last executing test programs: 11.241612268s ago: executing program 4 (id=1013): r0 = openat$tun(0xffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4ad9, &(0x7f0000000300)={0x0, 0x9731, 0x4000, 0x3, 0x145}, &(0x7f00000003c0), 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_procfs(0x0, &(0x7f0000000180)='cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8921, &(0x7f0000000140)={'team0\x00', @ifru_data=&(0x7f0000000100)="8df07150d7bfb0c1c7a28298b528881afb16f4baea5aae3f7abe066a278d52d0"}) r5 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0xd) 6.025678041s ago: executing program 0 (id=1028): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newnexthop={0x48, 0x68, 0x1, 0x70bd29, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.376095858s ago: executing program 0 (id=1031): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r3, 0xa1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='1', 0x1) 3.605202623s ago: executing program 1 (id=1034): syz_open_dev$video4linux(0x0, 0x2a2, 0x101000) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000980)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x2) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000340)={0x4, 0x5, 0x0, 0x0, 0x5718, 0x63}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) 3.588307095s ago: executing program 2 (id=1035): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.063485282s ago: executing program 2 (id=1036): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0xffff, @local}, 0x45) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 2.484926353s ago: executing program 4 (id=1038): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000002740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002700), 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x111, 0x9}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 2.405006546s ago: executing program 2 (id=1039): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a01010000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @remote, 0x6e}, 0x1c) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) 2.339894206s ago: executing program 3 (id=1040): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) file_setattr(r0, 0x0, &(0x7f0000000140)={0x800010c8, 0x9, 0x3, 0x400d, 0x1}, 0x18, 0x1000) 2.272640541s ago: executing program 4 (id=1041): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0\n', 0x2) 2.270203385s ago: executing program 1 (id=1042): keyctl$clear(0x3, 0xfffffffffffffffc) request_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0xffffffffffffffff) 2.035019107s ago: executing program 3 (id=1043): socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x35d3, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x7, 0x5, 0x0, 0x0, 0x0, 0x1, {0x2, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x1000, 0x0, 0x0}, 0x1}}) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8004) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1100}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000180)={@hyper, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@my=0x0, 0x11}, {@my=0x0, 0x6}, 0x400, "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"}, 0x418, 0x1008}) ioctl$IOCTL_VMCI_SET_NOTIFY(r7, 0x7cb, &(0x7f0000000140)={0x9, 0x10000, 0x20000000}) 2.032583625s ago: executing program 4 (id=1044): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f0000002000), r1, 0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r5, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) 1.940283067s ago: executing program 1 (id=1045): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x300, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x900, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x0, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000100)=0x1) close(0x3) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r10, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) 1.939992617s ago: executing program 2 (id=1046): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 1.79605789s ago: executing program 2 (id=1047): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1ac9}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3022}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x5c055}, 0x4054) 1.743245742s ago: executing program 0 (id=1048): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10) 1.387517858s ago: executing program 2 (id=1049): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_usb_connect(0x6, 0x7a0, &(0x7f0000001200)=ANY=[], 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x891d, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x42, 0x0, 0x0) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd0, &(0x7f0000000280)=0xa, 0x4) 1.246803413s ago: executing program 0 (id=1050): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a300000000098000000060a010400000000000000000200000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000009608000440000000b30500020089000000380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120400058008000480040001000900010073797a30"], 0x10c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 742.512352ms ago: executing program 3 (id=1051): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newnexthop={0x48, 0x68, 0x1, 0x70bd29, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 698.346274ms ago: executing program 1 (id=1052): unshare(0x2a020400) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000480), 0x301003, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) 697.429659ms ago: executing program 4 (id=1053): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) file_setattr(r1, 0x0, &(0x7f0000000140)={0x800010c8, 0x9, 0x3, 0x400d, 0x1}, 0x18, 0x1000) 523.176536ms ago: executing program 0 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0\n', 0x2) 429.118572ms ago: executing program 3 (id=1055): keyctl$clear(0x3, 0xfffffffffffffffc) request_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0xffffffffffffffff) 337.464246ms ago: executing program 4 (id=1056): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 259.199173ms ago: executing program 1 (id=1057): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 211.395967ms ago: executing program 0 (id=1058): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r3, 0xa1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='1', 0x1) 205.141487ms ago: executing program 3 (id=1059): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x1ac9}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3022}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x5c055}, 0x4054) 121.366442ms ago: executing program 1 (id=1060): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000640)="ffffffffffff0011223344554305000f3200000000010011221f445500112233445500ff0000", 0x26, 0x4c004, &(0x7f0000000800)={0x11, 0x1a, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 0s ago: executing program 3 (id=1061): r0 = syz_open_dev$media(&(0x7f0000000000), 0xa3f, 0x101000) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={0x80000000, 0x0, &(0x7f0000000b00)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000240)={r1}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000940)={0x0, 0x5, 0x0, &(0x7f00000004c0)=[{}, {}, {0x80000000}, {}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000a80)={0x80000000, &(0x7f00000009c0)=[{}, {0x80000000}], &(0x7f0000000a00)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000700)={r2, &(0x7f00000006c0)=[{0x80000000, 0x0}], &(0x7f0000000b00)}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000bc0)={{r1, 0x0, 0x0, [0xffffffff, 0x2]}, {r3, r4, 0x1, [0x3, 0x7]}, 0x4, [0xb4e, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.139' (ED25519) to the list of known hosts. [ 91.206118][ T5573] cgroup: Unknown subsys name 'net' [ 91.446664][ T5573] cgroup: Unknown subsys name 'cpuset' [ 91.491324][ T5573] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.938288][ T36] cfg80211: failed to load regulatory.db [ 93.411746][ T5573] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.488396][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.499807][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.504079][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.523765][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.525642][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.583099][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.634505][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.673358][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.692587][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.711840][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.713292][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.715647][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.717180][ T5606] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.717426][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.735900][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.759472][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.772003][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.774089][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.779842][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.792981][ T4902] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.897836][ T5592] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.929107][ T5592] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.929842][ T5592] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.931182][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.940155][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.612228][ T4902] Bluetooth: hci0: command tx timeout [ 99.850668][ T4902] Bluetooth: hci3: command tx timeout [ 99.930714][ T4902] Bluetooth: hci1: command tx timeout [ 100.010693][ T4902] Bluetooth: hci2: command tx timeout [ 100.091140][ T4902] Bluetooth: hci4: command tx timeout [ 100.309730][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.314941][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.315499][ T5595] bridge_slave_0: entered allmulticast mode [ 100.329991][ T5595] bridge_slave_0: entered promiscuous mode [ 100.404626][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.404730][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.404889][ T5595] bridge_slave_1: entered allmulticast mode [ 100.406942][ T5595] bridge_slave_1: entered promiscuous mode [ 100.577215][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.602302][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.602396][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.602513][ T5591] bridge_slave_0: entered allmulticast mode [ 100.605262][ T5591] bridge_slave_0: entered promiscuous mode [ 100.664009][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.664372][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.664545][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.664654][ T5596] bridge_slave_0: entered allmulticast mode [ 100.666559][ T5596] bridge_slave_0: entered promiscuous mode [ 100.668824][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.668934][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.669076][ T5591] bridge_slave_1: entered allmulticast mode [ 100.672509][ T5591] bridge_slave_1: entered promiscuous mode [ 100.828870][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.828954][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.829071][ T5596] bridge_slave_1: entered allmulticast mode [ 100.833163][ T5596] bridge_slave_1: entered promiscuous mode [ 100.868100][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.868222][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.868345][ T5598] bridge_slave_0: entered allmulticast mode [ 100.870249][ T5598] bridge_slave_0: entered promiscuous mode [ 100.886787][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.886927][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.887089][ T5593] bridge_slave_0: entered allmulticast mode [ 100.899840][ T5593] bridge_slave_0: entered promiscuous mode [ 100.963838][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.963984][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.964139][ T5598] bridge_slave_1: entered allmulticast mode [ 100.966230][ T5598] bridge_slave_1: entered promiscuous mode [ 100.967583][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.967673][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.967778][ T5593] bridge_slave_1: entered allmulticast mode [ 100.969463][ T5593] bridge_slave_1: entered promiscuous mode [ 100.987290][ T5595] team0: Port device team_slave_0 added [ 101.039531][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.075019][ T5595] team0: Port device team_slave_1 added [ 101.077974][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.094459][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.157693][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.183285][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.186487][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.243026][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.245384][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.246439][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.246447][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.246463][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.316393][ T5591] team0: Port device team_slave_0 added [ 101.349667][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.349679][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.349698][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.396478][ T5596] team0: Port device team_slave_0 added [ 101.398698][ T5591] team0: Port device team_slave_1 added [ 101.450465][ T5596] team0: Port device team_slave_1 added [ 101.474574][ T5598] team0: Port device team_slave_0 added [ 101.476827][ T5593] team0: Port device team_slave_0 added [ 101.516894][ T5598] team0: Port device team_slave_1 added [ 101.518931][ T5593] team0: Port device team_slave_1 added [ 101.547120][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.547136][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.547157][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.629820][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.629832][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.629849][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.648537][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.648560][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.648597][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.690731][ T4902] Bluetooth: hci0: command tx timeout [ 101.753569][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.753582][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.753600][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.806388][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.806407][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.806425][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.807572][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.807584][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.807607][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.837518][ T5595] hsr_slave_0: entered promiscuous mode [ 101.855259][ T5595] hsr_slave_1: entered promiscuous mode [ 101.931047][ T4902] Bluetooth: hci3: command tx timeout [ 102.010673][ T4902] Bluetooth: hci1: command tx timeout [ 102.090785][ T4902] Bluetooth: hci2: command tx timeout [ 102.170736][ T4902] Bluetooth: hci4: command tx timeout [ 102.314521][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.314534][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.314552][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.315551][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.315560][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.315577][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.516058][ T5591] hsr_slave_0: entered promiscuous mode [ 102.517053][ T5591] hsr_slave_1: entered promiscuous mode [ 102.517779][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 102.517876][ T5591] Cannot create hsr debugfs directory [ 102.575320][ T5596] hsr_slave_0: entered promiscuous mode [ 102.576753][ T5596] hsr_slave_1: entered promiscuous mode [ 102.577413][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 102.577431][ T5596] Cannot create hsr debugfs directory [ 102.663285][ T5598] hsr_slave_0: entered promiscuous mode [ 102.664182][ T5598] hsr_slave_1: entered promiscuous mode [ 102.664785][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 102.664800][ T5598] Cannot create hsr debugfs directory [ 102.698141][ T5593] hsr_slave_0: entered promiscuous mode [ 102.699066][ T5593] hsr_slave_1: entered promiscuous mode [ 102.699689][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 102.699705][ T5593] Cannot create hsr debugfs directory [ 103.618531][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.663614][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.668597][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.707817][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.718821][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.745257][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.770245][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.770671][ T4902] Bluetooth: hci0: command tx timeout [ 103.807287][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.926377][ T5598] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.955262][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.959153][ T5598] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.994206][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.999658][ T5598] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.010705][ T4902] Bluetooth: hci3: command tx timeout [ 104.035931][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.066192][ T5598] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.090858][ T4902] Bluetooth: hci1: command tx timeout [ 104.097175][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.170711][ T4902] Bluetooth: hci2: command tx timeout [ 104.239546][ T5593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.260683][ T4902] Bluetooth: hci4: command tx timeout [ 104.265078][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.270198][ T5593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.330117][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.345154][ T5593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.374494][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.407924][ T5593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.434255][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.579501][ T5591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.613987][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.619283][ T5591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.645619][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.648441][ T5591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.695232][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.731111][ T5591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.754503][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.806416][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.952610][ T5596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.997745][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.013415][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.014061][ T5596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.054340][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.073302][ T5596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.114076][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.128912][ T5596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.166653][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.188991][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.189257][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.242820][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.242952][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.250337][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.406837][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.450105][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.450219][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.478768][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.516289][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.516409][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.619344][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.675869][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.699081][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.699295][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.769238][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.769369][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.861086][ T4902] Bluetooth: hci0: command tx timeout [ 105.896074][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.968513][ T3349] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.968727][ T3349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.017430][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.069413][ T3349] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.069518][ T3349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.100656][ T4902] Bluetooth: hci3: command tx timeout [ 106.171462][ T4902] Bluetooth: hci1: command tx timeout [ 106.242056][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.250781][ T4902] Bluetooth: hci2: command tx timeout [ 106.312497][ T3284] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.317917][ T3284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.331919][ T4902] Bluetooth: hci4: command tx timeout [ 106.424589][ T3284] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.424729][ T3284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.003492][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.280476][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.440222][ T5595] veth0_vlan: entered promiscuous mode [ 107.509726][ T5595] veth1_vlan: entered promiscuous mode [ 107.574587][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.743671][ T5598] veth0_vlan: entered promiscuous mode [ 107.798924][ T5595] veth0_macvtap: entered promiscuous mode [ 107.817147][ T5598] veth1_vlan: entered promiscuous mode [ 107.836374][ T5595] veth1_macvtap: entered promiscuous mode [ 107.978957][ T5593] veth0_vlan: entered promiscuous mode [ 108.000044][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.019540][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.066550][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.185727][ T5593] veth1_vlan: entered promiscuous mode [ 108.213373][ T5598] veth0_macvtap: entered promiscuous mode [ 108.279582][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.296468][ T5598] veth1_macvtap: entered promiscuous mode [ 108.535034][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.707952][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.731162][ T5593] veth0_macvtap: entered promiscuous mode [ 108.786262][ T5593] veth1_macvtap: entered promiscuous mode [ 108.935285][ T5596] veth0_vlan: entered promiscuous mode [ 108.947835][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.947860][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.039124][ T5591] veth0_vlan: entered promiscuous mode [ 109.051929][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.213386][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.218413][ T5596] veth1_vlan: entered promiscuous mode [ 109.275735][ T5591] veth1_vlan: entered promiscuous mode [ 109.293023][ T3284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.293038][ T3284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.443141][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.443162][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.817235][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.817257][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.894558][ T5596] veth0_macvtap: entered promiscuous mode [ 109.926382][ T5591] veth0_macvtap: entered promiscuous mode [ 110.008812][ T5596] veth1_macvtap: entered promiscuous mode [ 110.105874][ T5591] veth1_macvtap: entered promiscuous mode [ 110.242415][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.242437][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.488637][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.544356][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.590042][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.851222][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.926701][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.926720][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.009044][ T5791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 111.735093][ T5796] CIFS: Attempting to mount //127.0.0.1/share [ 112.123178][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.300076][ T5796] CIFS: VFS: cifs_mount failed w/return code = -112 [ 112.387869][ T5796] syz.0.9 (5796) used greatest stack depth: 19488 bytes left [ 113.376727][ T3349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.376773][ T3349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.649159][ T5723] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.730639][ T3284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.730656][ T3284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.942493][ T5723] usb 4-1: Using ep0 maxpacket: 32 [ 113.944009][ T5723] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 113.976353][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.976368][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.013325][ T5723] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 114.013384][ T5723] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.019080][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.019117][ T5723] usb 4-1: Product: syz [ 114.019132][ T5723] usb 4-1: Manufacturer: syz [ 114.019147][ T5723] usb 4-1: SerialNumber: syz [ 114.149184][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.149203][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.221801][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.253071][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.253636][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.253790][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.253944][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.311266][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.449699][ T5723] usb 4-1: config 0 descriptor?? [ 114.453734][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.508798][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.509183][ T1186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.509613][ T1186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.509786][ T1186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.510006][ T1186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.510395][ T1186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.636889][ T3284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.807875][ T3349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.808257][ T3349] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.808649][ T3349] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.881577][ T3349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.055392][ T3349] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.157000][ T36] usb 4-1: USB disconnect, device number 2 [ 118.941844][ T5603] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.141818][ T5603] usb 2-1: Using ep0 maxpacket: 16 [ 119.142802][ T5603] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 119.154668][ T5603] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.154699][ T5603] usb 2-1: config 0 interface 0 has no altsetting 0 [ 119.154730][ T5603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.317425][ T5848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 119.335138][ T5848] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 119.335161][ T5848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.25'. [ 119.443204][ T5603] usb 2-1: config 0 descriptor?? [ 120.164879][ T5603] usbhid 2-1:0.0: can't add hid device: -71 [ 120.165005][ T5603] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 120.284275][ T5603] usb 2-1: USB disconnect, device number 2 [ 121.593762][ T5866] vlan2: entered allmulticast mode [ 121.593785][ T5866] dummy0: entered allmulticast mode [ 121.932325][ T5689] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 122.147632][ T5689] usb 5-1: unable to get BOS descriptor or descriptor too short [ 122.152666][ T5689] usb 5-1: not running at top speed; connect to a high speed hub [ 122.152770][ T5689] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 122.189447][ T5689] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 122.189473][ T5689] usb 5-1: config 0 has no interface number 0 [ 122.189515][ T5689] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 122.189540][ T5689] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 122.189561][ T5689] usb 5-1: config 0 interface 88 has no altsetting 0 [ 122.213357][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 122.213430][ T5689] usb 5-1: Product: syz [ 122.213473][ T5689] usb 5-1: Manufacturer: syz [ 122.213506][ T5689] usb 5-1: SerialNumber: syz [ 122.362478][ T5689] usb 5-1: config 0 descriptor?? [ 122.863148][ T5884] netlink: 136 bytes leftover after parsing attributes in process `syz.0.37'. [ 123.168866][ T5891] busy [ 123.208749][ T5689] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input5 [ 123.676870][ T5689] usb 5-1: USB disconnect, device number 2 [ 125.700579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 126.009602][ T5846] udevd[5846]: Error opening device "/dev/input/event4": No such file or directory [ 126.009746][ T5846] udevd[5846]: Unable to EVIOCGABS device "/dev/input/event4" [ 126.009860][ T5846] udevd[5846]: Unable to EVIOCGABS device "/dev/input/event4" [ 126.045696][ T5898] Process accounting resumed [ 126.120658][ T5722] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.290692][ T5722] usb 2-1: Using ep0 maxpacket: 16 [ 126.291650][ T5722] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 126.326896][ T5722] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.326931][ T5722] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.326966][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.392041][ T5722] usb 2-1: config 0 descriptor?? [ 127.053560][ T5722] usbhid 2-1:0.0: can't add hid device: -71 [ 127.053653][ T5722] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 127.110996][ T5722] usb 2-1: USB disconnect, device number 3 [ 127.553903][ T5937] netlink: 32 bytes leftover after parsing attributes in process `syz.0.55'. [ 127.970571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.030659][ T5831] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.190583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.210596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.220589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.230581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.240577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.250574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.260572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.270588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.551519][ T5831] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 128.553627][ T5831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.553673][ T5831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 128.553692][ T5831] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 128.553712][ T5831] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.553749][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.064342][ T5831] gud 5-1:1.0: No supported pixel formats found [ 130.064389][ T5831] gud 5-1:1.0: probe with driver gud failed with error -22 [ 130.498723][ T5954] Process accounting resumed [ 131.618417][ T9] usb 5-1: USB disconnect, device number 3 [ 131.977512][ T5976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.69'. [ 132.140701][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.170873][ T5575] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.284643][ T5981] loop2: detected capacity change from 0 to 7 [ 132.301434][ T9] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 132.307811][ T9] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 132.307839][ T9] usb 5-1: config 1 has no interface number 0 [ 132.307885][ T9] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 132.307912][ T9] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.361888][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.361916][ T9] usb 5-1: Product: syz [ 132.361933][ T9] usb 5-1: Manufacturer: syz [ 132.361947][ T9] usb 5-1: SerialNumber: syz [ 132.394811][ T5575] usb 3-1: Using ep0 maxpacket: 16 [ 132.399292][ T5575] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 132.419300][ T5575] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.419334][ T5575] usb 3-1: config 0 interface 0 has no altsetting 0 [ 132.419368][ T5575] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.510125][ T5981] Dev loop2: unable to read RDB block 7 [ 132.510202][ T5981] loop2: unable to read partition table [ 132.510425][ T5981] loop2: partition table beyond EOD, truncated [ 132.510470][ T5981] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 132.679702][ T5575] usb 3-1: config 0 descriptor?? [ 132.731445][ T5970] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.817668][ T9] usb 5-1: Error in usbnet_get_endpoints (-22) [ 133.048685][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.056596][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.318895][ T5987] busy [ 133.688888][ T5689] usb 5-1: USB disconnect, device number 4 [ 133.705308][ T5575] usbhid 3-1:0.0: can't add hid device: -71 [ 133.705435][ T5575] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 133.859588][ T5575] usb 3-1: USB disconnect, device number 2 [ 134.192114][ T5990] vlan2: entered allmulticast mode [ 134.192135][ T5990] team_slave_1: entered allmulticast mode [ 134.758925][ T6000] netlink: 104 bytes leftover after parsing attributes in process `syz.0.78'. [ 135.807942][ T6009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.80'. [ 138.084452][ T6023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.85'. [ 138.306801][ T6023] vlan3: entered allmulticast mode [ 138.306818][ T6023] hsr_slave_0: entered allmulticast mode [ 138.540695][ T5831] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.670153][ T6037] netlink: 104 bytes leftover after parsing attributes in process `syz.1.90'. [ 138.712951][ T5831] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 138.715284][ T5831] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 138.715310][ T5831] usb 1-1: config 1 has no interface number 0 [ 138.715357][ T5831] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 138.715376][ T5831] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.718765][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.718783][ T5831] usb 1-1: Product: syz [ 138.718793][ T5831] usb 1-1: Manufacturer: syz [ 138.718803][ T5831] usb 1-1: SerialNumber: syz [ 138.942656][ T6029] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.976997][ T5831] usb 1-1: Error in usbnet_get_endpoints (-22) [ 139.161443][ T6043] netlink: 32 bytes leftover after parsing attributes in process `syz.4.92'. [ 139.186479][ T5689] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.284342][ T5831] usb 1-1: USB disconnect, device number 2 [ 139.321695][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.350675][ T5689] usb 3-1: Using ep0 maxpacket: 16 [ 139.351518][ T5689] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 139.359502][ T5689] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.359538][ T5689] usb 3-1: config 0 interface 0 has no altsetting 0 [ 139.368476][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.453319][ T5689] usb 3-1: config 0 descriptor?? [ 139.494538][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 139.513123][ T9] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 139.513153][ T9] usb 2-1: Product: syz [ 139.513167][ T9] usb 2-1: SerialNumber: syz [ 139.552124][ T9] usb 2-1: config 0 descriptor?? [ 139.970705][ T9] usb 2-1: USB disconnect, device number 4 [ 140.108853][ T5689] usbhid 3-1:0.0: can't add hid device: -71 [ 140.108986][ T5689] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 140.170269][ T5689] usb 3-1: USB disconnect, device number 3 [ 141.284935][ T6072] netlink: 104 bytes leftover after parsing attributes in process `syz.1.102'. [ 142.095642][ T6073] netlink: 32 bytes leftover after parsing attributes in process `syz.4.100'. [ 142.435198][ T6074] smc: net device vlan1 applied user defined pnetid SYZ2 [ 143.799946][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 143.813907][ T6080] netlink: 32 bytes leftover after parsing attributes in process `syz.1.103'. [ 144.057531][ T6086] Zero length message leads to an empty skb [ 144.150797][ T5689] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 144.931488][ T5689] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 145.071750][ T5689] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 145.071780][ T5689] usb 3-1: config 1 has no interface number 0 [ 145.071828][ T5689] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 145.071855][ T5689] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.522647][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.522677][ T5689] usb 3-1: Product: syz [ 145.522692][ T5689] usb 3-1: Manufacturer: syz [ 145.522707][ T5689] usb 3-1: SerialNumber: syz [ 145.866606][ T6083] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 145.886579][ T5689] usb 3-1: Error in usbnet_get_endpoints (-22) [ 146.165628][ T5575] usb 3-1: USB disconnect, device number 4 [ 146.252298][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.413797][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 146.414638][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 146.457858][ T10] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.457897][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 146.457934][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.504467][ T10] usb 2-1: config 0 descriptor?? [ 146.694630][ T6104] netlink: 104 bytes leftover after parsing attributes in process `syz.3.113'. [ 147.163331][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 147.163466][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 147.250856][ T10] usb 2-1: USB disconnect, device number 5 [ 148.095984][ T6111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.114'. [ 148.922319][ T5722] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 149.250413][ T6125] netlink: 32 bytes leftover after parsing attributes in process `syz.3.118'. [ 149.492648][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 149.493605][ T5722] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 149.495639][ T5722] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.495696][ T5722] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.495741][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.647918][ T5722] usb 3-1: config 0 descriptor?? [ 149.704108][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.121'. [ 149.706413][ T5722] hub 3-1:0.0: bad descriptor, ignoring hub [ 149.706437][ T5722] hub 3-1:0.0: probe with driver hub failed with error -5 [ 149.797669][ T5722] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 149.828039][ T6133] kAFS: No cell specified [ 150.085187][ T5722] usb 3-1: USB disconnect, device number 5 [ 150.263559][ T6137] netlink: 104 bytes leftover after parsing attributes in process `syz.4.124'. [ 151.745923][ T6158] loop2: detected capacity change from 0 to 7 [ 151.812223][ T6158] loop2: [POWERTEC] p1 p2 p3 [ 152.246215][ T6158] loop2: p1 size 2508193792 extends beyond EOD, truncated [ 152.308223][ T6154] netlink: 32 bytes leftover after parsing attributes in process `syz.0.128'. [ 152.382031][ T6158] loop2: p2 start 925905972 is beyond EOD, truncated [ 152.382051][ T6158] loop2: p3 start 3511422476 is beyond EOD, truncated [ 152.933087][ T6172] netlink: 104 bytes leftover after parsing attributes in process `syz.0.136'. [ 152.934418][ T5779] udevd[5779]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 153.047462][ T6176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.210420][ T6178] kAFS: No cell specified [ 154.240752][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 154.477923][ T6188] smc: net device vlan1 applied user defined pnetid SYZ2 [ 155.057811][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 156.326755][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 156.343735][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.343788][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.343831][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.384112][ T9] usb 2-1: config 0 descriptor?? [ 156.408112][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 156.408151][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 156.438899][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 156.825637][ T5603] usb 2-1: USB disconnect, device number 6 [ 159.027786][ T6202] binder: 6198:6202 ioctl c0306201 0 returned -14 [ 159.927246][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.148'. [ 159.927278][ T6233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.148'. [ 159.958155][ T6235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.245225][ T6238] kAFS: No cell specified [ 160.582945][ T6241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.150'. [ 162.740678][ T5715] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 162.851353][ T6264] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 162.932424][ T6264] binder: 6261:6264 ioctl c0306201 0 returned -14 [ 164.010216][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 164.016600][ T5715] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 164.117973][ T5715] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.118131][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 164.118213][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.914299][ T5715] usb 5-1: config 0 descriptor?? [ 164.949177][ T6268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.038111][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.0.161'. [ 165.038143][ T6272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.161'. [ 165.186565][ T5715] hub 5-1:0.0: bad descriptor, ignoring hub [ 165.186605][ T5715] hub 5-1:0.0: probe with driver hub failed with error -5 [ 165.233015][ T5715] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 165.491670][ T6278] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 165.578648][ T5715] usb 5-1: USB disconnect, device number 5 [ 165.781060][ T6282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.163'. [ 166.822106][ T6278] vivid-004: ================= START STATUS ================= [ 166.822186][ T6278] vivid-004: Radio HW Seek Mode: Bounded [ 166.822218][ T6278] vivid-004: Radio Programmable HW Seek: false [ 166.822239][ T6278] vivid-004: RDS Rx I/O Mode: Block I/O [ 166.822259][ T6278] vivid-004: Generate RBDS Instead of RDS: false [ 166.822280][ T6278] vivid-004: RDS Reception: true [ 166.822300][ T6278] vivid-004: RDS Program Type: 0 inactive [ 166.822326][ T6278] vivid-004: RDS PS Name: inactive [ 166.822349][ T6278] vivid-004: RDS Radio Text: inactive [ 166.822373][ T6278] vivid-004: RDS Traffic Announcement: false inactive [ 166.822398][ T6278] vivid-004: RDS Traffic Program: false inactive [ 166.822423][ T6278] vivid-004: RDS Music: false inactive [ 166.822448][ T6278] vivid-004: ================== END STATUS ================== [ 167.332194][ T6278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.164'. [ 169.370136][ T6295] Process accounting resumed [ 169.689351][ T6308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.174'. [ 169.689381][ T6308] netlink: 40 bytes leftover after parsing attributes in process `syz.1.174'. [ 169.940238][ T6313] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 170.384973][ T6315] binder: 6309:6315 ioctl c0306201 0 returned -14 [ 170.603213][ T6313] gadgetfs: bound to dummy_udc driver [ 171.752946][ T5603] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.791711][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 171.920637][ T5603] usb 5-1: Using ep0 maxpacket: 32 [ 171.921321][ T5603] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 171.922931][ T5603] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 171.922957][ T5603] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 171.922979][ T5603] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.922999][ T5603] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 171.923021][ T5603] usb 5-1: config 1 has no interface number 0 [ 171.923069][ T5603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.670887][ T5603] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 175.019681][ T5603] snd_usb_pod 5-1:1.1: set_interface failed [ 175.260902][ T5603] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 175.342332][ T5603] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 175.930299][ T5603] usb 5-1: USB disconnect, device number 6 [ 176.399563][ T6341] Process accounting resumed [ 176.798561][ T6351] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 176.912960][ T6353] binder: 6349:6353 ioctl c0306201 0 returned -14 [ 177.370822][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 178.059115][ T6363] netlink: 40 bytes leftover after parsing attributes in process `syz.4.191'. [ 178.140635][ T5603] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 178.327314][ T5603] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 178.345485][ T5603] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.345542][ T5603] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.345564][ T5603] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 178.345587][ T5603] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 178.345629][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.020079][ T997] usb 4-1: USB disconnect, device number 3 [ 181.087486][ T6377] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 181.651996][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 181.652030][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 181.734642][ T6385] smc: net device vlan1 applied user defined pnetid SYZ2 [ 182.671858][ T6392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.203'. [ 183.040071][ T6396] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 183.183571][ T6397] binder: 6394:6397 ioctl c0306201 0 returned -14 [ 183.241679][ T6396] gadgetfs: bound to dummy_udc driver [ 184.959568][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.210'. [ 185.219128][ T6419] nvme_fabrics: unknown parameter or missing value '#! ' in ctrl creation request [ 185.381467][ T6414] syzkaller0: entered promiscuous mode [ 185.381497][ T6414] syzkaller0: entered allmulticast mode [ 185.473682][ T6428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.214'. [ 185.537605][ T6423] tipc: Started in network mode [ 185.537639][ T6423] tipc: Node identity 9eea3bb8f519, cluster identity 4711 [ 185.538014][ T6423] tipc: Enabled bearer , priority 0 [ 185.691684][ T6413] tipc: Resetting bearer [ 185.928000][ T6425] nvme_fabrics: unknown parameter or missing value '#! ./file1 @&^' in ctrl creation request [ 186.318505][ T6413] tipc: Disabling bearer [ 187.150294][ T6425] nvme nvme0: failed to connect socket: -512 [ 187.969003][ T6450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.970201][ T6450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.037629][ T6425] syz.1.211 (6425) used greatest stack depth: 18584 bytes left [ 188.233741][ T6463] smc: net device vlan1 applied user defined pnetid SYZ2 [ 188.681225][ T6474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.820673][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 188.950751][ T9] usb 5-1: device descriptor read/64, error -71 [ 189.321650][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 189.546640][ T9] usb 5-1: device descriptor read/64, error -71 [ 189.665203][ T9] usb usb5-port1: attempt power cycle [ 189.690684][ T59] Bluetooth: hci4: command 0x0405 tx timeout [ 190.070802][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 190.130542][ T9] usb 5-1: device descriptor read/8, error -71 [ 190.807086][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 190.896724][ T9] usb 5-1: device descriptor read/8, error -71 [ 191.011057][ T9] usb usb5-port1: unable to enumerate USB device [ 191.197241][ T6497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.235'. [ 193.114540][ T6518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.118991][ T6531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.248'. [ 195.475062][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.475133][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.383115][ T6561] netlink: 136 bytes leftover after parsing attributes in process `syz.4.257'. [ 198.160683][ T5603] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 199.000664][ T5603] usb 2-1: Using ep0 maxpacket: 8 [ 199.002533][ T5603] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 199.004038][ T5603] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 199.004063][ T5603] usb 2-1: config 0 has no interface number 0 [ 199.004108][ T5603] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 199.004133][ T5603] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 199.004223][ T5603] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 199.004252][ T5603] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 199.004296][ T5603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.156202][ T5603] usb 2-1: config 0 descriptor?? [ 199.463646][ T5603] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 199.517375][ T5603] usb 2-1: USB disconnect, device number 7 [ 200.735580][ T5603] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 202.449366][ T6588] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6587] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6588] [ 203.474606][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 203.712469][ T9] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 203.715223][ T9] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 203.715249][ T9] usb 4-1: config 1 has no interface number 0 [ 203.715297][ T9] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 203.715325][ T9] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.719715][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.719740][ T9] usb 4-1: Product: syz [ 203.719755][ T9] usb 4-1: Manufacturer: syz [ 203.719770][ T9] usb 4-1: SerialNumber: syz [ 203.800440][ T6582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 203.845751][ T9] usb 4-1: Error in usbnet_get_endpoints (-22) [ 204.653769][ T5689] usb 4-1: USB disconnect, device number 4 [ 206.991464][ T6601] kAFS: No cell specified [ 207.814968][ T6606] netlink: 460 bytes leftover after parsing attributes in process `syz.3.274'. [ 208.040981][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.041012][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.272650][ T6606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.272672][ T6606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.440581][ T6628] netlink: 136 bytes leftover after parsing attributes in process `syz.4.271'. [ 212.885474][ T5575] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 212.926857][ T6643] kAFS: No cell specified [ 213.181210][ T5575] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 213.182709][ T5575] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 213.182733][ T5575] usb 5-1: config 1 has no interface number 0 [ 213.182788][ T5575] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 213.182815][ T5575] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.259702][ T5575] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.259721][ T5575] usb 5-1: Product: syz [ 213.259738][ T5575] usb 5-1: Manufacturer: syz [ 213.259748][ T5575] usb 5-1: SerialNumber: syz [ 213.764381][ T5575] usb 5-1: can't set config #1, error -71 [ 213.777935][ T5575] usb 5-1: USB disconnect, device number 11 [ 214.388921][ T6654] netlink: 460 bytes leftover after parsing attributes in process `syz.0.292'. [ 214.428929][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.428970][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.536098][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.536127][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.205540][ T6672] netlink: 136 bytes leftover after parsing attributes in process `syz.3.295'. [ 217.980917][ T6688] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6687] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6688] [ 219.278204][ T5708] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 219.433074][ T5708] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 219.434543][ T5708] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 219.434565][ T5708] usb 5-1: config 1 has no interface number 0 [ 219.434607][ T5708] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 219.434632][ T5708] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.437339][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.437363][ T5708] usb 5-1: Product: syz [ 219.437377][ T5708] usb 5-1: Manufacturer: syz [ 219.437392][ T5708] usb 5-1: SerialNumber: syz [ 219.533244][ T6697] kAFS: No cell specified [ 219.735503][ T6689] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 219.757367][ T5708] usb 5-1: Error in usbnet_get_endpoints (-22) [ 220.020401][ T6701] nvme_fabrics: unknown parameter or missing value '#! ' in ctrl creation request [ 220.036146][ T5575] usb 5-1: USB disconnect, device number 12 [ 220.255583][ T6701] nvme nvme0: failed to connect socket: -111 [ 220.990363][ T6708] netlink: 136 bytes leftover after parsing attributes in process `syz.3.310'. [ 221.898776][ T6718] netlink: 460 bytes leftover after parsing attributes in process `syz.3.316'. [ 222.023483][ T5604] Bluetooth: hci0: command 0x0406 tx timeout [ 222.024091][ T5604] Bluetooth: hci4: command 0x0405 tx timeout [ 222.024123][ T5604] Bluetooth: hci1: command 0x0406 tx timeout [ 222.024224][ T5604] Bluetooth: hci3: command 0x0406 tx timeout [ 222.024318][ T5604] Bluetooth: hci2: command 0x0406 tx timeout [ 222.917204][ T6735] kAFS: No cell specified [ 223.820605][ T999] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 223.877083][ T6757] netlink: 136 bytes leftover after parsing attributes in process `syz.1.326'. [ 224.451524][ T999] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 224.455040][ T999] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 224.455066][ T999] usb 4-1: config 1 has no interface number 0 [ 224.455114][ T999] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 224.455141][ T999] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.459004][ T999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.459030][ T999] usb 4-1: Product: syz [ 224.459045][ T999] usb 4-1: Manufacturer: syz [ 224.459060][ T999] usb 4-1: SerialNumber: syz [ 224.755056][ T6740] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.796314][ T999] usb 4-1: Error in usbnet_get_endpoints (-22) [ 224.997730][ T6766] netlink: 460 bytes leftover after parsing attributes in process `syz.1.331'. [ 225.561695][ T5689] usb 4-1: USB disconnect, device number 5 [ 225.759900][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.759923][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.876435][ T6766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.876462][ T6766] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.054950][ T6771] kAFS: No cell specified [ 228.318415][ T37] audit: type=1326 audit(1786924051.836:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6788 comm="syz.3.340" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f11829fe0d9 code=0x0 [ 229.197003][ T6801] kAFS: No cell specified [ 229.380373][ T5715] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 229.581096][ T5715] usb 5-1: Using ep0 maxpacket: 32 [ 229.610896][ T5715] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 229.697719][ T5715] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 229.697752][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 229.697777][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 229.697799][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 229.697824][ T5715] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 230.145059][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.145087][ T5715] usb 5-1: Product: syz [ 230.145101][ T5715] usb 5-1: Manufacturer: syz [ 230.145116][ T5715] usb 5-1: SerialNumber: syz [ 230.193912][ T5715] usb 5-1: config 0 descriptor?? [ 230.689638][ T999] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 230.797815][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 231.198911][ T6812] netlink: 460 bytes leftover after parsing attributes in process `syz.1.348'. [ 231.225580][ T999] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 231.254769][ T999] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 231.254825][ T999] usb 3-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.317451][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.323406][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.325513][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.330917][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.338712][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.364473][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.364951][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.368460][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.374226][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.375309][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.376609][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.412374][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.414263][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.415089][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.421847][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.449440][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.460458][ T999] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 231.460647][ T999] usb 3-1: Product: syz [ 231.460664][ T999] usb 3-1: Manufacturer: syz [ 231.463478][ T5715] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 231.463606][ T5715] input input6: Timeout waiting for response from device. [ 231.569192][ T5715] usb 5-1: USB disconnect, device number 13 [ 231.711001][ T999] hub 3-1:4.0: bad descriptor, ignoring hub [ 231.711042][ T999] hub 3-1:4.0: probe with driver hub failed with error -5 [ 231.725152][ T999] usbhid 3-1:4.0: couldn't find an input interrupt endpoint [ 232.887494][ T6824] syzkaller0: entered promiscuous mode [ 232.887520][ T6824] syzkaller0: entered allmulticast mode [ 232.911648][ T6824] tipc: Started in network mode [ 232.911682][ T6824] tipc: Node identity ca860906d06c, cluster identity 4711 [ 232.938042][ T6824] tipc: Enabled bearer , priority 0 [ 232.998230][ T6824] tipc: Resetting bearer [ 233.051089][ T6822] tipc: Resetting bearer [ 233.284567][ T6822] tipc: Disabling bearer [ 233.421600][ T5708] usb 3-1: USB disconnect, device number 6 [ 233.706596][ T6848] nvme_fabrics: unknown parameter or missing value '#! ' in ctrl creation request [ 233.935570][ T6851] netlink: 460 bytes leftover after parsing attributes in process `syz.1.361'. [ 235.308979][ T6848] nvme nvme0: failed to connect socket: -512 [ 237.347368][ T6891] netlink: 460 bytes leftover after parsing attributes in process `syz.2.375'. [ 237.386694][ T6891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.386725][ T6891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.631824][ T6891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.631852][ T6891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.670362][ T6909] nvme_fabrics: unknown parameter or missing value '#! ' in ctrl creation request [ 238.754491][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 239.542074][ T5597] Bluetooth: hci4: command 0x0405 tx timeout [ 239.682645][ T6909] nvme nvme0: failed to connect socket: -512 [ 241.223359][ T6943] netlink: 460 bytes leftover after parsing attributes in process `syz.2.392'. [ 241.911658][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.395'. [ 244.065896][ T5708] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 244.230813][ T5708] usb 4-1: Using ep0 maxpacket: 32 [ 244.231791][ T5708] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 244.233515][ T5708] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 244.233543][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 244.233568][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 244.233589][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 244.233614][ T5708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 244.297551][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.297625][ T5708] usb 4-1: Product: syz [ 244.297660][ T5708] usb 4-1: Manufacturer: syz [ 244.297701][ T5708] usb 4-1: SerialNumber: syz [ 244.401357][ T5708] usb 4-1: config 0 descriptor?? [ 244.524010][ T6980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.827005][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 244.828008][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 244.848381][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 244.860973][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 244.868077][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 244.868591][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 244.869080][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 244.869539][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 244.870015][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 245.752687][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 245.777940][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 245.788507][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 245.798684][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 245.809222][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 245.809909][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 245.810376][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 245.811378][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 245.811877][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 245.812328][ T5708] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 245.812370][ T5708] input input7: Timeout waiting for response from device. [ 246.500772][ T5708] usb 4-1: USB disconnect, device number 6 [ 247.664102][ T7009] netlink: 460 bytes leftover after parsing attributes in process `syz.2.413'. [ 247.848909][ T7011] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 248.280701][ T31] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 248.432176][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 248.433230][ T31] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 248.436418][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 248.436452][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 248.436479][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 248.436503][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 248.436529][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 248.443970][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.444007][ T31] usb 4-1: Product: syz [ 248.444022][ T31] usb 4-1: Manufacturer: syz [ 248.444067][ T31] usb 4-1: SerialNumber: syz [ 248.568721][ T31] usb 4-1: config 0 descriptor?? [ 249.388602][ T31] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 249.393849][ T31] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 249.398740][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.404323][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.407833][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.413223][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.414610][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.424129][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.440714][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.443238][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.443659][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.444147][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.444540][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.444935][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.445440][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.453261][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.454861][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.460404][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.462693][ T31] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 249.462742][ T31] input input8: Timeout waiting for response from device. [ 249.618338][ T31] usb 4-1: USB disconnect, device number 7 [ 249.976222][ T7049] netlink: 460 bytes leftover after parsing attributes in process `syz.4.430'. [ 249.983822][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.984178][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.012852][ T7048] netlink: 136 bytes leftover after parsing attributes in process `syz.1.427'. [ 250.093999][ T7049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.094027][ T7049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.645013][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 250.800737][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 250.801818][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 250.845458][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.845518][ T9] usb 4-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.845549][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 250.845587][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.907032][ T9] usb 4-1: config 0 descriptor?? [ 250.985423][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 252.828620][ T5689] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 253.070610][ T5689] usb 2-1: Using ep0 maxpacket: 8 [ 253.071519][ T5689] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 253.083540][ T5689] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 253.083708][ T5689] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.083771][ T5689] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 253.083831][ T5689] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 253.083900][ T5689] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.083993][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.387992][ T5689] usb 2-1: usb_control_msg returned -32 [ 253.388044][ T5689] usbtmc 2-1:16.0: can't read capabilities [ 254.867359][ T5689] usb 4-1: USB disconnect, device number 8 [ 255.216853][ T7084] Process accounting resumed [ 255.482693][ T5708] usb 2-1: USB disconnect, device number 8 [ 256.048799][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.048872][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.438223][ T7102] netlink: 136 bytes leftover after parsing attributes in process `syz.1.446'. [ 256.734458][ T7110] netlink: 48 bytes leftover after parsing attributes in process `syz.4.440'. [ 256.738251][ T7112] netlink: 460 bytes leftover after parsing attributes in process `syz.0.448'. [ 259.179401][ T7129] netlink: 24 bytes leftover after parsing attributes in process `syz.1.451'. [ 259.179432][ T7129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.451'. [ 260.841828][ T5689] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 260.990582][ T5689] usb 3-1: Using ep0 maxpacket: 16 [ 260.991598][ T5689] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 260.994257][ T5689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.994309][ T5689] usb 3-1: config 0 interface 0 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 260.994336][ T5689] usb 3-1: config 0 interface 0 has no altsetting 0 [ 260.994369][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.059556][ T5689] usb 3-1: config 0 descriptor?? [ 261.120077][ T5689] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 261.735511][ T7158] netlink: 136 bytes leftover after parsing attributes in process `syz.1.461'. [ 262.677553][ T5723] usb 3-1: USB disconnect, device number 7 [ 264.104433][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.466'. [ 264.104462][ T7170] netlink: 48 bytes leftover after parsing attributes in process `syz.3.466'. [ 264.664588][ T7175] netlink: 460 bytes leftover after parsing attributes in process `syz.2.465'. [ 264.883207][ T7154] Process accounting resumed [ 265.957416][ T7196] zram0: detected capacity change from 0 to 8 [ 266.588537][ T7200] netlink: 136 bytes leftover after parsing attributes in process `syz.2.473'. [ 267.700837][ T7210] netlink: 48 bytes leftover after parsing attributes in process `syz.2.476'. [ 269.822224][ T7219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 269.822255][ T7219] netlink: 48 bytes leftover after parsing attributes in process `syz.2.479'. [ 271.330769][ T7239] netlink: 136 bytes leftover after parsing attributes in process `syz.2.486'. [ 272.074978][ T7243] netlink: 48 bytes leftover after parsing attributes in process `syz.4.489'. [ 273.870601][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 274.321254][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 274.321968][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 274.323205][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.323256][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.323283][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.323304][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 274.323327][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.324679][ T31] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 274.324702][ T31] usb 4-1: Manufacturer: syz [ 275.029215][ T31] usb 4-1: config 0 descriptor?? [ 275.031682][ T31] usb 4-1: can't set config #0, error -71 [ 275.052773][ T31] usb 4-1: USB disconnect, device number 9 [ 275.234066][ T7267] warning: `syz.3.498' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 276.849847][ T7270] Process accounting resumed [ 280.539197][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.510'. [ 280.664670][ T7309] bridge1: port 1(erspan0) entered blocking state [ 280.665683][ T7309] bridge1: port 1(erspan0) entered disabled state [ 280.665869][ T7309] erspan0: entered allmulticast mode [ 280.668822][ T7309] erspan0: entered promiscuous mode [ 280.705680][ T7309] bridge1: port 1(erspan0) entered blocking state [ 280.705831][ T7309] bridge1: port 1(erspan0) entered forwarding state [ 280.992612][ T7322] zram: Cannot change disksize for initialized device [ 283.256906][ T7336] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7335] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7336] [ 283.618207][ T7324] syzkaller0: entered promiscuous mode [ 283.618233][ T7324] syzkaller0: entered allmulticast mode [ 283.664522][ T7324] tipc: Started in network mode [ 283.664552][ T7324] tipc: Node identity 6e53e500f116, cluster identity 4711 [ 283.667036][ T7324] tipc: Enabled bearer , priority 0 [ 284.444363][ T7323] tipc: Resetting bearer [ 285.517491][ T7323] tipc: Disabling bearer [ 285.650811][ T5689] tipc: Node number set to 2672157952 [ 286.888908][ T7357] netlink: 32 bytes leftover after parsing attributes in process `syz.4.524'. [ 287.429801][ T7360] zram: Cannot change disksize for initialized device [ 289.096586][ T7369] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7371] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7369] [ 291.293533][ T7388] busy [ 291.649731][ T7380] Process accounting resumed [ 292.467260][ T7399] zram: Cannot change disksize for initialized device [ 293.118467][ T7406] syzkaller0: entered promiscuous mode [ 293.118517][ T7406] syzkaller0: entered allmulticast mode [ 293.157037][ T7406] tipc: Enabled bearer , priority 0 [ 293.236363][ T7406] tipc: Resetting bearer [ 293.342505][ T7404] tipc: Resetting bearer [ 294.299841][ T7418] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7417] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7418] [ 295.182700][ T7404] tipc: Disabling bearer [ 295.431255][ T5603] tipc: Node number set to 451545350 [ 295.435850][ T7419] syzkaller0: entered promiscuous mode [ 295.435877][ T7419] syzkaller0: entered allmulticast mode [ 295.459601][ T7420] tipc: Started in network mode [ 295.459631][ T7420] tipc: Node identity 363510e2af25, cluster identity 4711 [ 295.483210][ T7420] tipc: Enabled bearer , priority 0 [ 295.747065][ T7410] tipc: Resetting bearer [ 296.692867][ T7427] busy [ 297.122331][ T7410] tipc: Disabling bearer [ 297.921755][ T7430] nvme nvme0: failed to connect socket: -512 [ 298.344958][ T7435] Process accounting resumed [ 298.358002][ T5689] tipc: Node number set to 2567966946 [ 298.905256][ T7443] zram: Cannot change disksize for initialized device [ 301.146619][ T5715] IPVS: starting estimator thread 0... [ 301.230643][ T7462] IPVS: using max 10 ests per chain, 24000 per kthread [ 301.313877][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 301.505838][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 301.524122][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 301.533468][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.533610][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.533688][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 301.533742][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 301.533817][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.549329][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.549399][ T9] usb 2-1: Manufacturer: syz [ 301.694983][ T9] usb 2-1: config 0 descriptor?? [ 302.210555][ T9] rc_core: IR keymap rc-hauppauge not found [ 302.210572][ T9] Registered IR keymap rc-empty [ 302.335938][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 302.353894][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 302.459058][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 302.643443][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 302.734597][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 302.750788][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 302.770735][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 302.790796][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 302.811683][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 302.830778][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 302.850644][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 302.870799][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 302.890786][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 302.920692][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 303.024139][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 303.024173][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 303.117127][ T9] usb 2-1: USB disconnect, device number 9 [ 303.578297][ T7473] syzkaller0: entered promiscuous mode [ 303.578339][ T7473] syzkaller0: entered allmulticast mode [ 303.669677][ T7474] tipc: Started in network mode [ 303.669706][ T7474] tipc: Node identity 66412ec5caf5, cluster identity 4711 [ 303.670424][ T7474] tipc: Enabled bearer , priority 0 [ 303.760075][ T7472] tipc: Resetting bearer [ 303.807367][ T7476] busy [ 304.624237][ T7472] tipc: Disabling bearer [ 305.511343][ T9] tipc: Node number set to 2897489605 [ 306.549749][ T7483] Process accounting resumed [ 306.621923][ T7488] syzkaller0: entered promiscuous mode [ 306.621949][ T7488] syzkaller0: entered allmulticast mode [ 306.698938][ T7488] tipc: Enabled bearer , priority 0 [ 306.822140][ T7487] tipc: Resetting bearer [ 306.832208][ T7494] zram: Cannot change disksize for initialized device [ 307.655117][ T7507] busy [ 308.831417][ T7487] tipc: Disabling bearer [ 309.757690][ T7526] syzkaller0: entered promiscuous mode [ 309.757708][ T7526] syzkaller0: entered allmulticast mode [ 309.772220][ T5689] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 309.877434][ T7526] tipc: Enabled bearer , priority 0 [ 309.960877][ T7525] tipc: Resetting bearer [ 309.990697][ T5689] usb 5-1: Using ep0 maxpacket: 16 [ 309.991356][ T5689] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 309.992776][ T5689] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.994594][ T5689] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.994613][ T5689] usb 5-1: config 0 interface 0 has no altsetting 0 [ 309.994638][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.080235][ T5689] usb 5-1: config 0 descriptor?? [ 310.266513][ T7525] tipc: Disabling bearer [ 310.838310][ T7532] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 310.849894][ T5689] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 310.853204][ T5689] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 310.853294][ T5689] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 310.853367][ T5689] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 310.855489][ T5689] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 311.269867][ T7533] zram: Cannot change disksize for initialized device [ 311.397446][ T5689] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 313.039043][ T5689] usb 5-1: USB disconnect, device number 14 [ 313.891655][ T7542] Process accounting resumed [ 315.853502][ T7553] busy [ 316.448615][ T7563] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 316.448615][ T7563] The task syz.4.588 (7563) triggered the difference, watch for misbehavior. [ 316.817370][ T7569] zram: Cannot change disksize for initialized device [ 317.228948][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.229016][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.350588][ T5603] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 320.566566][ T5603] usb 4-1: Using ep0 maxpacket: 16 [ 320.568497][ T5603] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 320.570401][ T5603] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.597344][ T5603] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.597375][ T5603] usb 4-1: config 0 interface 0 has no altsetting 0 [ 320.597416][ T5603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.646498][ T5603] usb 4-1: config 0 descriptor?? [ 320.818299][ T5603] usb 4-1: can't set config #0, error -71 [ 320.840892][ T5603] usb 4-1: USB disconnect, device number 10 [ 321.167922][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.601'. [ 323.589680][ T7642] busy [ 323.621660][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.613'. [ 323.781762][ T5689] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 323.970561][ T5689] usb 2-1: Using ep0 maxpacket: 16 [ 323.971255][ T5689] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 323.972440][ T5689] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.972463][ T5689] usb 2-1: config 0 interface 0 has no altsetting 0 [ 323.972486][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.029689][ T5689] usb 2-1: config 0 descriptor?? [ 325.379451][ T5689] usbhid 2-1:0.0: can't add hid device: -71 [ 325.379569][ T5689] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 325.409325][ T5689] usb 2-1: USB disconnect, device number 10 [ 327.617654][ T7677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'. [ 329.481004][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 330.911403][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 330.936419][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.001901][ T31] usb 4-1: config 0 descriptor?? [ 331.033290][ T31] pwc: Creative Labs Webcam 5 detected. [ 331.204539][ T7711] use of bytesused == 0 is deprecated and will be removed in the future, [ 331.204550][ T7711] use the actual size instead. [ 331.347385][ T5603] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 331.860556][ T5603] usb 2-1: Using ep0 maxpacket: 16 [ 331.863543][ T5603] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 331.865210][ T5603] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.865238][ T5603] usb 2-1: config 0 interface 0 has no altsetting 0 [ 331.865278][ T5603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.890125][ T5603] usb 2-1: config 0 descriptor?? [ 332.107134][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 332.121164][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 332.324917][ T31] pwc: recv_control_msg error -71 req 02 val 2c00 [ 332.326592][ T31] pwc: recv_control_msg error -71 req 04 val 1000 [ 332.327535][ T31] pwc: recv_control_msg error -71 req 04 val 1300 [ 332.328772][ T31] pwc: recv_control_msg error -71 req 04 val 1400 [ 332.378506][ T31] pwc: recv_control_msg error -71 req 02 val 2000 [ 332.378992][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 332.379474][ T31] pwc: recv_control_msg error -71 req 06 val 0600 [ 332.379991][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 332.400515][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 332.414837][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 332.416578][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 332.417084][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 332.417491][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 332.418162][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 332.418591][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 332.419035][ T31] pwc: Failed to power off camera (-71) [ 332.576440][ T31] pwc: Registered as video103. [ 332.579651][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 332.618314][ T31] usb 4-1: USB disconnect, device number 11 [ 332.671498][ T5603] usbhid 2-1:0.0: can't add hid device: -71 [ 332.671613][ T5603] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 332.741818][ T5603] usb 2-1: USB disconnect, device number 11 [ 332.937259][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.641'. [ 337.665401][ T7746] netlink: 32 bytes leftover after parsing attributes in process `syz.1.649'. [ 339.499532][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'. [ 339.675176][ T5575] IPVS: starting estimator thread 0... [ 339.760692][ T7765] IPVS: using max 7 ests per chain, 16800 per kthread [ 339.970595][ T5575] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 340.476966][ T5575] usb 2-1: Using ep0 maxpacket: 16 [ 340.500297][ T5575] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 340.623696][ T5575] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.623732][ T5575] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.623766][ T5575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.835691][ T5575] usb 2-1: config 0 descriptor?? [ 341.589510][ T5575] usbhid 2-1:0.0: can't add hid device: -71 [ 341.589631][ T5575] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 341.615297][ T5575] usb 2-1: USB disconnect, device number 12 [ 343.096149][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'. [ 345.810990][ T7827] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 345.945119][ T7827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.163816][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'. [ 346.189986][ T7830] bond1: (slave veth0_to_bond): making interface the new active one [ 346.300140][ T7830] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 346.413236][ T7832] bond1: entered promiscuous mode [ 346.413261][ T7832] veth0_to_bond: entered promiscuous mode [ 346.413514][ T7832] bond1: entered allmulticast mode [ 346.413529][ T7832] veth0_to_bond: entered allmulticast mode [ 346.579864][ T7827] macvlan2: entered promiscuous mode [ 346.579904][ T7827] macvlan2: entered allmulticast mode [ 346.631603][ T7827] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 346.740748][ T7827] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 348.293417][ T7855] busy [ 349.318519][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.693'. [ 352.824563][ T7889] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 353.108312][ T7889] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.705462][ T7891] veth3: entered allmulticast mode [ 354.867584][ T7895] bond1: (slave veth0_to_bond): making interface the new active one [ 354.910756][ T7895] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 355.033358][ T7898] bond1: entered promiscuous mode [ 355.033381][ T7898] veth0_to_bond: entered promiscuous mode [ 355.033650][ T7898] bond1: entered allmulticast mode [ 355.033664][ T7898] veth0_to_bond: entered allmulticast mode [ 355.109584][ T7889] macvlan2: entered promiscuous mode [ 355.109610][ T7889] macvlan2: entered allmulticast mode [ 355.167244][ T7889] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 355.201688][ T7889] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 355.850558][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.707'. [ 358.996973][ T7944] syz.1.719 uses obsolete (PF_INET,SOCK_PACKET) [ 359.437686][ T7957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.726'. [ 359.520100][ T7951] nvme nvme0: failed to connect socket: -111 [ 364.395770][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.3.738'. [ 364.881959][ T8000] nvme nvme0: failed to connect socket: -111 [ 367.026861][ T8024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.750'. [ 368.366228][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.752'. [ 368.795241][ T8043] netlink: 136 bytes leftover after parsing attributes in process `syz.1.746'. [ 375.286116][ T8070] busy [ 375.301317][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.765'. [ 375.610883][ T31] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 375.890573][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 375.900017][ T31] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 375.923408][ T31] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.923443][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 375.923478][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.949974][ T31] usb 4-1: config 0 descriptor?? [ 378.657741][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.657868][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.760309][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 378.767435][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 378.806586][ T31] usb 4-1: USB disconnect, device number 12 [ 379.220862][ T8099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.776'. [ 379.220891][ T8099] netlink: 48 bytes leftover after parsing attributes in process `syz.2.776'. [ 379.370759][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.778'. [ 380.560625][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 380.710727][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 380.711572][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 380.712845][ T9] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.712878][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 380.712902][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.786216][ T9] usb 4-1: config 0 descriptor?? [ 381.433051][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 381.433178][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 381.459281][ T9] usb 4-1: USB disconnect, device number 13 [ 383.794051][ T8146] netlink: 136 bytes leftover after parsing attributes in process `syz.4.773'. [ 383.946316][ T8147] smc: net device vlan1 applied user defined pnetid SYZ2 [ 384.594512][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.790'. [ 387.542082][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.806'. [ 388.950628][ T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 389.102169][ T31] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 389.102231][ T31] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 389.104864][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.104919][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.104947][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 389.104970][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 389.106367][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.106402][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.106420][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 389.106435][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 389.108297][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.108330][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.108347][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 389.108361][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 389.110235][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.110286][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.110325][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 389.110347][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 389.306984][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.307045][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.307071][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 389.307094][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 389.308320][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.308376][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.308411][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 389.308434][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 389.395085][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.395144][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.395172][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 389.395193][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 389.398173][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.398228][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 389.398254][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 389.398276][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 389.478797][ T31] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 389.478826][ T31] usb 5-1: Product: syz [ 389.478840][ T31] usb 5-1: Manufacturer: syz [ 389.478855][ T31] usb 5-1: SerialNumber: syz [ 389.506709][ T31] usb 5-1: config 0 descriptor?? [ 389.523701][ T31] yurex 5-1:0.0: Could not submitting URB [ 389.523881][ T31] yurex 5-1:0.0: probe with driver yurex failed with error -5 [ 389.707461][ T8227] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 389.740846][ T8227] gadgetfs: bound to dummy_udc driver [ 389.768283][ T8227] binder: 8226:8227 ioctl c0306201 0 returned -14 [ 389.980972][ T997] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 389.983189][ C0] gadgetfs: connected [ 389.983608][ T997] gadgetfs: disconnected [ 390.140836][ C0] gadgetfs: connected [ 390.143390][ T997] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 390.143723][ T997] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 390.143750][ T997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.148514][ T8226] gadgetfs: suspended from state 3 [ 390.148746][ T8226] gadgetfs: disconnected [ 390.207229][ T997] usb 2-1: can't set config #1, error -71 [ 390.237221][ T997] usb 2-1: USB disconnect, device number 13 [ 390.258115][ T8214] input: syz1 as /devices/virtual/input/input11 [ 391.748629][ T8242] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 392.014997][ T997] usb 5-1: USB disconnect, device number 15 [ 393.846340][ T8250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.821'. [ 394.548032][ T8261] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 394.585983][ T8261] gadgetfs: bound to dummy_udc driver [ 394.591992][ T8261] binder: 8260:8261 ioctl c0306201 0 returned -14 [ 396.148085][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.831'. [ 398.117535][ T8299] loop9: detected capacity change from 0 to 524287999 [ 402.244550][ T8274] syz.0.830 (8274): drop_caches: 2 [ 404.646554][ T8352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.859'. [ 404.750994][ T8353] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 404.858882][ T8354] binder: 8348:8354 ioctl c0306201 0 returned -14 [ 404.930234][ T8353] gadgetfs: bound to dummy_udc driver [ 406.298037][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'. [ 406.359238][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'. [ 406.541433][ T8361] erspan0: left allmulticast mode [ 406.541466][ T8361] erspan0: left promiscuous mode [ 406.541806][ T8361] bridge1: port 1(erspan0) entered disabled state [ 406.720292][ T8361] bridge3: port 1(erspan0) entered blocking state [ 406.721208][ T8361] bridge3: port 1(erspan0) entered disabled state [ 406.724439][ T8361] erspan0: entered allmulticast mode [ 406.757719][ T8361] erspan0: entered promiscuous mode [ 406.823517][ T8361] bridge3: port 1(erspan0) entered blocking state [ 406.823677][ T8361] bridge3: port 1(erspan0) entered forwarding state [ 407.054096][ T8373] netlink: 32 bytes leftover after parsing attributes in process `syz.3.864'. [ 408.204690][ T8381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.869'. [ 408.641486][ T8385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.870'. [ 408.980656][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 409.130551][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 409.131381][ T31] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 409.132972][ T31] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.133003][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 409.133049][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.190004][ T31] usb 4-1: config 0 descriptor?? [ 409.360128][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.878'. [ 409.605929][ T8402] bridge4: port 1(erspan0) entered blocking state [ 409.606216][ T8402] bridge4: port 1(erspan0) entered disabled state [ 409.606437][ T8402] erspan0: entered allmulticast mode [ 409.609537][ T8402] erspan0: entered promiscuous mode [ 409.652210][ T8402] bridge4: port 1(erspan0) entered blocking state [ 409.652434][ T8402] bridge4: port 1(erspan0) entered forwarding state [ 410.930474][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 410.930606][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 410.955444][ T31] usb 4-1: USB disconnect, device number 14 [ 411.243758][ T8424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.884'. [ 413.098409][ T8461] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 413.221455][ T8462] binder: 8453:8462 ioctl c0306201 0 returned -14 [ 413.244317][ T8461] gadgetfs: bound to dummy_udc driver [ 414.051125][ T999] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 414.052546][ C1] gadgetfs: connected [ 414.053386][ T999] gadgetfs: disconnected [ 414.363848][ C1] gadgetfs: connected [ 414.366850][ T999] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 414.368684][ T999] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 414.368789][ T999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.716992][ C1] gadgetfs: configuration #1 [ 415.401468][ T8453] gadgetfs: suspended from state 3 [ 415.401533][ T8453] gadgetfs: disconnected [ 415.547752][ T31] usb 2-1: USB disconnect, device number 14 [ 416.571519][ T8493] netlink: 136 bytes leftover after parsing attributes in process `syz.0.909'. [ 420.564146][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.920'. [ 421.260606][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 421.883133][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 422.210637][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.210665][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.225615][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 422.225642][ T9] usb 4-1: SerialNumber: syz [ 424.130184][ T9] usb 4-1: 0:2 : does not exist [ 424.163262][ T9] usb 4-1: unit 48 not found! [ 424.891779][ T8562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.935'. [ 425.085821][ T9] usb 4-1: USB disconnect, device number 15 [ 425.486484][ T8576] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002 [ 425.570513][ T5689] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 425.772377][ T5689] usb 3-1: Using ep0 maxpacket: 16 [ 425.773226][ T5689] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 425.775395][ T5689] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.775447][ T5689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.775476][ T5689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 425.775498][ T5689] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 425.775529][ T5689] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 425.778727][ T5689] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 425.778750][ T5689] usb 3-1: Manufacturer: syz [ 426.226460][ T8584] mmap: syz.3.943 (8584) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 427.114359][ T5689] usb 3-1: config 0 descriptor?? [ 427.824758][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.050595][ T5689] rc_core: IR keymap rc-hauppauge not found [ 428.050617][ T5689] Registered IR keymap rc-empty [ 428.050969][ T5689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 428.080634][ T5689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 428.083224][ T8597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.948'. [ 428.191396][ T5689] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 428.308238][ T5689] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 428.341560][ T5689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 429.083241][ T5689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 429.107341][ T5689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 429.135951][ T5689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 429.162280][ T5689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 429.190525][ T5689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 429.223092][ T5689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 429.240613][ T5689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 429.270631][ T5689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 429.291740][ T5689] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 430.367824][ T8606] Process accounting resumed [ 430.449004][ T5689] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 430.449029][ T5689] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 430.512194][ T5689] usb 3-1: USB disconnect, device number 8 [ 434.600561][ T5575] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 434.750472][ T5575] usb 3-1: Using ep0 maxpacket: 16 [ 434.751459][ T5575] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 434.756579][ T5575] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.756614][ T5575] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.756633][ T5575] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 434.756647][ T5575] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 434.756663][ T5575] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.839078][ T5575] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 434.839097][ T5575] usb 3-1: Manufacturer: syz [ 434.864734][ T5575] usb 3-1: config 0 descriptor?? [ 437.060615][ T5575] rc_core: IR keymap rc-hauppauge not found [ 437.060636][ T5575] Registered IR keymap rc-empty [ 437.060772][ T5575] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.081070][ T5575] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.107274][ T5575] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 437.191316][ T5575] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 437.198609][ T5575] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.221507][ T5575] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.240798][ T5575] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.260573][ T5575] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.280566][ T5575] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.303080][ T5575] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.320729][ T5575] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.340787][ T5575] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.360649][ T5575] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.381318][ T5575] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 437.420030][ T5575] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 437.420105][ T5575] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 437.473943][ T5575] usb 3-1: USB disconnect, device number 9 [ 438.102001][ T8687] zram: Cannot change disksize for initialized device [ 440.214733][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.214810][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.205827][ T8717] netlink: 32 bytes leftover after parsing attributes in process `syz.3.986'. [ 445.039691][ T8731] loop8: detected capacity change from 0 to 7 [ 445.098222][ T8731] Dev loop8: unable to read RDB block 7 [ 445.098262][ T8731] loop8: AHDI p1 p2 [ 445.098276][ T8731] loop8: partition table partially beyond EOD, truncated [ 445.098509][ T8731] loop8: p1 start 1700754297 is beyond EOD, truncated [ 445.619385][ T8727] Process accounting resumed [ 448.216095][ T8770] loop8: detected capacity change from 0 to 7 [ 448.267641][ T8770] Dev loop8: unable to read RDB block 7 [ 448.267674][ T8770] loop8: AHDI p1 p2 [ 448.267696][ T8770] loop8: partition table partially beyond EOD, truncated [ 448.267958][ T8770] loop8: p1 start 1700754297 is beyond EOD, truncated [ 448.435355][ T8769] binder: 8766:8769 unknown command 0 [ 448.435384][ T8769] binder: 8766:8769 ioctl c0306201 200000000180 returned -22 [ 448.611428][ T8776] zram: Cannot change disksize for initialized device [ 450.620288][ T37] audit: type=1326 audit(1786924274.206:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8799 comm="syz.4.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4adae0d9 code=0x7ffc0000 [ 450.620341][ T37] audit: type=1326 audit(1786924274.216:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8799 comm="syz.4.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4adae0d9 code=0x7ffc0000 [ 450.620732][ T37] audit: type=1326 audit(1786924274.216:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8799 comm="syz.4.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2e4adae0d9 code=0x7ffc0000 [ 450.620779][ T37] audit: type=1326 audit(1786924274.216:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8799 comm="syz.4.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4adae0d9 code=0x7ffc0000 [ 450.687333][ T37] audit: type=1326 audit(1786924274.216:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8799 comm="syz.4.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4adae0d9 code=0x7ffc0000 [ 450.724466][ T37] audit: type=1326 audit(1786924274.306:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8799 comm="syz.4.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2e4adae0d9 code=0x7ffc0000 [ 450.724570][ T37] audit: type=1326 audit(1786924274.316:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8799 comm="syz.4.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4adae0d9 code=0x7ffc0000 [ 450.724668][ T37] audit: type=1326 audit(1786924274.316:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8799 comm="syz.4.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4adae0d9 code=0x7ffc0000 [ 450.724804][ T37] audit: type=1326 audit(1786924274.316:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8799 comm="syz.4.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2e4adae0d9 code=0x7ffc0000 [ 450.825582][ T8809] process 'syz.4.1013' launched './file2' with NULL argv: empty string added [ 450.905818][ T37] audit: type=1326 audit(1786924274.416:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8799 comm="syz.4.1013" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e4adae0d9 code=0x7ffc0000 [ 451.880532][ T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 452.081002][ T31] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 452.082333][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.082376][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.145974][ T31] usb 3-1: config 0 descriptor?? [ 452.764637][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 452.764747][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 452.812768][ T31] usb 3-1: USB disconnect, device number 10 [ 453.260562][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 453.436698][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 453.452032][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.452084][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.536237][ T9] usb 3-1: config 0 descriptor?? [ 454.414938][ T9] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 455.365460][ T9] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 455.707249][ T8849] Process accounting resumed [ 455.883310][ T9] usb 3-1: USB disconnect, device number 11 [ 455.883395][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 459.570588][ T8900] snd_dummy snd_dummy.0: control 0:57412:0:syz0:0 is already present [ 459.673221][ T8903] binder: 8892:8903 ioctl c0306201 0 returned -14 [ 459.673372][ T8900] gadgetfs: bound to dummy_udc driver [ 459.990549][ T5689] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 459.990843][ C1] gadgetfs: connected [ 459.991011][ T5689] gadgetfs: disconnected [ 460.140822][ C1] gadgetfs: connected [ 460.141813][ T5689] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 460.142180][ T5689] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 460.142219][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.184247][ C1] gadgetfs: configuration #1 [ 460.365648][ T8892] gadgetfs: suspended from state 3 [ 460.365714][ T8892] gadgetfs: disconnected [ 460.366840][ T5689] usb 2-1: USB disconnect, device number 15 [ 461.140197][ T8931] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 461.330204][ C1] [ 461.330217][ C1] ============================= [ 461.330224][ C1] [ BUG: Invalid wait context ] [ 461.330264][ C1] syzkaller #0 Not tainted [ 461.330276][ C1] ----------------------------- [ 461.330343][ C1] ksoftirqd/1/30 is trying to lock: [ 461.330355][ C1] ffff88806138e120 (membarrier_ipi_mutex){+.+.}-{4:4}, at: tcp_tsq_handler+0x29/0x200 [ 461.330628][ C1] other info that might help us debug this: [ 461.330635][ C1] context-{5:5} [ 461.330644][ C1] 6 locks held by ksoftirqd/1/30: [ 461.330686][ C1] #0: ffffffff8e059220 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 461.330815][ C1] #1: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 461.330869][ C1] #2: ffff8880b873a990 (&pool->cb_lock){+...}-{3:3}, at: bh_worker+0x7d/0x880 [ 461.331011][ C1] #3: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 461.331257][ C1] #4: ffff88813ff1dd38 ((wq_completion)events_bh){+...}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 461.331370][ C1] #5: ffffc90000a4fba0 ((work_completion)(&tsq->work)){+...}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 461.331425][ C1] stack backtrace: [ 461.331449][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 461.331479][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.331500][ C1] Call Trace: [ 461.331534][ C1] [ 461.331603][ C1] dump_stack_lvl+0xe8/0x150 [ 461.331714][ C1] __lock_acquire+0xe39/0x2ce0 [ 461.331779][ C1] ? wakeup_preempt_fair+0x745/0xb10 [ 461.331871][ C1] ? sched_balance_rq+0x54e5/0x6db0 [ 461.331972][ C1] ? tcp_tsq_handler+0x29/0x200 [ 461.332006][ C1] lock_acquire+0x106/0x350 [ 461.332025][ C1] ? tcp_tsq_handler+0x29/0x200 [ 461.332060][ C1] ? register_lock_class+0x31/0x2e0 [ 461.332084][ C1] rt_spin_lock+0x83/0x400 [ 461.332117][ C1] ? tcp_tsq_handler+0x29/0x200 [ 461.332149][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 461.332172][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 461.332207][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.332240][ C1] tcp_tsq_handler+0x29/0x200 [ 461.332275][ C1] tcp_tsq_workfn+0x384/0x410 [ 461.332307][ C1] ? __pfx_tcp_tsq_workfn+0x10/0x10 [ 461.332341][ C1] ? rcu_is_watching+0x15/0xb0 [ 461.332410][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 461.332434][ C1] process_scheduled_works+0xa8e/0x14e0 [ 461.332458][ C1] ? __lock_acquire+0x683/0x2ce0 [ 461.332491][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 461.332514][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.332547][ C1] ? assign_work+0x3cf/0x5d0 [ 461.332571][ C1] bh_worker+0x46a/0x880 [ 461.332602][ C1] tasklet_action+0xc/0x70 [ 461.332628][ C1] handle_softirqs+0x1d9/0x6c0 [ 461.332655][ C1] run_ksoftirqd+0x52/0x180 [ 461.332681][ C1] smpboot_thread_fn+0x57c/0xa80 [ 461.332738][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 461.332767][ C1] kthread+0x388/0x470 [ 461.332822][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 461.332847][ C1] ? __pfx_kthread+0x10/0x10 [ 461.332876][ C1] ret_from_fork+0x514/0xb70 [ 461.332955][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 461.332986][ C1] ? __switch_to+0xc89/0x1420 [ 461.333040][ C1] ? __pfx_kthread+0x10/0x10 [ 461.333083][ C1] ret_from_fork_asm+0x1a/0x30 [ 461.333122][ C1] [ 461.346517][ C1] BUG: workqueue leaked atomic, lock or RCU: ksoftirqd/1[30] [ 461.346517][ C1] preempt=0x00000000 lock=4->0 RCU=2->2 workfn=tcp_tsq_workfn [ 461.346663][ C1] INFO: lockdep is turned off. [ 461.346704][ C1] CPU: 1 UID: 0 PID: 30 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 461.346766][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.346799][ C1] Call Trace: [ 461.346820][ C1] [ 461.346841][ C1] dump_stack_lvl+0xe8/0x150 [ 461.346933][ C1] process_scheduled_works+0x1161/0x14e0 [ 461.346996][ C1] ? __lock_acquire+0x683/0x2ce0 [ 461.347081][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 461.347142][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 461.347226][ C1] ? assign_work+0x3cf/0x5d0 [ 461.347288][ C1] bh_worker+0x46a/0x880 [ 461.347370][ C1] tasklet_action+0xc/0x70 [ 461.347429][ C1] handle_softirqs+0x1d9/0x6c0 [ 461.347460][ C1] run_ksoftirqd+0x52/0x180 [ 461.347519][ C1] smpboot_thread_fn+0x57c/0xa80 [ 461.347610][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 461.347705][ C1] kthread+0x388/0x470 [ 461.347777][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 461.347853][ C1] ? __pfx_kthread+0x10/0x10 [ 461.347938][ C1] ret_from_fork+0x514/0xb70 [ 461.348024][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 461.348100][ C1] ? __switch_to+0xc89/0x1420 [ 461.348169][ C1] ? __pfx_kthread+0x10/0x10 [ 461.348225][ C1] ret_from_fork_asm+0x1a/0x30 [ 461.348266][ C1] [ 462.071204][ T8945] zram: Cannot change disksize for initialized device [ 462.385546][ T5575] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 462.530504][ T5575] usb 4-1: Using ep0 maxpacket: 16 [ 462.531727][ T5575] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 462.532775][ T5575] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.532815][ T5575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 462.532841][ T5575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 462.532868][ T5575] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 462.532884][ T5575] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.534004][ T5575] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 462.534027][ T5575] usb 4-1: Manufacturer: syz [ 462.536321][ T5575] usb 4-1: config 0 descriptor?? [ 462.791208][ T5575] rc_core: IR keymap rc-hauppauge not found [ 462.791246][ T5575] Registered IR keymap rc-empty [ 462.791334][ T5575] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.810507][ T5575] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.831135][ T5575] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 462.832505][ T5575] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 462.834339][ T5575] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.852919][ T5575] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.871111][ T5575] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.890538][ T5575] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.910565][ T5575] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.930608][ T5575] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.950564][ T5575] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.970845][ T5575] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 462.990514][ T5575] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 463.010524][ T5575] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 463.032217][ T5575] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 463.032326][ T5575] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 463.189296][ T5575] usb 4-1: USB disconnect, device number 16