last executing test programs: 2m5.162489705s ago: executing program 1 (id=759): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) 2m4.879493794s ago: executing program 1 (id=762): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r1, 0x77aec225886c8f5d, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20) 2m4.701383764s ago: executing program 1 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_b, @broadcast, @initial, {0x2, 0x8}}, 0x10, 0x1f, @default, @void, @void}}]}, 0x58}}, 0x0) 2m4.517524172s ago: executing program 1 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) 2m4.341453461s ago: executing program 1 (id=771): socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 2m4.014824442s ago: executing program 1 (id=777): r0 = msgget$private(0x0, 0xc) msgsnd(r0, &(0x7f0000000200)={0x3}, 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x1, 0x3800) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/102) 2m3.580342072s ago: executing program 32 (id=777): r0 = msgget$private(0x0, 0xc) msgsnd(r0, &(0x7f0000000200)={0x3}, 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x1, 0x3800) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/102) 1m7.058751086s ago: executing program 3 (id=1598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="202105000000f58544255c"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m5.300059827s ago: executing program 3 (id=1628): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) 1m5.14127069s ago: executing program 3 (id=1631): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) read(r0, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x4}, 0x2) 59.560417958s ago: executing program 3 (id=1704): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 59.48057002s ago: executing program 3 (id=1706): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000800)=[{&(0x7f00000018c0)="09e438d4574c550eef57ff07ea6ce50aec570e3ff2d5ab9887567d24010e05d942d414dc69d83910ba489bf3bdb4d39221444bd00428b932af76806ba4ac2ae0e99c887f929ac94b1aa5cdc69b00144348dfd1ef3a1ceb66f7504ef937b5007927cb6276c21b94506933bd2e41b9235503903bfda1c9b5a013fe7931912575e5097f0000", 0x84}, {&(0x7f0000001800)="930d2c8f19", 0x5}], 0x2}, 0x2000c015) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/130, 0x82}], 0x1, &(0x7f0000000340)=""/205, 0xcd}}], 0x1, 0x0, 0x0) 59.052066749s ago: executing program 3 (id=1711): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0) 58.645731264s ago: executing program 33 (id=1711): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc2, 0x0) 39.27559713s ago: executing program 6 (id=1942): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x28000600) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10) 39.206490069s ago: executing program 6 (id=1943): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x100, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={r2, 0x6, 0x2}, 0x8) 38.219914681s ago: executing program 6 (id=1956): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000300)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 37.995577692s ago: executing program 6 (id=1959): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 37.864477622s ago: executing program 6 (id=1961): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@val={0x88a8, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x13, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "adc48c5b0a023ee8609b7ef7e38a376a2d6f592c001554ea", "058e6e6f0beb1fd955408874de367ff67dae43c1412c0b2e179717b213ce7504"}}}}}}}, 0x76) 37.59839642s ago: executing program 6 (id=1965): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x208fa000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 37.16664764s ago: executing program 34 (id=1965): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x208fa000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 6.471969448s ago: executing program 0 (id=2305): syz_open_procfs(0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.626994178s ago: executing program 0 (id=2325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7fff, 0x4}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0180f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x3}}}}}}}, 0x0) 4.483714661s ago: executing program 0 (id=2327): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x4}}, {@default_permissions}, {@allow_other}]}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 4.438310054s ago: executing program 0 (id=2328): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') write$cgroup_subtree(r1, 0x0, 0x0) 4.283628085s ago: executing program 0 (id=2331): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 4.132013164s ago: executing program 0 (id=2334): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) 3.87982311s ago: executing program 2 (id=2338): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.196435511s ago: executing program 5 (id=2340): unshare(0x22020600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r1 = io_uring_setup(0x3c56, &(0x7f0000000300)={0x0, 0x0, 0x100, 0x4000, 0x1e4}) close_range(r1, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x2000000, 0x0}, 0x10002) 3.02200992s ago: executing program 2 (id=2341): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x1, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2def, 0x1a38, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x2000b) 2.808063645s ago: executing program 2 (id=2342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000900), &(0x7f0000000940)=0x8) 2.675507535s ago: executing program 2 (id=2344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x20, &(0x7f0000000680)=[@cr4={0x1, 0x40104}], 0x1) 2.421484864s ago: executing program 4 (id=2347): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 2.16403941s ago: executing program 5 (id=2350): socket$packet(0x11, 0x3, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) 2.163248521s ago: executing program 4 (id=2360): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000340)=""/97, 0x38}], 0x2}, 0x7f}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) 2.078175411s ago: executing program 2 (id=2351): syz_io_uring_setup(0x88f, &(0x7f0000000380)={0x0, 0x9439, 0x0, 0x1, 0xbfdffff8}, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.965756687s ago: executing program 4 (id=2352): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.915946328s ago: executing program 5 (id=2353): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x78ae, 0x400, 0x2, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket(0x200000000000011, 0xa, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.630139175s ago: executing program 5 (id=2355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000880000000200000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x1100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.535881556s ago: executing program 4 (id=2356): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.314555034s ago: executing program 5 (id=2358): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) read$eventfd(r1, &(0x7f0000000140), 0x8) 1.152356689s ago: executing program 7 (id=2359): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2600a}}, 0x20}}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) 1.150989277s ago: executing program 2 (id=2361): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 876.014253ms ago: executing program 7 (id=2362): mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x0) 813.263601ms ago: executing program 7 (id=2363): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40954}, 0x20040814) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 650.140122ms ago: executing program 5 (id=2364): r0 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000180)=0x5, 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x15, 0x0, 0x0) 605.501975ms ago: executing program 7 (id=2365): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4800, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 536.031657ms ago: executing program 4 (id=2366): ioctl$TUNGETVNETLE(0xffffffffffffffff, 0xc008744c, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 275.478616ms ago: executing program 7 (id=2367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x20, r1, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) 92.361236ms ago: executing program 4 (id=2368): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) 0s ago: executing program 7 (id=2369): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {r1, r2+60000000}}, 0x0) kernel console output (not intermixed with test programs): 81] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 175.660454][ T5881] usb 3-1: USB disconnect, device number 7 [ 175.816443][ T5910] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 175.985951][ T5910] usb 6-1: unable to get BOS descriptor or descriptor too short [ 175.994852][ T5910] usb 6-1: not running at top speed; connect to a high speed hub [ 176.005433][ T5910] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 176.015041][ T5910] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 176.018089][ T5834] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 176.033139][ T5910] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 176.049889][ T5910] usb 6-1: config 128 has no interface number 0 [ 176.066557][ T5910] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 3876, setting to 64 [ 176.099875][ T5910] usb 6-1: config 128 interface 127 has no altsetting 0 [ 176.110099][ T5910] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 176.124310][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.137335][ T5910] usb 6-1: Product: syz [ 176.141572][ T5910] usb 6-1: Manufacturer: syz [ 176.176148][ T5910] usb 6-1: SerialNumber: syz [ 176.188586][ T8214] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 176.197572][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 176.210878][ T5834] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 176.240149][ T5834] usb 1-1: config 0 has no interface number 0 [ 176.261571][ T5834] usb 1-1: config 0 interface 12 has no altsetting 0 [ 176.283636][ T5834] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 176.309491][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.327517][ T5834] usb 1-1: Product: syz [ 176.331919][ T5834] usb 1-1: Manufacturer: syz [ 176.339941][ T5834] usb 1-1: SerialNumber: syz [ 176.354756][ T5834] usb 1-1: config 0 descriptor?? [ 176.491519][ T5910] usb 6-1: USB disconnect, device number 2 [ 177.190005][ T5834] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 177.211076][ T5834] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 177.226245][ T5834] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 177.233978][ T5834] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 177.268341][ T5834] usb 1-1: USB disconnect, device number 8 [ 177.967001][ T5826] Bluetooth: hci3: command 0x0405 tx timeout [ 178.567385][ T5834] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.727374][ T5834] usb 4-1: Using ep0 maxpacket: 8 [ 178.735998][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.752319][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.782171][ T5834] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 178.807126][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.833122][ T5834] usb 4-1: config 0 descriptor?? [ 179.226182][ T5910] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 179.262586][ T5834] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 179.290214][ T5834] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 179.297534][ T5834] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x7 [ 179.306412][ T5834] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 179.317650][ T5834] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0 [ 179.324954][ T5834] hid-rmi 0003:06CB:81A7.0007: unbalanced collection at end of report description [ 179.343180][ T5834] hid-rmi 0003:06CB:81A7.0007: parse failed [ 179.350713][ T5834] hid-rmi 0003:06CB:81A7.0007: probe with driver hid-rmi failed with error -22 [ 179.386951][ T5910] usb 1-1: Using ep0 maxpacket: 16 [ 179.395876][ T5910] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 179.411103][ T5910] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.422741][ T5826] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 179.430332][ T5910] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.433537][ T5826] Bluetooth: hci3: Injecting HCI hardware error event [ 179.444377][ T5910] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.449483][ T5826] Bluetooth: hci3: hardware error 0x00 [ 179.456627][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 179.484563][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.511047][ T5910] usb 1-1: Product: syz [ 179.515423][ T5834] usb 4-1: USB disconnect, device number 7 [ 179.522321][ T5910] usb 1-1: Manufacturer: syz [ 179.538369][ T5910] usb 1-1: SerialNumber: syz [ 179.647787][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 179.657267][ T9] usb 6-1: config 2 has an invalid interface number: 117 but max is 0 [ 179.670135][ T9] usb 6-1: config 2 has no interface number 0 [ 179.696131][ T9] usb 6-1: config 2 interface 117 has no altsetting 0 [ 179.709864][ T9] usb 6-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 179.720429][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.729518][ T9] usb 6-1: Product: syz [ 179.733869][ T9] usb 6-1: Manufacturer: syz [ 179.742157][ T9] usb 6-1: SerialNumber: syz [ 179.767878][ T5910] usb 1-1: 0:2 : does not exist [ 179.775396][ T9] usb-storage 6-1:2.117: USB Mass Storage device detected [ 179.788537][ T5910] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 179.816847][ T9] usb-storage 6-1:2.117: Quirks match for vid 0781 pid 0100: 1 [ 179.827571][ T5910] usb 1-1: USB disconnect, device number 9 [ 179.975408][ T5881] usb 6-1: USB disconnect, device number 3 [ 180.202733][ T8371] capability: warning: `syz.3.1105' uses 32-bit capabilities (legacy support in use) [ 180.328546][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1108'. [ 180.346528][ T8377] bridge0: entered promiscuous mode [ 180.353920][ T8377] macsec2: entered allmulticast mode [ 180.359597][ T8377] bridge0: entered allmulticast mode [ 180.370027][ T8377] bridge0: port 3(macsec2) entered blocking state [ 180.377406][ T8377] bridge0: port 3(macsec2) entered disabled state [ 180.399771][ T8377] bridge0: left allmulticast mode [ 180.407215][ T8377] bridge0: left promiscuous mode [ 180.588655][ T5138] Bluetooth: hci4: unexpected cc 0x2007 length: 100 > 2 [ 180.598475][ T5138] Bluetooth: hci4: unexpected event for opcode 0x2007 [ 180.747718][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 181.436163][ T5881] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 181.568738][ T5826] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 181.591576][ T8425] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 181.598853][ T8425] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 181.649840][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 181.661988][ T5881] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 181.667302][ T8425] vhci_hcd vhci_hcd.0: Device attached [ 181.673366][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.710173][ T5881] usb 4-1: config 0 descriptor?? [ 181.716326][ T9] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 181.882049][ T9] usb 5-1: config 0 has no interfaces? [ 181.896219][ T5910] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 181.903789][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 181.925327][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.936308][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 181.945037][ T5881] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 181.959671][ T9] usb 5-1: config 0 descriptor?? [ 181.962075][ T5881] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.000254][ T5881] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 182.012529][ T5881] usb 4-1: media controller created [ 182.053830][ T5881] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.088203][ T10] usb 3-1: config 0 has no interfaces? [ 182.093910][ T10] usb 3-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 182.114665][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.133589][ T10] usb 3-1: config 0 descriptor?? [ 182.141924][ T5881] az6027: usb out operation failed. (-71) [ 182.164226][ T5881] az6027: usb out operation failed. (-71) [ 182.168315][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 182.173679][ T5881] stb0899_attach: Driver disabled by Kconfig [ 182.184476][ T10] usb 5-1: USB disconnect, device number 12 [ 182.195795][ T5881] az6027: no front-end attached [ 182.195795][ T5881] [ 182.204547][ T5881] az6027: usb out operation failed. (-71) [ 182.224239][ T5881] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 182.241780][ T5881] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 182.266316][ T5881] dvb-usb: schedule remote query interval to 400 msecs. [ 182.275661][ T5881] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 182.288227][ T5881] usb 4-1: USB disconnect, device number 8 [ 182.368207][ T5881] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 182.381922][ T8426] usb 37-1: recv xbuf, 0 [ 182.388715][ T9] usb 3-1: USB disconnect, device number 8 [ 182.416588][ T67] vhci_hcd: stop threads [ 182.421689][ T67] vhci_hcd: release socket [ 182.439330][ T67] vhci_hcd: disconnect device [ 182.477192][ T5910] vhci_hcd: vhci_device speed not set [ 183.110394][ T8465] netlink: 'syz.5.1146': attribute type 1 has an invalid length. [ 183.131042][ T8465] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1146'. [ 183.452359][ T8482] batadv_slave_0: entered promiscuous mode [ 183.476677][ T8482] batadv_slave_0: left promiscuous mode [ 183.963747][ T8511] loop6: detected capacity change from 0 to 524287999 [ 184.607339][ T5826] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 184.616931][ T5826] Bluetooth: hci4: Injecting HCI hardware error event [ 184.625385][ T5138] Bluetooth: hci4: hardware error 0x00 [ 184.785134][ T8533] binder: 8531:8533 ioctl c018620c 200000000180 returned -1 [ 185.053527][ T8518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.106659][ T8518] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 185.138448][ T8518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.144517][ T8518] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 186.227278][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 186.288299][ T8593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1196'. [ 186.330113][ T8593] netlink: 'syz.4.1196': attribute type 30 has an invalid length. [ 186.342797][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1196'. [ 186.408347][ T10] usb 3-1: config 241 has an invalid interface number: 0 but max is -1 [ 186.426251][ T10] usb 3-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 186.470813][ T10] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 186.506517][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.564677][ T10] usbhid 3-1:241.0: couldn't find an input interrupt endpoint [ 186.641523][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 186.686606][ T5138] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 186.773469][ T9] usb 3-1: USB disconnect, device number 9 [ 186.900178][ T8607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.908768][ T8607] IPv6: NLM_F_CREATE should be set when creating new route [ 186.916163][ T8607] IPv6: NLM_F_CREATE should be set when creating new route [ 186.923435][ T8607] IPv6: NLM_F_CREATE should be set when creating new route [ 187.190145][ T8518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.226137][ T8518] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 187.684277][ T30] audit: type=1326 audit(1748432755.420:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8643 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b5b8e969 code=0x7ffc0000 [ 187.733777][ T30] audit: type=1326 audit(1748432755.450:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8643 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b5b8e969 code=0x7ffc0000 [ 187.756375][ T30] audit: type=1326 audit(1748432755.450:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8643 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fe8b5b8e969 code=0x7ffc0000 [ 187.829486][ T30] audit: type=1326 audit(1748432755.450:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8643 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b5b8e969 code=0x7ffc0000 [ 187.917047][ T30] audit: type=1326 audit(1748432755.450:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8643 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b5b8e969 code=0x7ffc0000 [ 187.988004][ T30] audit: type=1326 audit(1748432755.450:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8643 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fe8b5b8e969 code=0x7ffc0000 [ 188.086116][ T30] audit: type=1326 audit(1748432755.450:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8643 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b5b8e969 code=0x7ffc0000 [ 188.747759][ T8685] mkiss: ax0: crc mode is auto. [ 189.195345][ T8665] syz.5.1222 (8665) used greatest stack depth: 18760 bytes left [ 190.891322][ T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 191.027228][ T8774] netlink: 'syz.3.1258': attribute type 3 has an invalid length. [ 191.048053][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 191.066460][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 191.102789][ T43] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.127712][ T43] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.160701][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 191.195066][ T43] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 191.223334][ T43] usb 3-1: Product: syz [ 191.243593][ T43] usb 3-1: Manufacturer: syz [ 191.277063][ T43] hub 3-1:4.0: USB hub found [ 191.498888][ T43] hub 3-1:4.0: 4 ports detected [ 191.512781][ T43] hub 3-1:4.0: insufficient power available to use all downstream ports [ 191.705194][ T43] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 191.735885][ T43] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 191.796228][ T43] usb 3-1: USB disconnect, device number 10 [ 191.842677][ T8803] tap0: tun_chr_ioctl cmd 1074812118 [ 192.606910][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.636188][ T5939] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 192.796594][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 192.805565][ T5939] usb 4-1: config 0 interface 0 has no altsetting 0 [ 192.822389][ T5939] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 192.837378][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.858947][ T5939] usb 4-1: Product: syz [ 192.863212][ T5939] usb 4-1: Manufacturer: syz [ 192.876627][ T5939] usb 4-1: SerialNumber: syz [ 192.892260][ T5939] usb 4-1: config 0 descriptor?? [ 193.191537][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.201323][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.210588][ T8852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.332263][ T5939] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 193.494299][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.648497][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.733354][ T5939] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 193.811318][ T5939] usb 4-1: USB disconnect, device number 9 [ 194.294021][ T8887] netlink: 'syz.2.1304': attribute type 21 has an invalid length. [ 194.323349][ T8887] netlink: 'syz.2.1304': attribute type 1 has an invalid length. [ 194.353232][ T8893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.374161][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380648][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.564121][ T8905] erofs (device nullb0): cannot find valid erofs superblock [ 194.610537][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 194.696421][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.706463][ T5939] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 194.876416][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 194.896661][ T5939] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 194.907865][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.923590][ T5939] usb 6-1: config 0 descriptor?? [ 194.968568][ T5834] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 195.154204][ T5939] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 195.161187][ T5834] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 195.170216][ T5834] usb 4-1: config 0 has no interface number 0 [ 195.177139][ T5834] usb 4-1: config 0 interface 98 has no altsetting 0 [ 195.189010][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.196658][ T5834] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 195.207851][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.217531][ T5834] usb 4-1: Product: syz [ 195.223981][ T5939] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 195.231851][ T5834] usb 4-1: Manufacturer: syz [ 195.234027][ T5939] usb 6-1: media controller created [ 195.236912][ T5834] usb 4-1: SerialNumber: syz [ 195.240278][ T5834] usb 4-1: config 0 descriptor?? [ 195.330874][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.406554][ T5939] az6027: usb out operation failed. (-71) [ 195.412816][ T5939] az6027: usb out operation failed. (-71) [ 195.419176][ T5939] stb0899_attach: Driver disabled by Kconfig [ 195.425230][ T5939] az6027: no front-end attached [ 195.425230][ T5939] [ 195.437126][ T5939] az6027: usb out operation failed. (-71) [ 195.442924][ T5939] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 195.468144][ T5939] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 195.481223][ T5834] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 195.502708][ T5939] dvb-usb: schedule remote query interval to 400 msecs. [ 195.512961][ T5939] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 195.562402][ T5939] usb 6-1: USB disconnect, device number 4 [ 195.647701][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.692970][ T5939] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 195.726995][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.897924][ T30] audit: type=1326 audit(1748432763.640:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8950 comm="syz.0.1332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c02f8e969 code=0x0 [ 196.157626][ T5834] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 196.178040][ T8962] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1337'. [ 196.551664][ T5834] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 196.563506][ T5834] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 196.574737][ T43] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 196.590229][ T43] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 196.799429][ T956] usb 4-1: USB disconnect, device number 10 [ 196.805476][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1348'. [ 196.851767][ T8988] Bluetooth: MGMT ver 1.23 [ 197.674283][ T9023] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1365'. [ 197.687946][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 197.806425][ T5834] net_ratelimit: 2 callbacks suppressed [ 197.806447][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.302102][ T9047] debugfs: Directory 'ptm1' with parent 'caif_serial' already present! [ 198.696280][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.847607][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.036878][ T5939] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 199.200704][ T5939] usb 4-1: config 0 has no interfaces? [ 199.213372][ T5939] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 199.231771][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.248987][ T5939] usb 4-1: Product: syz [ 199.279142][ T5939] usb 4-1: Manufacturer: syz [ 199.287520][ T5939] usb 4-1: SerialNumber: syz [ 199.319373][ T5939] usb 4-1: config 0 descriptor?? [ 199.549083][ T10] usb 4-1: USB disconnect, device number 11 [ 199.601198][ T9101] input: syz1 as /devices/virtual/input/input16 [ 199.611571][ T9102] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 199.625058][ T9099] IPVS: stopping master sync thread 9102 ... [ 199.625214][ T5939] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 199.821276][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.833043][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.866209][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 199.886526][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.895248][ T5939] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.915400][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.938127][ T5939] usb 3-1: config 0 descriptor?? [ 200.271456][ T9123] kvm: kvm [9122]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xaf [ 200.362991][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.380506][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.398416][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.409651][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.418245][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.426373][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.435742][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.445572][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.480355][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.491722][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.503195][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.533834][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.553440][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.576247][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.588333][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.599117][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.618592][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.636902][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.645292][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.697361][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.714489][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.735820][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.752488][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.777633][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.794295][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.812297][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.830140][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.850291][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.870945][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.893589][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.910257][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 200.925459][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 200.945904][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.979256][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 201.004110][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 201.035906][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 201.056320][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 201.080696][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 201.116824][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 201.139790][ T5939] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 201.164974][ T5939] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 201.234373][ T5939] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 201.281453][ T5939] usb 3-1: USB disconnect, device number 11 [ 201.408217][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.598241][ T9165] loop2: detected capacity change from 0 to 7 [ 201.612487][ T9165] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 201.618032][ T9165] loop2: partition table partially beyond EOD, truncated [ 201.625248][ T9165] loop2: p1 size 127 extends beyond EOD, truncated [ 201.966508][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.326186][ T5939] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 202.497321][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 202.509934][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.530163][ T5939] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 202.544998][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.557752][ T5939] usb 6-1: config 0 descriptor?? [ 202.626501][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 202.688213][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.796159][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 202.813534][ T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 202.832594][ T10] usb 1-1: config 0 has no interface number 0 [ 202.850308][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 202.866145][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.874245][ T10] usb 1-1: Product: syz [ 202.881961][ T10] usb 1-1: Manufacturer: syz [ 202.886717][ T10] usb 1-1: SerialNumber: syz [ 202.903154][ T10] usb 1-1: config 0 descriptor?? [ 202.911092][ T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 202.930029][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 202.937168][ T5138] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 202.991444][ T5939] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 203.016447][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.180024][ T10] usb 1-1: qt2_attach - failed to power on unit: -71 [ 203.198052][ T10] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 203.245845][ T10] usb 1-1: USB disconnect, device number 10 [ 203.441776][ T10] usb 6-1: USB disconnect, device number 5 [ 204.020707][ T9252] loop8: detected capacity change from 0 to 8 [ 204.035916][ T9252] Dev loop8: unable to read RDB block 8 [ 204.042530][ T9252] loop8: unable to read partition table [ 204.048759][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.058351][ T9252] loop8: partition table beyond EOD, truncated [ 204.064846][ T9252] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 204.144716][ T9254] loop8: detected capacity change from 0 to 7 [ 204.167625][ T9254] Dev loop8: unable to read RDB block 7 [ 204.181198][ T9254] loop8: unable to read partition table [ 204.197413][ T9254] loop8: partition table beyond EOD, truncated [ 204.204664][ T9254] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 204.446312][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.510514][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 204.521745][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 204.530178][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 204.538104][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 204.545637][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x2 [ 204.554428][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 204.562559][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 204.570300][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 204.578601][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 204.586390][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 204.594380][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 204.602768][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 204.612015][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 204.620226][ T5910] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0 [ 204.633502][ T5910] hid-generic 00A0:0006:0003.000A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 204.676181][ T5939] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 204.739195][ T30] audit: type=1326 audit(1748432772.480:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c02f2ab39 code=0x7ffc0000 [ 204.768951][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 204.790475][ T10] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 204.806937][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 204.816218][ T30] audit: type=1326 audit(1748432772.480:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 204.819780][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 204.840446][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.866146][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 204.876214][ T30] audit: type=1326 audit(1748432772.480:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 204.878399][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 204.913503][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 204.922903][ T5939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.935018][ T5939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.944899][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.953729][ T5939] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.966398][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 204.972345][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.982792][ T9] usb 3-1: config 0 has no interfaces? [ 204.989090][ T5939] usb 5-1: SerialNumber: syz [ 204.995328][ T9] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 205.006578][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.020803][ T9] usb 3-1: Product: syz [ 205.027142][ T30] audit: type=1326 audit(1748432772.480:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c02f2ab39 code=0x7ffc0000 [ 205.027372][ T10] usb 6-1: config 0 descriptor?? [ 205.055440][ T9] usb 3-1: Manufacturer: syz [ 205.074395][ T9] usb 3-1: SerialNumber: syz [ 205.087449][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.095914][ T9266] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 205.117322][ T9] usb 3-1: config 0 descriptor?? [ 205.155125][ T30] audit: type=1326 audit(1748432772.480:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 205.228688][ T30] audit: type=1326 audit(1748432772.500:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c02f2ab39 code=0x7ffc0000 [ 205.267373][ T5939] usb 5-1: 0:2 : does not exist [ 205.279412][ T5939] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 205.321207][ T5939] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 205.353986][ T9] usb 3-1: USB disconnect, device number 12 [ 205.386122][ T30] audit: type=1326 audit(1748432772.500:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 205.439777][ T5939] usb 5-1: USB disconnect, device number 13 [ 205.473613][ T30] audit: type=1326 audit(1748432772.500:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c02f2ab39 code=0x7ffc0000 [ 205.554132][ T10] plantronics 0003:047F:FFFF.000B: reserved main item tag 0xd [ 205.569568][ T10] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 205.577509][ T30] audit: type=1326 audit(1748432772.500:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 205.584476][ T10] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 205.648242][ T30] audit: type=1326 audit(1748432772.500:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.0.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 205.844514][ T10] usb 6-1: USB disconnect, device number 6 [ 206.126579][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.635196][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1489'. [ 206.677960][ T9306] team0: entered promiscuous mode [ 206.683231][ T9306] team_slave_0: entered promiscuous mode [ 206.703203][ T9306] team_slave_1: entered promiscuous mode [ 206.726910][ T9306] batadv_slave_1: entered promiscuous mode [ 206.741203][ T9306] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 206.754586][ T9306] Cannot create hsr debugfs directory [ 207.167382][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.175597][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.196959][ T9327] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 207.204751][ T5834] IPVS: starting estimator thread 0... [ 207.298443][ T9330] IPVS: using max 25 ests per chain, 60000 per kthread [ 207.706320][ T9347] netlink: 'syz.0.1508': attribute type 11 has an invalid length. [ 207.755303][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'. [ 207.806843][ T5834] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 207.981104][ T5834] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 208.010489][ T5834] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 208.047817][ T5834] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 208.086288][ T5834] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.102523][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.146651][ T5834] usb 3-1: Product: syz [ 208.156452][ T5834] usb 3-1: Manufacturer: syz [ 208.167209][ T5834] usb 3-1: SerialNumber: syz [ 208.183185][ T9343] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.209209][ T956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.401198][ T9343] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.446887][ T9366] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1517'. [ 208.448984][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.456424][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1517'. [ 208.708489][ T9374] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1521'. [ 209.023906][ T9343] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.243237][ T5834] cdc_ncm 3-1:1.0: bind() failure [ 209.277858][ T5834] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 209.299552][ T5834] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 209.329915][ T5834] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 209.353607][ T5834] usb 3-1: USB disconnect, device number 13 [ 209.401377][ T9393] input: syz0 as /devices/virtual/input/input18 [ 209.621272][ T9400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.941923][ T9408] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 209.976561][ T9410] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 210.234895][ T9419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.818840][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 210.818860][ T30] audit: type=1326 audit(1748432778.560:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6032d8e969 code=0x7ffc0000 [ 210.909804][ T30] audit: type=1326 audit(1748432778.590:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6032d2ab39 code=0x7ffc0000 [ 210.980388][ T30] audit: type=1326 audit(1748432778.590:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6032d8e969 code=0x7ffc0000 [ 211.026708][ T30] audit: type=1326 audit(1748432778.590:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6032d2ab39 code=0x7ffc0000 [ 211.049747][ T30] audit: type=1326 audit(1748432778.590:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6032d8e969 code=0x7ffc0000 [ 211.149492][ T30] audit: type=1326 audit(1748432778.590:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6032d2ab39 code=0x7ffc0000 [ 211.222082][ T30] audit: type=1326 audit(1748432778.590:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6032d8e969 code=0x7ffc0000 [ 211.289325][ T30] audit: type=1326 audit(1748432778.590:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6032d2ab39 code=0x7ffc0000 [ 211.323736][ T30] audit: type=1326 audit(1748432778.590:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6032d8e969 code=0x7ffc0000 [ 211.323800][ T30] audit: type=1326 audit(1748432778.590:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9441 comm="syz.4.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6032d2ab39 code=0x7ffc0000 [ 211.470738][ T9469] Invalid source name [ 211.846429][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 211.936156][ T5939] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 211.960266][ T9493] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 212.008034][ T10] usb 5-1: config 7 has an invalid interface number: 101 but max is 0 [ 212.017477][ T10] usb 5-1: config 7 has no interface number 0 [ 212.027208][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 212.036617][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.044777][ T10] usb 5-1: Product: syz [ 212.049860][ T10] usb 5-1: Manufacturer: syz [ 212.054622][ T10] usb 5-1: SerialNumber: syz [ 212.097191][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 212.111621][ T5939] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 212.120351][ T5939] usb 4-1: config 0 has no interface number 0 [ 212.132482][ T5939] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 212.142349][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.151090][ T5939] usb 4-1: Product: syz [ 212.155567][ T5939] usb 4-1: Manufacturer: syz [ 212.164160][ T5939] usb 4-1: SerialNumber: syz [ 212.172951][ T5939] usb 4-1: config 0 descriptor?? [ 212.187315][ T5939] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 212.422987][ T5939] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 212.472825][ T5939] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 212.848067][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 212.857048][ T9] usb 4-1: USB disconnect, device number 12 [ 212.869117][ T10] as10x_usb: device has been detected [ 212.875260][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 212.884974][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 212.911398][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 212.931356][ T10] usb 5-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 212.941116][ T9] quatech2 4-1:0.51: device disconnected [ 212.966503][ T10] as10x_usb: error during firmware upload part1 [ 212.973622][ T10] Registered device Elgato EyeTV DTT Deluxe [ 213.067478][ T5834] usb 5-1: USB disconnect, device number 14 [ 213.127289][ T5834] Unregistered device Elgato EyeTV DTT Deluxe [ 213.131795][ T5834] as10x_usb: device has been disconnected [ 213.499566][ T9539] block nbd2: NBD_DISCONNECT [ 213.628145][ T9548] sctp: [Deprecated]: syz.2.1602 (pid 9548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 213.628145][ T9548] Use struct sctp_sack_info instead [ 213.766243][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 213.930249][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 213.942324][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 213.964424][ T10] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 213.974778][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.995731][ T10] usb 4-1: config 0 descriptor?? [ 214.207730][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.436256][ T10] samsung 0003:0419:0600.000C: item fetching failed at offset 0/5 [ 214.444986][ T10] samsung 0003:0419:0600.000C: parse failed [ 214.454486][ T10] samsung 0003:0419:0600.000C: probe with driver samsung failed with error -22 [ 214.623291][ T9] usb 4-1: USB disconnect, device number 13 [ 215.346238][ T9] kernel read not supported for file /sequencer (pid: 9 comm: kworker/0:0) [ 215.747965][ T10] psmouse serio3: Failed to reset mouse on : -5 [ 215.873305][ T9629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.968961][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1640'. [ 216.328514][ T5834] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 216.504818][ T5834] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.515995][ T5834] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 216.531660][ T5834] usb 6-1: config 1 has no interface number 0 [ 216.542085][ T5834] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.554498][ T5834] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 216.570140][ T5834] usb 6-1: New USB device found, idVendor=0525, idProduct=a4c3, bcdDevice= 0.40 [ 216.581945][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.595132][ T5834] usb 6-1: Product: syz [ 216.601758][ T5834] usb 6-1: Manufacturer: syz [ 216.609913][ T5834] usb 6-1: SerialNumber: syz [ 217.061875][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.072233][ T9660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.457112][ T5834] cdc_ncm 6-1:1.1: bind() failure [ 217.658573][ T5881] usb 6-1: USB disconnect, device number 7 [ 217.792254][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 217.792276][ T30] audit: type=1326 audit(1748432785.530:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 217.820474][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.884684][ T30] audit: type=1326 audit(1748432785.530:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 217.906212][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.914323][ T30] audit: type=1326 audit(1748432785.530:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 217.935861][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.949620][ T30] audit: type=1326 audit(1748432785.530:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c02f2ab39 code=0x7ffc0000 [ 217.971200][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.982536][ T30] audit: type=1326 audit(1748432785.530:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 218.004015][ C1] vkms_vblank_simulate: vblank timer overrun [ 218.041127][ T30] audit: type=1326 audit(1748432785.580:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c02f2ab39 code=0x7ffc0000 [ 218.086098][ T30] audit: type=1326 audit(1748432785.580:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 218.127824][ T9677] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 218.136386][ T30] audit: type=1326 audit(1748432785.580:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 218.171098][ T30] audit: type=1326 audit(1748432785.580:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c02f2ab39 code=0x7ffc0000 [ 218.197875][ T30] audit: type=1326 audit(1748432785.580:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9674 comm="syz.0.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c02f8e969 code=0x7ffc0000 [ 218.291003][ T9686] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1663'. [ 218.726337][ T5881] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 218.907362][ T5881] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.915443][ T5881] usb 6-1: config 0 has no interface number 0 [ 218.932568][ T5881] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 218.956129][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.973722][ T5881] usb 6-1: config 0 descriptor?? [ 218.994303][ T5881] usb 6-1: selecting invalid altsetting 1 [ 219.012041][ T5881] dvb_ttusb_budget: ttusb_init_controller: error [ 219.030040][ T5881] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 219.103532][ T9715] mkiss: ax0: crc mode is auto. [ 219.116612][ T5881] DVB: Unable to find symbol cx22700_attach() [ 219.166644][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.175912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.184451][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.185071][ T5881] DVB: Unable to find symbol tda10046_attach() [ 219.223825][ T5881] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 219.240376][ T5881] usb 6-1: USB disconnect, device number 8 [ 219.330694][ T4880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.506245][ T10] misc userio: Buffer overflowed, userio client isn't keeping up [ 220.579593][ T10] input: PS/2 Generic Mouse as /devices/serio3/input/input19 [ 220.676999][ T9772] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 220.820059][ T10] psmouse serio3: Failed to enable mouse on [ 221.146213][ T5834] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 221.327063][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.338520][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.357002][ T5834] usb 3-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 221.366627][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.382040][ T5834] usb 3-1: config 0 descriptor?? [ 221.491188][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.667492][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.804466][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.822938][ T5834] hid (null): nested delimiters [ 221.839610][ T5834] hid-generic 0003:0416:C168.000D: nested delimiters [ 221.854062][ T5834] hid-generic 0003:0416:C168.000D: item 0 1 2 10 parsing failed [ 221.863493][ T5834] hid-generic 0003:0416:C168.000D: probe with driver hid-generic failed with error -22 [ 221.948147][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.028339][ T5834] usb 3-1: USB disconnect, device number 14 [ 222.291101][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.302722][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.311985][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.320207][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.328622][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.336893][ T67] bridge_slave_1: left allmulticast mode [ 222.344565][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.356281][ T67] bridge_slave_1: left promiscuous mode [ 222.362216][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.386541][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.394167][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.406395][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.415113][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.442027][ T67] bridge_slave_0: left allmulticast mode [ 222.461393][ T67] bridge_slave_0: left promiscuous mode [ 222.486814][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.607587][ T5138] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 222.608072][ T5828] Bluetooth: hci5: command 0xfc11 tx timeout [ 222.719043][ T5834] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 223.028650][ T5834] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 223.048819][ T5834] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.079616][ T5834] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 223.116272][ T5834] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.168640][ T5834] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 223.204106][ T5834] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 223.219614][ T5834] usb 6-1: Product: syz [ 223.224270][ T5834] usb 6-1: Manufacturer: syz [ 223.248257][ T5834] cdc_wdm 6-1:1.0: skipping garbage [ 223.259185][ T5834] cdc_wdm 6-1:1.0: skipping garbage [ 223.281086][ T5834] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 223.296145][ T5834] cdc_wdm 6-1:1.0: Unknown control protocol [ 223.524311][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.535848][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.536312][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 223.558405][ T67] bond0 (unregistering): Released all slaves [ 223.575090][ T67] bond1 (unregistering): Released all slaves [ 223.708953][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 223.719494][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.731363][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.744588][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.754204][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.762526][ T9] usb 3-1: Product: syz [ 223.767780][ T9] usb 3-1: Manufacturer: syz [ 223.772776][ T9] usb 3-1: SerialNumber: syz [ 224.014174][ T9] usb 3-1: 0:2 : does not exist [ 224.043744][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 224.053146][ T5834] usb 6-1: USB disconnect, device number 9 [ 224.082606][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 224.115284][ T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 224.156578][ T67] hsr_slave_0: left promiscuous mode [ 224.163150][ T67] hsr_slave_1: left promiscuous mode [ 224.187831][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.210329][ T9] usb 3-1: USB disconnect, device number 15 [ 224.215761][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.230395][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.246325][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.342958][ T67] veth1_macvtap: left promiscuous mode [ 224.356860][ T67] veth0_macvtap: left promiscuous mode [ 224.362598][ T67] veth1_vlan: left promiscuous mode [ 224.376488][ T67] veth0_vlan: left promiscuous mode [ 224.395404][ T9835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.448169][ T5138] Bluetooth: hci4: command tx timeout [ 224.626976][ T9843] program syz.5.1730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.029369][ T5834] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 225.091641][ T1015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.188698][ T5834] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.203755][ T5834] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.228738][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.241410][ T5834] usb 1-1: Product: syz [ 225.245752][ T5834] usb 1-1: Manufacturer: syz [ 225.251004][ T5834] usb 1-1: SerialNumber: syz [ 225.375798][ T67] team0 (unregistering): Port device team_slave_1 removed [ 225.521266][ T9861] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 225.543382][ T67] team0 (unregistering): Port device team_slave_0 removed [ 225.785991][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 225.796811][ T30] audit: type=1326 audit(1748432793.520:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.4.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6032d8e969 code=0x7ffc0000 [ 225.829521][ T30] audit: type=1326 audit(1748432793.540:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.4.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6032d8e969 code=0x7ffc0000 [ 225.852130][ T30] audit: type=1326 audit(1748432793.540:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.4.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6032d8e969 code=0x7ffc0000 [ 225.890506][ T30] audit: type=1326 audit(1748432793.540:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.4.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6032d8e969 code=0x7ffc0000 [ 225.981612][ T30] audit: type=1326 audit(1748432793.540:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.4.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f6032d8e969 code=0x7ffc0000 [ 226.012870][ T30] audit: type=1326 audit(1748432793.540:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.4.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6032d8e969 code=0x7ffc0000 [ 226.055642][ T30] audit: type=1326 audit(1748432793.560:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9866 comm="syz.4.1743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6032d8e969 code=0x7ffc0000 [ 226.315271][ T5834] cdc_ncm 1-1:1.0: bind() failure [ 226.331339][ T5834] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 226.340884][ T5834] cdc_ncm 1-1:1.1: bind() failure [ 226.355922][ T5834] usb 1-1: USB disconnect, device number 11 [ 226.527542][ T5138] Bluetooth: hci4: command tx timeout [ 226.636725][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1732'. [ 226.660803][ T9875] can0: slcan on ptm0. [ 226.670251][ T9800] chnl_net:caif_netlink_parms(): no params data found [ 226.759476][ T9885] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1750'. [ 226.786497][ T9874] can0 (unregistered): slcan off ptm0. [ 227.103074][ T9800] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.129781][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.159270][ T9800] bridge_slave_0: entered allmulticast mode [ 227.184307][ T9800] bridge_slave_0: entered promiscuous mode [ 227.231238][ T9800] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.250529][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.267772][ T9800] bridge_slave_1: entered allmulticast mode [ 227.275801][ T9800] bridge_slave_1: entered promiscuous mode [ 227.378300][ T9800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.403369][ T67] IPVS: stop unused estimator thread 0... [ 227.415386][ T9800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.489311][ T5939] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 227.513135][ T9800] team0: Port device team_slave_0 added [ 227.531762][ T9800] team0: Port device team_slave_1 added [ 227.602727][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.616149][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.677076][ T9800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.697798][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.712432][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.722578][ T5939] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 227.739472][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.741815][ T9800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.755919][ T9800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.757926][ T5939] usb 5-1: config 0 descriptor?? [ 227.793231][ T9800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.950391][ T9921] loop8: detected capacity change from 0 to 7 [ 227.961079][ T9921] Dev loop8: unable to read RDB block 7 [ 227.968665][ T9921] loop8: unable to read partition table [ 227.990093][ T9921] loop8: partition table beyond EOD, truncated [ 228.004846][ T9921] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 228.053224][ T9800] hsr_slave_0: entered promiscuous mode [ 228.082271][ T9800] hsr_slave_1: entered promiscuous mode [ 228.243886][ T5939] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 228.263331][ T5939] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 228.295085][ T5939] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000E/input/input20 [ 228.336878][ T5939] cm6533_jd 0003:0D8C:0022.000E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 228.448455][ T9] usb 5-1: USB disconnect, device number 15 [ 228.558750][ T9800] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 228.581694][ T9800] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 228.592322][ T9800] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 228.611570][ T9800] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.618404][ T5828] Bluetooth: hci4: command tx timeout [ 228.755823][ T9800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.808458][ T9800] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.837054][ T4880] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.844272][ T4880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.865419][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.872605][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.968667][ T9800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.979129][ T9800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.347287][ T9800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.636271][ T5881] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 229.726368][ T5138] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 229.726834][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 229.820641][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.825264][ T9800] veth0_vlan: entered promiscuous mode [ 229.836278][ T5881] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 229.836338][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 229.863178][ T5881] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 229.872918][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.899088][ T9800] veth1_vlan: entered promiscuous mode [ 229.903553][ T5881] usb 5-1: Product: syz [ 229.914978][ T5881] usb 5-1: Manufacturer: syz [ 229.928317][ T5881] usb 5-1: SerialNumber: syz [ 229.946618][ T5881] usb 5-1: config 0 descriptor?? [ 229.959084][ T5881] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 229.974602][ T9800] veth0_macvtap: entered promiscuous mode [ 229.982495][ T5881] usb 5-1: No valid video chain found. [ 230.003619][ T9800] veth1_macvtap: entered promiscuous mode [ 230.033659][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.054884][ T9800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.070768][ T9800] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.082027][ T9800] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.092998][ T9800] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.102818][ T9800] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.165055][ T9957] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1779'. [ 230.183193][ T5901] usb 5-1: USB disconnect, device number 16 [ 230.260428][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.282695][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.364386][ T5895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.373673][ T5895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.689199][ T5138] Bluetooth: hci4: command tx timeout [ 230.868992][ T4880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.949798][T10030] program syz.4.1807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.993502][T10032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1808'. [ 232.053136][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1809'. [ 232.285388][T10032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.301824][T10032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.313083][T10032] bond0 (unregistering): Released all slaves [ 233.306991][T10062] sctp: [Deprecated]: syz.0.1819 (pid 10062) Use of int in max_burst socket option. [ 233.306991][T10062] Use struct sctp_assoc_value instead [ 234.187969][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 234.280000][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1837'. [ 234.356153][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 234.378855][ T24] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 234.407089][ T24] usb 6-1: config 150 has no interface number 0 [ 234.413552][ T24] usb 6-1: config 150 interface 204 has no altsetting 0 [ 234.436481][ T24] usb 6-1: config 150 interface 1 has no altsetting 0 [ 234.470899][ T24] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 234.485019][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.498539][ T24] usb 6-1: Product: syz [ 234.502780][ T24] usb 6-1: Manufacturer: syz [ 234.509941][ T24] usb 6-1: SerialNumber: syz [ 234.564917][T10108] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.573574][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.726850][ T24] xr_serial 6-1:150.204: xr_serial converter detected [ 234.803069][T10114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.815271][T10114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.326605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.337199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.348043][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.350502][ T5901] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 235.537104][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 235.548883][ T24] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 235.555520][ T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 235.566395][ T5901] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 235.576105][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.592321][ T24] usb 6-1: USB disconnect, device number 10 [ 235.601727][ T5901] usb 3-1: config 0 descriptor?? [ 235.609070][ T24] xr_serial 6-1:150.204: device disconnected [ 235.825788][ T5901] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 235.844289][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.854825][ T5901] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 235.871218][ T5901] usb 3-1: media controller created [ 235.907694][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.026963][ T5901] az6027: usb out operation failed. (-71) [ 236.034419][ T5901] az6027: usb out operation failed. (-71) [ 236.043869][ T5901] stb0899_attach: Driver disabled by Kconfig [ 236.050591][ T5901] az6027: no front-end attached [ 236.050591][ T5901] [ 236.058667][ T5901] az6027: usb out operation failed. (-71) [ 236.064613][ T5901] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 236.076249][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 236.099443][ T5901] dvb-usb: schedule remote query interval to 400 msecs. [ 236.116109][ T5901] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 236.140768][ T5901] usb 3-1: USB disconnect, device number 16 [ 236.202319][ T5901] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 236.410945][ T9] kernel write not supported for file /851/net/ip_vs_stats (pid: 9 comm: kworker/0:0) [ 236.436256][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 236.475297][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1868'. [ 236.610723][ T4880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.619605][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.648215][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 236.676108][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.692224][T10178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.705392][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 236.725026][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.747144][ T24] usb 6-1: Product: syz [ 236.751838][ T24] usb 6-1: Manufacturer: syz [ 236.776988][ T24] usb 6-1: SerialNumber: syz [ 237.005658][ T24] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 237.217832][T10204] block nbd0: NBD_DISCONNECT [ 237.224093][T10204] block nbd0: Send disconnect failed -22 [ 237.259430][T10202] block nbd0: Disconnected due to user request. [ 237.276927][T10202] block nbd0: shutting down sockets [ 237.494492][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 237.552775][T10223] bond0: entered promiscuous mode [ 237.558462][T10223] bond_slave_0: entered promiscuous mode [ 237.565000][T10223] bond_slave_1: entered promiscuous mode [ 237.860857][T10239] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 237.871067][T10239] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 238.378569][T10253] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1901'. [ 238.399573][T10253] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 238.543228][T10260] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (20) [ 239.200464][ T10] usb 6-1: USB disconnect, device number 11 [ 239.227449][ T10] usblp0: removed [ 239.343923][T10287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.508164][T10290] rtc_cmos 00:00: Alarms can be up to one day in the future [ 239.537095][ T30] audit: type=1326 audit(1748432807.270:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10292 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 239.568938][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 239.595880][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 239.603771][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 239.615614][T10295] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 239.616273][ T30] audit: type=1326 audit(1748432807.270:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10292 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 239.658716][ T10] rtc_cmos 00:00: Alarms can be up to one day in the future [ 239.676702][ T10] rtc rtc0: __rtc_set_alarm: err=-22 [ 239.677657][T10295] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 239.702415][ T30] audit: type=1326 audit(1748432807.280:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10292 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 239.750215][ T30] audit: type=1326 audit(1748432807.280:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10292 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 239.771814][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.800123][ T30] audit: type=1326 audit(1748432807.280:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10292 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 239.821797][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.844517][ T30] audit: type=1326 audit(1748432807.280:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10292 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 239.870824][ T30] audit: type=1326 audit(1748432807.290:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10292 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 239.902847][ T30] audit: type=1326 audit(1748432807.330:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10292 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 239.929899][ T30] audit: type=1326 audit(1748432807.330:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10292 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 239.956546][ T30] audit: type=1326 audit(1748432807.340:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10292 comm="syz.5.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 240.076165][ T5901] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 240.096351][ T24] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 240.233981][ T5901] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 240.243787][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.252080][ T5901] usb 3-1: Product: syz [ 240.256995][ T5901] usb 3-1: Manufacturer: syz [ 240.262431][ T5901] usb 3-1: SerialNumber: syz [ 240.268251][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 240.292125][ T5901] usb 3-1: config 0 descriptor?? [ 240.297370][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.309513][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 240.318849][ T24] usb 1-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 240.330597][ T24] usb 1-1: Manufacturer: syz [ 240.340861][ T24] usb 1-1: config 0 descriptor?? [ 240.351158][ T24] hub 1-1:0.0: USB hub found [ 240.535432][T10321] syzkaller1: entered promiscuous mode [ 240.543217][ T5901] usb 3-1: ignoring: probably an ADSL modem [ 240.554675][T10321] syzkaller1: entered allmulticast mode [ 240.562028][ T24] hub 1-1:0.0: 1 port detected [ 240.562953][T10323] input: syz0 as /devices/virtual/input/input22 [ 240.581675][T10323] input: failed to attach handler leds to device input22, error: -6 [ 240.949474][ T5901] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 240.970886][ T24] usb 1-1: USB disconnect, device number 12 [ 241.666438][T10360] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 242.369726][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.448936][T10376] openvswitch: netlink: IPv4 tun info is not correct [ 242.831607][ T10] usb 3-1: USB disconnect, device number 17 [ 242.863928][T10386] tc_dump_action: action bad kind [ 242.971634][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.996225][ T956] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 243.120639][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.156292][ T956] usb 5-1: Using ep0 maxpacket: 16 [ 243.168077][ T956] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 243.202124][ T956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 243.219063][ T956] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 243.236543][ T956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.244650][ T956] usb 5-1: Product: syz [ 243.263769][ T956] usb 5-1: Manufacturer: syz [ 243.272304][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.276597][ T956] usb 5-1: SerialNumber: syz [ 243.301574][ T956] usb 5-1: config 0 descriptor?? [ 243.315395][ T956] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 243.346062][ T956] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 243.471939][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.731662][ T12] bridge_slave_1: left allmulticast mode [ 243.737845][ T12] bridge_slave_1: left promiscuous mode [ 243.749666][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.798074][ T12] bridge_slave_0: left allmulticast mode [ 243.821101][ T12] bridge_slave_0: left promiscuous mode [ 243.842172][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.932181][ T956] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 243.949656][ T956] em28xx 5-1:0.0: Config register raw data: 0x15 [ 244.132106][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.145733][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.155697][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.159653][ T956] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 244.183611][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.184019][ T956] em28xx 5-1:0.0: No AC97 audio processor [ 244.197328][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.278526][ T956] usb 5-1: USB disconnect, device number 17 [ 244.307236][ T956] em28xx 5-1:0.0: Disconnecting em28xx [ 244.351873][ T956] em28xx 5-1:0.0: Freeing device [ 245.176659][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.192646][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.205239][ T12] bond0 (unregistering): Released all slaves [ 245.437834][T10423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.473228][T10423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.516712][T10423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.286936][ T12] hsr_slave_0: left promiscuous mode [ 246.293258][ T5138] Bluetooth: hci4: command tx timeout [ 246.310592][ T12] hsr_slave_1: left promiscuous mode [ 246.330266][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.379222][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.443746][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.486141][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.593997][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1993'. [ 246.616087][ T12] veth1_macvtap: left promiscuous mode [ 246.621706][ T12] veth0_macvtap: left promiscuous mode [ 246.686389][ T12] veth1_vlan: left promiscuous mode [ 246.695474][ T12] veth0_vlan: left promiscuous mode [ 246.816923][T10459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.826300][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.840487][T10459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.849028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.863132][T10459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.012339][ T12] team0 (unregistering): Port device team_slave_1 removed [ 248.115709][ T12] team0 (unregistering): Port device team_slave_0 removed [ 248.127119][ T67] net_ratelimit: 567 callbacks suppressed [ 248.127142][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.366504][ T5138] Bluetooth: hci4: command tx timeout [ 248.789414][ T956] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 248.947685][ T956] usb 6-1: Using ep0 maxpacket: 32 [ 248.964725][ T956] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 248.974262][ T956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.000783][ T956] usb 6-1: config 0 descriptor?? [ 249.236382][ T956] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 249.277283][ T956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.320617][ T956] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 249.347957][ T956] usb 6-1: media controller created [ 249.470636][ T956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.472759][T10400] chnl_net:caif_netlink_parms(): no params data found [ 249.567319][ T956] az6027: usb out operation failed. (-71) [ 249.576315][ T956] az6027: usb out operation failed. (-71) [ 249.597290][ T956] stb0899_attach: Driver disabled by Kconfig [ 249.608803][ T956] az6027: no front-end attached [ 249.608803][ T956] [ 249.626323][ T956] az6027: usb out operation failed. (-71) [ 249.655070][ T956] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 249.663303][T10491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.685420][ T956] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input23 [ 249.720571][ T956] dvb-usb: schedule remote query interval to 400 msecs. [ 249.739297][ T956] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 249.750564][ T956] usb 6-1: USB disconnect, device number 12 [ 249.929802][ T956] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 249.985652][T10400] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.995314][T10400] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.012195][T10400] bridge_slave_0: entered allmulticast mode [ 250.022534][T10400] bridge_slave_0: entered promiscuous mode [ 250.044184][T10400] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.060526][T10400] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.069553][T10400] bridge_slave_1: entered allmulticast mode [ 250.081192][T10400] bridge_slave_1: entered promiscuous mode [ 250.157626][T10400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.175021][T10400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.326230][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 250.378498][T10400] team0: Port device team_slave_0 added [ 250.401950][T10400] team0: Port device team_slave_1 added [ 250.459347][ T5138] Bluetooth: hci4: command tx timeout [ 250.506116][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 250.544633][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.578269][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 250.605659][T10400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.615294][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.665322][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 250.678992][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.693911][ T10] usb 5-1: Product: syz [ 250.708071][ T10] usb 5-1: Manufacturer: syz [ 250.712743][ T10] usb 5-1: SerialNumber: syz [ 250.739282][T10400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.767648][T10400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.774798][T10400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.874406][T10400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.973639][ T10] cdc_ncm 5-1:1.0: bind() failure [ 251.015207][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 251.033326][ T10] cdc_ncm 5-1:1.1: bind() failure [ 251.052068][ T10] usb 5-1: USB disconnect, device number 18 [ 251.074262][T10400] hsr_slave_0: entered promiscuous mode [ 251.081270][T10400] hsr_slave_1: entered promiscuous mode [ 251.166401][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 251.311106][T10518] @: renamed from vlan0 (while UP) [ 251.346089][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 251.358182][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.370195][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.397582][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 251.416064][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.437968][ T9] usb 3-1: config 0 descriptor?? [ 251.685540][T10400] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 251.713990][T10526] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 251.730850][T10400] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 251.757261][T10400] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 251.774531][T10400] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 251.873557][ T9] appleir 0003:05AC:8241.000F: No inputs registered, leaving [ 251.913940][ T9] appleir 0003:05AC:8241.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 252.005076][T10400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.065505][T10400] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.100777][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.108241][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.149514][ T4880] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.156870][ T4880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.184458][ T10] usb 3-1: USB disconnect, device number 18 [ 252.526770][ T5138] Bluetooth: hci4: command tx timeout [ 252.880335][T10400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.730944][T10400] veth0_vlan: entered promiscuous mode [ 253.770839][T10400] veth1_vlan: entered promiscuous mode [ 253.819240][T10595] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2051'. [ 253.837636][T10595] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2051'. [ 253.888818][ T4880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.903214][T10400] veth0_macvtap: entered promiscuous mode [ 253.969078][T10400] veth1_macvtap: entered promiscuous mode [ 254.025558][T10400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.083916][T10400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.128356][T10400] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.158554][T10400] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.184518][T10400] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.216279][T10400] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.457047][ T4880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.486178][ T4880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.573579][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.591306][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.070255][T10640] overlayfs: upper fs does not support file handles, falling back to index=off. [ 255.088087][T10640] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 255.106850][T10640] overlayfs: conflicting lowerdir path [ 255.506098][ T10] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 255.700527][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.722836][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 255.753039][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 255.785179][ T10] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 255.815452][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.822231][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.837600][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.861823][T10645] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.883597][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 255.898466][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 255.921566][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 255.931951][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 255.946437][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 255.959993][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 256.086328][ T5901] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 256.216680][ T5881] usb 1-1: USB disconnect, device number 13 [ 256.236351][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 256.253123][ T5901] usb 6-1: config 64 has an invalid interface number: 176 but max is 0 [ 256.286574][ T5901] usb 6-1: config 64 has no interface number 0 [ 256.295090][ T5901] usb 6-1: config 64 interface 176 has no altsetting 0 [ 256.313964][ T5901] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d [ 256.326054][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.336135][ T5901] usb 6-1: Product: syz [ 256.340417][ T5901] usb 6-1: Manufacturer: syz [ 256.355292][ T5901] usb 6-1: SerialNumber: syz [ 256.556222][ T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 256.619807][ T5901] peak_usb 6-1:64.176 can0: unable to request usb[type=0 value=1] err=-71 [ 256.637548][ T5901] peak_usb 6-1:64.176: unable to read PCAN-USB X6 firmware info (err -71) [ 256.718348][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 256.721135][ T5901] peak_usb 6-1:64.176: probe with driver peak_usb failed with error -71 [ 256.751449][ T5901] usb 6-1: USB disconnect, device number 13 [ 256.808149][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 256.821961][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 256.835314][ T10] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 256.893993][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.945146][T10645] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 256.986982][ T10] hub 1-1:1.0: bad descriptor, ignoring hub [ 256.993021][ T10] hub 1-1:1.0: probe with driver hub failed with error -5 [ 257.026707][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 257.031998][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 257.066660][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 257.072649][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 257.211404][ T5910] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 257.328689][ T5901] usb 1-1: USB disconnect, device number 14 [ 257.390731][ T5910] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 257.410533][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.432539][ T5910] usb 8-1: config 0 descriptor?? [ 257.451459][ T5910] cp210x 8-1:0.0: cp210x converter detected [ 257.880914][ T5910] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 257.899734][ T5910] usb 8-1: cp210x converter now attached to ttyUSB0 [ 257.936175][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 258.103647][ T5939] usb 8-1: USB disconnect, device number 2 [ 258.112183][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.133962][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.141992][ T5939] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 258.157801][ T5939] cp210x 8-1:0.0: device disconnected [ 258.166826][ T10] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 258.184548][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.195878][ T10] usb 3-1: Product: syz [ 258.203652][ T10] usb 3-1: Manufacturer: syz [ 258.209103][ T10] usb 3-1: SerialNumber: syz [ 258.220366][ T10] usb 3-1: config 0 descriptor?? [ 258.238786][ T10] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 258.260776][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.271438][ T10] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 258.280274][ T10] usb 3-1: media controller created [ 258.312952][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.455070][ T10] DVB: Unable to find symbol tda10046_attach() [ 258.476318][ T10] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 258.485075][ T10] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 258.853384][T10745] overlay: filesystem on ./bus is read-only [ 259.127997][ T10] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 259.137574][ T5939] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 259.159261][T10755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.169175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.180766][ T10] usb 3-1: USB disconnect, device number 19 [ 259.336438][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 259.353134][ T5939] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 259.369616][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.380267][ T5939] usb 1-1: Product: syz [ 259.384489][ T5939] usb 1-1: Manufacturer: syz [ 259.393259][ T5939] usb 1-1: SerialNumber: syz [ 259.417105][ T5939] usb 1-1: config 0 descriptor?? [ 259.428747][ T5939] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 259.443039][ T5939] usb 1-1: Detected FT232H [ 259.637270][ T5939] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 259.647140][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.064392][ T5939] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 260.274023][T10786] loop8: detected capacity change from 0 to 8 [ 260.282086][T10786] Dev loop8: unable to read RDB block 8 [ 260.290262][T10786] loop8: unable to read partition table [ 260.291682][ T5939] usb 1-1: USB disconnect, device number 15 [ 260.298129][ T5901] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 260.316709][T10786] loop8: partition table beyond EOD, truncated [ 260.336986][T10786] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 260.353832][ T5939] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 260.378711][ T5939] ftdi_sio 1-1:0.0: device disconnected [ 260.504560][ T5901] usb 8-1: Using ep0 maxpacket: 16 [ 260.531169][ T5901] usb 8-1: config 0 interface 0 has no altsetting 0 [ 260.546480][ T5901] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 260.563776][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.579991][ T5901] usb 8-1: config 0 descriptor?? [ 260.828561][T10805] netlink: 'syz.2.2141': attribute type 1 has an invalid length. [ 260.844428][T10805] netlink: 'syz.2.2141': attribute type 10 has an invalid length. [ 260.853301][T10805] netlink: 'syz.2.2141': attribute type 4 has an invalid length. [ 260.874729][T10805] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2141'. [ 260.895281][T10807] syzkaller1: entered promiscuous mode [ 260.912646][T10807] syzkaller1: entered allmulticast mode [ 260.933550][ T43] usb 4-1: [UEAGLE-ATM] firmware is not available [ 261.034126][ T5901] hid (null): global environment stack underflow [ 261.062067][ T5901] hid (null): global environment stack underflow [ 261.072209][ T5901] hid (null): unknown global tag 0xe [ 261.248680][ T5901] usb 8-1: USB disconnect, device number 3 [ 261.367728][T10829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2151'. [ 261.390943][ T5939] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 261.560203][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 261.570550][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.587667][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.601792][ T5939] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 261.613990][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.638070][ T5939] usb 6-1: config 0 descriptor?? [ 262.060502][ T5939] playstation 0003:054C:05C4.0011: unknown main item tag 0x0 [ 262.084286][ T5939] playstation 0003:054C:05C4.0011: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 262.256994][ T5939] playstation 0003:054C:05C4.0011: Failed to retrieve feature with reportID 18: -71 [ 262.282841][ T5939] playstation 0003:054C:05C4.0011: Failed to retrieve DualShock4 pairing info: -71 [ 262.313789][ T5939] playstation 0003:054C:05C4.0011: Failed to get MAC address from DualShock4 [ 262.332784][ T5939] playstation 0003:054C:05C4.0011: Failed to create dualshock4. [ 262.373257][ T5939] playstation 0003:054C:05C4.0011: probe with driver playstation failed with error -71 [ 262.423826][ T5939] usb 6-1: USB disconnect, device number 14 [ 262.787170][ T5910] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 262.989251][ T5910] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 263.009058][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.039221][ T5910] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 263.060336][ T5910] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 263.080274][ T5910] usb 5-1: Manufacturer: syz [ 263.098900][ T5910] usb 5-1: config 0 descriptor?? [ 263.234832][T10879] tipc: Started in network mode [ 263.240209][T10879] tipc: Node identity 6, cluster identity 4711 [ 263.246421][ T5910] rc_core: IR keymap rc-hauppauge not found [ 263.246441][ T5910] Registered IR keymap rc-empty [ 263.248809][ T5910] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 263.253340][T10879] tipc: Node number set to 6 [ 263.283378][ T5910] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 263.345319][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 263.355953][ T5901] usb 5-1: USB disconnect, device number 19 [ 263.721561][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 263.721582][ T30] audit: type=1326 audit(1748432831.460:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1972ab39 code=0x7ffc0000 [ 263.772964][ T30] audit: type=1326 audit(1748432831.460:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1972ab39 code=0x7ffc0000 [ 263.795056][ T30] audit: type=1326 audit(1748432831.460:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 263.821011][ T30] audit: type=1326 audit(1748432831.460:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1972ab39 code=0x7ffc0000 [ 263.865647][ T30] audit: type=1326 audit(1748432831.460:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1972ab39 code=0x7ffc0000 [ 263.968034][ T30] audit: type=1326 audit(1748432831.460:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 264.086527][ T30] audit: type=1326 audit(1748432831.460:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae1972ab39 code=0x7ffc0000 [ 264.108453][ T30] audit: type=1326 audit(1748432831.460:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 264.136094][ T30] audit: type=1326 audit(1748432831.460:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 264.214694][ T30] audit: type=1326 audit(1748432831.460:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.5.2178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae1978e969 code=0x7ffc0000 [ 264.336373][T10906] Invalid logical block size (-3) [ 264.405209][T10908] netlink: 'syz.2.2184': attribute type 11 has an invalid length. [ 264.721790][T10918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.765959][T10918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.789949][T10918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.812047][T10919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.826269][T10919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.854507][T10918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.881682][T10918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.946380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.955376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.964531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.249809][ T5138] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 265.416202][ T5881] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 265.581327][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.776188][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.805477][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.820073][ T5881] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.829651][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.843934][ T5881] usb 1-1: config 0 descriptor?? [ 266.281797][ T5881] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 266.339770][ T5881] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 266.456363][ T5910] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 266.538449][T10951] syzkaller1: entered promiscuous mode [ 266.546829][T10951] syzkaller1: entered allmulticast mode [ 266.559180][ T10] usb 1-1: USB disconnect, device number 16 [ 266.627300][ T5910] usb 8-1: Using ep0 maxpacket: 16 [ 266.647603][ T5910] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 266.670027][ T5910] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 266.678669][ T5910] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 266.689360][ T5910] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 266.697684][ T5910] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 266.707230][ T5910] usb 8-1: config 0 has no interface number 0 [ 266.713750][ T5910] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 266.745363][ T5910] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 266.768805][ T5910] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 266.800496][ T5910] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.818899][ T5910] usb 8-1: config 0 interface 125 has no altsetting 0 [ 266.826305][ T5910] usb 8-1: config 0 interface 125 has no altsetting 2 [ 266.835555][ T5910] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 266.845482][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.854156][ T5910] usb 8-1: Product: syz [ 266.858824][ T5910] usb 8-1: Manufacturer: syz [ 266.863472][ T5910] usb 8-1: SerialNumber: syz [ 266.871719][ T5910] usb 8-1: config 0 descriptor?? [ 266.902894][ T5910] usb 8-1: selecting invalid altsetting 2 [ 267.701103][T10985] loop2: detected capacity change from 0 to 7 [ 267.716454][T10985] Dev loop2: unable to read RDB block 7 [ 267.729918][T10985] loop2: AHDI p1 p2 [ 267.733910][T10985] loop2: partition table partially beyond EOD, truncated [ 267.761144][T10985] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 267.803057][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2219'. [ 267.946306][ T5910] usb 8-1: USB disconnect, device number 4 [ 268.286300][T11006] sctp: [Deprecated]: syz.5.2228 (pid 11006) Use of int in maxseg socket option. [ 268.286300][T11006] Use struct sctp_assoc_value instead [ 268.778873][T11019] sg_write: data in/out 35677/2 bytes for SCSI command 0x0-- guessing data in; [ 268.778873][T11019] program syz.5.2234 not setting count and/or reply_len properly [ 268.798362][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2236'. [ 269.261049][ T5881] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 269.356441][ T43] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 269.419535][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 269.431546][ T5881] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.443313][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.454192][ T5881] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.494801][ T5881] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.518208][ T5881] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.539886][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.549743][ T43] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 269.561892][ T43] usb 3-1: config 0 has no interface number 0 [ 269.573703][ T43] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 269.591877][ T43] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 269.603729][ T43] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 269.615946][ T43] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 269.642934][ T43] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 269.666128][ T43] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 269.700855][ T43] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 269.710475][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.724562][ T43] usb 3-1: config 0 descriptor?? [ 269.731717][T11033] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 269.743699][T11033] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 269.756786][ T43] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 269.813978][ T5881] usb 5-1: GET_CAPABILITIES returned 0 [ 269.819966][ T5881] usbtmc 5-1:16.0: can't read capabilities [ 269.975638][ T5881] usb 3-1: USB disconnect, device number 20 [ 269.982226][ T5901] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 270.010939][ T5881] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 270.033321][ T43] usb 5-1: USB disconnect, device number 20 [ 270.158228][ T5901] usb 8-1: Using ep0 maxpacket: 8 [ 270.174299][ T5901] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 270.196104][ T5901] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.227905][ T5901] pvrusb2: Hardware description: Terratec Grabster AV400 [ 270.246320][ T5901] pvrusb2: ********** [ 270.250515][ T5901] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 270.273931][ T5901] pvrusb2: Important functionality might not be entirely working. [ 270.283137][ T5901] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 270.296151][ T5901] pvrusb2: ********** [ 270.356182][ T5881] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 270.428946][ T2342] pvrusb2: Invalid write control endpoint [ 270.500258][ T2342] pvrusb2: Invalid write control endpoint [ 270.506649][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 270.517524][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 270.525116][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 270.539025][ T2342] pvrusb2: Device being rendered inoperable [ 270.545281][ T2342] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 270.556749][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 270.566734][ T2342] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 270.576543][ T2342] pvrusb2: Attached sub-driver cx25840 [ 270.582075][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 270.591303][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.636128][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 270.642038][ T5881] usb 6-1: New USB device found, idVendor=1018, idProduct=1410, bcdDevice=40.00 [ 270.670859][ T5910] usb 8-1: USB disconnect, device number 5 [ 270.690967][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.734304][ T5881] usb 6-1: config 0 descriptor?? [ 270.886947][T11072] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 271.154663][ T5881] hid (null): invalid report_count 1366374106 [ 271.165537][ T5881] hid-generic 0003:1018:1410.0013: invalid report_count 1366374106 [ 271.178762][ T4880] net_ratelimit: 8 callbacks suppressed [ 271.178781][ T4880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.186107][ T5881] hid-generic 0003:1018:1410.0013: item 0 4 1 9 parsing failed [ 271.237169][ T5881] hid-generic 0003:1018:1410.0013: probe with driver hid-generic failed with error -22 [ 271.369002][ T5910] usb 6-1: USB disconnect, device number 15 [ 272.581174][T11126] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 272.599214][ T5881] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 272.766491][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 272.800727][ T5881] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 272.824047][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.852502][ T5881] usb 3-1: Product: syz [ 272.857767][ T5881] usb 3-1: Manufacturer: syz [ 272.862459][ T5881] usb 3-1: SerialNumber: syz [ 272.870780][ T5881] usb 3-1: config 0 descriptor?? [ 272.879753][ T5881] gspca_main: se401-2.14.0 probing 047d:5003 [ 273.031708][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 273.031727][ T30] audit: type=1400 audit(1748432840.770:352): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=11149 comm="syz.4.2290" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35710 [ 273.470512][T11159] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 273.480470][T11159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.489676][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.496687][ T5881] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 273.588607][ T5881] hid-generic 0005:046D:FFF9.0014: item fetching failed at offset 0/1 [ 273.655260][ T5881] hid-generic 0005:046D:FFF9.0014: probe with driver hid-generic failed with error -22 [ 273.733642][ T5901] usb 3-1: USB disconnect, device number 21 [ 274.119892][T11187] program syz.7.2307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.277883][ T5901] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 274.439705][ T5901] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 274.452718][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.465449][ T5901] usb 1-1: config 0 descriptor?? [ 275.269045][T11215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.278301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.304363][ T5901] usb 1-1: Cannot set autoneg [ 275.320504][ T5901] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 275.362865][ T5901] usb 1-1: USB disconnect, device number 17 [ 275.604127][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.622398][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.630724][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.638837][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.647055][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.655131][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.663384][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.671366][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.679424][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.692832][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.703285][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.710919][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.718623][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.732337][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.739868][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.747380][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.755051][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.762608][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.770085][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.777606][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.785023][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.792493][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.800011][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.808155][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.815623][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.836259][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.843715][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.857475][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.865780][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.873571][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.881118][ T5901] hid-generic 0000:0003:0000.0015: unknown main item tag 0x0 [ 275.892311][ T5901] hid-generic 0000:0003:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 275.936110][ T9] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 276.113921][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.127452][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 276.142449][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 276.155105][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 276.165172][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.181294][T11230] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 276.191763][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 276.200937][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 276.217222][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 276.222608][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 276.236726][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 276.247222][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 276.548411][ T9] usb 5-1: USB disconnect, device number 21 [ 276.616267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.876416][ T9] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 276.947009][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.058342][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.085886][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 277.126162][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 277.171910][ T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 277.212706][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.263686][T11230] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 277.298604][ T9] hub 5-1:1.0: bad descriptor, ignoring hub [ 277.331430][ T9] hub 5-1:1.0: probe with driver hub failed with error -5 [ 277.350237][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 277.355596][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 277.382194][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 277.391433][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 277.656995][ T5910] usb 5-1: USB disconnect, device number 22 [ 277.897560][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2345'. [ 277.927465][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2345'. [ 278.373488][T11284] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 278.406359][T11284] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 278.413314][T11284] nullb0: p2 start 1840217545 is beyond EOD, truncated [ 278.446093][T11284] nullb0: p3 start 2781609279 is beyond EOD, truncated [ 278.456329][T11284] nullb0: p4 start 2763479866 is beyond EOD, truncated [ 278.463304][T11284] nullb0: p5 size 1576935424 extends beyond EOD, truncated [ 278.500561][T11284] nullb0: p6 start 4255409061 is beyond EOD, truncated [ 278.539570][T11284] nullb0: p7 start 1354594978 is beyond EOD, truncated [ 278.566126][T11284] nullb0: p8 start 2203294751 is beyond EOD, truncated [ 278.586082][T11284] nullb0: p9 size 3667873493 extends beyond EOD, truncated [ 278.600081][T11284] nullb0: p10 start 2534445966 is beyond EOD, truncated [ 278.626092][T11284] nullb0: p11 start 1318227915 is beyond EOD, truncated [ 278.649766][T11284] nullb0: p12 size 3013114410 extends beyond EOD, truncated [ 279.100158][T11302] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 279.110229][T11302] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 279.119386][T11302] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 279.128512][T11302] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 279.137649][T11302] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 279.146770][T11302] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 279.155874][T11302] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 279.165125][T11302] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 279.462844][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2359'. [ 279.696200][ T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 279.956468][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 279.983293][ T43] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 280.003275][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.022239][ T43] usb 3-1: Product: syz [ 280.026982][ T43] usb 3-1: Manufacturer: syz [ 280.031625][ T43] usb 3-1: SerialNumber: syz [ 280.049084][ T43] usb 3-1: config 0 descriptor?? [ 280.069356][ T43] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 363.327023][ C1] net_ratelimit: 3321 callbacks suppressed [ 363.327051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.570882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.605957][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 385.612995][ C1] rcu: 0-...!: (1 GPs behind) idle=a184/1/0x4000000000000000 softirq=54473/54474 fqs=0 [ 385.623964][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11326/1:b..l [ 385.632005][ C1] rcu: (detected by 1, t=10502 jiffies, g=46249, q=445 ncpus=2) [ 385.639853][ C1] Sending NMI from CPU 1 to CPUs 0: [ 385.639898][ C0] NMI backtrace for cpu 0 [ 385.639937][ C0] CPU: 0 UID: 0 PID: 11328 Comm: syz.7.2369 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 385.639966][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.639982][ C0] RIP: 0010:advance_sched+0x0/0xc90 [ 385.640020][ C0] Code: c0 05 35 8f 48 8b 34 24 e8 8d 2e 74 fb e9 f5 fb ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 [ 385.640036][ C0] RSP: 0018:ffffc90000007d38 EFLAGS: 00000046 [ 385.640052][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888025028000 [ 385.640066][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: ffff888060e77340 [ 385.640079][ C0] RBP: ffffc90000007e90 R08: ffffffff8f7ebeb7 R09: 1ffffffff1efd7d6 [ 385.640093][ C0] R10: dffffc0000000000 R11: ffffffff89785e30 R12: ffff888060e77340 [ 385.640108][ C0] R13: 1ffff11004a0515b R14: ffffffff89785e30 R15: ffff888025028ad8 [ 385.640123][ C0] FS: 00007f5d0bd9b6c0(0000) GS:ffff8881260c0000(0000) knlGS:0000000000000000 [ 385.640139][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.640151][ C0] CR2: 0000200000e1b030 CR3: 00000000506ba000 CR4: 00000000003526f0 [ 385.640167][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 385.640178][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 385.640190][ C0] Call Trace: [ 385.640199][ C0] [ 385.640210][ C0] __hrtimer_run_queues+0x529/0xc60 [ 385.640255][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 385.640278][ C0] ? read_tsc+0x9/0x20 [ 385.640302][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 385.640342][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 385.640370][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 385.640396][ C0] [ 385.640402][ C0] [ 385.640409][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 385.640429][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 385.640453][ C0] Code: 74 05 e8 db d0 6d f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 43 ea 36 f6 65 8b 05 6c 5a 1c 07 85 c0 74 40 48 c7 04 24 0e 36 [ 385.640469][ C0] RSP: 0018:ffffc90003307b60 EFLAGS: 00000206 [ 385.640484][ C0] RAX: 0d4a699ae39fbb00 RBX: 0000000000000a06 RCX: 0d4a699ae39fbb00 [ 385.640498][ C0] RDX: 0000000000000007 RSI: ffffffff8d749ec0 RDI: 0000000000000001 [ 385.640509][ C0] RBP: ffffc90003307bf0 R08: ffffffff8f7ebeb7 R09: 1ffffffff1efd7d6 [ 385.640523][ C0] R10: dffffc0000000000 R11: fffffbfff1efd7d7 R12: dffffc0000000000 [ 385.640537][ C0] R13: ffff8880b8827ac0 R14: ffff8880b8827ac0 R15: 1ffff92000660f6c [ 385.640563][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 385.640586][ C0] ? read_tsc+0x9/0x20 [ 385.640609][ C0] clock_was_set+0x63b/0x7c0 [ 385.640638][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 385.640657][ C0] ? do_settimeofday64+0x2d1/0x5e0 [ 385.640687][ C0] ? timekeeping_update_from_shadow+0x2b1/0x350 [ 385.640718][ C0] do_settimeofday64+0x2ec/0x5e0 [ 385.640745][ C0] ? safesetid_security_capable+0xa9/0x1a0 [ 385.640773][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 385.640800][ C0] ? vhost_vsock_dev_ioctl+0x6e8/0xdc0 [ 385.640828][ C0] ? bpf_lsm_settime+0x9/0x20 [ 385.640850][ C0] ? security_settime64+0x76/0x290 [ 385.640885][ C0] ? do_sys_settimeofday64+0x163/0x260 [ 385.640916][ C0] __x64_sys_clock_settime+0x22c/0x280 [ 385.640935][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 385.640963][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 385.640986][ C0] ? do_syscall_64+0xbe/0x3b0 [ 385.641015][ C0] do_syscall_64+0xfa/0x3b0 [ 385.641040][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.641065][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.641083][ C0] ? clear_bhb_loop+0x60/0xb0 [ 385.641104][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.641123][ C0] RIP: 0033:0x7f5d0af8e969 [ 385.641205][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.641221][ C0] RSP: 002b:00007f5d0bd9b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 385.641239][ C0] RAX: ffffffffffffffda RBX: 00007f5d0b1b5fa0 RCX: 00007f5d0af8e969 [ 385.641253][ C0] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 385.641265][ C0] RBP: 00007f5d0b010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 385.641277][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.641287][ C0] R13: 0000000000000000 R14: 00007f5d0b1b5fa0 R15: 00007ffd268cd828 [ 385.641311][ C0] [ 385.641888][ C1] task:syz.4.2368 state:R running task stack:24104 pid:11326 tgid:11325 ppid:5830 task_flags:0x40054c flags:0x00004000 [ 386.112430][ C1] Call Trace: [ 386.115777][ C1] [ 386.118751][ C1] __schedule+0x16a2/0x4cb0 [ 386.123312][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x851/0xc40 [ 386.129936][ C1] ? preempt_schedule_common+0x83/0xd0 [ 386.135433][ C1] ? __pfx___schedule+0x10/0x10 [ 386.140418][ C1] ? __lock_acquire+0xab9/0xd20 [ 386.145515][ C1] ? preempt_schedule+0xae/0xc0 [ 386.150436][ C1] preempt_schedule_common+0x83/0xd0 [ 386.156051][ C1] preempt_schedule+0xae/0xc0 [ 386.160952][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 386.166467][ C1] preempt_schedule_thunk+0x16/0x30 [ 386.171709][ C1] _raw_spin_unlock+0x3f/0x50 [ 386.176571][ C1] unmap_page_range+0x38e8/0x4580 [ 386.181903][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 386.187329][ C1] ? unmap_single_vma+0x1b2/0x2a0 [ 386.192998][ C1] unmap_vmas+0x25d/0x3c0 [ 386.197401][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 386.202410][ C1] exit_mmap+0x245/0xba0 [ 386.206701][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 386.211533][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 386.217338][ C1] ? __pfx_exit_aio+0x10/0x10 [ 386.222069][ C1] ? uprobe_clear_state+0x274/0x290 [ 386.227421][ C1] ? mm_update_next_owner+0xa7/0x870 [ 386.233384][ C1] __mmput+0x118/0x420 [ 386.238286][ C1] exit_mm+0x1da/0x2c0 [ 386.242519][ C1] ? __pfx_exit_mm+0x10/0x10 [ 386.247227][ C1] ? rcu_is_watching+0x15/0xb0 [ 386.252034][ C1] do_exit+0x864/0x2550 [ 386.256326][ C1] ? __lock_acquire+0xab9/0xd20 [ 386.261229][ C1] ? do_raw_spin_lock+0x121/0x290 [ 386.266306][ C1] ? __pfx_do_exit+0x10/0x10 [ 386.271008][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 386.276440][ C1] do_group_exit+0x21c/0x2d0 [ 386.281123][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.286364][ C1] get_signal+0x125e/0x1310 [ 386.290930][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 386.296603][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 386.302820][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 386.308322][ C1] exit_to_user_mode_loop+0x75/0x110 [ 386.313632][ C1] do_syscall_64+0x2bd/0x3b0 [ 386.318263][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.323497][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.329585][ C1] ? clear_bhb_loop+0x60/0xb0 [ 386.334293][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.340208][ C1] RIP: 0033:0x7f6032d8e969 [ 386.344647][ C1] RSP: 002b:00007f6030bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 386.353093][ C1] RAX: 0000000000000001 RBX: 00007f6032fb5fa8 RCX: 00007f6032d8e969 [ 386.361093][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6032fb5fac [ 386.369118][ C1] RBP: 00007f6032fb5fa0 R08: 7fffffffffffffff R09: 0000000000000000 [ 386.377127][ C1] R10: 0000000000000048 R11: 0000000000000246 R12: 00007f6032fb5fac [ 386.385121][ C1] R13: 0000000000000000 R14: 00007fffea586970 R15: 00007fffea586a58 [ 386.393137][ C1] [ 386.396174][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g46249 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 386.407390][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 386.417373][ C1] rcu: RCU grace-period kthread stack dump: [ 386.423275][ C1] task:rcu_preempt state:R running task stack:26856 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 386.436840][ C1] Call Trace: [ 386.440152][ C1] [ 386.443130][ C1] __schedule+0x16a2/0x4cb0 [ 386.447691][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 386.452949][ C1] ? schedule+0x165/0x360 [ 386.457314][ C1] ? __lock_acquire+0xab9/0xd20 [ 386.462192][ C1] ? __pfx___schedule+0x10/0x10 [ 386.467096][ C1] ? schedule+0x91/0x360 [ 386.471372][ C1] schedule+0x165/0x360 [ 386.475602][ C1] schedule_timeout+0x12b/0x270 [ 386.480496][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 386.485895][ C1] ? __pfx_process_timeout+0x10/0x10 [ 386.491223][ C1] ? prepare_to_swait_event+0x341/0x380 [ 386.496815][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 386.501688][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.506930][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 386.511895][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 386.517203][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 386.522445][ C1] ? finish_swait+0xcd/0x1f0 [ 386.527077][ C1] rcu_gp_kthread+0x99/0x390 [ 386.531695][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 386.536919][ C1] ? __kthread_parkme+0x7b/0x200 [ 386.541903][ C1] ? __kthread_parkme+0x1a1/0x200 [ 386.546981][ C1] kthread+0x711/0x8a0 [ 386.551080][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 386.556308][ C1] ? __pfx_kthread+0x10/0x10 [ 386.560953][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.566181][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.571413][ C1] ? __pfx_kthread+0x10/0x10 [ 386.576023][ C1] ret_from_fork+0x3fc/0x770 [ 386.580741][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 386.585939][ C1] ? __switch_to_asm+0x39/0x70 [ 386.590734][ C1] ? __switch_to_asm+0x33/0x70 [ 386.595524][ C1] ? __pfx_kthread+0x10/0x10 [ 386.600222][ C1] ret_from_fork_asm+0x1a/0x30 [ 386.605111][ C1] [ 386.608152][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 386.614504][ C1] CPU: 1 UID: 0 PID: 1015 Comm: kworker/u8:5 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 386.626331][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.636421][ C1] Workqueue: iou_exit io_ring_exit_work [ 386.642009][ C1] RIP: 0010:smp_call_function_many_cond+0xe69/0x11c0 [ 386.648734][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 00 74 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 ab 6f 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 90 6f 0b [ 386.668374][ C1] RSP: 0018:ffffc9000383f5a0 EFLAGS: 00000293 [ 386.674464][ C1] RAX: ffffffff81b486b0 RBX: ffff8880b893b000 RCX: ffff888025ab8000 [ 386.682458][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 386.690446][ C1] RBP: ffffc9000383f700 R08: ffffffff8f7ebeb7 R09: 1ffffffff1efd7d6 [ 386.698443][ C1] R10: dffffc0000000000 R11: fffffbfff1efd7d7 R12: 1ffff1101710830d [ 386.706457][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8841868 [ 386.714447][ C1] FS: 0000000000000000(0000) GS:ffff8881261c0000(0000) knlGS:0000000000000000 [ 386.723421][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.730025][ C1] CR2: 0000200000000040 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 386.738039][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.746040][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.754130][ C1] Call Trace: [ 386.757427][ C1] [ 386.760395][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 386.765464][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 386.771827][ C1] ? __pfx___text_poke+0x10/0x10 [ 386.776969][ C1] ? rcu_is_watching+0x15/0xb0 [ 386.781866][ C1] ? trace_contention_end+0x39/0x120 [ 386.787224][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 386.792299][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 386.797474][ C1] smp_text_poke_batch_finish+0x5e0/0x1100 [ 386.803338][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 386.808403][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 386.814690][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 386.820985][ C1] ? __jump_label_update+0x37e/0x3a0 [ 386.826518][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 386.832537][ C1] __static_key_slow_dec_cpuslocked+0xbb/0x110 [ 386.838919][ C1] static_key_slow_dec+0x45/0x90 [ 386.843894][ C1] io_ring_ctx_free+0x32c/0x500 [ 386.848802][ C1] io_ring_exit_work+0x810/0x880 [ 386.853822][ C1] ? __pfx_io_ring_exit_work+0x10/0x10 [ 386.859333][ C1] ? __pfx_io_tctx_exit_cb+0x10/0x10 [ 386.864689][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 386.870526][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 386.876369][ C1] process_scheduled_works+0xade/0x17b0 [ 386.881980][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 386.888019][ C1] worker_thread+0x8a0/0xda0 [ 386.892778][ C1] kthread+0x711/0x8a0 [ 386.896873][ C1] ? __pfx_worker_thread+0x10/0x10 [ 386.902017][ C1] ? __pfx_kthread+0x10/0x10 [ 386.906648][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.911877][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.917104][ C1] ? __pfx_kthread+0x10/0x10 [ 386.921718][ C1] ret_from_fork+0x3fc/0x770 [ 386.926348][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 386.931490][ C1] ? __switch_to_asm+0x39/0x70 [ 386.936274][ C1] ? __switch_to_asm+0x33/0x70 [ 386.941060][ C1] ? __pfx_kthread+0x10/0x10 [ 386.945691][ C1] ret_from_fork_asm+0x1a/0x30 [ 386.950528][ C1]