last executing test programs: 22.938137553s ago: executing program 0 (id=1096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) mkdir(0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 21.684860582s ago: executing program 0 (id=1098): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) dup(r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000001000/0x4000)=nil, 0x6) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x4, 0xffffffb0, 0xcc7, 0x8, 0x7, 0x1, 0x7fff, 0x60, 0x1, 0x9, 0x2, 0x6, 0x9, 0x1, 0xff, 0x43, 0x40000003, 0x89, 0x10c, 0xf27, 0x1, 0xc, 0x8, 0x5, 0x40000006, 0x8, 0x10000, 0xfffffff4]}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x13, r5, 0x8000000) 20.249322287s ago: executing program 3 (id=1099): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6(0xa, 0x1000080002, 0x100000000000088) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x61) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002580)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12741308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9", 0x7e}, {0x0}], 0x2, 0x0, 0x0, 0xff0f0000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 18.266755253s ago: executing program 0 (id=1102): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 17.501643372s ago: executing program 2 (id=1103): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, 0x0, &(0x7f00000003c0)) 16.145493972s ago: executing program 0 (id=1104): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xd9}) 14.676716472s ago: executing program 3 (id=1105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL={0x8, 0x7, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 14.416173054s ago: executing program 2 (id=1106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) mkdir(0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 12.960261286s ago: executing program 0 (id=1107): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000080)='./file0\x00', 0x115) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x100000000003ff, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r6, 0x0, 0x0) 11.347315759s ago: executing program 1 (id=1109): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000000)=0x20e, 0x4) 10.096076578s ago: executing program 3 (id=1110): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r3, 0x0, 0x201f00) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.816411557s ago: executing program 2 (id=1111): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) dup(r1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40", 0x20) 9.033556303s ago: executing program 1 (id=1112): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 7.266848968s ago: executing program 2 (id=1113): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6(0xa, 0x1000080002, 0x100000000000088) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x61) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002580)="89000000120081ae08060cdc030000007f03e3f7000000026ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12741308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9", 0x7e}, {0x0}], 0x2, 0x0, 0x0, 0xff0f0000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 7.200901266s ago: executing program 1 (id=1114): r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r2 = fcntl$getown(r0, 0x9) tgkill(r2, 0x0, 0x1d) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, 0x0, &(0x7f00000003c0)) 7.182776502s ago: executing program 3 (id=1115): gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x8, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x2}, 0xffffff14, 0x0}, 0xe07e872424dfefdb) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, 0x0, 0x4080) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4, 0x0, 0x8], 0xeeee7ffb, 0x400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xfe7f0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) set_mempolicy(0x2, &(0x7f0000000040)=0x1003, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="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"], 0x14c}}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = getpgrp(0xffffffffffffffff) kcmp(r5, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) waitid(0x2, 0x0, &(0x7f0000000600), 0x2, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5.037861937s ago: executing program 2 (id=1116): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004084}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 4.933473358s ago: executing program 1 (id=1117): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000440)="66baa000b842878779efb805000000b9006000000f01c12e0f1dfdf236f01186d7f7000066420f380599f93f000066b83e018ed80f01c88f8970948547000000400f096567460f08", 0x48}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.286956705s ago: executing program 0 (id=1118): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x161}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$comedi(0xffffff9c, 0x0, 0x2000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000002c0)=@generic={0x1, 0xffffffffffffffff, 0x6}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000340)=',#Z', 0x3) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000080)={0xbc, 0x0, 0x1}) 3.230728705s ago: executing program 1 (id=1119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) mkdir(0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 1.809590673s ago: executing program 1 (id=1120): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000000)=0x20e, 0x4) 1.730795208s ago: executing program 3 (id=1121): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) dup(r1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40", 0x20) 356.495555ms ago: executing program 3 (id=1122): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 0s ago: executing program 2 (id=1123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 71.773783][ T5754] cgroup: Unknown subsys name 'net' [ 71.886595][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.549012][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.131448][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.140260][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.145310][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.155669][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.156320][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.170425][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.171406][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.186059][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.195257][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.195938][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.211708][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.219828][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.220009][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.233997][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.235798][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.242132][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.256812][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.264894][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.265977][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.281103][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.303148][ T5082] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.311097][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.321360][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.331039][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.709426][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 75.775927][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 75.884214][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 76.001885][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.009195][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.016739][ T5766] bridge_slave_0: entered allmulticast mode [ 76.025865][ T5766] bridge_slave_0: entered promiscuous mode [ 76.034246][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.043925][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.051191][ T5768] bridge_slave_0: entered allmulticast mode [ 76.058641][ T5768] bridge_slave_0: entered promiscuous mode [ 76.066568][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.074057][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.081641][ T5768] bridge_slave_1: entered allmulticast mode [ 76.089497][ T5768] bridge_slave_1: entered promiscuous mode [ 76.097045][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 76.120725][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.127914][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.135413][ T5766] bridge_slave_1: entered allmulticast mode [ 76.142425][ T5766] bridge_slave_1: entered promiscuous mode [ 76.206642][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.221196][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.260213][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.267434][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.274866][ T5767] bridge_slave_0: entered allmulticast mode [ 76.282036][ T5767] bridge_slave_0: entered promiscuous mode [ 76.330651][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.338352][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.345519][ T5767] bridge_slave_1: entered allmulticast mode [ 76.352639][ T5767] bridge_slave_1: entered promiscuous mode [ 76.361840][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.375194][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.387477][ T5768] team0: Port device team_slave_0 added [ 76.397336][ T5768] team0: Port device team_slave_1 added [ 76.484198][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.491376][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.517951][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.529960][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.537148][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.544731][ T5765] bridge_slave_0: entered allmulticast mode [ 76.552349][ T5765] bridge_slave_0: entered promiscuous mode [ 76.562683][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.577886][ T5766] team0: Port device team_slave_0 added [ 76.584618][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.592111][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.618613][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.637602][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.645041][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.652664][ T5765] bridge_slave_1: entered allmulticast mode [ 76.660517][ T5765] bridge_slave_1: entered promiscuous mode [ 76.669341][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.690997][ T5766] team0: Port device team_slave_1 added [ 76.755677][ T5767] team0: Port device team_slave_0 added [ 76.764825][ T5767] team0: Port device team_slave_1 added [ 76.791579][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.799268][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.825635][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.847591][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.854623][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.880956][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.897603][ T5768] hsr_slave_0: entered promiscuous mode [ 76.904916][ T5768] hsr_slave_1: entered promiscuous mode [ 76.919514][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.932109][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.951543][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.958818][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.985135][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.014380][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.021690][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.047745][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.123617][ T5765] team0: Port device team_slave_0 added [ 77.132505][ T5765] team0: Port device team_slave_1 added [ 77.173317][ T5766] hsr_slave_0: entered promiscuous mode [ 77.180313][ T5766] hsr_slave_1: entered promiscuous mode [ 77.186689][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.195169][ T5766] Cannot create hsr debugfs directory [ 77.223235][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.231344][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.257714][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.294243][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.301408][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.309349][ T5773] Bluetooth: hci3: command tx timeout [ 77.328585][ T51] Bluetooth: hci2: command tx timeout [ 77.338964][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.370885][ T5767] hsr_slave_0: entered promiscuous mode [ 77.377629][ T5767] hsr_slave_1: entered promiscuous mode [ 77.387295][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.388703][ T51] Bluetooth: hci1: command tx timeout [ 77.395202][ T5767] Cannot create hsr debugfs directory [ 77.400999][ T5773] Bluetooth: hci0: command tx timeout [ 77.569945][ T5765] hsr_slave_0: entered promiscuous mode [ 77.576368][ T5765] hsr_slave_1: entered promiscuous mode [ 77.583117][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.590878][ T5765] Cannot create hsr debugfs directory [ 77.794923][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.806606][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.831283][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.862518][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.963150][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.979269][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.994032][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.003570][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.085787][ T5766] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.096070][ T5766] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.118924][ T5766] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.153054][ T5766] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.214414][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.259463][ T5765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.274590][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.287455][ T5765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.303266][ T5765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.314466][ T5765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.330810][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.338508][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.393506][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.400757][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.476380][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.532314][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.572705][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.599413][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.606577][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.645550][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.652804][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.680922][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.704911][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.712250][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.744172][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.751500][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.801496][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.863882][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.897398][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.904632][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.921024][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.928139][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.002568][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.029947][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.204116][ T5768] veth0_vlan: entered promiscuous mode [ 79.246927][ T5768] veth1_vlan: entered promiscuous mode [ 79.345556][ T5768] veth0_macvtap: entered promiscuous mode [ 79.379559][ T5768] veth1_macvtap: entered promiscuous mode [ 79.389356][ T51] Bluetooth: hci2: command tx timeout [ 79.394847][ T51] Bluetooth: hci3: command tx timeout [ 79.432444][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.469771][ T51] Bluetooth: hci1: command tx timeout [ 79.470155][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.475216][ T51] Bluetooth: hci0: command tx timeout [ 79.514453][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.524454][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.534309][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.543213][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.631133][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.654884][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.735421][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.760836][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.777619][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.859681][ T5766] veth0_vlan: entered promiscuous mode [ 79.866856][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.880275][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.904837][ T5766] veth1_vlan: entered promiscuous mode [ 80.001240][ T5767] veth0_vlan: entered promiscuous mode [ 80.037504][ T5765] veth0_vlan: entered promiscuous mode [ 80.055297][ T5766] veth0_macvtap: entered promiscuous mode [ 80.102772][ T5767] veth1_vlan: entered promiscuous mode [ 80.135705][ T5766] veth1_macvtap: entered promiscuous mode [ 80.162338][ T5765] veth1_vlan: entered promiscuous mode [ 80.177572][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.190336][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.203656][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.235024][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.245823][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.258833][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.271631][ T5766] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.281115][ T5766] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.290909][ T5766] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.301677][ T5766] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.331887][ T5767] veth0_macvtap: entered promiscuous mode [ 80.375561][ T5767] veth1_macvtap: entered promiscuous mode [ 80.412455][ T5765] veth0_macvtap: entered promiscuous mode [ 80.452801][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.463923][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.474411][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.485265][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.496744][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.507920][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.520250][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.530520][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.541306][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.553264][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.564784][ T5765] veth1_macvtap: entered promiscuous mode [ 80.579154][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.587136][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.611473][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.625274][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.636545][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.646525][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.725890][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.737111][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.741762][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.745767][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.772231][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.784761][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.795255][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.806500][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.827388][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.867967][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.879902][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.890917][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.902739][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.936616][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.949330][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.961378][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.070517][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.092724][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.103907][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.113654][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.265013][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.295656][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.398305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 81.471834][ T5773] Bluetooth: hci3: command tx timeout [ 81.472383][ T51] Bluetooth: hci2: command tx timeout [ 81.558421][ T51] Bluetooth: hci0: command tx timeout [ 81.558922][ T5773] Bluetooth: hci1: command tx timeout [ 82.031909][ T5843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8'. [ 83.274773][ T5845] sched: RT throttling activated [ 83.274821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.517875][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.548676][ T5773] Bluetooth: hci3: command tx timeout [ 83.548746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 83.572432][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.672235][ T5773] Bluetooth: hci1: command tx timeout [ 83.672296][ T51] Bluetooth: hci0: command tx timeout [ 83.714428][ T5841] orangefs_mount: mount request failed with -4 [ 83.768095][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.828232][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.518540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.678504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.686826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.817135][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.835696][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.248556][ T27] cfg80211: failed to load regulatory.db [ 87.741461][ T5875] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.380824][ T787] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.582750][ T787] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 89.609973][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.653398][ T787] usb 1-1: config 0 descriptor?? [ 89.958073][ T5891] syz.2.17 uses obsolete (PF_INET,SOCK_PACKET) [ 90.038346][ T787] hackrf 1-1:0.0: usb_control_msg() failed -32 request 0e [ 90.046214][ T787] hackrf 1-1:0.0: Could not detect board [ 90.052482][ T787] hackrf: probe of 1-1:0.0 failed with error -32 [ 92.563004][ T787] usb 1-1: USB disconnect, device number 2 [ 92.828623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.408827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 95.218771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.588721][ T5931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.27'. [ 98.938355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.618449][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.827119][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 100.858781][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.902532][ T9] usb 3-1: config 0 descriptor?? [ 101.379244][ T9] hackrf 3-1:0.0: usb_control_msg() failed -32 request 0f [ 101.386553][ T9] hackrf 3-1:0.0: Could not detect board [ 101.418249][ T9] hackrf: probe of 3-1:0.0 failed with error -32 [ 101.440043][ T9] usb 3-1: USB disconnect, device number 2 [ 102.863113][ T5964] syz.2.35[5964]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 103.136613][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.481532][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.505373][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.654945][ T23] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 104.029128][ T5975] fuse: Bad value for 'fd' [ 104.996887][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.258416][ T23] usb 2-1: config 0 descriptor?? [ 105.790678][ T23] usb 2-1: can't set config #0, error -71 [ 105.810869][ T23] usb 2-1: USB disconnect, device number 2 [ 107.447376][ T5997] process 'syz.2.43' launched './file0' with NULL argv: empty string added [ 109.953834][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.46'. [ 109.967621][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.46'. [ 117.058519][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.327394][ T23] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 117.355756][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.389454][ T23] usb 2-1: config 0 descriptor?? [ 117.476648][ T6074] nfs: Unknown parameter 'ÿÿÿÿ' [ 118.317939][ T23] hackrf 2-1:0.0: usb_control_msg() failed -32 request 0f [ 118.342576][ T23] hackrf 2-1:0.0: Could not detect board [ 118.379236][ T23] hackrf: probe of 2-1:0.0 failed with error -32 [ 118.402614][ T23] usb 2-1: USB disconnect, device number 3 [ 119.069002][ T6081] fuse: Bad value for 'fd' [ 120.542890][ T6090] loop7: detected capacity change from 0 to 1 [ 121.340863][ T6090] loop7: detected capacity change from 1 to 0 [ 123.608937][ T6102] orangefs_mount: mount request failed with -4 [ 124.327984][ T6107] fuse: Bad value for 'fd' [ 126.806206][ T6123] tipc: Started in network mode [ 126.829697][ T6123] tipc: Node identity a260d71400bc, cluster identity 4711 [ 126.837138][ T6123] tipc: Enabled bearer , priority 0 [ 126.865357][ T6126] syzkaller0: entered promiscuous mode [ 126.908887][ T6126] syzkaller0: entered allmulticast mode [ 126.990014][ T6123] tipc: Resetting bearer [ 127.018224][ T2130] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.041440][ T6122] tipc: Resetting bearer [ 127.092848][ T6122] tipc: Disabling bearer [ 128.147637][ T2130] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 128.156960][ T2130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.188092][ T2130] usb 1-1: config 0 descriptor?? [ 128.244270][ T5774] tipc: Node number set to 2732381972 [ 128.803138][ T2130] hackrf 1-1:0.0: usb_control_msg() failed -32 request 0f [ 128.826159][ T2130] hackrf 1-1:0.0: Could not detect board [ 128.872892][ T2130] hackrf: probe of 1-1:0.0 failed with error -32 [ 128.943012][ T2130] usb 1-1: USB disconnect, device number 3 [ 129.668289][ T5774] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 130.425259][ T5774] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 130.464381][ T5774] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.508695][ T5774] usb 2-1: config 0 has no interfaces? [ 130.525259][ T5774] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 130.550350][ T5774] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.649555][ T5774] usb 2-1: config 0 descriptor?? [ 132.142107][ T6156] loop7: detected capacity change from 0 to 1 [ 132.208529][ T6156] loop7: detected capacity change from 1 to 0 [ 134.108884][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.115780][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.407955][ T787] usb 2-1: USB disconnect, device number 4 [ 135.659784][ T6175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.92'. [ 136.877586][ T6194] loop7: detected capacity change from 0 to 1 [ 137.588607][ T6194] loop7: detected capacity change from 1 to 0 [ 137.658301][ T787] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 137.880543][ T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.895284][ T787] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.923638][ T787] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 140.178228][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.211072][ T787] usb 3-1: config 0 descriptor?? [ 140.264405][ T787] usb 3-1: can't set config #0, error -71 [ 140.279592][ T787] usb 3-1: USB disconnect, device number 3 [ 141.928561][ T5774] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 142.203398][ T5774] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 142.216393][ T5774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.237739][ T5774] usb 1-1: config 0 has no interfaces? [ 142.249152][ T5774] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 142.260665][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.279565][ T5774] usb 1-1: config 0 descriptor?? [ 142.567698][ T6228] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.986097][ T5774] usb 1-1: can't set config #0, error -71 [ 147.022947][ T5774] usb 1-1: USB disconnect, device number 4 [ 149.798433][ T2130] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 150.000806][ T2130] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 150.020742][ T2130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.054910][ T2130] usb 3-1: config 0 descriptor?? [ 150.511034][ T2130] hackrf 3-1:0.0: usb_control_msg() failed -32 request 0f [ 150.554006][ T2130] hackrf 3-1:0.0: Could not detect board [ 150.560925][ T2130] hackrf: probe of 3-1:0.0 failed with error -32 [ 150.592250][ T2130] usb 3-1: USB disconnect, device number 4 [ 153.789544][ T23] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 154.076744][ T23] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 154.203088][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.331995][ T23] usb 2-1: config 0 has no interfaces? [ 154.381258][ T23] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 155.448396][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.329396][ T23] usb 2-1: config 0 descriptor?? [ 157.551275][ T23] usb 2-1: can't set config #0, error -71 [ 157.580438][ T23] usb 2-1: USB disconnect, device number 5 [ 159.118978][ T6311] nfs: Unknown parameter 'ÿÿÿÿ' [ 164.313379][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 164.540001][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.488851][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.502363][ T23] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 165.512227][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.532268][ T23] usb 4-1: config 0 descriptor?? [ 167.826735][ T23] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71 [ 167.936602][ T23] usb 4-1: USB disconnect, device number 2 [ 170.854520][ T6395] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 172.007720][ T6394] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 172.032052][ T6394] team0: Port device dummy0 added [ 176.883843][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.161'. [ 177.917478][ T6439] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 178.074437][ T6452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'. [ 178.082680][ T787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 179.283155][ T787] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 179.326015][ T6460] nfs: Unknown parameter 'ÿÿÿÿ' [ 179.351700][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.802897][ T787] usb 1-1: config 0 descriptor?? [ 179.815361][ T787] cp210x 1-1:0.0: cp210x converter detected [ 180.399768][ T787] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 180.407598][ T787] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 180.529351][ T6474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.170'. [ 180.869254][ T787] usb 1-1: cp210x converter now attached to ttyUSB0 [ 180.950797][ T787] usb 1-1: USB disconnect, device number 5 [ 180.983270][ T6482] Zero length message leads to an empty skb [ 181.025637][ T787] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 181.039092][ T6475] orangefs_mount: mount request failed with -4 [ 181.068742][ T787] cp210x 1-1:0.0: device disconnected [ 182.352767][ T6499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.178'. [ 182.498245][ T5774] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 183.450386][ T5774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.470857][ T5774] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 183.518232][ T5774] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 183.558198][ T5774] usb 1-1: config 0 interface 0 has no altsetting 0 [ 183.709105][ T5774] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 183.768216][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.809571][ T5774] usb 1-1: config 0 descriptor?? [ 183.834410][ T5774] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 185.362320][ T5851] usb 1-1: USB disconnect, device number 6 [ 185.496969][ T6505] nfs: Unknown parameter 'ÿÿÿÿ' [ 189.830893][ T2130] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 189.989700][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.189'. [ 190.075474][ T2130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.088998][ T2130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.189021][ T2130] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 190.238079][ T2130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.257913][ T2130] usb 4-1: config 0 descriptor?? [ 190.598213][ T787] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 190.851656][ T787] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 190.956307][ T787] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 191.017297][ T787] usb 3-1: config 0 interface 0 has no altsetting 0 [ 191.024512][ T787] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 191.034048][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.049343][ T787] usb 3-1: config 0 descriptor?? [ 191.060095][ T787] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 191.127333][ T2130] hid-led 0003:27B8:01ED.0002: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 191.373673][ T2130] hid-led 0003:27B8:01ED.0002: ThingM blink(1) initialized [ 191.966826][ T6547] nfs: Unknown parameter 'ÿÿÿÿ' [ 192.688046][ T2130] usb 4-1: USB disconnect, device number 3 [ 193.773862][ T5774] usb 3-1: USB disconnect, device number 5 [ 194.755599][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.765264][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.981538][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.201'. [ 197.418302][ T8] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 197.661553][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 197.693008][ T8] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 197.728238][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.734952][ T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 197.798303][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.854386][ T8] usb 1-1: config 0 descriptor?? [ 198.759908][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 200.781779][ T8] usb 1-1: USB disconnect, device number 7 [ 201.232102][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.212'. [ 201.948330][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 201.954655][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 201.961125][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 201.967485][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 205.928365][ T5774] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 206.211013][ T5774] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 206.245900][ T5774] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 206.295705][ T5774] usb 3-1: config 0 interface 0 has no altsetting 0 [ 206.309788][ T5774] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 206.339880][ T5774] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.359753][ T5774] usb 3-1: config 0 descriptor?? [ 206.378660][ T5774] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 208.271764][ T6657] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 208.873374][ T787] usb 3-1: USB disconnect, device number 6 [ 209.959193][ T6667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.227'. [ 213.765806][ T6689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'. [ 214.303969][ T6684] block device autoloading is deprecated and will be removed. [ 214.452536][ T6687] orangefs_mount: mount request failed with -4 [ 217.928226][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.240'. [ 220.496350][ T28] audit: type=1800 audit(1772701686.669:2): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.234" name="bus" dev="ramfs" ino=10215 res=0 errno=0 [ 221.322698][ T6735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.245'. [ 222.358061][ T6734] orangefs_mount: mount request failed with -4 [ 224.177182][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.250'. [ 227.118488][ T6764] fuse: Bad value for 'fd' [ 227.685431][ T6775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.255'. [ 228.224653][ T6772] orangefs_mount: mount request failed with -4 [ 228.266583][ T6773] nfs: Unknown parameter 'ÿÿÿÿ' [ 230.408474][ T5851] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 231.502675][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.551678][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.628566][ T5851] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 231.650014][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.681108][ T5851] usb 2-1: config 0 descriptor?? [ 233.937933][ T5851] usbhid 2-1:0.0: can't add hid device: -71 [ 233.975371][ T5851] usbhid: probe of 2-1:0.0 failed with error -71 [ 234.002699][ T5851] usb 2-1: USB disconnect, device number 6 [ 237.527470][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.263'. [ 238.294867][ T6818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.267'. [ 240.898603][ T6819] orangefs_mount: mount request failed with -4 [ 244.674359][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.2.276'. [ 245.776399][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.278'. [ 248.908497][ T6867] fuse: Bad value for 'fd' [ 251.564420][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 252.483305][ T6887] orangefs_mount: mount request failed with -4 [ 253.937964][ T6905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 256.203243][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.210074][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.053882][ T6924] nfs: Unknown parameter 'ÿÿÿÿ' [ 259.368890][ T6939] ERROR: device name not specified. [ 259.443741][ T6939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.297'. [ 260.159674][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.300'. [ 262.111383][ T6957] nfs: Unknown parameter 'ÿÿÿÿ' [ 264.559902][ T6966] binder: 6964:6966 ioctl c0306201 2000000002c0 returned -14 [ 266.297460][ T6976] netlink: 24 bytes leftover after parsing attributes in process `syz.2.311'. [ 266.857666][ T6977] orangefs_mount: mount request failed with -4 [ 268.027205][ T6987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.312'. [ 268.931178][ T6993] nfs: Unknown parameter 'ÿÿÿÿ' [ 269.389992][ T6987] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 273.979049][ T7017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.321'. [ 274.860643][ T7016] orangefs_mount: mount request failed with -4 [ 276.287411][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.323'. [ 278.964585][ T5778] Bluetooth: hci0: unexpected event for opcode 0x0c20 [ 279.999457][ T7040] 9pnet_fd: Insufficient options for proto=fd [ 280.815336][ T7046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.328'. [ 281.288741][ T7044] orangefs_mount: mount request failed with -4 [ 281.569560][ T7050] binder: 7049:7050 ioctl c0306201 2000000002c0 returned -14 [ 282.062689][ T5778] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 285.616090][ T7079] orangefs_mount: mount request failed with -4 [ 285.778273][ T7080] netlink: 24 bytes leftover after parsing attributes in process `syz.1.332'. [ 287.456948][ T5778] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 288.395533][ T7093] 9pnet_fd: Insufficient options for proto=fd [ 288.532051][ T7098] netlink: 'syz.1.336': attribute type 10 has an invalid length. [ 288.622430][ T7097] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 290.007237][ T7098] team0: Port device dummy0 added [ 290.409560][ T7104] binder: 7103:7104 ioctl c0306201 2000000002c0 returned -14 [ 291.311998][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.338'. [ 291.995614][ T7113] orangefs_mount: mount request failed with -4 [ 292.374437][ T7123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.342'. [ 292.866958][ T7121] orangefs_mount: mount request failed with -4 [ 294.583973][ T7135] 9pnet_fd: Insufficient options for proto=fd [ 294.740089][ T7139] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 294.799582][ T7140] netlink: 'syz.2.349': attribute type 10 has an invalid length. [ 295.243782][ T7140] team0: Port device dummy0 added [ 296.715459][ T7154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.353'. [ 297.229144][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.356'. [ 299.023824][ T7162] orangefs_mount: mount request failed with -4 [ 299.190113][ T7153] orangefs_mount: mount request failed with -4 [ 299.245917][ T7168] binder: BINDER_SET_CONTEXT_MGR already set [ 299.268982][ T7168] binder: 7167:7168 ioctl 4018620d 200000004a80 returned -16 [ 299.306292][ T7173] 9pnet_fd: Insufficient options for proto=fd [ 302.759907][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.366'. [ 303.335553][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 303.356606][ T7206] orangefs_mount: mount request failed with -4 [ 303.518313][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 303.540510][ T8] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 303.551972][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.568563][ T8] usb 4-1: Product: syz [ 303.591590][ T8] usb 4-1: Manufacturer: syz [ 303.612250][ T8] usb 4-1: SerialNumber: syz [ 303.612860][ T7214] binder: BINDER_SET_CONTEXT_MGR already set [ 303.627861][ T7214] binder: 7213:7214 ioctl 4018620d 200000004a80 returned -16 [ 303.967353][ T8] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 303.997554][ T8] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 304.022957][ T8] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 304.044358][ T8] usb 4-1: media controller created [ 304.592283][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.652190][ T8] zl10353_read_register: readreg error (reg=127, ret==-71) [ 304.770496][ T8] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 304.788722][ T8] usb 4-1: USB disconnect, device number 4 [ 309.523612][ T7264] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 309.577873][ T7265] netlink: 'syz.3.377': attribute type 10 has an invalid length. [ 310.598430][ T5826] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 310.778157][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 310.821631][ T5826] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 310.860468][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.881681][ T5826] usb 2-1: Product: syz [ 310.900269][ T5826] usb 2-1: Manufacturer: syz [ 310.928383][ T5826] usb 2-1: SerialNumber: syz [ 313.212089][ T5826] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 313.273358][ T5826] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 313.309031][ T5826] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 313.338329][ T5826] usb 2-1: media controller created [ 314.504398][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 314.605569][ T5826] zl10353_read_register: readreg error (reg=127, ret==-71) [ 314.795897][ T5826] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 314.857712][ T5826] usb 2-1: USB disconnect, device number 7 [ 314.981265][ T7289] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 315.040224][ T7289] netlink: 'syz.1.392': attribute type 10 has an invalid length. [ 316.256279][ T7295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.395'. [ 317.509090][ T7294] orangefs_mount: mount request failed with -4 [ 317.694276][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.848298][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.108278][ T5774] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 320.330705][ T5774] usb 3-1: Using ep0 maxpacket: 16 [ 320.372108][ T5774] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 320.391460][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.418453][ T5774] usb 3-1: Product: syz [ 320.423504][ T5774] usb 3-1: Manufacturer: syz [ 320.468270][ T5774] usb 3-1: SerialNumber: syz [ 320.700990][ T5774] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 322.253923][ T5774] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 322.285008][ T5774] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 322.311229][ T5774] usb 3-1: media controller created [ 322.362982][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.429376][ T5774] zl10353_read_register: readreg error (reg=127, ret==-71) [ 322.644440][ T5774] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 322.708403][ T2130] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 322.802592][ T5774] usb 3-1: USB disconnect, device number 7 [ 322.928208][ T2130] usb 4-1: Using ep0 maxpacket: 8 [ 323.040077][ T2130] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.130245][ T2130] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 323.261876][ T2130] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.308545][ T2130] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.321850][ T2130] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 323.331179][ T2130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.258255][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.278179][ T2130] usb 4-1: usb_control_msg returned -32 [ 324.283860][ T2130] usbtmc 4-1:16.0: can't read capabilities [ 324.311723][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.483358][ T5774] usb 4-1: USB disconnect, device number 5 [ 329.288187][ T5774] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 329.498348][ T5774] usb 4-1: Using ep0 maxpacket: 16 [ 329.526165][ T5774] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 329.551204][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.588261][ T5774] usb 4-1: Product: syz [ 329.597001][ T5774] usb 4-1: Manufacturer: syz [ 329.617247][ T5774] usb 4-1: SerialNumber: syz [ 329.922065][ T5774] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 329.941264][ T5774] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 329.952955][ T5774] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 329.964664][ T5774] usb 4-1: media controller created [ 330.019538][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.763118][ T5774] zl10353_read_register: readreg error (reg=127, ret==-71) [ 331.287771][ T5774] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 331.304537][ T5774] usb 4-1: USB disconnect, device number 6 [ 331.481018][ T7371] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 331.541266][ T7372] netlink: 'syz.0.413': attribute type 10 has an invalid length. [ 331.949594][ T7372] team0: Port device dummy0 added [ 335.863923][ T7387] binder: BINDER_SET_CONTEXT_MGR already set [ 335.888226][ T7387] binder: 7386:7387 ioctl 4018620d 200000004a80 returned -16 [ 336.350002][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 336.428409][ T2130] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 336.550541][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.564476][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.574345][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.587514][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.596791][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.607369][ T8] usb 1-1: config 0 descriptor?? [ 336.632672][ T2130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.643956][ T2130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.654565][ T2130] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 336.663747][ T2130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.674706][ T2130] usb 3-1: config 0 descriptor?? [ 336.877894][ T7403] geneve1: entered promiscuous mode [ 336.885192][ T7403] macsec1: entered promiscuous mode [ 336.891487][ T7403] macsec1: entered allmulticast mode [ 336.897095][ T7403] geneve1: entered allmulticast mode [ 337.027468][ T8] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 337.036877][ T5774] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 337.143169][ T8] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 338.998155][ T5774] usb 2-1: Using ep0 maxpacket: 16 [ 339.027176][ T7395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.036781][ T7395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.038577][ T5774] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 339.086413][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.102166][ T5774] usb 2-1: Product: syz [ 339.106516][ T5774] usb 2-1: Manufacturer: syz [ 339.133304][ T5774] usb 2-1: SerialNumber: syz [ 339.205346][ T2130] hid-led: probe of 0003:27B8:01ED.0004 failed with error -71 [ 339.242130][ T2130] usb 3-1: USB disconnect, device number 8 [ 341.678039][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 341.750939][ T5774] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 341.811775][ T5774] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 341.849184][ T5774] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 341.857740][ T5774] usb 2-1: media controller created [ 341.865246][ T7416] binder: BINDER_SET_CONTEXT_MGR already set [ 341.881081][ T7416] binder: 7415:7416 ioctl 4018620d 200000004a80 returned -16 [ 341.945447][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.009549][ T5774] zl10353_read_register: readreg error (reg=127, ret==-71) [ 342.101308][ T5774] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 342.140569][ T5774] usb 2-1: USB disconnect, device number 8 [ 342.586627][ T9] usb 1-1: USB disconnect, device number 8 [ 343.317028][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.433'. [ 344.935721][ T7437] Bluetooth: MGMT ver 1.22 [ 346.582057][ T5774] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 346.598365][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 346.992653][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.005218][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 347.403977][ T5774] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.531788][ T9] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 347.550149][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.570506][ T5774] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 347.581623][ T9] usb 3-1: Product: syz [ 347.585929][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.730362][ T9] usb 3-1: Manufacturer: syz [ 347.744045][ T9] usb 3-1: SerialNumber: syz [ 348.077627][ T5774] usb 4-1: config 0 descriptor?? [ 348.196989][ T5774] usb 4-1: can't set config #0, error -71 [ 348.225908][ T5774] usb 4-1: USB disconnect, device number 7 [ 348.316461][ T9] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 348.336948][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 348.375676][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 348.424032][ T9] usb 3-1: media controller created [ 348.452862][ T7468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.443'. [ 350.635125][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.741415][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 350.835650][ T9] dvb_usb_gl861: probe of 3-1:157.0 failed with error -5 [ 350.873362][ T9] usb 3-1: USB disconnect, device number 9 [ 353.125668][ T7481] nfs: Unknown parameter 'ÿÿÿÿ' [ 358.268627][ T5851] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 358.748211][ T2130] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 358.968524][ T2130] usb 2-1: Using ep0 maxpacket: 16 [ 358.979859][ T2130] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 359.004477][ T2130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.038957][ T2130] usb 2-1: Product: syz [ 359.043206][ T2130] usb 2-1: Manufacturer: syz [ 359.047832][ T2130] usb 2-1: SerialNumber: syz [ 359.460591][ T2130] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 359.493602][ T2130] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 360.208820][ T2130] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 360.217530][ T2130] usb 2-1: media controller created [ 360.250436][ T2130] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.285984][ T2130] zl10353_read_register: readreg error (reg=127, ret==-71) [ 360.390062][ T2130] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 360.423941][ T2130] usb 2-1: USB disconnect, device number 9 [ 360.565014][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.455'. [ 362.186295][ T7530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.456'. [ 362.207437][ T7530] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.215551][ T7530] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.253621][ T7532] netlink: 44 bytes leftover after parsing attributes in process `syz.0.456'. [ 362.292731][ T7533] binder: BINDER_SET_CONTEXT_MGR already set [ 362.313758][ T7533] binder: 7531:7533 ioctl 4018620d 200000004a80 returned -16 [ 364.158272][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 365.139811][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.172029][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.191681][ T8] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 365.321844][ T5851] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 365.603753][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.988377][ T8] usb 4-1: config 0 descriptor?? [ 366.150105][ T5851] usb 1-1: Using ep0 maxpacket: 16 [ 366.162692][ T5851] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 366.179416][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.187511][ T5851] usb 1-1: Product: syz [ 366.192204][ T5851] usb 1-1: Manufacturer: syz [ 366.196856][ T5851] usb 1-1: SerialNumber: syz [ 366.357948][ T7568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.472'. [ 366.496322][ T5851] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 367.130366][ T5851] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 367.132996][ T8] hid-led 0003:27B8:01ED.0005: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 367.141079][ T5851] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 367.162397][ T5851] usb 1-1: media controller created [ 367.197110][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 367.535237][ T5851] zl10353_read_register: readreg error (reg=127, ret==-71) [ 367.861116][ T5851] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 367.863723][ T8] hid-led 0003:27B8:01ED.0005: ThingM blink(1) initialized [ 367.897625][ T7568] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 367.955286][ T5851] usb 1-1: USB disconnect, device number 9 [ 369.143013][ T7588] binder: BINDER_SET_CONTEXT_MGR already set [ 369.170075][ T7588] binder: 7584:7588 ioctl 4018620d 200000004a80 returned -16 [ 369.263119][ T5851] usb 4-1: USB disconnect, device number 8 [ 372.868253][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 373.149376][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 373.184770][ T27] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 373.228101][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.236172][ T27] usb 1-1: Product: syz [ 373.278722][ T27] usb 1-1: Manufacturer: syz [ 373.283535][ T27] usb 1-1: SerialNumber: syz [ 373.551892][ T5082] Bluetooth: hci3: unexpected event for opcode 0x0c20 [ 373.715779][ T27] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 373.777838][ T27] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 373.822860][ T27] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 373.841725][ T27] usb 1-1: media controller created [ 373.907413][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.943582][ T27] zl10353_read_register: readreg error (reg=127, ret==-71) [ 374.460415][ T27] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 374.472958][ T27] usb 1-1: USB disconnect, device number 10 [ 374.529873][ T7627] nfs: Unknown parameter 'ÿÿÿÿ' [ 376.521883][ T5774] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 377.696538][ T5774] usb 1-1: Using ep0 maxpacket: 8 [ 377.889560][ T5774] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 378.368631][ T5774] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 378.524767][ T5774] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 378.672793][ T5774] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.809048][ T5774] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 378.836969][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.559065][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.566041][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.008192][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 382.275629][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 382.311993][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 382.351329][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.384101][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 382.418005][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 382.438150][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 382.483442][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.539510][ T9] usb 4-1: config 0 descriptor?? [ 382.720235][ T5774] usb 1-1: can't set config #16, error -71 [ 382.760225][ T5774] usb 1-1: USB disconnect, device number 11 [ 383.090409][ T9] ryos 0003:1E7D:3138.0006: item fetching failed at offset 4/5 [ 383.299085][ T9] ryos 0003:1E7D:3138.0006: parse failed [ 383.305094][ T9] ryos: probe of 0003:1E7D:3138.0006 failed with error -22 [ 383.384169][ T9] usb 4-1: USB disconnect, device number 9 [ 383.958757][ T7665] orangefs_mount: mount request failed with -4 [ 384.048364][ T7673] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 384.195407][ T7673] netlink: 'syz.2.493': attribute type 10 has an invalid length. [ 384.328854][ T7670] orangefs_mount: mount request failed with -4 [ 389.939670][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.1.508'. [ 390.537567][ T7697] orangefs_mount: mount request failed with -4 [ 391.088273][ T27] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 391.310801][ T27] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 391.327313][ T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 391.358170][ T27] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.375272][ T27] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 391.396775][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 391.403882][ T27] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 391.418717][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.471048][ T27] usb 2-1: config 0 descriptor?? [ 393.489091][ T7707] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 393.498892][ T7707] netlink: 'syz.2.510': attribute type 10 has an invalid length. [ 393.690272][ T27] ryos 0003:1E7D:3138.0007: unknown main item tag 0x3 [ 393.718443][ T27] ryos 0003:1E7D:3138.0007: item fetching failed at offset 4/5 [ 395.149473][ T27] ryos 0003:1E7D:3138.0007: parse failed [ 395.155336][ T27] ryos: probe of 0003:1E7D:3138.0007 failed with error -22 [ 395.198892][ T27] usb 2-1: USB disconnect, device number 10 [ 395.918839][ T5082] Bluetooth: hci3: unexpected event 0x05 length: 11 > 4 [ 398.355371][ T5082] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 399.554312][ T7742] orangefs_mount: mount request failed with -4 [ 399.761170][ T7749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.517'. [ 401.748616][ T7748] orangefs_mount: mount request failed with -4 [ 402.708163][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 404.240394][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.268824][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.281977][ T8] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 404.294497][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.317110][ T8] usb 1-1: config 0 descriptor?? [ 406.529288][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 406.553980][ T8] usbhid: probe of 1-1:0.0 failed with error -71 [ 406.620870][ T8] usb 1-1: USB disconnect, device number 12 [ 409.436108][ T7789] orangefs_mount: mount request failed with -4 [ 417.983703][ T7840] netlink: 44 bytes leftover after parsing attributes in process `syz.1.545'. [ 418.040213][ T7838] nfs: Unknown parameter 'ÿÿÿÿ' [ 418.091138][ T7840] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.099796][ T7840] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.318606][ T5826] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 418.421404][ T7847] netlink: 28 bytes leftover after parsing attributes in process `syz.1.546'. [ 419.290525][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.425615][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.468369][ T5826] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 419.477715][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.563023][ T5826] usb 3-1: config 0 descriptor?? [ 422.557009][ T5826] usbhid 3-1:0.0: can't add hid device: -71 [ 422.808772][ T5826] usbhid: probe of 3-1:0.0 failed with error -71 [ 422.839946][ T5826] usb 3-1: USB disconnect, device number 11 [ 424.906553][ T7866] overlayfs: missing 'lowerdir' [ 428.060921][ T7873] kvm: MONITOR instruction emulated as NOP! [ 428.244871][ T7882] netlink: 44 bytes leftover after parsing attributes in process `syz.0.554'. [ 430.611211][ T7893] nfs: Unknown parameter 'ÿÿÿÿ' [ 438.298108][ T5851] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 438.500525][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.561862][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.615294][ T5851] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 438.641571][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.665798][ T5851] usb 1-1: config 0 descriptor?? [ 439.495860][ T5851] hid-led 0003:27B8:01ED.0008: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 439.536093][ T5851] hid-led 0003:27B8:01ED.0008: ThingM blink(1) initialized [ 440.528745][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.535146][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.929048][ T23] usb 1-1: USB disconnect, device number 13 [ 442.135171][ T5082] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 442.146073][ T28] audit: type=1326 audit(1772701908.329:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7942 comm="syz.0.567" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7799f9c799 code=0x0 [ 442.833520][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.570'. [ 442.851206][ T7949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.570'. [ 444.732277][ T7956] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 444.814943][ T7960] netlink: 14 bytes leftover after parsing attributes in process `syz.2.571'. [ 446.281023][ T7956] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 446.373833][ T7960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.449906][ T7960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.509115][ T8] infiniband syz1: ib_query_port failed (-19) [ 446.546329][ T7960] bond0 (unregistering): Released all slaves [ 446.601502][ T7956] siw: device registration error -19 [ 448.469041][ T7967] nfs: Unknown parameter 'ÿÿÿÿ' [ 448.772764][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.576'. [ 450.158738][ T7974] orangefs_mount: mount request failed with -4 [ 453.600738][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.582'. [ 453.626285][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.582'. [ 456.380826][ T8002] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 456.392068][ T8002] macsec1: left promiscuous mode [ 457.329099][ T7996] sctp: failed to load transform for md5: -2 [ 463.355360][ T8033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'. [ 464.010815][ T8031] orangefs_mount: mount request failed with -4 [ 464.256689][ T8048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.593'. [ 464.274302][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 468.497926][ T8076] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 468.597377][ T8077] netlink: 'syz.0.597': attribute type 10 has an invalid length. [ 470.442515][ T8093] netlink: 24 bytes leftover after parsing attributes in process `syz.3.601'. [ 470.550320][ T8090] orangefs_mount: mount request failed with -4 [ 475.409058][ T8128] netlink: 28 bytes leftover after parsing attributes in process `syz.0.613'. [ 475.481965][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.613'. [ 475.898701][ T8128] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 476.249953][ T8133] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 477.724494][ T8138] sctp: failed to load transform for md5: -2 [ 481.273358][ T8171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 481.288481][ T8171] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 481.307852][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 483.181835][ T8175] sctp: failed to load transform for md5: -2 [ 490.991272][ T8232] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 491.478845][ T8227] sctp: failed to load transform for md5: -2 [ 491.491036][ T8220] syz.0.636 (8220) used greatest stack depth: 17864 bytes left [ 491.746208][ T8231] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.955374][ T8231] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.968206][ T9] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 492.128813][ T8231] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.211100][ T9] usb 2-1: config 0 has no interfaces? [ 492.232874][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 492.252362][ T9] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 492.268149][ T9] usb 2-1: Product: syz [ 492.310680][ T9] usb 2-1: Manufacturer: syz [ 492.315361][ T9] usb 2-1: SerialNumber: syz [ 492.337431][ T9] usb 2-1: config 0 descriptor?? [ 492.536743][ T8231] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.888751][ T8231] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.949109][ T8231] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.888545][ T8231] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.026924][ T8231] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.159486][ T9] usb 2-1: USB disconnect, device number 11 [ 495.396707][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.645'. [ 501.960578][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.966955][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.309524][ T8320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.656'. [ 506.323071][ T8320] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 510.013686][ T8355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.668'. [ 512.277780][ T8353] orangefs_mount: mount request failed with -4 [ 514.589770][ T8374] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 514.637411][ T8376] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 514.694143][ T8379] netlink: 44 bytes leftover after parsing attributes in process `syz.0.675'. [ 514.715175][ T8379] netlink: 44 bytes leftover after parsing attributes in process `syz.0.675'. [ 515.760515][ T8392] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 516.248487][ T8388] sctp: failed to load transform for md5: -2 [ 519.110233][ T8413] Bluetooth: MGMT ver 1.22 [ 520.800932][ T8422] 9pnet_fd: Insufficient options for proto=fd [ 521.631095][ T8432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.687'. [ 526.759571][ T8454] No such timeout policy "syz1" [ 526.991298][ T8458] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 527.065733][ T8458] netlink: 'syz.0.693': attribute type 10 has an invalid length. [ 532.158231][ T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 532.331465][ T27] usb 1-1: device descriptor read/64, error -71 [ 532.795690][ T27] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 533.023073][ T8502] 9pnet_fd: Insufficient options for proto=fd [ 533.078408][ T27] usb 1-1: device descriptor read/64, error -71 [ 533.292014][ T27] usb usb1-port1: attempt power cycle [ 535.652611][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 535.737325][ T27] usb 1-1: device descriptor read/8, error -71 [ 535.829746][ T8520] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 535.930859][ T8521] netlink: 'syz.2.713': attribute type 10 has an invalid length. [ 536.068254][ T27] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 536.299042][ T27] usb 1-1: device descriptor read/8, error -71 [ 536.424550][ T27] usb usb1-port1: unable to enumerate USB device [ 536.858541][ T8528] 9pnet_fd: Insufficient options for proto=fd [ 539.679793][ T8543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.712'. [ 539.697729][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.706751][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.807594][ T8543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.712'. [ 540.146385][ T8552] serio: Serial port ptm0 [ 540.554147][ T8556] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 540.590396][ T8557] netlink: 'syz.3.724': attribute type 10 has an invalid length. [ 541.065647][ T8561] 9pnet_fd: Insufficient options for proto=fd [ 541.241798][ T8566] netlink: 'syz.3.727': attribute type 25 has an invalid length. [ 541.618204][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 541.849813][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.888771][ T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 543.358051][ T27] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 543.367305][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.400671][ T27] usb 3-1: config 0 descriptor?? [ 544.089394][ T8590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.731'. [ 544.106622][ T8590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.731'. [ 544.274268][ T8593] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 544.344593][ T8594] netlink: 'syz.1.734': attribute type 10 has an invalid length. [ 544.965494][ T8597] 9pnet_fd: Insufficient options for proto=fd [ 545.067794][ T8599] netlink: 'syz.1.736': attribute type 25 has an invalid length. [ 545.788486][ T8611] input: syz0 as /devices/virtual/input/input14 [ 546.072237][ T8611] netlink: 32 bytes leftover after parsing attributes in process `syz.0.739'. [ 546.538546][ T9] usb 3-1: USB disconnect, device number 12 [ 549.684408][ T8636] 9pnet_fd: Insufficient options for proto=fd [ 551.095542][ T8650] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 551.148325][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 551.388715][ T8650] netlink: 'syz.1.758': attribute type 10 has an invalid length. [ 552.367317][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.377853][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 552.448278][ T23] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 552.457860][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.560801][ T23] usb 1-1: config 0 descriptor?? [ 554.524929][ T8672] 9pnet_fd: Insufficient options for proto=fd [ 554.577050][ T9] usb 1-1: USB disconnect, device number 18 [ 556.562734][ T8688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.761'. [ 557.219304][ T8687] orangefs_mount: mount request failed with -4 [ 557.649413][ T8698] 9pnet_fd: Insufficient options for proto=fd [ 559.923969][ T8716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.771'. [ 559.943194][ T8716] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 561.941228][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.774'. [ 563.529225][ T8726] orangefs_mount: mount request failed with -4 [ 563.541709][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.679714][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.989083][ T5082] Bluetooth: hci2: unexpected event 0x05 length: 11 > 4 [ 567.337516][ T8786] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 567.392390][ T8787] netlink: 'syz.0.791': attribute type 10 has an invalid length. [ 571.389127][ T8812] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 571.639118][ T8812] netlink: 'syz.0.801': attribute type 10 has an invalid length. [ 581.580536][ T8859] input: syz0 as /devices/virtual/input/input16 [ 581.661621][ T8860] netlink: 32 bytes leftover after parsing attributes in process `syz.3.806'. [ 584.682706][ T8886] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 585.029954][ T8886] netlink: 'syz.2.822': attribute type 10 has an invalid length. [ 585.131274][ T8891] input: syz0 as /devices/virtual/input/input17 [ 585.264363][ T8892] netlink: 32 bytes leftover after parsing attributes in process `syz.3.824'. [ 586.816411][ T8901] binder: 8900:8901 ioctl c0306201 2000000002c0 returned -14 [ 591.369579][ T8938] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 591.487264][ T8940] binder: 8936:8940 ioctl c0306201 2000000002c0 returned -14 [ 591.568017][ T8938] netlink: 'syz.0.836': attribute type 10 has an invalid length. [ 596.157381][ T8975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.849'. [ 598.716645][ T8984] nfs: Unknown parameter 'ÿÿÿÿ' [ 599.252378][ T8991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.854'. [ 602.413535][ T9026] binder: 9024:9026 ioctl 4018620d 0 returned -22 [ 603.254772][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.866'. [ 604.343596][ T9040] nfs: Unknown parameter 'ÿÿÿÿ' [ 604.582844][ T9034] orangefs_mount: mount request failed with -4 [ 609.372939][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.1.877'. [ 609.584353][ T9077] binder: 9074:9077 ioctl 4018620d 0 returned -22 [ 609.993854][ T9076] orangefs_mount: mount request failed with -4 [ 611.094674][ T9088] nfs: Unknown parameter 'ÿÿÿÿ' [ 612.678490][ T9101] 9pnet: Could not find request transport: fd0x0000000000000003 [ 614.082848][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 615.036595][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.097763][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 615.118397][ T23] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 615.127577][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.200000][ T23] usb 2-1: config 0 descriptor?? [ 615.245035][ T23] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 615.602708][ T9122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.887'. [ 615.938924][ T9125] binder: 9124:9125 ioctl 4018620d 0 returned -22 [ 616.161778][ T9121] orangefs_mount: mount request failed with -4 [ 618.029626][ T5082] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 618.203973][ T9147] netlink: 'syz.0.886': attribute type 10 has an invalid length. [ 618.308126][ T9145] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 618.697180][ T9144] 9pnet: Could not find request transport: fd0x0000000000000003 [ 620.118503][ T9] usb 2-1: USB disconnect, device number 12 [ 620.919513][ T9159] binder: 9158:9159 ioctl c0306201 0 returned -14 [ 621.005482][ T9161] netlink: 24 bytes leftover after parsing attributes in process `syz.1.897'. [ 621.730381][ T9160] orangefs_mount: mount request failed with -4 [ 623.142765][ T5082] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 625.132956][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.167094][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.200605][ T9192] 9pnet: Could not find request transport: fd0x0000000000000003 [ 626.650062][ T9201] binder: 9200:9201 ioctl c0306201 0 returned -14 [ 626.779293][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.909'. [ 627.511379][ T9203] orangefs_mount: mount request failed with -4 [ 628.128184][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 628.804527][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.848423][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 628.879362][ T9] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 628.902694][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.926343][ T5082] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 628.933378][ T9] usb 3-1: config 0 descriptor?? [ 628.991547][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 630.778873][ T9238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.916'. [ 631.518320][ T9] usb 3-1: USB disconnect, device number 13 [ 632.836431][ T9256] 9pnet_fd: Insufficient options for proto=fd [ 633.265680][ T9260] binder: 9259:9260 ioctl c0306201 0 returned -14 [ 635.507066][ T9274] fuse: Bad value for 'fd' [ 639.043265][ T9285] 9pnet_fd: Insufficient options for proto=fd [ 641.348304][ T27] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 641.998579][ T9307] fuse: Bad value for 'fd' [ 642.965860][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 642.988113][ T27] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 643.019935][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.060222][ T27] usb 1-1: config 0 descriptor?? [ 643.157748][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 645.525592][ T27] usb 1-1: USB disconnect, device number 19 [ 645.614628][ T9317] 9pnet_fd: Insufficient options for proto=fd [ 648.687352][ T9334] fuse: Bad value for 'fd' [ 658.606202][ T9374] 9pnet_fd: Insufficient options for proto=fd [ 660.348742][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 660.714644][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 660.737449][ T27] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 660.755189][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.784228][ T27] usb 4-1: config 0 descriptor?? [ 660.844339][ T27] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 663.478078][ T27] usb 4-1: USB disconnect, device number 10 [ 663.888651][ T9410] 9pnet_fd: Insufficient options for proto=fd [ 666.497150][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.971'. [ 669.940441][ T9445] 9pnet_fd: Insufficient options for proto=fd [ 672.778180][ T27] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 673.215306][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 673.255405][ T27] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 673.287109][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.320062][ T27] usb 1-1: config 0 descriptor?? [ 673.332756][ T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 673.798192][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.981'. [ 675.574195][ T9] usb 1-1: USB disconnect, device number 20 [ 675.792366][ T9479] 9pnet_fd: Insufficient options for proto=fd [ 680.120121][ T9512] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 681.732007][ T9512] netlink: 'syz.0.992': attribute type 10 has an invalid length. [ 683.017484][ T9523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.994'. [ 686.272391][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.282144][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.421177][ T9545] nfs: Unknown parameter 'ÿÿÿÿ' [ 692.309052][ T9568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1006'. [ 698.604296][ T9596] binder: 9595:9596 ioctl c0306201 0 returned -14 [ 698.964531][ T9599] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 698.987424][ T9599] netlink: 'syz.1.1013': attribute type 10 has an invalid length. [ 700.222509][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1017'. [ 700.236026][ T9608] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 702.481082][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 702.705092][ T9626] nfs: Unknown parameter 'ÿÿÿÿ' [ 703.151902][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.262920][ T9] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 703.277950][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.314588][ T9] usb 2-1: config 0 descriptor?? [ 703.395704][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 706.081636][ T5774] usb 2-1: USB disconnect, device number 13 [ 706.556619][ T9644] binder: 9643:9644 ioctl c0306201 0 returned -14 [ 708.107703][ T9656] 9pnet_fd: Insufficient options for proto=fd [ 712.363862][ T9677] binder: 9676:9677 ioctl c0306201 0 returned -14 [ 713.773736][ T9691] 9pnet_fd: Insufficient options for proto=fd [ 716.469004][ T9702] ntfs3: nbd1: try to read out of volume at offset 0x0 [ 716.530414][ T9706] netlink: 'syz.1.1042': attribute type 10 has an invalid length. [ 719.534420][ T9725] 9pnet_fd: Insufficient options for proto=fd [ 722.526632][ T9740] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 722.536209][ T9740] netlink: 'syz.0.1055': attribute type 10 has an invalid length. [ 729.813721][ T9771] 9pnet_fd: Insufficient options for proto=fd [ 730.270512][ T9777] netlink: 'syz.2.1064': attribute type 10 has an invalid length. [ 733.968366][ T9794] loop7: detected capacity change from 0 to 1 [ 734.265157][ T9796] loop7: detected capacity change from 1 to 0 [ 737.878660][ T5082] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 738.075566][ T9816] 9pnet_fd: Insufficient options for proto=fd [ 742.331415][ T9838] nfs: Unknown parameter 'ÿÿÿÿ' [ 744.939799][ T9843] loop7: detected capacity change from 0 to 1 [ 745.080335][ T9843] loop7: detected capacity change from 1 to 0 [ 747.741426][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.749392][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.525393][ T9931] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 769.320889][ T9975] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 777.667269][T10015] ================================================================== [ 777.675407][T10015] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 777.683195][T10015] Read of size 8 at addr ffff888144325618 by task syz.3.1122/10015 [ 777.691253][T10015] [ 777.693603][T10015] CPU: 0 PID: 10015 Comm: syz.3.1122 Not tainted syzkaller #0 [ 777.701184][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 777.711361][T10015] Call Trace: [ 777.714677][T10015] [ 777.717632][T10015] dump_stack_lvl+0x18c/0x250 [ 777.722443][T10015] ? __lock_acquire+0x7d40/0x7d40 [ 777.727556][T10015] ? show_regs_print_info+0x20/0x20 [ 777.732981][T10015] ? load_image+0x400/0x400 [ 777.737546][T10015] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 777.743129][T10015] ? __virt_addr_valid+0x18c/0x540 [ 777.748397][T10015] ? __virt_addr_valid+0x469/0x540 [ 777.753632][T10015] print_report+0xa8/0x210 [ 777.758108][T10015] ? dvb_device_open+0xca/0x370 [ 777.762994][T10015] kasan_report+0x117/0x150 [ 777.767634][T10015] ? chrdev_open+0x3e3/0x6a0 [ 777.772259][T10015] ? dvb_device_open+0xca/0x370 [ 777.777213][T10015] dvb_device_open+0xca/0x370 [ 777.781941][T10015] ? do_raw_spin_unlock+0x121/0x230 [ 777.787196][T10015] chrdev_open+0x5cc/0x6a0 [ 777.791664][T10015] ? cd_forget+0x160/0x160 [ 777.796122][T10015] ? fsnotify_perm+0x3ed/0x5e0 [ 777.800976][T10015] ? cd_forget+0x160/0x160 [ 777.805423][T10015] do_dentry_open+0x8c6/0x1500 [ 777.810246][T10015] path_openat+0x27f1/0x3230 [ 777.814903][T10015] ? do_sys_openat2+0xda/0x1d0 [ 777.819701][T10015] ? verify_lock_unused+0x140/0x140 [ 777.824931][T10015] ? do_filp_open+0x430/0x430 [ 777.829641][T10015] ? __virt_addr_valid+0x18c/0x540 [ 777.834793][T10015] do_filp_open+0x1f5/0x430 [ 777.839349][T10015] ? vfs_tmpfile+0x490/0x490 [ 777.843990][T10015] ? _raw_spin_unlock+0x28/0x40 [ 777.848877][T10015] ? alloc_fd+0x58f/0x630 [ 777.853242][T10015] do_sys_openat2+0x134/0x1d0 [ 777.857964][T10015] ? do_sys_open+0xe0/0xe0 [ 777.862680][T10015] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 777.868715][T10015] ? lock_chain_count+0x20/0x20 [ 777.873651][T10015] __x64_sys_openat+0x139/0x160 [ 777.878542][T10015] do_syscall_64+0x55/0xa0 [ 777.883015][T10015] ? clear_bhb_loop+0x40/0x90 [ 777.887862][T10015] ? clear_bhb_loop+0x40/0x90 [ 777.892682][T10015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 777.898631][T10015] RIP: 0033:0x7f4c8d95cfce [ 777.903089][T10015] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 777.922856][T10015] RSP: 002b:00007f4c8e8b3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 777.931322][T10015] RAX: ffffffffffffffda RBX: 00007f4c8e8b46c0 RCX: 00007f4c8d95cfce [ 777.939335][T10015] RDX: 0000000000000e82 RSI: 00007f4c8e8b3c00 RDI: ffffffffffffff9c [ 777.947430][T10015] RBP: 00007f4c8e8b3c00 R08: 0000000000000000 R09: 0000000000000000 [ 777.955431][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 777.963600][T10015] R13: 00007f4c8dc16128 R14: 00007f4c8dc16090 R15: 00007ffe50ccc528 [ 777.971639][T10015] [ 777.974690][T10015] [ 777.977047][T10015] Allocated by task 1: [ 777.981133][T10015] kasan_set_track+0x4e/0x70 [ 777.985843][T10015] __kasan_kmalloc+0x8f/0xa0 [ 777.990631][T10015] dvb_register_device+0x2fd/0x2210 [ 777.995947][T10015] dvb_register_frontend+0x649/0x930 [ 778.001273][T10015] vidtv_bridge_probe+0x9ab/0xf80 [ 778.006461][T10015] platform_probe+0x13b/0x1c0 [ 778.011200][T10015] really_probe+0x25b/0xb20 [ 778.015742][T10015] __driver_probe_device+0x18c/0x330 [ 778.021116][T10015] driver_probe_device+0x4f/0x420 [ 778.026164][T10015] __driver_attach+0x44e/0x6e0 [ 778.031042][T10015] bus_for_each_dev+0x235/0x2b0 [ 778.035951][T10015] bus_add_driver+0x340/0x630 [ 778.040682][T10015] driver_register+0x23a/0x310 [ 778.045479][T10015] vidtv_bridge_init+0x3d/0x70 [ 778.050405][T10015] do_one_initcall+0x242/0x790 [ 778.055226][T10015] do_initcall_level+0x137/0x1f0 [ 778.060283][T10015] do_initcalls+0x69/0xd0 [ 778.064748][T10015] kernel_init_freeable+0x3ed/0x580 [ 778.070155][T10015] kernel_init+0x1d/0x1c0 [ 778.074574][T10015] ret_from_fork+0x48/0x80 [ 778.079029][T10015] ret_from_fork_asm+0x11/0x20 [ 778.083911][T10015] [ 778.086265][T10015] Freed by task 9975: [ 778.090270][T10015] kasan_set_track+0x4e/0x70 [ 778.094892][T10015] kasan_save_free_info+0x2e/0x50 [ 778.099949][T10015] ____kasan_slab_free+0x126/0x1e0 [ 778.105188][T10015] slab_free_freelist_hook+0x130/0x1a0 [ 778.110672][T10015] __kmem_cache_free+0xba/0x1e0 [ 778.115652][T10015] dvb_device_open+0x2ee/0x370 [ 778.120450][T10015] chrdev_open+0x5cc/0x6a0 [ 778.124893][T10015] do_dentry_open+0x8c6/0x1500 [ 778.129684][T10015] path_openat+0x27f1/0x3230 [ 778.134300][T10015] do_filp_open+0x1f5/0x430 [ 778.138850][T10015] do_sys_openat2+0x134/0x1d0 [ 778.143598][T10015] __x64_sys_openat+0x139/0x160 [ 778.148585][T10015] do_syscall_64+0x55/0xa0 [ 778.153141][T10015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 778.159081][T10015] [ 778.161523][T10015] The buggy address belongs to the object at ffff888144325600 [ 778.161523][T10015] which belongs to the cache kmalloc-256 of size 256 [ 778.175788][T10015] The buggy address is located 24 bytes inside of [ 778.175788][T10015] freed 256-byte region [ffff888144325600, ffff888144325700) [ 778.189523][T10015] [ 778.192021][T10015] The buggy address belongs to the physical page: [ 778.198549][T10015] page:ffffea000510c900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x144324 [ 778.208901][T10015] head:ffffea000510c900 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 778.217852][T10015] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 778.225942][T10015] page_type: 0xffffffff() [ 778.230295][T10015] raw: 057ff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 778.238924][T10015] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 778.247609][T10015] page dumped because: kasan: bad access detected [ 778.254043][T10015] page_owner tracks the page as allocated [ 778.259777][T10015] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14916211421, free_ts 0 [ 778.280026][T10015] post_alloc_hook+0x1c1/0x200 [ 778.284940][T10015] get_page_from_freelist+0x1951/0x19e0 [ 778.290616][T10015] __alloc_pages+0x1f0/0x460 [ 778.295247][T10015] alloc_page_interleave+0x24/0x1e0 [ 778.300491][T10015] alloc_slab_page+0x5d/0x160 [ 778.305195][T10015] new_slab+0x87/0x2d0 [ 778.309304][T10015] ___slab_alloc+0xc5d/0x12f0 [ 778.314016][T10015] __kmem_cache_alloc_node+0x19e/0x250 [ 778.319515][T10015] kmalloc_trace+0x2a/0xe0 [ 778.324227][T10015] bus_add_driver+0x162/0x630 [ 778.329030][T10015] driver_register+0x23a/0x310 [ 778.333905][T10015] usb_register_driver+0x206/0x3d0 [ 778.339090][T10015] uvc_init+0x27/0x50 [ 778.343099][T10015] do_one_initcall+0x242/0x790 [ 778.347900][T10015] do_initcall_level+0x137/0x1f0 [ 778.352875][T10015] do_initcalls+0x69/0xd0 [ 778.357425][T10015] page_owner free stack trace missing [ 778.362814][T10015] [ 778.365163][T10015] Memory state around the buggy address: [ 778.370813][T10015] ffff888144325500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 778.378910][T10015] ffff888144325580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 778.387082][T10015] >ffff888144325600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 778.395163][T10015] ^ [ 778.400044][T10015] ffff888144325680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 778.408125][T10015] ffff888144325700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 778.416273][T10015] ================================================================== [ 778.425323][T10015] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 778.432546][T10015] CPU: 0 PID: 10015 Comm: syz.3.1122 Not tainted syzkaller #0 [ 778.440041][T10015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.450123][T10015] Call Trace: [ 778.453475][T10015] [ 778.456459][T10015] dump_stack_lvl+0x18c/0x250 [ 778.461182][T10015] ? show_regs_print_info+0x20/0x20 [ 778.466446][T10015] ? load_image+0x400/0x400 [ 778.470984][T10015] panic+0x2dc/0x730 [ 778.474915][T10015] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 778.481461][T10015] ? bpf_jit_dump+0xd0/0xd0 [ 778.485993][T10015] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 778.492003][T10015] ? _raw_spin_unlock+0x40/0x40 [ 778.496884][T10015] ? dvb_device_open+0xca/0x370 [ 778.501789][T10015] check_panic_on_warn+0x84/0xa0 [ 778.506825][T10015] ? dvb_device_open+0xca/0x370 [ 778.512068][T10015] end_report+0x6f/0x130 [ 778.516348][T10015] kasan_report+0x128/0x150 [ 778.520883][T10015] ? chrdev_open+0x3e3/0x6a0 [ 778.525505][T10015] ? dvb_device_open+0xca/0x370 [ 778.530483][T10015] dvb_device_open+0xca/0x370 [ 778.535190][T10015] ? do_raw_spin_unlock+0x121/0x230 [ 778.540446][T10015] chrdev_open+0x5cc/0x6a0 [ 778.544916][T10015] ? cd_forget+0x160/0x160 [ 778.549382][T10015] ? fsnotify_perm+0x3ed/0x5e0 [ 778.554206][T10015] ? cd_forget+0x160/0x160 [ 778.558722][T10015] do_dentry_open+0x8c6/0x1500 [ 778.563544][T10015] path_openat+0x27f1/0x3230 [ 778.568205][T10015] ? do_sys_openat2+0xda/0x1d0 [ 778.573007][T10015] ? verify_lock_unused+0x140/0x140 [ 778.578240][T10015] ? do_filp_open+0x430/0x430 [ 778.582950][T10015] ? __virt_addr_valid+0x18c/0x540 [ 778.588103][T10015] do_filp_open+0x1f5/0x430 [ 778.592723][T10015] ? vfs_tmpfile+0x490/0x490 [ 778.597348][T10015] ? _raw_spin_unlock+0x28/0x40 [ 778.602227][T10015] ? alloc_fd+0x58f/0x630 [ 778.606595][T10015] do_sys_openat2+0x134/0x1d0 [ 778.611308][T10015] ? do_sys_open+0xe0/0xe0 [ 778.615762][T10015] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 778.621777][T10015] ? lock_chain_count+0x20/0x20 [ 778.626746][T10015] __x64_sys_openat+0x139/0x160 [ 778.631633][T10015] do_syscall_64+0x55/0xa0 [ 778.636097][T10015] ? clear_bhb_loop+0x40/0x90 [ 778.640888][T10015] ? clear_bhb_loop+0x40/0x90 [ 778.645623][T10015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 778.651545][T10015] RIP: 0033:0x7f4c8d95cfce [ 778.655994][T10015] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 778.675639][T10015] RSP: 002b:00007f4c8e8b3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 778.684097][T10015] RAX: ffffffffffffffda RBX: 00007f4c8e8b46c0 RCX: 00007f4c8d95cfce [ 778.692108][T10015] RDX: 0000000000000e82 RSI: 00007f4c8e8b3c00 RDI: ffffffffffffff9c [ 778.700105][T10015] RBP: 00007f4c8e8b3c00 R08: 0000000000000000 R09: 0000000000000000 [ 778.708186][T10015] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 778.716276][T10015] R13: 00007f4c8dc16128 R14: 00007f4c8dc16090 R15: 00007ffe50ccc528 [ 778.724286][T10015] [ 778.727719][T10015] Kernel Offset: disabled [ 778.732059][T10015] Rebooting in 86400 seconds..