][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.936050][ T10] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 154.993841][ T9] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 154.993869][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.993887][ T9] usb 5-1: config 0 has no interfaces? [ 154.993917][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.993939][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.061804][ T9] usb 5-1: config 0 descriptor?? [ 155.119474][ T5841] usb 3-1: USB disconnect, device number 9 [ 155.197945][ T6842] fido_id[6842]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 155.360761][ T9] usb 5-1: USB disconnect, device number 5 [ 157.352822][ T6886] smc: net device bond0 applied user defined pnetid SYZ0 [ 157.353554][ T6886] smc: net device bond0 erased user defined pnetid SYZ0 [ 157.932609][ T6898] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 158.188579][ T6898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.189990][ T6903] 9pnet: p9_errstr2errno: server reported unknown error pA [ 158.937947][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.947528][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.338427][ T6929] bridge_slave_0: left allmulticast mode [ 159.338459][ T6929] bridge_slave_0: left promiscuous mode [ 159.338733][ T6929] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.514519][ T6929] bridge_slave_1: left allmulticast mode [ 159.514553][ T6929] bridge_slave_1: left promiscuous mode [ 159.514853][ T6929] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.618333][ T6943] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.694269][ T6929] bond0: (slave bond_slave_0): Releasing backup interface [ 159.802051][ T6929] bond0: (slave bond_slave_1): Releasing backup interface [ 159.918105][ T6929] team0: Port device team_slave_0 removed [ 159.989856][ T6929] team0: Port device team_slave_1 removed [ 159.994602][ T6929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.994633][ T6929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.042449][ T6929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.042482][ T6929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.061657][ T6985] ceph: No mds server is up or the cluster is laggy [ 162.062219][ T10] libceph: connect (1)[c::]:6789 error -101 [ 162.062439][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 164.040780][ T7007] ALSA: seq fatal error: cannot create timer (-16) [ 164.984210][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 164.984806][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 165.918653][ T37] audit: type=1326 audit(1757843713.057:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7051 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7643daeba9 code=0x7ffc0000 [ 165.944769][ T37] audit: type=1326 audit(1757843713.087:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7051 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7643daeba9 code=0x7ffc0000 [ 165.952782][ T37] audit: type=1326 audit(1757843713.097:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7051 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7643daeba9 code=0x7ffc0000 [ 165.952831][ T37] audit: type=1326 audit(1757843713.097:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7051 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7643daeba9 code=0x7ffc0000 [ 165.952868][ T37] audit: type=1326 audit(1757843713.097:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7051 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7643daeba9 code=0x7ffc0000 [ 165.952905][ T37] audit: type=1326 audit(1757843713.097:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7051 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7643daeba9 code=0x7ffc0000 [ 165.952941][ T37] audit: type=1326 audit(1757843713.097:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7051 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7643daeba9 code=0x7ffc0000 [ 165.952977][ T37] audit: type=1326 audit(1757843713.097:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7051 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7643daeba9 code=0x7ffc0000 [ 165.970756][ T37] audit: type=1326 audit(1757843713.107:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7051 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7643daeba9 code=0x7ffc0000 [ 165.970803][ T37] audit: type=1326 audit(1757843713.107:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7051 comm="syz.2.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7643daeba9 code=0x7ffc0000 [ 166.502947][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 167.990010][ T7112] warning: `syz.2.399' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 168.049000][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 168.196519][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.196554][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.196592][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 168.196614][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.245793][ T9] usb 4-1: config 0 descriptor?? [ 168.782546][ T9] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 169.187208][ T7132] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.759127][ T9] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 169.759182][ T9] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 169.841765][ T9] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 169.920032][ T9] usb 4-1: USB disconnect, device number 6 [ 171.101075][ T5942] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 171.317394][ T5942] usb 1-1: config 15 has too many interfaces: 102, using maximum allowed: 32 [ 171.317423][ T5942] usb 1-1: config 15 has an invalid descriptor of length 224, skipping remainder of the config [ 171.317441][ T5942] usb 1-1: config 15 has 0 interfaces, different from the descriptor's value: 102 [ 171.317478][ T5942] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 171.317500][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.943090][ T7145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.047102][ T7145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.064920][ T5942] usb 1-1: string descriptor 0 read error: -71 [ 172.099778][ T5942] usb 1-1: USB disconnect, device number 4 [ 172.138682][ T7145] bond0 (unregistering): Released all slaves [ 172.318873][ T7161] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 172.319087][ T7161] syzkaller1: linktype set to 773 [ 173.074548][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'. [ 173.651083][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 173.816018][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 173.818316][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.818362][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 173.818383][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.836246][ T9] usb 1-1: config 0 descriptor?? [ 173.865782][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 174.028656][ T10] usb 3-1: config 3 has an invalid interface number: 168 but max is 0 [ 174.028683][ T10] usb 3-1: config 3 has no interface number 0 [ 174.028800][ T10] usb 3-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 174.028825][ T10] usb 3-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 174.028849][ T10] usb 3-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 174.028940][ T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 174.028961][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.257664][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 174.284546][ T7210] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 178.120314][ T5841] usb 1-1: USB disconnect, device number 5 [ 178.512806][ T10] usb 3-1: string descriptor 0 read error: -71 [ 178.515017][ T10] keyspan 3-1:3.168: Keyspan 2 port adapter converter detected [ 178.515464][ T10] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 1 [ 178.595057][ T10] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 84 [ 178.595149][ T10] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 2 [ 178.650295][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 178.671185][ T5841] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 178.699052][ T10] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 88 [ 178.699149][ T10] keyspan 3-1:3.168: found no endpoint descriptor for endpoint 6 [ 178.725339][ T10] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 178.751617][ T10] usb 3-1: USB disconnect, device number 10 [ 178.804226][ T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 178.821172][ T5841] usb 1-1: Using ep0 maxpacket: 16 [ 178.823685][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.823702][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.823714][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 178.823736][ T5841] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 178.823748][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.884718][ T5841] usb 1-1: config 0 descriptor?? [ 178.903289][ T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 178.904234][ T10] keyspan 3-1:3.168: device disconnected [ 179.074422][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'. [ 179.378325][ T5841] hid-multitouch 0003:0457:07DA.0005: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 179.627979][ T5841] usb 1-1: USB disconnect, device number 6 [ 179.748606][ T7246] fido_id[7246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 179.932839][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 179.932856][ T37] audit: type=1326 audit(1757843727.077:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 179.955358][ T37] audit: type=1326 audit(1757843727.087:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 179.955405][ T37] audit: type=1326 audit(1757843727.087:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 179.955440][ T37] audit: type=1326 audit(1757843727.087:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 179.955477][ T37] audit: type=1326 audit(1757843727.087:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 179.955516][ T37] audit: type=1326 audit(1757843727.097:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 179.955551][ T37] audit: type=1326 audit(1757843727.097:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 179.959266][ T37] audit: type=1326 audit(1757843727.097:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 179.959312][ T37] audit: type=1326 audit(1757843727.097:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 179.959349][ T37] audit: type=1326 audit(1757843727.097:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.1.451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d633eba9 code=0x7ffc0000 [ 181.461072][ T5845] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 182.021365][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.172359][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 182.174992][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 182.175023][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 182.175048][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 182.175068][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 182.175092][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 182.178299][ T10] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 182.178326][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.178345][ T10] usb 5-1: Product: syz [ 182.178357][ T10] usb 5-1: Manufacturer: syz [ 182.178369][ T10] usb 5-1: SerialNumber: syz [ 182.255590][ T10] usb 5-1: config 0 descriptor?? [ 182.752783][ T10] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 182.752851][ T10] input input10: Device does not respond to id packet M [ 182.758978][ T10] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 182.759026][ T10] input input10: Device does not respond to id packet P [ 182.759803][ T10] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 182.760066][ T10] input input10: Device does not respond to id packet B [ 182.760794][ T10] input input10: Limiting number of effects to 32 (device reports 51) [ 182.953032][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 182.963016][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 182.971325][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 182.972436][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 182.976317][ T10] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 182.998678][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 183.163192][ T10] usb 5-1: USB disconnect, device number 6 [ 183.182347][ T5189] iforce 5-1:0.0: usb_submit_urb failed -19 [ 184.146211][ T7320] netlink: 'syz.0.477': attribute type 16 has an invalid length. [ 184.146234][ T7320] netlink: 'syz.0.477': attribute type 17 has an invalid length. [ 184.341132][ T7320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.862831][ T7337] ======================================================= [ 184.862831][ T7337] WARNING: The mand mount option has been deprecated and [ 184.862831][ T7337] and is ignored by this kernel. Remove the mand [ 184.862831][ T7337] option from the mount to silence this warning. [ 184.862831][ T7337] ======================================================= [ 185.981107][ T6762] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 186.136753][ T6762] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 186.136787][ T6762] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 186.136824][ T6762] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 186.136846][ T6762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.254490][ T6762] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 187.257741][ T6762] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input11 [ 187.371246][ T6762] input: failed to attach handler kbd to device input11, error: -5 [ 187.468212][ T6762] usb 5-1: USB disconnect, device number 7 [ 188.294629][ T7418] sg_read: process 271 (syz.4.515) changed security contexts after opening file descriptor, this is not allowed. [ 188.960551][ T7437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.867545][ T1456] TC_ACT_REPEAT abuse ? [ 189.869363][ T9] TC_ACT_REPEAT abuse ? [ 189.897012][ T9] TC_ACT_REPEAT abuse ? [ 191.079687][ T7461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 191.079712][ T7461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.079739][ T7461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.109469][ T7461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.109500][ T7461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.132172][ T5942] hid_parser_main: 7 callbacks suppressed [ 191.132193][ T5942] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 191.147833][ T5681] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.285888][ T5942] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 191.291145][ T5681] usb 1-1: Using ep0 maxpacket: 8 [ 191.296510][ T5681] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 191.296537][ T5681] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.296556][ T5681] usb 1-1: Product: syz [ 191.296568][ T5681] usb 1-1: Manufacturer: syz [ 191.296581][ T5681] usb 1-1: SerialNumber: syz [ 191.456030][ T5681] usb 1-1: config 0 descriptor?? [ 191.734337][ T5681] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 192.938269][ T5681] gspca_sunplus: reg_w_riv err -71 [ 192.938371][ T5681] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 192.941931][ T5681] usb 1-1: USB disconnect, device number 7 [ 192.985872][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 192.985889][ T37] audit: type=1326 audit(1757843740.127:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bb13eba9 code=0x7ffc0000 [ 192.987089][ T37] audit: type=1326 audit(1757843740.127:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bb13eba9 code=0x7ffc0000 [ 192.990049][ T37] audit: type=1326 audit(1757843740.127:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff4bb13eba9 code=0x7ffc0000 [ 193.123480][ T37] audit: type=1326 audit(1757843740.167:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bb13eba9 code=0x7ffc0000 [ 193.123529][ T37] audit: type=1326 audit(1757843740.267:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff4bb13eba9 code=0x7ffc0000 [ 193.123569][ T37] audit: type=1326 audit(1757843740.267:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bb13eba9 code=0x7ffc0000 [ 193.123607][ T37] audit: type=1326 audit(1757843740.267:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bb13eba9 code=0x7ffc0000 [ 193.125284][ T37] audit: type=1326 audit(1757843740.267:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4bb13eba9 code=0x7ffc0000 [ 193.125329][ T37] audit: type=1326 audit(1757843740.267:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bb13eba9 code=0x7ffc0000 [ 193.125368][ T37] audit: type=1326 audit(1757843740.267:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.3.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bb13eba9 code=0x7ffc0000 [ 194.348193][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348267][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.356288][ T1322] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 195.397008][ T7524] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 195.648994][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 195.767273][ T7539] erspan0: entered promiscuous mode [ 195.767548][ T7539] macvtap1: entered promiscuous mode [ 195.798284][ T7539] macvtap1: entered allmulticast mode [ 195.798301][ T7539] erspan0: entered allmulticast mode [ 196.138750][ T7543] erspan0: left allmulticast mode [ 196.138979][ T7543] erspan0: left promiscuous mode [ 199.468270][ T6762] TC_ACT_REPEAT abuse ? [ 200.020433][ T7625] 9pnet_fd: Insufficient options for proto=fd [ 201.106780][ T5845] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 201.106822][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 201.106846][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 201.106859][ T5845] Workqueue: hci4 hci_rx_work [ 201.106893][ T5845] Call Trace: [ 201.106901][ T5845] [ 201.106909][ T5845] dump_stack_lvl+0x189/0x250 [ 201.106949][ T5845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.106977][ T5845] ? __pfx__printk+0x10/0x10 [ 201.107004][ T5845] ? kernfs_path_from_node+0x2c/0x280 [ 201.107025][ T5845] ? kernfs_path_from_node+0x243/0x280 [ 201.107043][ T5845] ? kernfs_path_from_node+0x2c/0x280 [ 201.107066][ T5845] sysfs_create_dir_ns+0x259/0x280 [ 201.107096][ T5845] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 201.107123][ T5845] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 201.107154][ T5845] ? rt_spin_unlock+0x65/0x80 [ 201.107185][ T5845] kobject_add_internal+0x5a5/0xb50 [ 201.107222][ T5845] kobject_add+0x155/0x220 [ 201.107249][ T5845] ? __pfx_kobject_add+0x10/0x10 [ 201.107277][ T5845] ? get_device_parent+0x370/0x3a0 [ 201.107301][ T5845] device_add+0x408/0xb50 [ 201.107325][ T5845] hci_conn_add_sysfs+0xd5/0x1e0 [ 201.107350][ T5845] le_conn_complete_evt+0xc3a/0x1220 [ 201.107392][ T5845] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 201.107422][ T5845] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 201.107451][ T5845] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.107484][ T5845] ? skb_pull_data+0xfb/0x200 [ 201.107512][ T5845] hci_le_conn_complete_evt+0x187/0x450 [ 201.107548][ T5845] hci_event_packet+0x78c/0x1200 [ 201.107574][ T5845] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 201.107604][ T5845] ? __pfx_hci_event_packet+0x10/0x10 [ 201.107630][ T5845] ? __pfx_migrate_enable+0x10/0x10 [ 201.107663][ T5845] ? hci_send_to_monitor+0xe2/0x570 [ 201.107697][ T5845] hci_rx_work+0x46a/0xe80 [ 201.107729][ T5845] ? process_scheduled_works+0x9ef/0x17b0 [ 201.107756][ T5845] process_scheduled_works+0xade/0x17b0 [ 201.107812][ T5845] ? __pfx_process_scheduled_works+0x10/0x10 [ 201.107857][ T5845] worker_thread+0x8a0/0xda0 [ 201.107911][ T5845] kthread+0x70e/0x8a0 [ 201.107943][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 201.107968][ T5845] ? __pfx_kthread+0x10/0x10 [ 201.108002][ T5845] ? __pfx_kthread+0x10/0x10 [ 201.108032][ T5845] ret_from_fork+0x439/0x7d0 [ 201.108061][ T5845] ? __pfx_ret_from_fork+0x10/0x10 [ 201.108094][ T5845] ? __switch_to_asm+0x39/0x70 [ 201.108112][ T5845] ? __switch_to_asm+0x33/0x70 [ 201.108129][ T5845] ? __pfx_kthread+0x10/0x10 [ 201.108159][ T5845] ret_from_fork_asm+0x1a/0x30 [ 201.108196][ T5845] [ 201.109116][ T5845] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 201.109161][ T5845] Bluetooth: hci4: failed to register connection device [ 202.262040][ T5681] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 202.411913][ T5681] usb 4-1: Using ep0 maxpacket: 8 [ 202.414653][ T5681] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.414680][ T5681] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.414703][ T5681] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 202.414726][ T5681] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.414767][ T5681] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.414788][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.710620][ T5681] usb 4-1: GET_CAPABILITIES returned 0 [ 202.710670][ T5681] usbtmc 4-1:16.0: can't read capabilities [ 202.955350][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 203.050675][ T5942] usb 4-1: USB disconnect, device number 7 [ 205.137590][ T9] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 205.137624][ T9] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 205.137649][ T9] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 205.195380][ T9] hid-generic 0000:0004:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 205.454104][ T7727] fido_id[7727]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.792646][ T7742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 205.831747][ T7740] netlink: 'syz.1.621': attribute type 2 has an invalid length. [ 206.114468][ T7750] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 206.665053][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 206.681080][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 206.681215][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 206.681241][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 206.681264][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 206.812412][ T5681] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 206.968825][ T5681] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.970439][ T5681] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.011965][ T5681] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.011995][ T5681] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.012013][ T5681] usb 2-1: Product: syz [ 207.012026][ T5681] usb 2-1: Manufacturer: syz [ 207.012039][ T5681] usb 2-1: SerialNumber: syz [ 207.421510][ T5681] usb 2-1: USB disconnect, device number 4 [ 207.602444][ T6185] udevd[6185]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.082486][ T7798] batadv_slave_1: entered promiscuous mode [ 208.494510][ T7797] batadv_slave_1: left promiscuous mode [ 208.821290][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 209.028488][ T7814] vlan2: entered allmulticast mode [ 209.028510][ T7814] macvtap0: entered allmulticast mode [ 210.629707][ T7835] netlink: 'syz.1.660': attribute type 1 has an invalid length. [ 210.721095][ T6762] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 210.849050][ T7837] gretap1: entered allmulticast mode [ 210.863226][ T7837] bond1: (slave gretap1): making interface the new active one [ 210.864728][ T7837] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 210.888869][ T6762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.888889][ T6762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.888910][ T6762] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 210.888922][ T6762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.952974][ T6762] usb 3-1: config 0 descriptor?? [ 211.404719][ T6762] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 211.681279][ T5681] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 211.851132][ T5681] usb 4-1: Using ep0 maxpacket: 32 [ 211.859361][ T5681] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 211.859390][ T5681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.872568][ T5681] usb 4-1: config 0 descriptor?? [ 211.920435][ T5681] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 212.814131][ T6762] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 212.814189][ T6762] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 212.863425][ T6762] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -71 [ 212.870266][ T6762] usb 3-1: USB disconnect, device number 11 [ 213.021113][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 213.212391][ T7867] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.672'. [ 213.213717][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 213.245312][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 213.245341][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.274975][ T9] usb 2-1: config 0 descriptor?? [ 213.295585][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 213.649009][ T989] usb 4-1: USB disconnect, device number 8 [ 214.818073][ T9] gspca_sunplus: reg_w_riv err -71 [ 214.818169][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 214.897081][ T9] usb 2-1: USB disconnect, device number 5 [ 216.138746][ T7883] syz.0.679 (7883) used greatest stack depth: 18600 bytes left [ 217.049311][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 217.049328][ T37] audit: type=1326 audit(1757843764.187:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7927 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a259aeba9 code=0x7fc00000 [ 217.460669][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 217.633333][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 217.635803][ T7528] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.637537][ T7528] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.637578][ T7528] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.637612][ T7528] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.056463][ T7953] netlink: 'syz.4.707': attribute type 1 has an invalid length. [ 218.331751][ T7953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.691390][ T7970] block nbd2: NBD_DISCONNECT [ 218.695170][ T7970] block nbd2: Send disconnect failed -107 [ 218.746281][ T7968] block nbd2: Send control failed (result -107) [ 218.746540][ T7968] block nbd2: Request send failed, requeueing [ 218.746588][ T7968] block nbd2: Disconnected due to user request. [ 218.779703][ T102] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 219.683522][ T5841] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 219.761235][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 219.831182][ T5841] usb 3-1: Using ep0 maxpacket: 8 [ 219.837160][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.724'. [ 219.860662][ T5841] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 219.860692][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.860709][ T5841] usb 3-1: Product: syz [ 219.860722][ T5841] usb 3-1: Manufacturer: syz [ 219.860734][ T5841] usb 3-1: SerialNumber: syz [ 219.903951][ T5841] usb 3-1: config 0 descriptor?? [ 219.910804][ T5841] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 219.934668][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 219.937344][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.937374][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.937411][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 219.937433][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.987491][ T9] usb 2-1: config 0 descriptor?? [ 220.022505][ T9] hub 2-1:0.0: USB hub found [ 220.208582][ T9] hub 2-1:0.0: 1 port detected [ 220.839123][ T9] hub 2-1:0.0: activate --> -90 [ 221.221300][ T989] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 221.246531][ T9] usb 2-1-port1: config error [ 221.247354][ T9] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 221.247869][ T6762] usb 2-1: USB disconnect, device number 6 [ 221.248066][ T9] usb 2-1-port1: cannot disable (err = -71) [ 221.374092][ T989] usb 4-1: config 3 has an invalid interface number: 168 but max is 0 [ 221.374120][ T989] usb 4-1: config 3 has no interface number 0 [ 221.374170][ T989] usb 4-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 221.374196][ T989] usb 4-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 221.374222][ T989] usb 4-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 221.374261][ T989] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 221.374282][ T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.381187][ T5841] gspca_sonixj: i2c_w8 err -71 [ 221.406363][ T8009] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 221.471280][ T5841] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 221.474883][ T5841] usb 3-1: USB disconnect, device number 12 [ 221.719560][ T989] usb 4-1: string descriptor 0 read error: -71 [ 221.723243][ T989] keyspan 4-1:3.168: Keyspan 2 port adapter converter detected [ 221.723658][ T989] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 1 [ 221.725910][ T989] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 84 [ 221.725997][ T989] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 2 [ 221.737520][ T989] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 221.739901][ T989] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 88 [ 221.739984][ T989] keyspan 4-1:3.168: found no endpoint descriptor for endpoint 6 [ 221.743194][ T989] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 221.747884][ T989] usb 4-1: USB disconnect, device number 9 [ 221.758040][ T989] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 221.765547][ T989] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 221.766657][ T989] keyspan 4-1:3.168: device disconnected [ 222.361709][ T8028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.736'. [ 222.361737][ T8028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.736'. [ 222.668851][ T8037] serio: Serial port ptm1 [ 222.951387][ T989] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 223.030873][ T8051] process 'syz.1.746' launched './file0' with NULL argv: empty string added [ 223.129829][ T989] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.129948][ T989] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.129990][ T989] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.130012][ T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.173319][ T8041] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 223.208486][ T989] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 223.543500][ T989] usb 4-1: USB disconnect, device number 10 [ 223.574849][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 223.601172][ T5855] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 223.723714][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.723747][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.723785][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 223.723808][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.748100][ T9] usb 5-1: config 0 descriptor?? [ 223.784734][ T5855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.784787][ T5855] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 223.784808][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.869755][ T5855] usb 2-1: config 0 descriptor?? [ 223.880830][ T5855] pwc: Askey VC010 type 2 USB webcam detected. [ 223.936953][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'. [ 224.171534][ T8065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.255440][ T9] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 224.303118][ T5855] pwc: recv_control_msg error -32 req 02 val 2b00 [ 224.307093][ T5855] pwc: recv_control_msg error -32 req 02 val 2700 [ 224.311371][ T5855] pwc: recv_control_msg error -32 req 02 val 2c00 [ 224.312338][ T5855] pwc: recv_control_msg error -32 req 04 val 1000 [ 224.398760][ T9] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 224.519326][ T5855] pwc: recv_control_msg error -71 req 04 val 1400 [ 224.519794][ T5855] pwc: recv_control_msg error -71 req 02 val 2000 [ 224.520312][ T5855] pwc: recv_control_msg error -71 req 02 val 2100 [ 224.520721][ T5855] pwc: recv_control_msg error -71 req 04 val 1500 [ 224.521665][ T5855] pwc: recv_control_msg error -71 req 02 val 2500 [ 224.557523][ T5855] pwc: recv_control_msg error -71 req 02 val 2400 [ 224.561121][ T5855] pwc: recv_control_msg error -71 req 02 val 2600 [ 224.571032][ T5855] pwc: recv_control_msg error -71 req 02 val 2900 [ 224.581388][ T5855] pwc: recv_control_msg error -71 req 02 val 2800 [ 224.582206][ T5855] pwc: recv_control_msg error -71 req 04 val 1100 [ 224.584295][ T5855] pwc: recv_control_msg error -71 req 04 val 1200 [ 224.615309][ T5855] pwc: Registered as video103. [ 224.631272][ T5855] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 224.667029][ T5855] usb 2-1: USB disconnect, device number 7 [ 225.211075][ T6017] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 225.401184][ T6017] usb 4-1: Using ep0 maxpacket: 32 [ 225.405016][ T6017] usb 4-1: config 0 has no interfaces? [ 225.423632][ T6017] usb 4-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 225.423660][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.423688][ T6017] usb 4-1: Product: syz [ 225.423701][ T6017] usb 4-1: Manufacturer: syz [ 225.423714][ T6017] usb 4-1: SerialNumber: syz [ 225.445460][ T6017] usb 4-1: config 0 descriptor?? [ 225.657274][ T6017] usb 4-1: USB disconnect, device number 11 [ 225.731088][ T5855] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 225.894115][ T5855] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 225.894144][ T5855] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 225.894161][ T5855] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 225.894211][ T5855] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 225.894236][ T5855] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 225.896620][ T5855] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 225.896647][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 225.896666][ T5855] usb 2-1: Product: syz [ 225.896678][ T5855] usb 2-1: Manufacturer: syz [ 225.989480][ T5855] cdc_wdm 2-1:1.0: skipping garbage [ 225.989501][ T5855] cdc_wdm 2-1:1.0: skipping garbage [ 226.033893][ T5855] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 226.033924][ T5855] cdc_wdm 2-1:1.0: Unknown control protocol [ 226.140609][ T5855] usb 2-1: USB disconnect, device number 8 [ 226.297722][ T31] usb 5-1: USB disconnect, device number 8 [ 229.042460][ T8128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.231083][ T989] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 229.232683][ T8128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.285470][ T8128] bond0 (unregistering): Released all slaves [ 229.389820][ T989] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 229.389879][ T989] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 229.389901][ T989] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.444341][ T989] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 229.444377][ T989] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 229.444397][ T989] usb 1-1: Product: syz [ 229.444410][ T989] usb 1-1: Manufacturer: syz [ 229.444423][ T989] usb 1-1: SerialNumber: syz [ 229.454625][ T989] usb 1-1: config 0 descriptor?? [ 229.478477][ T989] hub 1-1:0.0: bad descriptor, ignoring hub [ 229.478517][ T989] hub 1-1:0.0: probe with driver hub failed with error -5 [ 229.484709][ T989] usb 1-1: selecting invalid altsetting 0 [ 229.835819][ T989] usb 1-1: USB disconnect, device number 8 [ 229.978247][ T8152] Oops: general protection fault, probably for non-canonical address 0xdffffc000000014b: 0000 [#1] SMP KASAN PTI [ 229.978272][ T8152] KASAN: null-ptr-deref in range [0x0000000000000a58-0x0000000000000a5f] [ 229.978292][ T8152] CPU: 0 UID: 0 PID: 8152 Comm: syz.2.781 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 229.978314][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.978324][ T8152] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 229.978357][ T8152] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 c0 0b dd 08 cc 66 66 66 66 66 66 2e [ 229.978372][ T8152] RSP: 0018:ffffc9000cb2f7e0 EFLAGS: 00010006 [ 229.978390][ T8152] RAX: dffffc0000000000 RBX: ffffffff8afa6087 RCX: aea557208041b800 [ 229.978405][ T8152] RDX: 0000000000000000 RSI: ffffffff8afa6087 RDI: 000000000000014b [ 229.978417][ T8152] RBP: ffffffff819094a7 R08: 0000000000000001 R09: 0000000000000000 [ 229.978429][ T8152] R10: dffffc0000000000 R11: fffffbfff1e3abe7 R12: 0000000000000000 [ 229.978441][ T8152] R13: 0000000000000a58 R14: 0000000000000a58 R15: 0000000000000001 [ 229.978452][ T8152] FS: 00007f7641fed6c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 229.978470][ T8152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.978483][ T8152] CR2: 0000001b31a1dff8 CR3: 0000000033338000 CR4: 00000000003526f0 [ 229.978501][ T8152] Call Trace: [ 229.978507][ T8152] [ 229.978514][ T8152] __kasan_check_byte+0x12/0x40 [ 229.978540][ T8152] lock_acquire+0x8d/0x360 [ 229.978566][ T8152] ? preempt_schedule_common+0x83/0xd0 [ 229.978598][ T8152] _raw_spin_lock_irqsave+0xa7/0xf0 [ 229.978625][ T8152] ? try_to_wake_up+0x67/0x12b0 [ 229.978650][ T8152] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 229.978678][ T8152] ? rcuwait_wake_up+0x1c/0x230 [ 229.978697][ T8152] try_to_wake_up+0x67/0x12b0 [ 229.978722][ T8152] ? rcuwait_wake_up+0x1c/0x230 [ 229.978738][ T8152] ? rcuwait_wake_up+0x1c/0x230 [ 229.978754][ T8152] ? rcuwait_wake_up+0x1c/0x230 [ 229.978772][ T8152] requeue_pi_wake_futex+0x24b/0x2f0 [ 229.978798][ T8152] ? __task_pid_nr_ns+0x398/0x470 [ 229.978825][ T8152] ? __task_pid_nr_ns+0x28/0x470 [ 229.978852][ T8152] ? __pfx_requeue_pi_wake_futex+0x10/0x10 [ 229.978880][ T8152] futex_requeue+0x135f/0x1870 [ 229.978911][ T8152] ? __pfx_futex_requeue+0x10/0x10 [ 229.978945][ T8152] ? __schedule+0x1709/0x4c20 [ 229.978973][ T8152] do_futex+0x362/0x420 [ 229.978996][ T8152] ? __pfx_do_futex+0x10/0x10 [ 229.979020][ T8152] __se_sys_futex+0x36f/0x400 [ 229.979044][ T8152] ? __pfx___se_sys_futex+0x10/0x10 [ 229.979075][ T8152] ? rcu_is_watching+0x15/0xb0 [ 229.979104][ T8152] ? __x64_sys_futex+0x21/0xf0 [ 229.979126][ T8152] do_syscall_64+0xfa/0x3b0 [ 229.979143][ T8152] ? lockdep_hardirqs_on+0x9c/0x150 [ 229.979170][ T8152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.979188][ T8152] ? clear_bhb_loop+0x60/0xb0 [ 229.979209][ T8152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.979227][ T8152] RIP: 0033:0x7f7643daeba9 [ 229.979250][ T8152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.979265][ T8152] RSP: 002b:00007f7641fed038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 229.979285][ T8152] RAX: ffffffffffffffda RBX: 00007f7643ff6090 RCX: 00007f7643daeba9 [ 229.979299][ T8152] RDX: 0000000000000001 RSI: 000000000000000c RDI: 000020000000cffc [ 229.979311][ T8152] RBP: 00007f7643e31e19 R08: 0000200000048000 R09: 0000000000000000 [ 229.979323][ T8152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.979334][ T8152] R13: 00007f7643ff6128 R14: 00007f7643ff6090 R15: 00007ffc3228aec8 [ 229.979355][ T8152] [ 229.979362][ T8152] Modules linked in: [ 229.979381][ T8152] ---[ end trace 0000000000000000 ]--- [ 229.979393][ T8152] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 229.979421][ T8152] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 c0 0b dd 08 cc 66 66 66 66 66 66 2e [ 229.979435][ T8152] RSP: 0018:ffffc9000cb2f7e0 EFLAGS: 00010006 [ 229.979450][ T8152] RAX: dffffc0000000000 RBX: ffffffff8afa6087 RCX: aea557208041b800 [ 229.979464][ T8152] RDX: 0000000000000000 RSI: ffffffff8afa6087 RDI: 000000000000014b [ 229.979477][ T8152] RBP: ffffffff819094a7 R08: 0000000000000001 R09: 0000000000000000 [ 229.979489][ T8152] R10: dffffc0000000000 R11: fffffbfff1e3abe7 R12: 0000000000000000 [ 229.979502][ T8152] R13: 0000000000000a58 R14: 0000000000000a58 R15: 0000000000000001 [ 229.979513][ T8152] FS: 00007f7641fed6c0(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 229.979530][ T8152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.979543][ T8152] CR2: 0000001b31a1dff8 CR3: 0000000033338000 CR4: 00000000003526f0 [ 229.979561][ T8152] Kernel panic - not syncing: Fatal exception [ 229.979806][ T8152] Kernel Offset: disabled