last executing test programs: 35.636529932s ago: executing program 0 (id=4410): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 35.438332894s ago: executing program 0 (id=4414): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) r1 = syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r1, 0x2241, 0x1b86, 0x1, &(0x7f00000001c0), 0x8) 35.279568231s ago: executing program 0 (id=4416): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1201010000f7130870270c936a8d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="4016060100000042bce74bf6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 34.452000867s ago: executing program 0 (id=4427): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 34.37718504s ago: executing program 0 (id=4429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x9d81, 0x2, 0xfffffffe, 0x3bd}) 33.968768108s ago: executing program 0 (id=4434): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r1, 0x111, 0x32, 0x0, &(0x7f0000000380)) 33.637924916s ago: executing program 32 (id=4434): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x18, 0x1, 0x1) getsockopt$inet_int(r1, 0x111, 0x32, 0x0, &(0x7f0000000380)) 26.386488415s ago: executing program 3 (id=4527): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000640)='./file0\x00') mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') 26.225188669s ago: executing program 3 (id=4530): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$kcm(0x2, 0x2, 0x73) 26.056654922s ago: executing program 3 (id=4534): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x48071000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) open(&(0x7f0000022ff6)='./control\x00', 0x25e041, 0x0) 25.822716544s ago: executing program 3 (id=4537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 20.179146385s ago: executing program 1 (id=4593): openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f00000001c0)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8746}}) io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0) 19.871621937s ago: executing program 1 (id=4597): socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x1, &(0x7f00000000c0)={0x11, 0x19, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) 19.707796113s ago: executing program 1 (id=4600): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x4b) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 19.496009032s ago: executing program 1 (id=4603): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2002, 0x0) 19.344545615s ago: executing program 1 (id=4605): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e000000110081", 0x7}], 0x1}, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r0, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) 18.952175345s ago: executing program 1 (id=4608): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 18.588664293s ago: executing program 33 (id=4608): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 10.425144315s ago: executing program 3 (id=4537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 5.469702489s ago: executing program 6 (id=4726): r0 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x1000000b}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.264749705s ago: executing program 6 (id=4729): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5.177746573s ago: executing program 6 (id=4731): unshare(0x24020400) unshare(0x24020400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 4.951948755s ago: executing program 6 (id=4735): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0xffffffffffffff21, 0x0, 0x0, &(0x7f00000005c0)=""/108, 0x6c}, 0x7fff}], 0x3fffffffffffcbe, 0xfffe, 0x0) 3.354206652s ago: executing program 4 (id=4748): r0 = getpid() setreuid(0xee00, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r0], 0x1}, 0x58) 2.901301759s ago: executing program 4 (id=4750): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 2.781950888s ago: executing program 4 (id=4751): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x3c, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{}, {0x7}, @broadcast, @device_a, @random="164fcafd5ad1", {0x8, 0x9}}, 0x3f, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008000) 2.566275947s ago: executing program 4 (id=4752): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0xa0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)="21f8", 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2404c031) 2.06673324s ago: executing program 2 (id=4756): syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x101080) r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.864060174s ago: executing program 2 (id=4758): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r2, r3, 0x1, 0x0, 0x4, 0x8, {0x6, 0xb, 0xe, 0x30b4, 0x8000, 0x2025, 0xfffe, 0x3, 0x3e40, 0x4, 0x5, 0x0, 0x2, 0xfffffffc, "12d56163d7287bd287881d942450c7033a3242937ca9cc476b1500"}}) 1.697252053s ago: executing program 2 (id=4761): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x80}], 0x2c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) recvmmsg(r0, &(0x7f00000007c0), 0x10, 0x0, 0x0) 1.662275859s ago: executing program 5 (id=4762): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0xe, 0x2, 0x0, 0x515f3155, 0x1b, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r1, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) read$FUSE(r1, &(0x7f0000002080)={0x2020}, 0x2) 1.528829224s ago: executing program 4 (id=4763): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0b020510"], 0xe) 1.462844179s ago: executing program 5 (id=4764): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000100)="48e72f", 0x3}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000500)='V', 0x1}], 0x1}}], 0x2, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x6, 0x101, 0x206, 0x2, 0x754d, 0x6, 0x9, 0xf, r2}, 0x20) 1.443949014s ago: executing program 4 (id=4765): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x4, 0x4, @tid=r0}, &(0x7f0000044000)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.31311808s ago: executing program 5 (id=4766): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1}) 1.122387782s ago: executing program 3 (id=4537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 1.100012729s ago: executing program 6 (id=4767): syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 676.101817ms ago: executing program 5 (id=4768): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000801020000000000000000030000040900010073797a300000000005000380145800000c000480080002"], 0x34}, 0x1, 0x0, 0x0, 0x2400c004}, 0x8040) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f60014001a8010000580"], 0x34}}, 0x0) 659.108313ms ago: executing program 2 (id=4769): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000680)=[{&(0x7f0000000100)="b3ae0b01", 0x4}], 0x1, 0x97, 0x4, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x15) 617.613128ms ago: executing program 6 (id=4770): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 373.657004ms ago: executing program 5 (id=4771): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r1, r2, 0x25, 0x2, @val=@netkit={@void, @value}}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x1, 0x40, 0x68, 0x0, 0x7, 0x6, 0x0, @private=0xa010102, @loopback}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x2, 0x7, 0x0, 0x3, 0xd, 0x3, 0x1, 0x8, 0xfffa, 0x3, 0x4e21, 0x4e23}, 0x1, 0x1}, 0x2}, 0x3}}}}}}}, 0x0) 256.86886ms ago: executing program 2 (id=4772): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000002f00)={0x2, 0x4e20, @dev}, 0x10) close(r0) 54.991006ms ago: executing program 5 (id=4773): r0 = socket(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000005c0)={0x8212}) 0s ago: executing program 2 (id=4774): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {r1, r2+60000000}}, 0x0) kernel console output (not intermixed with test programs): 74'. [ 250.297490][T12099] nbd: socks must be embedded in a SOCK_ITEM attr [ 250.778958][T12079] syz.3.2676 (12079): drop_caches: 2 [ 251.271141][T12082] syz.3.2676 (12082): drop_caches: 2 [ 252.362419][ T5960] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 252.543632][ T5960] usb 2-1: Using ep0 maxpacket: 16 [ 252.558644][ T5960] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 252.574121][ T5960] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 252.609552][ T5960] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 252.632901][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.648212][ T5960] usb 2-1: Product: syz [ 252.656877][ T5960] usb 2-1: Manufacturer: syz [ 252.662836][ T5960] usb 2-1: SerialNumber: syz [ 252.675317][ T5960] usb 2-1: config 0 descriptor?? [ 252.683428][ T5960] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 252.741805][T12212] netlink: 'syz.4.2737': attribute type 9 has an invalid length. [ 252.787351][T12212] macvlan3: entered promiscuous mode [ 252.792813][T12212] bond0: entered promiscuous mode [ 252.798861][T12212] bond_slave_0: entered promiscuous mode [ 252.804921][T12212] bond_slave_1: entered promiscuous mode [ 252.814185][T12212] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 252.902013][ T5960] usb 2-1: USB disconnect, device number 10 [ 253.363604][T12245] serio: Serial port ttyS3 [ 253.543134][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2758'. [ 253.657022][T12263] team0: Port device virt_wifi0 added [ 253.687680][T12263] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 253.715607][T12263] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 254.774560][ T30] audit: type=1400 audit(1749564845.486:330): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12317 comm="syz.0.2787" dest=20002 [ 255.126499][ T5960] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 255.329685][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 255.347859][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 255.381174][ T5960] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 255.402139][ T5960] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 255.421613][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.433277][ T5960] usb 3-1: config 0 descriptor?? [ 255.708377][T12357] sctp: [Deprecated]: syz.1.2805 (pid 12357) Use of int in maxseg socket option. [ 255.708377][T12357] Use struct sctp_assoc_value instead [ 255.889059][ T5960] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 255.907448][ T5960] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 255.924143][ T5960] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0x0 [ 255.942031][ T5960] kovaplus 0003:1E7D:2D50.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 256.046813][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 256.220103][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 256.241427][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.263818][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.305320][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 256.318789][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.328510][ T5960] kovaplus 0003:1E7D:2D50.0012: couldn't init struct kovaplus_device [ 256.337266][ T5960] kovaplus 0003:1E7D:2D50.0012: couldn't install mouse [ 256.346447][ T5960] kovaplus 0003:1E7D:2D50.0012: probe with driver kovaplus failed with error -71 [ 256.359584][ T9] usb 5-1: config 0 descriptor?? [ 256.370158][ T9] hub 5-1:0.0: USB hub found [ 256.379080][ T5960] usb 3-1: USB disconnect, device number 11 [ 256.595489][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 256.730329][ T5884] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 256.921097][ T5884] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 256.943903][ T5884] usb 4-1: config 0 has no interface number 0 [ 256.950412][ T5884] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 256.991150][ T5884] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 257.031945][ T5884] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 257.051142][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.055617][ T9] hid-generic 0003:046D:C31C.0013: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 257.068983][ T5884] usb 4-1: Product: syz [ 257.086872][ T5884] usb 4-1: Manufacturer: syz [ 257.091546][ T5884] usb 4-1: SerialNumber: syz [ 257.112644][ T5884] usb 4-1: config 0 descriptor?? [ 257.130065][T12387] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.165143][ T5884] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 257.350400][ T9] usb 5-1: USB disconnect, device number 13 [ 257.409839][ T9] usb 4-1: USB disconnect, device number 14 [ 257.429330][ T9] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 257.607420][T12421] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 257.636886][T12421] overlayfs: overlapping lowerdir path [ 257.884878][T12435] netlink: 'syz.0.2841': attribute type 3 has an invalid length. [ 257.903608][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 257.925299][T12435] netlink: 'syz.0.2841': attribute type 3 has an invalid length. [ 257.942688][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 258.037818][ T30] audit: type=1326 audit(1749564848.545:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12440 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 258.079338][T12445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.116943][ T30] audit: type=1326 audit(1749564848.563:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12440 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 258.199032][ T30] audit: type=1326 audit(1749564848.563:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12440 comm="syz.4.2847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 258.404736][ T30] audit: type=1107 audit(1749564848.881:334): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 258.775663][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.977048][ T5884] kernel write not supported for file /vbi5 (pid: 5884 comm: kworker/1:5) [ 259.399336][T12505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.616959][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 259.712765][ T6421] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 259.763001][T12528] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 259.813405][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 259.841374][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.862103][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 259.872481][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.887806][ T9] usb 3-1: config 0 descriptor?? [ 259.918229][ T6421] usb 4-1: config 241 has an invalid interface number: 0 but max is -1 [ 259.930590][ T6421] usb 4-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 259.940668][ T6421] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 259.954542][ T6421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.972847][ T6421] usbhid 4-1:241.0: couldn't find an input interrupt endpoint [ 260.094081][T12540] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 260.199010][ T5960] usb 4-1: USB disconnect, device number 15 [ 260.295519][T12549] loop5: detected capacity change from 0 to 63 [ 260.333555][ T9] isku 0003:1E7D:319C.0014: unknown main item tag 0x0 [ 260.352435][ T9] isku 0003:1E7D:319C.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 260.575216][ T5877] usb 3-1: USB disconnect, device number 12 [ 260.849431][T12565] loop4: detected capacity change from 0 to 524255232 [ 260.900301][T12565] Invalid logical block size (3) [ 260.915381][T12568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2905'. [ 261.337839][ T5960] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 261.476969][T12592] netlink: 87 bytes leftover after parsing attributes in process `syz.2.2917'. [ 261.544171][ T5960] usb 4-1: Using ep0 maxpacket: 32 [ 261.551532][ T5960] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 261.560199][ T5960] usb 4-1: config 0 has no interface number 0 [ 261.573795][ T5960] usb 4-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 261.574229][T12596] loop6: detected capacity change from 0 to 524287999 [ 261.585687][ T5960] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 261.585717][ T5960] usb 4-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 261.585745][ T5960] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 261.585775][ T5960] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.585818][ T5960] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 261.585842][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.589338][ T5960] usb 4-1: config 0 descriptor?? [ 261.688766][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 261.973999][ T5960] usb 4-1: USB disconnect, device number 16 [ 262.068621][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2930'. [ 262.089816][T12620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2930'. [ 262.544387][T12643] input: syz0 as /devices/virtual/input/input25 [ 263.134888][T12665] program syz.1.2950 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.318820][T12671] netlink: 'syz.0.2953': attribute type 25 has an invalid length. [ 263.343532][T12676] program syz.2.2952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.364306][T12671] netlink: 'syz.0.2953': attribute type 8 has an invalid length. [ 263.670296][T12690] CIFS: VFS: Malformed UNC in devname [ 264.609924][ T5960] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 264.993958][ T5960] usb 4-1: Using ep0 maxpacket: 16 [ 265.002382][ T5960] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 265.011625][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.123773][ T5960] usb 4-1: config 0 descriptor?? [ 265.178462][ T5960] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 266.060317][ T5960] gspca_sonixj: reg_r err -71 [ 266.065969][ T5960] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 266.077150][ T5960] usb 4-1: USB disconnect, device number 17 [ 266.234050][ T6421] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 266.381183][T12789] nbd: nbd4 already in use [ 266.398122][ T6421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.417093][ T6421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.437391][ T6421] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 266.473216][ T6421] usb 3-1: New USB device found, idVendor=044f, idProduct=b65a, bcdDevice= 0.00 [ 266.504301][ T6421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.515253][ T6421] usb 3-1: config 0 descriptor?? [ 266.935741][T12820] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3021'. [ 266.969560][ T6421] thrustmaster 0003:044F:B65A.0015: unknown main item tag 0x2 [ 266.993028][ T6421] thrustmaster 0003:044F:B65A.0015: item fetching failed at offset 4/7 [ 267.016469][ T6421] thrustmaster 0003:044F:B65A.0015: parse failed [ 267.044532][ T6421] thrustmaster 0003:044F:B65A.0015: probe with driver thrustmaster failed with error -22 [ 267.179467][ T6421] usb 3-1: USB disconnect, device number 13 [ 267.298265][T12834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3027'. [ 267.485178][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'. [ 267.916605][T12868] serio: Serial port ptm0 [ 267.948903][ T30] audit: type=1326 audit(1749564857.814:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12870 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f917858e7 code=0x7ffc0000 [ 268.007129][ T30] audit: type=1326 audit(1749564857.814:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12870 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f9172ab19 code=0x7ffc0000 [ 268.028710][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.094254][ T30] audit: type=1326 audit(1749564857.814:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12870 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f917858e7 code=0x7ffc0000 [ 268.115739][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.171929][ T30] audit: type=1326 audit(1749564857.814:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12870 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f9172ab19 code=0x7ffc0000 [ 268.222726][ T30] audit: type=1326 audit(1749564857.814:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12870 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f917858e7 code=0x7ffc0000 [ 268.262871][ T30] audit: type=1326 audit(1749564857.814:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12870 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f9172ab19 code=0x7ffc0000 [ 268.292938][ T30] audit: type=1326 audit(1749564857.814:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12870 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f917858e7 code=0x7ffc0000 [ 268.316135][ T30] audit: type=1326 audit(1749564857.814:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12870 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f9172ab19 code=0x7ffc0000 [ 268.382839][ T30] audit: type=1326 audit(1749564857.814:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12870 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f917858e7 code=0x7ffc0000 [ 268.405700][ T30] audit: type=1326 audit(1749564857.814:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12870 comm="syz.0.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f9172ab19 code=0x7ffc0000 [ 268.506841][T12901] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 268.881415][T12917] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.890122][T12917] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.898360][T12917] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.906621][T12917] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.149416][T12924] netlink: 428 bytes leftover after parsing attributes in process `syz.3.3069'. [ 269.168134][T12924] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3069'. [ 269.493524][T12938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.879915][T12957] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 270.136367][T12971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3091'. [ 270.774405][T13002] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3104'. [ 270.876859][T13007] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3108'. [ 271.039420][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3114'. [ 271.052960][T13018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3114'. [ 271.197007][ T5884] kernel write not supported for file /snd/midiC2D0 (pid: 5884 comm: kworker/1:5) [ 271.445682][T13038] macsec2: entered allmulticast mode [ 271.459090][T13038] macvlan0: entered allmulticast mode [ 271.480946][T13038] macvlan0: left allmulticast mode [ 272.057180][T13071] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 272.181327][T13071] syz.2.3141 (13071) used greatest stack depth: 19320 bytes left [ 272.719820][T13106] netlink: 'syz.4.3156': attribute type 34 has an invalid length. [ 273.553620][T13144] netlink: 'syz.4.3173': attribute type 1 has an invalid length. [ 273.576473][T13144] __nla_validate_parse: 2 callbacks suppressed [ 273.576541][T13144] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3173'. [ 273.632244][ T5877] IPVS: starting estimator thread 0... [ 273.729505][T13150] IPVS: using max 27 ests per chain, 64800 per kthread [ 274.084888][T13173] pim6reg: entered allmulticast mode [ 274.098106][T13172] pim6reg: left allmulticast mode [ 274.348295][T13187] openvswitch: netlink: IPv4 tunnel dst address is zero [ 274.365274][ T5960] IPVS: starting estimator thread 0... [ 274.372318][T13189] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 274.502630][T13192] IPVS: using max 30 ests per chain, 72000 per kthread [ 274.754471][ T5960] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 274.926606][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 274.935055][ T5960] usb 5-1: config 0 interface 0 has no altsetting 0 [ 274.959401][ T5960] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 274.982987][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.996217][ T5960] usb 5-1: Product: syz [ 275.006118][ T5960] usb 5-1: Manufacturer: syz [ 275.010822][ T5960] usb 5-1: SerialNumber: syz [ 275.018408][ T5960] usb 5-1: config 0 descriptor?? [ 275.317126][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3212'. [ 275.506697][ T5960] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 275.682666][T13240] sctp: [Deprecated]: syz.3.3217 (pid 13240) Use of int in max_burst socket option. [ 275.682666][T13240] Use struct sctp_assoc_value instead [ 275.948268][ T5960] usb 5-1: USB disconnect, device number 14 [ 275.954345][T13254] tap0: tun_chr_ioctl cmd 1074025677 [ 275.959805][T13254] tap0: linktype set to 823 [ 276.628085][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'. [ 276.639055][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3235'. [ 276.918404][T13299] netlink: 'syz.3.3243': attribute type 5 has an invalid length. [ 277.258170][T13314] veth0: entered promiscuous mode [ 277.303723][T13312] veth0: left promiscuous mode [ 277.824433][T13337] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 278.179245][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3268'. [ 278.511406][T13369] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 278.605005][T13369] CIFS mount error: No usable UNC path provided in device string! [ 278.605005][T13369] [ 278.631099][T13369] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 278.689822][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3279'. [ 279.236809][T13407] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3292'. [ 279.395710][T13412] loop9: detected capacity change from 0 to 7 [ 279.416854][T13412] buffer_io_error: 6 callbacks suppressed [ 279.416870][T13412] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.442305][T13412] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.469538][T13412] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.490834][T13412] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.519425][T13412] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.541032][T13412] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.567873][T13412] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.597779][T13412] ldm_validate_partition_table(): Disk read failed. [ 279.604609][T13412] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.616328][T13412] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.625554][T13412] Buffer I/O error on dev loop9, logical block 0, async page read [ 279.634186][T13412] Dev loop9: unable to read RDB block 0 [ 279.654081][T13412] loop9: unable to read partition table [ 279.675647][T13412] loop9: partition table beyond EOD, truncated [ 279.686997][T13412] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 279.686997][T13412] ) failed (rc=-5) [ 279.736263][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 279.736280][ T30] audit: type=1326 audit(1749564868.833:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13423 comm="syz.3.3301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc88878e929 code=0x0 [ 280.040770][T13434] MTD: Couldn't look up '/dev/nullb0': -15 [ 280.063964][T13434] /dev/nullb0: Can't lookup blockdev [ 280.142772][ T5884] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 280.188142][T13442] netlink: 'syz.4.3309': attribute type 1 has an invalid length. [ 280.198084][T13442] netlink: 'syz.4.3309': attribute type 2 has an invalid length. [ 280.314347][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 280.327311][ T5884] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 280.357173][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.380032][ T5884] pvrusb2: Hardware description: Terratec Grabster AV400 [ 280.402714][ T5884] pvrusb2: ********** [ 280.406729][ T5884] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 280.431479][ T5884] pvrusb2: Important functionality might not be entirely working. [ 280.450636][ T5884] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 280.476625][ T5884] pvrusb2: ********** [ 280.631664][ T2345] pvrusb2: Invalid write control endpoint [ 280.765736][ T2345] pvrusb2: Invalid write control endpoint [ 280.793146][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 280.828528][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 280.852034][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 280.864117][ T2345] pvrusb2: Device being rendered inoperable [ 280.875470][ T5877] usb 2-1: USB disconnect, device number 11 [ 280.884236][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 280.910653][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 280.928690][ T2345] pvrusb2: Attached sub-driver cx25840 [ 280.947056][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 280.968837][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 281.061572][T13477] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 281.477514][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3330'. [ 281.489563][T13495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.497429][T13495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.518674][T13495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.527703][T13495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.607964][ T5877] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 281.839133][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.861419][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.902459][ T5877] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 281.928002][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.946134][ T5877] usb 5-1: config 0 descriptor?? [ 282.435015][ T5877] pyra 0003:1E7D:2CF6.0016: unexpected long global item [ 282.464371][ T5877] pyra 0003:1E7D:2CF6.0016: parse failed [ 282.470119][ T5877] pyra 0003:1E7D:2CF6.0016: probe with driver pyra failed with error -22 [ 282.656689][ T5960] usb 5-1: USB disconnect, device number 15 [ 283.076346][T13562] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3360'. [ 283.231184][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3365'. [ 283.430626][T13585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3371'. [ 283.447584][T13585] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 283.466749][T13585] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 283.563861][ T5877] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 283.740040][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 283.761620][ T5877] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 283.778303][ T5877] usb 4-1: can't read configurations, error -71 [ 284.386759][ T5960] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 284.417727][T13625] netlink: 'syz.1.3389': attribute type 1 has an invalid length. [ 284.427845][T13625] netlink: 'syz.1.3389': attribute type 2 has an invalid length. [ 284.438883][T13625] netlink: 'syz.1.3389': attribute type 1 has an invalid length. [ 284.446870][T13625] netlink: 'syz.1.3389': attribute type 2 has an invalid length. [ 284.448801][T13627] openvswitch: netlink: IP tunnel TTL not specified. [ 284.557673][ T5960] usb 3-1: Using ep0 maxpacket: 16 [ 284.566096][ T5960] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 284.578036][ T5960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.609492][ T5960] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 284.621431][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.630127][ T5960] usb 3-1: Product: syz [ 284.640910][ T5960] usb 3-1: Manufacturer: syz [ 284.647850][ T5960] usb 3-1: SerialNumber: syz [ 284.659695][ T5960] usb 3-1: config 0 descriptor?? [ 284.668520][ T5960] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 284.677872][ T5960] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 285.017584][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 285.049574][ T5877] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 285.177754][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 285.185078][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 285.196394][ T9] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 285.201290][ T5884] kernel read not supported for file /dsp (pid: 5884 comm: kworker/1:5) [ 285.205588][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.219494][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 285.228562][ T9] usb 2-1: config 0 descriptor?? [ 285.249112][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.260734][ T5877] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.284736][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.301896][ T5877] usb 5-1: config 0 descriptor?? [ 285.313343][ T5960] em28xx 3-1:0.0: chip ID is em2884 [ 285.527724][ T5960] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 285.542184][ T5877] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 285.546739][ T5960] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 285.563871][ T5960] em28xx 3-1:0.0: No AC97 audio processor [ 285.577340][ T5960] usb 3-1: USB disconnect, device number 14 [ 285.588937][ T5960] em28xx 3-1:0.0: Disconnecting em28xx [ 285.603450][ T5960] em28xx 3-1:0.0: Freeing device [ 285.671631][ T9] aureal 0003:0755:2626.0017: unbalanced collection at end of report description [ 285.700816][ T9] aureal 0003:0755:2626.0017: probe with driver aureal failed with error -22 [ 285.757349][ T5877] usb 5-1: USB disconnect, device number 16 [ 286.130897][ T5877] usb 2-1: USB disconnect, device number 12 [ 286.184657][T13686] trusted_key: encrypted_key: keyword 'uew' not recognized [ 287.814805][ T30] audit: type=1326 audit(1749564876.391:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13752 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 287.891273][ T30] audit: type=1326 audit(1749564876.391:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13752 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 287.980595][ T30] audit: type=1326 audit(1749564876.391:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13752 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 288.036458][ T30] audit: type=1326 audit(1749564876.391:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13752 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 288.110012][ T30] audit: type=1326 audit(1749564876.391:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13752 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 288.182567][ T30] audit: type=1326 audit(1749564876.391:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13752 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 288.252819][ T30] audit: type=1326 audit(1749564876.391:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13752 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 288.272948][T13773] can0: slcan on ttyS3. [ 288.352883][ T30] audit: type=1326 audit(1749564876.391:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13752 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 288.387355][T13773] can0 (unregistered): slcan off ttyS3. [ 288.410277][ T30] audit: type=1326 audit(1749564876.391:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13752 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 288.502782][ T30] audit: type=1326 audit(1749564876.391:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13752 comm="syz.4.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 288.524449][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.579202][T13854] sctp: [Deprecated]: syz.0.3487 (pid 13854) Use of int in max_burst socket option deprecated. [ 290.579202][T13854] Use struct sctp_assoc_value instead [ 291.008321][T13882] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 291.015227][T13882] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 291.042769][T13882] vhci_hcd vhci_hcd.0: Device attached [ 291.064962][T13883] vhci_hcd: connection closed [ 291.067097][T10349] vhci_hcd: stop threads [ 291.086849][T10349] vhci_hcd: release socket [ 291.094263][T10349] vhci_hcd: disconnect device [ 291.889989][T13915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3514'. [ 292.950173][ T5884] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 293.128164][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.151702][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 293.183737][ T5884] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 293.201580][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.250778][ T5884] usb 5-1: config 0 descriptor?? [ 293.717706][ T5884] corsair-psu 0003:1B1C:1C07.0018: hidraw0: USB HID v0.00 Device [HID 1b1c:1c07] on usb-dummy_hcd.4-1/input0 [ 293.807858][ T5884] corsair-psu 0003:1B1C:1C07.0018: unable to initialize device (-38) [ 293.831454][ T5884] corsair-psu 0003:1B1C:1C07.0018: probe with driver corsair-psu failed with error -38 [ 293.851646][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 293.851661][ T30] audit: type=1326 audit(1749564882.041:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14003 comm="syz.3.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88878e929 code=0x7ffc0000 [ 293.946861][ T5960] usb 5-1: USB disconnect, device number 17 [ 293.965526][ T30] audit: type=1326 audit(1749564882.041:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14003 comm="syz.3.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88878e929 code=0x7ffc0000 [ 294.002109][ T30] audit: type=1326 audit(1749564882.069:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14003 comm="syz.3.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fc88878e929 code=0x7ffc0000 [ 294.026551][ T30] audit: type=1326 audit(1749564882.069:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14003 comm="syz.3.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88878e929 code=0x7ffc0000 [ 294.057616][ T30] audit: type=1326 audit(1749564882.069:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14003 comm="syz.3.3558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88878e929 code=0x7ffc0000 [ 294.111564][T14014] netlink: 'syz.0.3563': attribute type 10 has an invalid length. [ 294.124646][T14014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.143177][T14014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.180414][T14014] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 294.402622][T14031] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3572'. [ 294.476310][T14034] netlink: 'syz.1.3573': attribute type 9 has an invalid length. [ 294.497816][T14034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3573'. [ 294.544536][T14034] hsr0: entered promiscuous mode [ 294.561411][T14034] macvlan2: entered promiscuous mode [ 294.581902][T14034] macvlan2: entered allmulticast mode [ 294.596249][T14034] hsr0: entered allmulticast mode [ 294.603477][T14034] hsr_slave_0: entered allmulticast mode [ 294.618807][T14034] hsr_slave_1: entered allmulticast mode [ 295.163139][ T5884] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 295.336820][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.348119][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.358155][ T5884] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 295.367595][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.377872][ T5884] usb 2-1: config 0 descriptor?? [ 295.590970][ T6398] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 295.772189][ T6398] usb 4-1: Using ep0 maxpacket: 16 [ 295.786013][ T6398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.804607][ T6398] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 295.820854][ T5884] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 295.834706][ T6398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.843174][ T5884] pyra 0003:1E7D:2CF6.0019: unknown main item tag 0x0 [ 295.855881][ T6398] usb 4-1: config 0 descriptor?? [ 295.862030][ T5884] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 295.877956][ T6398] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input26 [ 296.118288][ T5179] bcm5974 4-1:0.0: could not read from device [ 296.156433][ T5179] bcm5974 4-1:0.0: could not read from device [ 296.168612][ T6398] usb 4-1: USB disconnect, device number 20 [ 296.266159][ T5884] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device [ 296.274151][ T5884] pyra 0003:1E7D:2CF6.0019: couldn't install mouse [ 296.286798][ T5884] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -71 [ 296.301806][ T5884] usb 2-1: USB disconnect, device number 13 [ 296.330100][T14099] netlink: 844 bytes leftover after parsing attributes in process `syz.4.3602'. [ 297.902088][ T30] audit: type=1326 audit(1749564885.830:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14146 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 297.971967][ T30] audit: type=1326 audit(1749564885.830:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14146 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 298.023014][ T30] audit: type=1326 audit(1749564885.830:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14146 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 298.106015][ T30] audit: type=1326 audit(1749564885.830:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14146 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 298.199540][ T30] audit: type=1326 audit(1749564885.830:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14146 comm="syz.2.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 298.562566][ T5960] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 298.748317][ T5960] usb 5-1: Using ep0 maxpacket: 16 [ 298.776102][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.811347][ T5960] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 298.840341][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.864089][ T5960] usb 5-1: config 0 descriptor?? [ 299.250522][ T5884] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 299.324590][ T5960] apple 0003:05AC:024B.001A: collection stack underflow [ 299.332637][ T5960] apple 0003:05AC:024B.001A: item 0 1 0 12 parsing failed [ 299.354388][ T5960] apple 0003:05AC:024B.001A: parse failed [ 299.360385][ T5960] apple 0003:05AC:024B.001A: probe with driver apple failed with error -22 [ 299.431807][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.453371][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 299.478416][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 299.502502][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 299.528789][ T6400] usb 5-1: USB disconnect, device number 18 [ 299.548618][ T5884] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 299.573487][ T5884] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 299.593256][ T5884] usb 3-1: Manufacturer: syz [ 299.611665][ T5884] usb 3-1: config 0 descriptor?? [ 299.952372][ T5884] rc_core: IR keymap rc-hauppauge not found [ 299.965411][ T5884] Registered IR keymap rc-empty [ 299.979426][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 300.008508][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 300.053378][T14183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.063479][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 300.070277][T14183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.109430][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input27 [ 300.147150][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 300.166566][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 300.198479][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 300.254200][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 300.294426][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 300.338358][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 300.359390][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 300.390708][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 300.433611][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 300.474067][ T5884] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 300.510267][ T5884] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 300.544057][ T5884] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 300.583479][ T5884] usb 3-1: USB disconnect, device number 15 [ 300.666088][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3661'. [ 301.245773][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 301.245793][ T30] audit: type=1326 audit(1749564888.954:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14265 comm="syz.0.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 301.324417][T14272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.345434][ T30] audit: type=1326 audit(1749564888.954:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14265 comm="syz.0.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 301.395375][ T30] audit: type=1326 audit(1749564888.954:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14265 comm="syz.0.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 301.491642][ T30] audit: type=1326 audit(1749564888.991:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14265 comm="syz.0.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 301.560311][ T30] audit: type=1326 audit(1749564889.038:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14273 comm="syz.0.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8f917c11e5 code=0x7ffc0000 [ 301.653099][ T30] audit: type=1326 audit(1749564889.057:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14265 comm="syz.0.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 301.700782][ T30] audit: type=1326 audit(1749564889.057:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14265 comm="syz.0.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 301.791164][ T30] audit: type=1326 audit(1749564889.076:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14265 comm="syz.0.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 301.849566][ T30] audit: type=1326 audit(1749564889.076:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14265 comm="syz.0.3678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 302.131155][T14311] input: syz0 as /devices/virtual/input/input28 [ 302.161643][T14314] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3700'. [ 302.177873][T14314] sch_fq: defrate 0 ignored. [ 302.319236][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'. [ 302.624954][ T6421] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 302.795544][ T6421] usb 5-1: Using ep0 maxpacket: 32 [ 302.813411][ T6421] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 302.824247][ T6421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.826552][T14342] batadv_slave_1: entered promiscuous mode [ 302.848599][ T6421] usb 5-1: config 0 descriptor?? [ 302.875372][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'. [ 303.091965][ T6421] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 303.124473][ T6421] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 303.167116][ T6421] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 303.198528][ T6421] usb 5-1: media controller created [ 303.270818][ T6421] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.338040][ T6421] az6027: usb out operation failed. (-71) [ 303.338390][ T6421] az6027: usb out operation failed. (-71) [ 303.338404][ T6421] stb0899_attach: Driver disabled by Kconfig [ 303.338415][ T6421] az6027: no front-end attached [ 303.338415][ T6421] [ 303.338745][ T6421] az6027: usb out operation failed. (-71) [ 303.338759][ T6421] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 303.342390][ T6421] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 303.660745][ T6421] dvb-usb: schedule remote query interval to 400 msecs. [ 303.676113][ T6421] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 303.700229][ T6421] usb 5-1: USB disconnect, device number 19 [ 303.812784][ T6421] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 303.854286][ T5884] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 304.019043][ T5884] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 304.032931][ T5884] usb 2-1: config 0 interface 0 has no altsetting 0 [ 304.044918][ T5884] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 304.057448][ T5960] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 304.059987][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.074505][ T5884] usb 2-1: Product: syz [ 304.083849][ T5884] usb 2-1: Manufacturer: syz [ 304.089070][ T5884] usb 2-1: SerialNumber: syz [ 304.097055][ T5884] usb 2-1: config 0 descriptor?? [ 304.116961][ T5884] usb 2-1: selecting invalid altsetting 0 [ 304.230591][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 304.244315][ T5960] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 304.253517][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.261604][ T5960] usb 4-1: Product: syz [ 304.265811][ T5960] usb 4-1: Manufacturer: syz [ 304.270442][ T5960] usb 4-1: SerialNumber: syz [ 304.277853][ T5960] usb 4-1: config 0 descriptor?? [ 304.287926][ T5960] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.361276][ T5884] usb 2-1: USB disconnect, device number 14 [ 304.525172][ T5960] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 304.729212][ T6398] usb 4-1: USB disconnect, device number 21 [ 304.840729][T14404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3742'. [ 305.781369][T14453] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3765'. [ 305.796053][T14453] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 306.743969][T14487] delete_channel: no stack [ 307.275703][ T5884] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 307.438678][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 307.452700][ T5884] usb 3-1: config 0 has no interfaces? [ 307.475833][ T5884] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 307.497953][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.522685][ T5884] usb 3-1: Product: syz [ 307.526870][ T5884] usb 3-1: Manufacturer: syz [ 307.540178][ T5884] usb 3-1: SerialNumber: syz [ 307.552541][ T5884] usb 3-1: config 0 descriptor?? [ 307.777041][ T5884] usb 3-1: USB disconnect, device number 16 [ 308.781728][T14568] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 308.955926][T14581] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3824'. [ 308.979458][T14581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3824'. [ 309.007558][T14584] netlink: 'syz.4.3823': attribute type 4 has an invalid length. [ 309.091942][T14589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3827'. [ 309.304608][T14603] gretap0: entered promiscuous mode [ 309.330416][T14603] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3833'. [ 309.776257][T14627] netlink: 'syz.2.3844': attribute type 1 has an invalid length. [ 309.824817][T14627] netlink: 'syz.2.3844': attribute type 2 has an invalid length. [ 310.081738][T14643] netlink: 'syz.4.3852': attribute type 3 has an invalid length. [ 310.282021][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3854'. [ 310.311437][T14651] netlink: 'syz.4.3855': attribute type 7 has an invalid length. [ 310.417108][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3857'. [ 310.426296][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3857'. [ 310.735019][T14666] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3862'. [ 310.869094][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3865'. [ 311.175879][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 311.241659][ T5960] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 311.444699][ T5960] usb 3-1: Using ep0 maxpacket: 32 [ 311.453638][ T5960] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 311.475712][ T5960] usb 3-1: config 0 has no interface number 0 [ 311.495012][ T5960] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 311.512204][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.529197][ T5960] usb 3-1: Product: syz [ 311.541601][ T5960] usb 3-1: Manufacturer: syz [ 311.549876][ T5960] usb 3-1: SerialNumber: syz [ 311.570946][ T5960] usb 3-1: config 0 descriptor?? [ 311.587852][ T5960] smsc95xx v2.0.0 [ 312.251371][ T5960] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 312.276329][ T5960] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 312.290375][T14728] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 312.309829][ T5960] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 312.332709][ T5960] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 312.364464][ T5960] usb 3-1: USB disconnect, device number 17 [ 313.338110][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 313.344954][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 315.293530][ T5884] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 315.311035][T14850] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input30 [ 315.456194][ T5884] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.467581][ T5884] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 315.477967][ T5884] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 315.487411][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.499800][T14831] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 315.510461][ T5884] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 315.673781][T14860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3950'. [ 315.756908][ T6398] usb 2-1: USB disconnect, device number 15 [ 316.631587][T14895] dummy0: entered promiscuous mode [ 316.642708][T14895] dummy0: left promiscuous mode [ 317.168162][T14917] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.547715][T14987] sock: sock_set_timeout: `syz.1.4007' (pid 14987) tries to set negative timeout [ 318.938921][ T5960] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 319.123022][ T5960] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.142261][ T5960] usb 2-1: config 0 has no interfaces? [ 319.171793][ T5960] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 319.191492][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.212843][ T5960] usb 2-1: config 0 descriptor?? [ 319.441939][T14994] __vm_enough_memory: pid: 14994, comm: syz.1.4011, bytes: 21200535089152 not enough memory for the allocation [ 319.461616][ T5960] usb 2-1: USB disconnect, device number 16 [ 319.697095][T15026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4023'. [ 319.717411][T10335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.753639][T10335] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.756386][ T5960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.981463][T15042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4031'. [ 320.693034][ T6400] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 320.714483][ T5960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 320.824044][ T30] audit: type=1326 audit(1749564907.269:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15080 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 320.880751][ T30] audit: type=1326 audit(1749564907.269:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15080 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 320.980297][ T30] audit: type=1326 audit(1749564907.306:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15080 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 321.001799][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.044527][ T30] audit: type=1326 audit(1749564907.306:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15080 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 321.076832][ T30] audit: type=1326 audit(1749564907.306:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15080 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 321.119592][ T30] audit: type=1326 audit(1749564907.306:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15080 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 321.157607][ T30] audit: type=1326 audit(1749564907.306:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15080 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 321.212625][ T30] audit: type=1326 audit(1749564907.306:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15080 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 321.234194][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.279973][ T30] audit: type=1326 audit(1749564907.306:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15080 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 321.322740][ T6400] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 321.346487][ T30] audit: type=1326 audit(1749564907.306:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15080 comm="syz.0.4049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 321.489535][ T6400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.515811][ T6400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.547485][ T6400] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.570983][ T6400] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.598823][ T6400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.626541][ T6400] usb 5-1: config 0 descriptor?? [ 321.862720][T15093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.897931][T15093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.176856][ T6400] plantronics 0003:047F:FFFF.001B: unbalanced delimiter at end of report description [ 322.214132][ T6400] plantronics 0003:047F:FFFF.001B: parse failed [ 322.220560][ T6400] plantronics 0003:047F:FFFF.001B: probe with driver plantronics failed with error -22 [ 322.268569][T15124] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 322.316612][T15124] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.326514][T15124] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.431927][ T9] usb 5-1: USB disconnect, device number 20 [ 322.562863][ T5960] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 322.596323][T15124] bridge0: entered allmulticast mode [ 322.723227][ T5960] usb 4-1: Using ep0 maxpacket: 32 [ 322.741808][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.774253][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.796398][ T5960] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 322.813587][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.828128][ T5960] usb 4-1: config 0 descriptor?? [ 322.990678][T15146] syz_tun: entered allmulticast mode [ 323.036686][T15145] syz_tun: left allmulticast mode [ 323.292231][ T5960] savu 0003:1E7D:2D5A.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 323.309652][T15157] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4086'. [ 323.509677][T15165] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4090'. [ 323.575199][ T5960] usb 4-1: USB disconnect, device number 22 [ 324.198671][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 324.232672][ T5960] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 324.268430][T15201] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 324.463403][ T5960] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 324.476817][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.482820][ T5960] usb 2-1: config 0 interface 0 has no altsetting 0 [ 324.531425][ T5960] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 324.552028][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 324.571453][ T5960] usb 2-1: Product: syz [ 324.583432][ T5960] usb 2-1: Manufacturer: syz [ 324.593233][ T5960] usb 2-1: SerialNumber: syz [ 324.603670][ T5960] usb 2-1: config 0 descriptor?? [ 324.630963][ T5960] usb 2-1: selecting invalid altsetting 0 [ 324.721887][T15217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.920966][ T5960] usb 2-1: USB disconnect, device number 17 [ 327.190026][T15304] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.4153'. [ 327.200704][T15304] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 327.234664][ T6400] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 327.256200][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 327.256216][ T30] audit: type=1326 audit(1749564913.284:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.0.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 327.292005][ T30] audit: type=1326 audit(1749564913.293:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.0.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 327.352657][ T5877] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 327.376639][ T30] audit: type=1326 audit(1749564913.321:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.0.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 327.411987][T10328] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.422752][ T30] audit: type=1326 audit(1749564913.321:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.0.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 327.422803][ T30] audit: type=1326 audit(1749564913.321:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.0.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 327.448185][ T30] audit: type=1326 audit(1749564913.321:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.0.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 327.533610][T10328] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.548332][ T30] audit: type=1326 audit(1749564913.340:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.0.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9178e929 code=0x7ffc0000 [ 327.587600][ T30] audit: type=1326 audit(1749564913.340:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.0.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f917858e7 code=0x7ffc0000 [ 327.609082][ T6400] usb 3-1: device not accepting address 18, error -71 [ 327.616209][ T30] audit: type=1326 audit(1749564913.340:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.0.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8f9172ab19 code=0x7ffc0000 [ 327.638072][ T30] audit: type=1326 audit(1749564913.340:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15305 comm="syz.0.4154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f917858e7 code=0x7ffc0000 [ 327.688212][T10328] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.774635][T10328] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.985131][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4158'. [ 328.094122][T10328] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.139817][T10328] bridge_slave_0: left allmulticast mode [ 328.153385][T10328] bridge_slave_0: left promiscuous mode [ 328.168735][T10328] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.409871][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.418900][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.432085][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.453946][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.469386][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.596157][T15342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.720814][ T6400] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 328.812144][T10328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.836308][T10328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.848781][T10328] bond0 (unregistering): Released all slaves [ 328.915859][ T6400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 328.956761][ T6400] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 328.992536][ T6400] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 329.008233][ T6400] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 329.017481][ T6400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.025771][ T6400] usb 3-1: Product: syz [ 329.030069][ T6400] usb 3-1: Manufacturer: syz [ 329.035106][ T6400] usb 3-1: SerialNumber: syz [ 329.042909][ T6400] usb 3-1: config 0 descriptor?? [ 329.048759][T15333] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 329.056121][ T5884] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 329.056320][T15333] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 329.074656][ T6400] usb 3-1: ucan: probing device on interface #0 [ 329.224771][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 329.238231][ T5884] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 329.248873][ T5884] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 329.270442][ T5884] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 329.279978][ T5884] usb 5-1: config 1 has no interface number 0 [ 329.286272][ T5884] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.304875][ T5884] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 329.318382][ T5884] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 329.328175][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.329538][T15360] netlink: del zone limit has 4 unknown bytes [ 329.365715][ T5884] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 329.366721][T10328] hsr0: left allmulticast mode [ 329.390047][T10328] veth1_macvtap: left promiscuous mode [ 329.404967][T10328] veth0_macvtap: left promiscuous mode [ 329.415639][T10328] veth1_vlan: left promiscuous mode [ 329.421065][T10328] veth0_vlan: left promiscuous mode [ 329.569161][ T5884] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 329.570140][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4181'. [ 329.748225][ T6400] ucan 3-1:0.0: probe with driver ucan failed with error -22 [ 329.974761][ T6400] usb 3-1: USB disconnect, device number 19 [ 330.056063][ T6421] usb 5-1: USB disconnect, device number 21 [ 330.067133][ T6421] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 330.120705][T10328] team0 (unregistering): Port device team_slave_1 removed [ 330.170116][T10328] team0 (unregistering): Port device team_slave_0 removed [ 330.651003][T15332] chnl_net:caif_netlink_parms(): no params data found [ 330.698536][ T5841] Bluetooth: hci2: command tx timeout [ 331.078591][T15332] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.108018][T15332] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.118046][T15332] bridge_slave_0: entered allmulticast mode [ 331.137308][T15332] bridge_slave_0: entered promiscuous mode [ 331.160188][T15332] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.167334][T15332] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.177097][T15332] bridge_slave_1: entered allmulticast mode [ 331.186465][T15332] bridge_slave_1: entered promiscuous mode [ 331.228908][T10328] IPVS: stop unused estimator thread 0... [ 331.299533][T15332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.309791][T15417] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 331.328977][T15332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.394195][T15420] netlink: 182 bytes leftover after parsing attributes in process `syz.0.4204'. [ 331.438693][T15332] team0: Port device team_slave_0 added [ 331.453568][T15332] team0: Port device team_slave_1 added [ 331.645666][T15429] syzkaller1: entered promiscuous mode [ 331.654536][T15429] syzkaller1: entered allmulticast mode [ 331.669886][T15332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.691543][T15332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.739967][T15442] input: syz0 as /devices/virtual/input/input31 [ 331.769231][T15332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.801509][T15332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.811303][T15332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.850733][T15445] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 331.853893][T15332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.151768][T15332] hsr_slave_0: entered promiscuous mode [ 332.169619][T15332] hsr_slave_1: entered promiscuous mode [ 332.698913][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 332.733421][T15476] netlink: 'syz.0.4228': attribute type 4 has an invalid length. [ 332.754242][T15476] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4228'. [ 332.874851][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 332.892504][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 332.932755][ T5841] Bluetooth: hci2: command tx timeout [ 332.938286][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 332.959555][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.986116][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.007862][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 333.022733][T15332] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 333.029758][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.049645][T15332] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 333.072351][T15332] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 333.103120][T15332] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 333.259916][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 333.274971][ T9] usbtmc 4-1:16.0: can't read capabilities [ 333.324744][T15332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.349714][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.360104][T15332] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.383264][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.390467][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.440494][T10332] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.447691][T10332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.468809][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 333.468824][ T30] audit: type=1326 audit(1749564919.102:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15512 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 333.478869][ T6400] usb 4-1: USB disconnect, device number 24 [ 333.549480][ T30] audit: type=1326 audit(1749564919.102:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15512 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 333.578738][ T30] audit: type=1326 audit(1749564919.139:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15512 comm="syz.2.4241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 333.612532][ T30] audit: type=1326 audit(1749564919.139:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15512 comm="syz.2.4241" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8e929 code=0x0 [ 334.011509][T15332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.135853][T15332] veth0_vlan: entered promiscuous mode [ 334.163663][T15332] veth1_vlan: entered promiscuous mode [ 334.235866][T15332] veth0_macvtap: entered promiscuous mode [ 334.270647][T15332] veth1_macvtap: entered promiscuous mode [ 334.282879][T15543] loop2: detected capacity change from 0 to 7 [ 334.307052][T15332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.317322][T15543] Dev loop2: unable to read RDB block 7 [ 334.332316][T15332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.350872][T15543] loop2: AHDI p2 [ 334.360173][T15543] loop2: partition table partially beyond EOD, truncated [ 334.389809][T15332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.427094][T15332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.463040][T15332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.471806][T15332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.659772][T10328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.690300][T10328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.781720][T10328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.825026][T10328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.036248][T15572] loop7: detected capacity change from 0 to 6 [ 335.048808][T15572] Dev loop7: unable to read RDB block 6 [ 335.057083][T15572] loop7: unable to read partition table [ 335.075844][T15572] loop7: partition table beyond EOD, truncated [ 335.087952][T15572] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 335.146098][ T5841] Bluetooth: hci2: command tx timeout [ 335.741256][T15602] loop4: detected capacity change from 0 to 524288000 [ 336.022632][ T6398] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 336.236767][ T6398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.267645][ T6398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.310766][ T6398] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.336786][ T6398] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.349782][ T6398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.362873][ T6398] usb 4-1: config 0 descriptor?? [ 336.711971][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4301'. [ 336.741906][T15646] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.764910][T15646] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.790141][T15646] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.800021][T15646] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.832762][ T6398] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 336.848178][ T6398] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 336.874360][ T6398] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 337.115311][T15656] syzkaller1: entered promiscuous mode [ 337.129183][ T5960] usb 4-1: USB disconnect, device number 25 [ 337.132131][T15656] syzkaller1: entered allmulticast mode [ 337.347011][ T30] audit: type=1800 audit(1749564922.722:589): pid=15665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.4310" name="nullb0" dev="tmpfs" ino=2855 res=0 errno=0 [ 337.373985][ T5841] Bluetooth: hci2: command tx timeout [ 337.532569][T15673] tipc: Started in network mode [ 337.561882][T15673] tipc: Node identity 7f000001, cluster identity 4711 [ 337.584243][T15673] tipc: New replicast peer: 0.0.0.0 [ 337.591462][T15673] tipc: Enabled bearer , priority 10 [ 338.140134][T15695] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4322'. [ 338.161766][ T6421] IPVS: starting estimator thread 0... [ 338.267533][T15696] IPVS: using max 28 ests per chain, 67200 per kthread [ 338.638651][T15712] syzkaller1: entered promiscuous mode [ 338.655614][T15712] syzkaller1: entered allmulticast mode [ 338.789885][ T6398] tipc: Node number set to 2130706433 [ 338.983606][ T5960] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 339.032350][T15730] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4339'. [ 339.146092][ T5960] usb 5-1: Using ep0 maxpacket: 32 [ 339.157226][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.179334][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.189408][ T5960] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 339.199209][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.210923][ T5960] usb 5-1: config 0 descriptor?? [ 339.285699][T15740] unknown channel width for channel at 909000KHz? [ 339.671177][ T5960] savu 0003:1E7D:2D5A.001E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 339.958720][ T5960] usb 5-1: USB disconnect, device number 22 [ 341.319540][T15807] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4370'. [ 342.186572][T15838] syzkaller1: entered promiscuous mode [ 342.203053][T15838] syzkaller1: entered allmulticast mode [ 342.324547][ T30] audit: type=1326 audit(1749564928.372:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 342.426421][ T30] audit: type=1326 audit(1749564928.372:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 342.500664][ T30] audit: type=1326 audit(1749564928.372:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b8cb2ab19 code=0x7ffc0000 [ 342.533336][T15847] macsec2: entered allmulticast mode [ 342.538668][T15847] bridge0: entered allmulticast mode [ 342.551275][T15847] bridge0: port 3(macsec2) entered blocking state [ 342.561012][T15847] bridge0: port 3(macsec2) entered disabled state [ 342.569683][ T30] audit: type=1326 audit(1749564928.372:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 342.602716][T15847] bridge0: left allmulticast mode [ 342.611195][ T30] audit: type=1326 audit(1749564928.372:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b8cb2ab19 code=0x7ffc0000 [ 342.656536][ T30] audit: type=1326 audit(1749564928.372:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 342.682655][ T30] audit: type=1326 audit(1749564928.372:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8cb8e929 code=0x7ffc0000 [ 342.707249][ T30] audit: type=1326 audit(1749564928.372:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b8cb2ab19 code=0x7ffc0000 [ 342.731745][ T30] audit: type=1326 audit(1749564928.372:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b8cb2ab19 code=0x7ffc0000 [ 342.756547][ T30] audit: type=1326 audit(1749564928.372:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15842 comm="syz.2.4387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b8cb2ab19 code=0x7ffc0000 [ 343.228808][T15860] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4394'. [ 344.567178][ T6414] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 344.577521][T15910] loop8: detected capacity change from 0 to 1 [ 344.616113][T15910] Dev loop8: unable to read RDB block 1 [ 344.640406][T15910] loop8: unable to read partition table [ 344.649846][T15910] loop8: partition table beyond EOD, truncated [ 344.675359][T15910] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 344.746793][ T6414] usb 2-1: Using ep0 maxpacket: 16 [ 344.760405][ T6414] usb 2-1: config 0 interface 0 has no altsetting 0 [ 344.777885][ T6414] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 344.797888][ T6414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.847671][ T6414] usb 2-1: config 0 descriptor?? [ 345.237396][T15926] kvm: kvm [15925]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 345.337151][ T6414] hid (null): invalid report_size 27418 [ 345.352361][ T6414] hid (null): report_id 17018 is invalid [ 345.384328][ T6414] hid (null): report_id 48117 is invalid [ 345.583038][ T6398] usb 2-1: USB disconnect, device number 18 [ 345.761518][ T5884] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 345.939530][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 345.948226][ T5884] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.975607][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.003088][ T5884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.025962][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.037466][T10328] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.073042][ T5884] usb 3-1: Product: syz [ 346.077248][ T5884] usb 3-1: Manufacturer: syz [ 346.081902][ T5884] usb 3-1: SerialNumber: syz [ 346.086648][T10328] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.202733][T10328] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.214531][T10328] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.298450][T10328] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.308528][T10328] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.373430][T10328] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.420215][T10328] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.575770][ T5884] usb 3-1: 0:2 : does not exist [ 346.726078][T10328] bridge_slave_1: left allmulticast mode [ 346.738975][T10328] bridge_slave_1: left promiscuous mode [ 346.756082][T10328] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.782238][T10328] bridge_slave_0: left allmulticast mode [ 346.798529][T10328] bridge_slave_0: left promiscuous mode [ 346.805251][T10328] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.916095][ T6421] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 347.087290][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.097210][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.115410][ T6421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.136226][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.145643][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.153655][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.190869][ T6421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.204069][ T6421] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 347.214050][ T6421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.230165][ T6421] usb 5-1: config 0 descriptor?? [ 347.260496][ T5884] usb 3-1: USB disconnect, device number 20 [ 347.706480][ T6421] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 347.716711][ T6421] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0 [ 347.745995][ T6421] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0020/input/input33 [ 347.783199][ T6421] cm6533_jd 0003:0D8C:0022.0020: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 347.907499][T15991] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 347.945552][ T6421] usb 5-1: USB disconnect, device number 23 [ 348.108951][T10328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.142609][T10328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.171268][T10328] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 348.185070][T10328] bond0 (unregistering): Released all slaves [ 348.866537][T10328] hsr_slave_0: left promiscuous mode [ 348.873254][T10328] hsr_slave_1: left promiscuous mode [ 348.879256][T10328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.888847][T10328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.941049][T10328] veth1_macvtap: left promiscuous mode [ 348.946711][T10328] veth0_macvtap: left promiscuous mode [ 348.957011][T10328] veth1_vlan: left promiscuous mode [ 348.962514][T10328] veth0_vlan: left promiscuous mode [ 349.343042][ T5841] Bluetooth: hci3: command tx timeout [ 349.404007][T16047] program syz.2.4473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.736488][T16061] netlink: 'syz.2.4478': attribute type 39 has an invalid length. [ 349.915749][T10328] team0 (unregistering): Port device team_slave_1 removed [ 349.935142][ T5877] kernel write not supported for file [eventfd] (pid: 5877 comm: kworker/1:4) [ 349.983616][T10328] team0 (unregistering): Port device team_slave_0 removed [ 350.411974][T16055] syz_tun: entered allmulticast mode [ 350.436802][T16057] dvmrp1: entered allmulticast mode [ 350.442491][T16060] netlink: 'syz.1.4480': attribute type 34 has an invalid length. [ 350.504431][T16061] syz_tun (unregistering): left allmulticast mode [ 350.529999][T15975] chnl_net:caif_netlink_parms(): no params data found [ 350.619723][T16080] vivid-000: disconnect [ 350.625103][T16075] vivid-000: reconnect [ 350.662737][T15975] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.671016][T15975] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.678346][T15975] bridge_slave_0: entered allmulticast mode [ 350.687547][T15975] bridge_slave_0: entered promiscuous mode [ 350.697446][T15975] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.704911][T15975] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.719891][T15975] bridge_slave_1: entered allmulticast mode [ 350.728089][T15975] bridge_slave_1: entered promiscuous mode [ 350.812306][T15975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.892383][T15975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.982263][T16088] sctp: [Deprecated]: syz.2.4490 (pid 16088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.982263][T16088] Use struct sctp_sack_info instead [ 351.020191][T15975] team0: Port device team_slave_0 added [ 351.046883][T15975] team0: Port device team_slave_1 added [ 351.138895][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.170667][T15975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.186849][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.189510][T16095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.213692][T15975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.222254][T15975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.294021][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.305062][T16102] program syz.2.4496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 351.364608][T15975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.573677][ T5841] Bluetooth: hci3: command tx timeout [ 351.617757][T15975] hsr_slave_0: entered promiscuous mode [ 351.649555][T15975] hsr_slave_1: entered promiscuous mode [ 351.660664][T15975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.676941][T16115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.686975][T15975] Cannot create hsr debugfs directory [ 351.804327][ T30] kauditd_printk_skb: 261 callbacks suppressed [ 351.804344][ T30] audit: type=1326 audit(1749564937.258:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16085 comm="syz.3.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88878e929 code=0x7fc00000 [ 351.954714][T16122] pim6reg: entered allmulticast mode [ 351.993468][T16124] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 352.011456][T16122] pim6reg: left allmulticast mode [ 352.312355][T15975] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.344185][T15975] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.376366][T15975] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.408290][T15975] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.638217][T15975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.710036][T15975] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.741847][T10328] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.749073][T10328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.787804][T10328] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.795012][T10328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.869705][T15975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.116713][ T6421] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 353.149183][T16171] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4522'. [ 353.163285][T16161] "syz.3.4520" (16161) uses obsolete ecb(arc4) skcipher [ 353.312657][ T6421] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 353.317710][T15975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.330333][ T6421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.352983][ T6421] usb 3-1: Product: syz [ 353.357179][ T6421] usb 3-1: Manufacturer: syz [ 353.361804][ T6421] usb 3-1: SerialNumber: syz [ 353.395454][ T6421] usb 3-1: config 0 descriptor?? [ 353.664869][ T6398] usb 3-1: USB disconnect, device number 21 [ 353.790169][ T5841] Bluetooth: hci3: command tx timeout [ 354.151967][T16205] ip_vti0: Master is either lo or non-ether device [ 354.264619][T15975] veth0_vlan: entered promiscuous mode [ 354.308210][T15975] veth1_vlan: entered promiscuous mode [ 354.366798][T15975] veth0_macvtap: entered promiscuous mode [ 354.390691][T15975] veth1_macvtap: entered promiscuous mode [ 354.417191][T15975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.436892][T15975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.469337][T15975] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.491605][T15975] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.528271][T15975] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.537043][T15975] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.723456][T16215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4541'. [ 354.862570][ T49] bridge_slave_1: left promiscuous mode [ 354.868393][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.945920][ T49] bridge_slave_0: left allmulticast mode [ 354.951633][ T49] bridge_slave_0: left promiscuous mode [ 354.966223][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.227248][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 355.243293][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 355.255359][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.263611][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.279968][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 355.513802][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.525008][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.538938][ T49] bond0 (unregistering): Released all slaves [ 355.591813][T10349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.624765][T10349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.919226][ T30] audit: type=1804 audit(1749564941.093:862): pid=16241 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.4553" name="/" dev="pidfs" ino=16240 res=1 errno=0 [ 355.977411][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.993114][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.019122][ T5835] Bluetooth: hci3: command tx timeout [ 356.254010][ T49] hsr_slave_0: left promiscuous mode [ 356.270541][ T49] hsr_slave_1: left promiscuous mode [ 356.276771][ T49] batman_adv: batadv0: Removing interface: team0 [ 356.305669][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.310980][T16259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 356.335831][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.402980][ T49] veth0_macvtap: left allmulticast mode [ 356.511505][T16262] xt_hashlimit: size too large, truncated to 1048576 [ 357.471536][ T5835] Bluetooth: hci4: command tx timeout [ 357.589462][ T49] team0 (unregistering): Port device team_slave_1 removed [ 357.683724][ T49] team0 (unregistering): Port device team_slave_0 removed [ 357.792370][ T30] audit: type=1326 audit(1749564942.852:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16292 comm="syz.1.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c078e929 code=0x7fc00000 [ 357.824381][ T30] audit: type=1326 audit(1749564942.852:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16292 comm="syz.1.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa4c078e929 code=0x7fc00000 [ 357.845890][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.856165][ T30] audit: type=1326 audit(1749564942.852:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16292 comm="syz.1.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c078e929 code=0x7fc00000 [ 357.885788][ T30] audit: type=1326 audit(1749564942.852:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16292 comm="syz.1.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c078e929 code=0x7fc00000 [ 357.930331][ T30] audit: type=1326 audit(1749564942.852:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16292 comm="syz.1.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c078e929 code=0x7fc00000 [ 357.990710][ T30] audit: type=1326 audit(1749564942.852:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16292 comm="syz.1.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c078e929 code=0x7fc00000 [ 358.020736][ T30] audit: type=1326 audit(1749564942.852:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16292 comm="syz.1.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c078e929 code=0x7fc00000 [ 358.042404][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.049395][ T30] audit: type=1326 audit(1749564942.852:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16292 comm="syz.1.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c078e929 code=0x7fc00000 [ 358.071750][ T30] audit: type=1326 audit(1749564942.852:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16292 comm="syz.1.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c078e929 code=0x7fc00000 [ 358.096194][ T30] audit: type=1326 audit(1749564942.852:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16292 comm="syz.1.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4c078e929 code=0x7fc00000 [ 358.679330][T16265] : renamed from bridge_slave_0 (while UP) [ 358.693762][T16276] tipc: Started in network mode [ 358.714705][T16276] tipc: Node identity 7f000001, cluster identity 4711 [ 358.740031][T16276] tipc: New replicast peer: 0.0.0.0 [ 358.745670][T16276] tipc: Enabled bearer , priority 10 [ 359.236116][T16226] chnl_net:caif_netlink_parms(): no params data found [ 359.645125][T16226] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.691988][T16226] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.699248][T16226] bridge_slave_0: entered allmulticast mode [ 359.705244][ T5835] Bluetooth: hci4: command tx timeout [ 359.736623][T16226] bridge_slave_0: entered promiscuous mode [ 359.794152][T16226] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.810647][ T49] IPVS: stop unused estimator thread 0... [ 359.836106][T16226] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.852412][T16226] bridge_slave_1: entered allmulticast mode [ 359.860772][T16226] bridge_slave_1: entered promiscuous mode [ 359.937702][ T5884] tipc: Node number set to 2130706433 [ 360.012920][T16226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.036763][T16226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.178671][T16226] team0: Port device team_slave_0 added [ 360.190661][T16226] team0: Port device team_slave_1 added [ 360.204632][ T6421] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 360.280842][T16226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.295398][T16226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.323708][T16226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.337240][T16226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.344926][T16226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.394599][T16361] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 360.414336][T16226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.425839][T16362] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4601'. [ 360.443637][ T6421] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 360.460990][ T6421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.479943][ T6421] usb 6-1: Product: syz [ 360.489499][ T6421] usb 6-1: Manufacturer: syz [ 360.503781][ T6421] usb 6-1: SerialNumber: syz [ 360.541408][ T6421] usb 6-1: config 0 descriptor?? [ 360.555594][ T6421] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 002 [ 360.580257][T16226] hsr_slave_0: entered promiscuous mode [ 360.599190][T16226] hsr_slave_1: entered promiscuous mode [ 360.613933][T16226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.635993][T16226] Cannot create hsr debugfs directory [ 360.989586][ T6421] (null): failure reading functionality [ 361.022304][ T6421] i2c i2c-1: failure reading functionality [ 361.047111][ T6421] i2c i2c-1: connected i2c-tiny-usb device [ 361.063122][ T6421] usb 6-1: USB disconnect, device number 2 [ 361.765489][T16383] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4612'. [ 361.915203][ T5835] Bluetooth: hci4: command tx timeout [ 362.076081][T10328] bridge_slave_1: left allmulticast mode [ 362.205724][T10328] bridge_slave_1: left promiscuous mode [ 362.211539][T10328] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.245149][T10328] bridge_slave_0: left allmulticast mode [ 362.271698][T10328] bridge_slave_0: left promiscuous mode [ 362.277521][T10328] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.306076][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.319727][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.329271][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.339469][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.351588][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.972722][T10328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.993851][T10328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.020221][T10328] bond0 (unregistering): Released all slaves [ 363.105978][T10328] tipc: Disabling bearer [ 363.122331][T10328] tipc: Left network mode [ 363.356956][T16419] input: syz0 as /devices/virtual/input/input35 [ 363.486891][T16226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 363.551670][T16226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 363.661604][T16429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.722269][T16226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 363.738143][T16226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 363.767916][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 363.767935][ T30] audit: type=1326 audit(1749564948.445:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.4.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76ff2ab19 code=0x7ffc0000 [ 363.848089][ T30] audit: type=1326 audit(1749564948.445:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.4.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 363.870189][ T30] audit: type=1326 audit(1749564948.445:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.4.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76ff2ab19 code=0x7ffc0000 [ 363.894335][ T30] audit: type=1326 audit(1749564948.445:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.4.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 363.916676][ T30] audit: type=1326 audit(1749564948.445:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.4.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76ff2ab19 code=0x7ffc0000 [ 363.940505][ T30] audit: type=1326 audit(1749564948.445:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.4.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 363.966000][ T30] audit: type=1326 audit(1749564948.445:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.4.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 363.989061][ T30] audit: type=1326 audit(1749564948.445:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.4.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76ff2ab19 code=0x7ffc0000 [ 364.025095][ T30] audit: type=1326 audit(1749564948.445:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.4.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd76ff8e929 code=0x7ffc0000 [ 364.073617][ T30] audit: type=1326 audit(1749564948.445:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16430 comm="syz.4.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd76ff2ab19 code=0x7ffc0000 [ 364.139917][ T5841] Bluetooth: hci4: command tx timeout [ 364.274391][T10328] hsr_slave_0: left promiscuous mode [ 364.304262][T10328] hsr_slave_1: left promiscuous mode [ 364.331984][T10328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.339428][T10328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.373370][T10328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.391177][T10328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.408043][T16441] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.450531][T10328] veth1_macvtap: left promiscuous mode [ 364.456738][T10328] veth0_macvtap: left promiscuous mode [ 364.468356][T10328] veth1_vlan: left promiscuous mode [ 364.475504][T10328] veth0_vlan: left promiscuous mode [ 364.533155][T16445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4637'. [ 364.573671][ T5841] Bluetooth: hci2: command tx timeout [ 365.067645][T10328] team0 (unregistering): Port device team_slave_1 removed [ 365.109746][T10328] team0 (unregistering): Port device team_slave_0 removed [ 365.583188][T16454] program syz.2.4640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.812245][T16395] chnl_net:caif_netlink_parms(): no params data found [ 365.971947][T16470] netlink: 'syz.5.4646': attribute type 29 has an invalid length. [ 366.020547][ T6421] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 366.149108][T16395] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.156338][T16395] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.189756][T16395] bridge_slave_0: entered allmulticast mode [ 366.199729][T16395] bridge_slave_0: entered promiscuous mode [ 366.205695][ T6421] usb 3-1: Using ep0 maxpacket: 32 [ 366.236431][T10328] IPVS: stop unused estimator thread 0... [ 366.253146][ T6421] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 366.265107][T16395] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.272865][ T6421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.281544][T16395] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.289401][T16395] bridge_slave_1: entered allmulticast mode [ 366.297239][T16395] bridge_slave_1: entered promiscuous mode [ 366.307245][ T6421] usb 3-1: config 0 descriptor?? [ 366.397634][T16226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.410599][T16395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.435375][T16395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.455303][T16226] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.547491][ T6421] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 366.568410][T16395] team0: Port device team_slave_0 added [ 366.578937][ T6421] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.593881][ T6421] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 366.600502][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.601961][ T6421] usb 3-1: media controller created [ 366.608979][T10365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.635317][ T6421] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.670016][T16395] team0: Port device team_slave_1 added [ 366.682373][T10365] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.689592][T10365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.770589][ T6421] az6027: usb out operation failed. (-71) [ 366.779859][ T6421] az6027: usb out operation failed. (-71) [ 366.790459][ T5841] Bluetooth: hci2: command tx timeout [ 366.792661][ T6421] stb0899_attach: Driver disabled by Kconfig [ 366.817178][ T6421] az6027: no front-end attached [ 366.817178][ T6421] [ 366.830724][T16395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.850641][T16395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.888439][ T6421] az6027: usb out operation failed. (-71) [ 366.898246][ T6421] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 366.912449][ T6421] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 366.923903][T16395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.939922][ T6421] dvb-usb: schedule remote query interval to 400 msecs. [ 366.948197][ T6421] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 366.989566][T16395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.001838][T16395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.035239][ T6421] usb 3-1: USB disconnect, device number 22 [ 367.042922][T16395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.140061][ T6421] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 367.214333][T16395] hsr_slave_0: entered promiscuous mode [ 367.230856][T16395] hsr_slave_1: entered promiscuous mode [ 367.798711][T16226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.873357][T16395] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 367.894889][T16395] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 367.921995][T16395] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 367.943075][T16395] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 368.125535][T16226] veth0_vlan: entered promiscuous mode [ 368.214712][T16226] veth1_vlan: entered promiscuous mode [ 368.346845][T16226] veth0_macvtap: entered promiscuous mode [ 368.414695][T16226] veth1_macvtap: entered promiscuous mode [ 368.495380][T16395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.579726][T16226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.608397][T16395] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.623182][T16226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.648329][T16226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.672243][T16226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.694467][T16226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.703961][T16226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.746890][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.755454][T10365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.762881][T16545] program syz.5.4675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.817488][T10365] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.824707][T10365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.926948][T10332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.938929][T10332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.985042][T10332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.996128][T16395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.007299][T10332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.014184][ T5841] Bluetooth: hci2: command tx timeout [ 369.169834][ T6414] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 369.328026][T16395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.347421][ T6414] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.367303][ T6414] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 369.376467][ T6414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.392831][ T6414] usb 6-1: config 0 descriptor?? [ 369.640057][T10328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.765327][T16395] veth0_vlan: entered promiscuous mode [ 369.823498][T10328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.854396][ T6414] playstation 0003:054C:0BA0.0021: item fetching failed at offset 5/7 [ 369.867105][T16395] veth1_vlan: entered promiscuous mode [ 369.875514][ T6414] playstation 0003:054C:0BA0.0021: Parse failed [ 369.885581][ T6414] playstation 0003:054C:0BA0.0021: probe with driver playstation failed with error -22 [ 369.936936][T16395] veth0_macvtap: entered promiscuous mode [ 369.947434][T16395] veth1_macvtap: entered promiscuous mode [ 370.019934][T10328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.076930][ T5877] usb 6-1: USB disconnect, device number 3 [ 370.079204][T16569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.115558][T16395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.197237][T10328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.271609][T16395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.323416][T16395] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.337052][T16395] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.346766][T16395] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.362658][T16395] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.608170][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.616053][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.660616][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.671242][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.679185][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.688291][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.700555][T10328] bridge_slave_1: left allmulticast mode [ 370.709208][T10328] bridge_slave_1: left promiscuous mode [ 370.709536][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.723680][T10328] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.759628][T10328] bridge_slave_0: left allmulticast mode [ 370.765632][T10328] bridge_slave_0: left promiscuous mode [ 370.776341][T10328] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.923418][T16591] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 370.935671][T16591] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 371.246963][ T5841] Bluetooth: hci2: command tx timeout [ 371.274964][T10328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.286466][T10328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.296705][T10328] bond0 (unregistering): Released all slaves [ 371.405847][T10349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.448445][T10349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.922678][ T6400] kernel write not supported for file bpf-prog (pid: 6400 comm: kworker/1:10) [ 372.014296][T10328] hsr_slave_0: left promiscuous mode [ 372.023074][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4697'. [ 372.040486][T10328] hsr_slave_1: left promiscuous mode [ 372.050867][T10328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.058320][T10328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.069720][T10328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.077405][T10328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.107395][T10328] veth1_macvtap: left promiscuous mode [ 372.113070][T10328] veth0_macvtap: left promiscuous mode [ 372.120678][T10328] veth1_vlan: left promiscuous mode [ 372.126689][T10328] veth0_vlan: left promiscuous mode [ 372.729260][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4707'. [ 372.826137][T10328] team0 (unregistering): Port device team_slave_1 removed [ 372.870481][T10328] team0 (unregistering): Port device team_slave_0 removed [ 372.948574][ T5841] Bluetooth: hci4: command tx timeout [ 373.315485][T16639] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.325104][T16639] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.334523][T16639] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.343298][T16639] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.389722][T16639] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.399024][T16639] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.408202][T16639] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.417126][T16639] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.420915][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4709'. [ 373.745158][T16579] chnl_net:caif_netlink_parms(): no params data found [ 374.122392][T16579] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.140755][T16579] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.157213][T16579] bridge_slave_0: entered allmulticast mode [ 374.174712][T16579] bridge_slave_0: entered promiscuous mode [ 374.187837][ T6398] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 374.196700][T16579] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.217945][T16579] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.229771][T16579] bridge_slave_1: entered allmulticast mode [ 374.251711][T16579] bridge_slave_1: entered promiscuous mode [ 374.365260][T16579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.385431][ T6398] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.390254][T16579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.413365][ T6398] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.440831][ T6398] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 374.451725][ T6398] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 374.467360][ T6398] usb 6-1: SerialNumber: syz [ 374.538208][T16579] team0: Port device team_slave_0 added [ 374.572082][T16579] team0: Port device team_slave_1 added [ 374.716119][ T6398] usb 6-1: 0:2 : does not exist [ 374.738316][T16579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.743399][ T6398] usb 6-1: USB disconnect, device number 4 [ 374.774442][T16579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.808589][T16579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.821490][T16579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.828479][T16579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.871299][T16692] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 374.891812][T16579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.019196][T16579] hsr_slave_0: entered promiscuous mode [ 375.056189][T16579] hsr_slave_1: entered promiscuous mode [ 375.063132][T16579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.082422][T16579] Cannot create hsr debugfs directory [ 375.171628][ T5841] Bluetooth: hci4: command tx timeout [ 375.912685][T16579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.932141][T16579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 375.953081][T16579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 375.966501][T16579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 376.182462][T16579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.228766][T16579] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.256483][T10349] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.263718][T10349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.307459][T10349] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.314686][T10349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.901671][T16579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.943644][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4759'. [ 377.395581][ T5841] Bluetooth: hci4: command tx timeout [ 377.517393][T16579] veth0_vlan: entered promiscuous mode [ 377.570549][T16579] veth1_vlan: entered promiscuous mode [ 377.687834][T16579] veth0_macvtap: entered promiscuous mode [ 377.721924][T16579] veth1_macvtap: entered promiscuous mode [ 377.803269][T16579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.849260][T16579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.892579][T16579] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.917031][T16579] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.939583][T16579] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.949642][T16579] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.128796][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.171882][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.261461][T10349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.293020][T10349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.747406][T16783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.060716][T10332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.440920][T10332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.537662][T16795] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 379.565145][T16795] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 379.573633][T16795] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 379.712328][T10332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.958281][T10332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.098519][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.108203][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.118030][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.127528][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.135330][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 492.340313][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 492.347359][ C0] rcu: 1-...!: (0 ticks this GP) idle=93ac/1/0x4000000000000000 softirq=71630/71630 fqs=1 [ 492.358443][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16780/1:b..l [ 492.366578][ C0] rcu: (detected by 0, t=10502 jiffies, g=64613, q=398 ncpus=2) [ 492.374338][ C0] Sending NMI from CPU 0 to CPUs 1: [ 492.374374][ C1] NMI backtrace for cpu 1 [ 492.374402][ C1] CPU: 1 UID: 0 PID: 16802 Comm: syz.2.4774 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 492.374423][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 492.374437][ C1] RIP: 0010:debug_object_deactivate+0x75/0x250 [ 492.374463][ C1] Code: e8 b9 df 0a 00 0f 85 43 01 00 00 48 bd 00 00 00 00 00 fc ff df 4c 89 e0 48 c1 e8 0c 48 b9 eb 83 b5 80 46 86 c8 61 48 0f af c8 <48> c1 e9 2f 83 e1 f8 4c 8d 3c c9 49 81 c7 60 79 c1 99 48 8d 1c c9 [ 492.374478][ C1] RSP: 0018:ffffc90000a08ca8 EFLAGS: 00000887 [ 492.374493][ C1] RAX: 000ffff88807dc22 RBX: ffffffff8b8cf340 RCX: a9583fac88e67936 [ 492.374506][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000a08cc0 [ 492.374516][ C1] RBP: dffffc0000000000 R08: ffffc90000a08cbf R09: 0000000000000000 [ 492.374528][ C1] R10: ffffc90000a08cb0 R11: fffff52000141198 R12: ffff88807dc22340 [ 492.374552][ C1] R13: dffffc0000000000 R14: 185266c75c99b052 R15: ffff8880b8727bc0 [ 492.374565][ C1] FS: 0000000000000000(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 492.374578][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.374589][ C1] CR2: 0000001b2fe1eff8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 492.374603][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 492.374612][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 492.374622][ C1] Call Trace: [ 492.374632][ C1] [ 492.374646][ C1] debug_deactivate+0x1d/0x200 [ 492.374691][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 492.374727][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 492.374751][ C1] ? read_tsc+0x9/0x20 [ 492.374776][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 492.374822][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 492.374851][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 492.374895][ C1] [ 492.374901][ C1] [ 492.374908][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 492.374927][ C1] RIP: 0010:unmap_page_range+0x17b6/0x41c0 [ 492.374958][ C1] Code: 8c 24 04 02 00 00 45 31 f6 e9 c0 05 00 00 e8 81 47 b8 ff 4c 89 fe 48 83 e6 20 31 ff e8 53 4c b8 ff 4c 89 f8 48 83 e0 20 75 0a 65 47 b8 ff e9 b0 04 00 00 48 8b 94 24 08 01 00 00 48 89 d0 48 [ 492.374974][ C1] RSP: 0018:ffffc900050bf5e0 EFLAGS: 00000246 [ 492.374988][ C1] RAX: 0000000000000000 RBX: 0400000000000040 RCX: ffff88807f773c00 [ 492.375000][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.375010][ C1] RBP: ffffc900050bf890 R08: ffff88801d65a7ff R09: 1ffff11003acb4ff [ 492.375023][ C1] R10: dffffc0000000000 R11: ffffed1003acb500 R12: ffffea00017e1fd8 [ 492.375037][ C1] R13: 1ffffd40002fc3fb R14: ffff88805938c500 R15: 800000005f87f007 [ 492.375090][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 492.375122][ C1] ? unmap_vmas+0x144/0x580 [ 492.375149][ C1] unmap_vmas+0x399/0x580 [ 492.375180][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 492.375220][ C1] exit_mmap+0x248/0xb50 [ 492.375242][ C1] ? uprobe_clear_state+0x20f/0x290 [ 492.375266][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 492.375286][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 492.375322][ C1] ? __pfx_exit_aio+0x10/0x10 [ 492.375349][ C1] ? uprobe_clear_state+0x274/0x290 [ 492.375369][ C1] ? mm_update_next_owner+0xa7/0x870 [ 492.375392][ C1] __mmput+0x118/0x420 [ 492.375417][ C1] exit_mm+0x1da/0x2c0 [ 492.375438][ C1] ? __pfx_exit_mm+0x10/0x10 [ 492.375458][ C1] ? rcu_is_watching+0x15/0xb0 [ 492.375486][ C1] do_exit+0x640/0x22e0 [ 492.375509][ C1] ? preempt_schedule_common+0x83/0xd0 [ 492.375534][ C1] ? preempt_schedule+0xae/0xc0 [ 492.375559][ C1] ? __pfx_do_exit+0x10/0x10 [ 492.375582][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 492.375608][ C1] do_group_exit+0x21c/0x2d0 [ 492.375631][ C1] __x64_sys_exit_group+0x3f/0x40 [ 492.375651][ C1] x64_sys_call+0x21ba/0x21c0 [ 492.375667][ C1] do_syscall_64+0xfa/0x3b0 [ 492.375683][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.375709][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.375726][ C1] ? clear_bhb_loop+0x60/0xb0 [ 492.375746][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.375764][ C1] RIP: 0033:0x7f0b8cb8e929 [ 492.375778][ C1] Code: Unable to access opcode bytes at 0x7f0b8cb8e8ff. [ 492.375787][ C1] RSP: 002b:00007ffca9527b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 492.375804][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0b8cb8e929 [ 492.375821][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.375831][ C1] RBP: 00007ffca9527bec R08: 00000005a9527c7f R09: 00000000000927c0 [ 492.375843][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000003d6 [ 492.375854][ C1] R13: 00000000000927c0 R14: 000000000005a10d R15: 00007ffca9527c40 [ 492.375876][ C1] [ 492.376363][ C0] task:syz.4.4765 state:R running task stack:22888 pid:16780 tgid:16779 ppid:5824 task_flags:0x440740 flags:0x00004002 [ 492.858581][ C0] Call Trace: [ 492.861876][ C0] [ 492.864958][ C0] __schedule+0x16a2/0x4cb0 [ 492.869522][ C0] ? preempt_schedule_notrace+0xd1/0x110 [ 492.875194][ C0] ? __pfx___schedule+0x10/0x10 [ 492.880069][ C0] ? sched_clock_cpu+0x74/0x430 [ 492.884990][ C0] preempt_schedule_notrace+0xd1/0x110 [ 492.890495][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 492.896598][ C0] ? unwind_next_frame+0xa5/0x2390 [ 492.901748][ C0] ? arch_stack_walk+0xe4/0x150 [ 492.906713][ C0] ? unwind_next_frame+0xa5/0x2390 [ 492.911860][ C0] preempt_schedule_notrace_thunk+0x16/0x30 [ 492.917787][ C0] ? unwind_next_frame+0xa5/0x2390 [ 492.922932][ C0] rcu_is_watching+0x7f/0xb0 [ 492.927548][ C0] ? arch_stack_walk+0xe4/0x150 [ 492.932429][ C0] ? unwind_next_frame+0xa5/0x2390 [ 492.937573][ C0] unwind_next_frame+0xd4/0x2390 [ 492.942568][ C0] ? unwind_next_frame+0xa5/0x2390 [ 492.947712][ C0] ? __unwind_start+0xf8/0x760 [ 492.952509][ C0] __unwind_start+0x5b9/0x760 [ 492.957312][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 492.963511][ C0] arch_stack_walk+0xe4/0x150 [ 492.968246][ C0] ? arch_stack_walk+0xe4/0x150 [ 492.973156][ C0] stack_trace_save+0x9c/0xe0 [ 492.977871][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 492.983279][ C0] save_stack+0xf7/0x1f0 [ 492.987568][ C0] ? __pfx_save_stack+0x10/0x10 [ 492.992460][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 492.998830][ C0] __set_page_owner+0x8d/0x4a0 [ 493.003626][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 493.009036][ C0] post_alloc_hook+0x240/0x2a0 [ 493.013847][ C0] get_page_from_freelist+0x21d5/0x22b0 [ 493.019425][ C0] ? percpu_ref_get_many+0x19/0x140 [ 493.024847][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 493.030785][ C0] ? prepare_alloc_pages+0x213/0x610 [ 493.036143][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 493.041987][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 493.048353][ C0] alloc_pages_mpol+0x232/0x4a0 [ 493.053236][ C0] alloc_pages_noprof+0xa9/0x190 [ 493.058225][ C0] folio_alloc_noprof+0x1e/0x30 [ 493.063195][ C0] filemap_alloc_folio_noprof+0xdf/0x470 [ 493.068836][ C0] ? xa_load+0x60/0x210 [ 493.073009][ C0] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 493.079265][ C0] ? xa_load+0x60/0x210 [ 493.083431][ C0] ? xa_load+0x60/0x210 [ 493.087604][ C0] ? xa_load+0x60/0x210 [ 493.091778][ C0] ? xa_load+0x1ea/0x210 [ 493.096052][ C0] page_cache_ra_unbounded+0x2b9/0x7b0 [ 493.101566][ C0] filemap_fault+0x59e/0x1200 [ 493.106360][ C0] ? __pfx_filemap_fault+0x10/0x10 [ 493.111499][ C0] ? __handle_mm_fault+0x296f/0x5620 [ 493.116821][ C0] __do_fault+0x135/0x390 [ 493.121221][ C0] __handle_mm_fault+0x37ed/0x5620 [ 493.126386][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 493.131878][ C0] ? follow_page_pte+0x8c9/0x14b0 [ 493.136940][ C0] handle_mm_fault+0x2d5/0x7f0 [ 493.141730][ C0] ? vma_is_secretmem+0xd/0x50 [ 493.146532][ C0] __get_user_pages+0x1af4/0x30b0 [ 493.151621][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 493.157051][ C0] get_dump_page+0x1ac/0x3f0 [ 493.161683][ C0] ? __pfx_get_dump_page+0x10/0x10 [ 493.166821][ C0] ? dump_user_range+0x19e/0xc70 [ 493.171790][ C0] ? down_read_killable+0x1d1/0x350 [ 493.177016][ C0] ? iov_iter_bvec+0xb8/0x180 [ 493.181743][ C0] dump_user_range+0x1de/0xc70 [ 493.186558][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 493.191866][ C0] ? elf_coredump_extra_notes_write+0x42e/0x4b0 [ 493.198145][ C0] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 493.204769][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 493.209562][ C0] ? dump_emit+0xa6/0xe0 [ 493.213821][ C0] ? elf_core_dump+0x2c68/0x3900 [ 493.218806][ C0] elf_core_dump+0x32ed/0x3900 [ 493.223665][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 493.228818][ C0] ? mas_next_slot+0xc27/0xcf0 [ 493.233669][ C0] ? rcu_read_lock_any_held+0xb3/0x120 [ 493.239165][ C0] ? 0xffffffffff600000 [ 493.243342][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 493.248575][ C0] do_coredump+0x2806/0x3440 [ 493.253202][ C0] ? __pfx_do_coredump+0x10/0x10 [ 493.258172][ C0] ? cpu_clock_sample_group+0x608/0x750 [ 493.263800][ C0] ? posix_cpu_timer_rearm+0xbd/0x820 [ 493.269214][ C0] ? posix_cpu_timer_rearm+0xbd/0x820 [ 493.274630][ C0] ? __lock_acquire+0xab9/0xd20 [ 493.279521][ C0] ? do_raw_spin_lock+0x121/0x290 [ 493.284564][ C0] ? posixtimer_deliver_signal+0x2d9/0x3e0 [ 493.290389][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 493.295798][ C0] ? proc_coredump_connector+0x172/0x4b0 [ 493.301478][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 493.307498][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.312720][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.317956][ C0] get_signal+0x10d9/0x1310 [ 493.322514][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 493.328085][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 493.333393][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 493.339591][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 493.345089][ C0] exit_to_user_mode_loop+0x75/0x110 [ 493.350406][ C0] do_syscall_64+0x2bd/0x3b0 [ 493.355020][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.360257][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.366345][ C0] ? clear_bhb_loop+0x60/0xb0 [ 493.371052][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.376965][ C0] RIP: 0033:0x7fd76ff8e929 [ 493.381400][ C0] RSP: 002b:00007fd770d54fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 493.389845][ C0] RAX: 000000000000085d RBX: 00007fd7701b5fa0 RCX: 00007fd76ff8e929 [ 493.397831][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042164000 [ 493.405826][ C0] RBP: 00007fd770010b39 R08: 0000000000000000 R09: 0000000000000000 [ 493.413813][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 493.421799][ C0] R13: 0000000000000000 R14: 00007fd7701b5fa0 R15: 00007ffef161fc48 [ 493.429798][ C0] [ 493.432831][ C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g64613 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 493.444041][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 493.454023][ C0] rcu: RCU grace-period kthread stack dump: [ 493.459934][ C0] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 493.473469][ C0] Call Trace: [ 493.476769][ C0] [ 493.479726][ C0] __schedule+0x16a2/0x4cb0 [ 493.484291][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 493.489519][ C0] ? schedule+0x165/0x360 [ 493.493869][ C0] ? __lock_acquire+0xab9/0xd20 [ 493.498743][ C0] ? __pfx___schedule+0x10/0x10 [ 493.503630][ C0] ? schedule+0x91/0x360 [ 493.507902][ C0] schedule+0x165/0x360 [ 493.512088][ C0] schedule_timeout+0x12b/0x270 [ 493.516967][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 493.522367][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 493.528303][ C0] ? __pfx_process_timeout+0x10/0x10 [ 493.533700][ C0] ? prepare_to_swait_event+0x341/0x380 [ 493.539269][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 493.544159][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 493.550084][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 493.555389][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 493.560636][ C0] ? finish_swait+0xcd/0x1f0 [ 493.565266][ C0] rcu_gp_kthread+0x99/0x390 [ 493.569894][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 493.575124][ C0] ? __kthread_parkme+0x7b/0x200 [ 493.580100][ C0] ? __kthread_parkme+0x1a1/0x200 [ 493.585173][ C0] kthread+0x70e/0x8a0 [ 493.589266][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 493.594489][ C0] ? __pfx_kthread+0x10/0x10 [ 493.599109][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.604335][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.609554][ C0] ? __pfx_kthread+0x10/0x10 [ 493.614167][ C0] ret_from_fork+0x3fc/0x770 [ 493.618795][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 493.623944][ C0] ? __switch_to_asm+0x39/0x70 [ 493.628741][ C0] ? __switch_to_asm+0x33/0x70 [ 493.633517][ C0] ? __pfx_kthread+0x10/0x10 [ 493.638131][ C0] ret_from_fork_asm+0x1a/0x30 [ 493.642939][ C0] [ 493.645977][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 493.652315][ C0] CPU: 0 UID: 0 PID: 10349 Comm: kworker/u8:34 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 493.664654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 493.674728][ C0] Workqueue: events_unbound toggle_allocation_gate [ 493.681258][ C0] RIP: 0010:smp_call_function_many_cond+0xf80/0x12d0 [ 493.687970][ C0] Code: 00 00 00 00 00 fc ff df 75 07 e8 fb 73 0b 00 eb 37 f3 90 43 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 e0 73 0b 00 e5 44 89 f9 80 e1 07 80 c1 03 38 c1 7c e3 4c 89 ff e8 49 c0 6c [ 493.707587][ C0] RSP: 0018:ffffc9001aeb76a0 EFLAGS: 00000293 [ 493.713669][ C0] RAX: ffffffff81b4da10 RBX: ffff8880b863c9c0 RCX: ffff88801eb4bc00 [ 493.721652][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 493.729756][ C0] RBP: ffffc9001aeb7800 R08: ffffffff8f9fdef7 R09: 1ffffffff1f3fbde [ 493.737752][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fbdf R12: 1ffff110170e825d [ 493.745762][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b87412e8 [ 493.753754][ C0] FS: 0000000000000000(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 493.762708][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.769308][ C0] CR2: 00007f4d3cb45ebb CR3: 000000000df38000 CR4: 00000000003526f0 [ 493.777302][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 493.785297][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 493.793289][ C0] Call Trace: [ 493.796593][ C0] [ 493.799563][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 493.805921][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 493.811318][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 493.817423][ C0] ? __pfx___text_poke+0x10/0x10 [ 493.822389][ C0] ? rcu_is_watching+0x15/0xb0 [ 493.827188][ C0] ? trace_contention_end+0x39/0x120 [ 493.832509][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 493.837560][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 493.842715][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 493.848551][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 493.853602][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 493.859907][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 493.866204][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 493.872228][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 493.878165][ C0] static_key_enable+0x1a/0x20 [ 493.882979][ C0] toggle_allocation_gate+0xad/0x240 [ 493.888302][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 493.894241][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 493.900014][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 493.905772][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 493.911532][ C0] process_scheduled_works+0xade/0x17b0 [ 493.917146][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 493.923175][ C0] worker_thread+0x8a0/0xda0 [ 493.927806][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 493.934173][ C0] ? __kthread_parkme+0x7b/0x200 [ 493.939157][ C0] kthread+0x70e/0x8a0 [ 493.943247][ C0] ? __pfx_worker_thread+0x10/0x10 [ 493.948409][ C0] ? __pfx_kthread+0x10/0x10 [ 493.953061][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.958288][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.963515][ C0] ? __pfx_kthread+0x10/0x10 [ 493.968122][ C0] ret_from_fork+0x3fc/0x770 [ 493.972750][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 493.977898][ C0] ? __switch_to_asm+0x39/0x70 [ 493.982687][ C0] ? __switch_to_asm+0x33/0x70 [ 493.987486][ C0] ? __pfx_kthread+0x10/0x10 [ 493.992118][ C0] ret_from_fork_asm+0x1a/0x30 [ 493.996927][ C0]