last executing test programs: 8m48.857633174s ago: executing program 4 (id=115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xe2}}}}}}}, 0x0) 8m48.611467597s ago: executing program 4 (id=118): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_enter(0xffffffffffffffff, 0x4e85, 0x4d94, 0xc0, 0x0, 0x0) 8m47.781186229s ago: executing program 1 (id=126): unshare(0x22020600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x2, 0xfff}) 8m47.400983879s ago: executing program 1 (id=131): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8m47.152829961s ago: executing program 1 (id=135): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setown(r0, 0x8, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 8m47.048133201s ago: executing program 4 (id=137): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 8m46.939624027s ago: executing program 1 (id=138): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @remote, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x5, @remote, 0x3}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000480)='\a', 0x1}], 0x1}}], 0x2, 0x931766f6319e2dc4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8m46.871460603s ago: executing program 4 (id=141): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8m46.569699516s ago: executing program 1 (id=143): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000800010000000c000100000000000000000008000500", @ANYRES32=r2], 0x50}}, 0x800) 8m46.377911979s ago: executing program 4 (id=144): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000340)={0x0}) 8m45.780724783s ago: executing program 32 (id=145): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lsm_list_modules(0x0, 0x0, 0x0) 8m45.756018976s ago: executing program 1 (id=147): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x3ff, 0x5, 0x0, 0x7, 0x8}}, {0x4}}]}]}, 0xac}}, 0x20000000) 8m45.568292958s ago: executing program 33 (id=147): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x3ff, 0x5, 0x0, 0x7, 0x8}}, {0x4}}]}]}, 0xac}}, 0x20000000) 8m45.479568395s ago: executing program 4 (id=149): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) 8m45.479408065s ago: executing program 34 (id=149): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc) 8m5.875122795s ago: executing program 3 (id=465): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r0, r1) 8m5.724138921s ago: executing program 3 (id=467): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}}, 0x0) 8m4.536281184s ago: executing program 3 (id=471): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="bc3310", 0x3}], 0x1, 0x0, 0x0, 0x8010}], 0x1, 0x40890) 8m4.384709955s ago: executing program 3 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 8m4.154491707s ago: executing program 3 (id=479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0xc, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8m3.763479331s ago: executing program 3 (id=482): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c06, 0x3) 8m3.352743231s ago: executing program 35 (id=482): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r0 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c06, 0x3) 7m0.661266571s ago: executing program 2 (id=1306): unshare(0x6020400) r0 = socket$key(0xf, 0x3, 0x2) setfsuid(0xee00) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 7m0.527534272s ago: executing program 2 (id=1308): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r0, 0x6, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r0, 0x7, &(0x7f0000000300)={0x1, 0x0, 0x10000000000000, 0x3}) 7m0.427691774s ago: executing program 2 (id=1309): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 7m0.379559536s ago: executing program 2 (id=1310): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 7m0.282038945s ago: executing program 2 (id=1312): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x48d0) 7m0.027206931s ago: executing program 2 (id=1313): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) close(0x3) 6m59.805690283s ago: executing program 36 (id=1313): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) close(0x3) 2m10.045285232s ago: executing program 5 (id=5008): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000580)={0x4, 0x1, 0x7, 0x0, 0x2, 0x3, 0x800000000000003, 0x6, 0x7fffffff}) 2m9.889229267s ago: executing program 5 (id=5010): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 2m9.602263591s ago: executing program 5 (id=5013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000000)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2m8.598972185s ago: executing program 5 (id=5021): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m8.44215965s ago: executing program 5 (id=5023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) 2m7.961112725s ago: executing program 5 (id=5025): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 2m7.389994947s ago: executing program 37 (id=5025): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) 2.620415775s ago: executing program 6 (id=6485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={0x0, 0x2b08}}, 0x4004006) 2.260183474s ago: executing program 6 (id=6491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x330, r1}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) 1.939603312s ago: executing program 9 (id=6494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x9) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xffff, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 1.753508532s ago: executing program 6 (id=6496): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000d80ffff", 0x8) 1.729902964s ago: executing program 9 (id=6498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd05005600080054"], 0xfdef) 1.620145601s ago: executing program 7 (id=6499): rename(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 1.395475731s ago: executing program 9 (id=6502): rt_sigprocmask(0x2, &(0x7f0000000040)={[0x6d285c1d]}, 0x0, 0x8) r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r1, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) tkill(r0, 0x1f) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x2e]}, 0x8}) 1.379625562s ago: executing program 7 (id=6503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "38b1acb1812aceed", "be6be3349bf6781aa925736d4238a19268a4f736feceb0837781f81ad518bb6e", "05ba26bf", "e5c8a6a300"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "fb7faf0400", "0d35db0d4af1cbcce779bbc24b53fc4988c215118dd14cb837de56339a336a19", "46d93a3b", "8891ea13f18ef0be"}, 0x38) 1.340636951s ago: executing program 0 (id=6504): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xab) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7d) 1.20924311s ago: executing program 7 (id=6506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kvm_ioapic_set_irq\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x6000, 0x54, 0x2a1, 0x4, 0x0, [{0x7, 0x3, 0xf, '\x00', 0x1}, {0x5, 0xa, 0xab, '\x00', 0x8}, {0x81, 0xf8, 0xa1, '\x00', 0x3}, {0x2, 0x3, 0x1}, {0xff, 0x7f, 0xf9, '\x00', 0x80}, {0x7, 0x9, 0x2, '\x00', 0x3}, {0x5c, 0x3, 0xfe, '\x00', 0xd}, {0x2, 0x9, 0x57, '\x00', 0x13}, {0xa, 0x7, 0x2, '\x00', 0x7}, {0x5, 0xbe, 0xf4, '\x00', 0x6}, {0x4, 0x6, 0xfa, '\x00', 0x1}, {0x7, 0xf9, 0xb0, '\x00', 0xd2}, {0x1, 0x20, 0x2, '\x00', 0x5}, {0x6, 0x7, 0x4, '\x00', 0xc}, {0x1, 0x6, 0x9, '\x00', 0x6}, {0x6, 0xa, 0x9, '\x00', 0x2}, {0x1, 0x80, 0x5, '\x00', 0xc4}, {0x5, 0x2, 0x0, '\x00', 0x8}, {0x81, 0x51, 0x12, '\x00', 0x9}, {0x1, 0x8, 0x6, '\x00', 0x67}, {0x2, 0x4, 0xfb, '\x00', 0x6}, {0xf8, 0x1, 0x9, '\x00', 0x9}, {0x0, 0x4, 0xe, '\x00', 0xd}, {0x3, 0x7f, 0x2, '\x00', 0x5}]}}) 1.202877868s ago: executing program 9 (id=6507): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) 1.115715101s ago: executing program 0 (id=6509): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x9dece93493136c35, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffff}, {0x10, 0x7}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c014}, 0x41) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 994.740922ms ago: executing program 9 (id=6510): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 959.44174ms ago: executing program 7 (id=6511): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 832.15042ms ago: executing program 8 (id=6512): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x1) write(r0, 0x0, 0x0) 793.480708ms ago: executing program 7 (id=6513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) close(0x4) 745.774732ms ago: executing program 6 (id=6514): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="77167ead34cd1eaf2108c04de96e99fa4435f9041368e8dfec6af2ae8080b56c53c12b8431d17955ae1ec78709eee9acf825fdb672651f7eafb44b576930aff4b6a86ced3e4392cfe57a2c11b97e93f38debd6dc69f3a50d5742daa7081df08bd8118dcd6d9d18830c7d79d8", 0x6c}, {&(0x7f0000000140)="66348451d22f5e2e4385e0bf75c5c3d3032703", 0x13}, {&(0x7f0000000500)="1b1e", 0x2}], 0x3, 0x0, 0x0, 0x40880}], 0x1, 0x4814) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0d}], 0x2, 0x2001, 0x0) 603.672007ms ago: executing program 8 (id=6515): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000010000000000000001"]) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x40) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) 603.40346ms ago: executing program 7 (id=6516): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x807}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, 0x0, 0x0, 0x0}, 0x0) 570.109817ms ago: executing program 0 (id=6517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x238}}, 0x0) close(r1) 535.06355ms ago: executing program 8 (id=6518): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001640)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 451.099964ms ago: executing program 6 (id=6519): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x3f, 0x0}, 0x4000) 445.209603ms ago: executing program 0 (id=6520): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) 183.71207ms ago: executing program 0 (id=6521): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 183.470688ms ago: executing program 8 (id=6522): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 161.902199ms ago: executing program 6 (id=6523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x429}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000) 123.341975ms ago: executing program 8 (id=6524): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 42.53306ms ago: executing program 8 (id=6525): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 41.800153ms ago: executing program 0 (id=6526): read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x408880, 0x40) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mount(0x0, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x10, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) 0s ago: executing program 9 (id=6527): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x16}, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): cketSize 0 [ 496.180110][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 496.204498][ T982] usb 9-1: USB disconnect, device number 38 [ 496.239209][ T5947] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.258259][ T5947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.291521][ T5947] usb 6-1: config 0 descriptor?? [ 496.377947][T17993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 496.707560][ T5947] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x3 [ 496.736896][ T5947] plantronics 0003:047F:FFFF.003A: unbalanced collection at end of report description [ 496.758525][ T5947] plantronics 0003:047F:FFFF.003A: parse failed [ 496.791868][ T5947] plantronics 0003:047F:FFFF.003A: probe with driver plantronics failed with error -22 [ 496.918043][ T44] usb 6-1: USB disconnect, device number 51 [ 498.139050][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 498.139072][ T30] audit: type=1326 audit(1753725373.204:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18056 comm="syz.6.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 498.199081][ T30] audit: type=1326 audit(1753725373.204:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18056 comm="syz.6.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 498.300075][ T30] audit: type=1326 audit(1753725373.204:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18056 comm="syz.6.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 498.375791][ T30] audit: type=1326 audit(1753725373.204:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18056 comm="syz.6.4840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 499.260733][T18104] netlink: 27 bytes leftover after parsing attributes in process `syz.6.4862'. [ 499.527694][T18112] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 500.359243][ T44] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 500.534444][ T44] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 500.555185][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.563239][T18149] netlink: 'syz.9.4882': attribute type 1 has an invalid length. [ 500.563265][T18149] netlink: 168864 bytes leftover after parsing attributes in process `syz.9.4882'. [ 500.590351][ T44] usb 6-1: config 0 descriptor?? [ 500.607484][ T44] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 500.713753][ T982] IPVS: starting estimator thread 0... [ 500.719756][T18151] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 500.820247][T18155] IPVS: using max 24 ests per chain, 57600 per kthread [ 501.011981][T18165] netlink: 408 bytes leftover after parsing attributes in process `syz.6.4889'. [ 501.027581][T18165] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4889'. [ 501.371921][ T30] audit: type=1326 audit(1753725376.444:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18173 comm="syz.7.4894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4dfff8e9a9 code=0x0 [ 501.446107][ T44] gspca_stv06xx: I2C: Read error writing address: -71 [ 501.464989][ T44] usb 6-1: USB disconnect, device number 52 [ 501.849207][ T5947] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 502.025714][ T5947] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 502.038293][ T5947] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 502.061300][ T5947] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 502.096261][ T5947] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 502.138179][ T5947] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 502.168619][ T5947] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 502.185028][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 502.212702][ T5947] usb 9-1: Product: syz [ 502.227253][ T5947] usb 9-1: Manufacturer: syz [ 502.261022][ T5947] cdc_wdm 9-1:1.0: skipping garbage [ 502.273584][ T5947] cdc_wdm 9-1:1.0: skipping garbage [ 502.290990][ T5947] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 502.296979][ T5947] cdc_wdm 9-1:1.0: Unknown control protocol [ 502.681264][T18212] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4909'. [ 503.095758][T18232] netlink: 788 bytes leftover after parsing attributes in process `syz.5.4916'. [ 503.807198][T18251] syzkaller1: entered promiscuous mode [ 503.820281][T18251] syzkaller1: entered allmulticast mode [ 504.019807][T18259] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.246861][T18268] netlink: 520 bytes leftover after parsing attributes in process `syz.5.4934'. [ 504.650960][ T1213] usb 9-1: USB disconnect, device number 39 [ 504.719706][ T5924] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 504.919628][ T5924] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.942752][ T5924] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.966873][ T5924] usb 10-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 505.001670][ T5924] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.024631][ T5924] usb 10-1: config 0 descriptor?? [ 505.269953][ T982] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 505.387489][T18299] sp0: Synchronizing with TNC [ 505.430041][ T982] usb 6-1: Using ep0 maxpacket: 16 [ 505.461061][ T982] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 505.462972][ T5924] steelseries 0003:1038:12B6.003B: unknown main item tag 0x0 [ 505.486410][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.498185][ T5924] steelseries 0003:1038:12B6.003B: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.9-1/input0 [ 505.505165][ T982] usb 6-1: Product: syz [ 505.520893][ T982] usb 6-1: Manufacturer: syz [ 505.533204][ T982] usb 6-1: SerialNumber: syz [ 505.551315][ T982] usb 6-1: config 0 descriptor?? [ 505.575176][ T982] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 505.592074][ T982] usb 6-1: Detected FT-X [ 505.631883][T18306] loop5: detected capacity change from 0 to 3879 [ 505.652064][T18306] loop5: detected capacity change from 3879 to 4751 [ 505.778436][ T982] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 505.840149][ T7293] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 506.003118][ T7293] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 506.036243][ T5924] steelseries 0003:1038:12B6.003B: hid_hw_raw_request() failed with -71 [ 506.046124][ T7293] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.063127][ T5924] usb 10-1: USB disconnect, device number 29 [ 506.095793][ T7293] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.126805][ T7293] usb 7-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 506.136457][ T7293] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.149805][ T7293] usb 7-1: config 0 descriptor?? [ 506.240828][ T982] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 506.266274][ T982] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 506.305354][ T982] usb 6-1: USB disconnect, device number 53 [ 506.327344][ T982] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 506.347788][ T982] ftdi_sio 6-1:0.0: device disconnected [ 506.473141][T18315] xt_hashlimit: size too large, truncated to 1048576 [ 506.558044][T18317] : renamed from vxcan1 (while UP) [ 506.600560][ T7293] sony 0003:054C:024B.003C: unexpected long global item [ 506.608235][ T7293] sony 0003:054C:024B.003C: parse failed [ 506.641293][ T7293] sony 0003:054C:024B.003C: probe with driver sony failed with error -22 [ 506.806294][ T5924] usb 7-1: USB disconnect, device number 48 [ 507.213237][T18342] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4962'. [ 507.226299][T18342] chnl_net:caif_netlink_parms(): no params data found [ 507.355437][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.545424][T18349] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4965'. [ 507.637615][T18354] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4965'. [ 508.248637][T18374] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4976'. [ 508.335775][ T30] audit: type=1400 audit(1753725383.404:467): lsm=SMACK fn=smack_inode_set_acl action=denied subject="w" object="_" requested=w pid=18378 comm="syz.5.4979" name="928" dev="tmpfs" ino=4738 [ 508.564949][T18387] syzkaller1: entered promiscuous mode [ 508.585541][T18387] syzkaller1: entered allmulticast mode [ 508.758139][T18402] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4986'. [ 508.958430][T18409] Invalid logical block size (3) [ 509.104272][T18417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4994'. [ 509.410114][T18427] syzkaller1: entered promiscuous mode [ 509.415658][T18427] syzkaller1: entered allmulticast mode [ 509.907487][ T5947] IPVS: starting estimator thread 0... [ 509.908391][T18439] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 510.004428][T18446] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 510.016739][T18444] IPVS: using max 27 ests per chain, 64800 per kthread [ 510.119191][ T5924] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 510.329609][ T5924] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.349189][ T5924] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 510.399234][ T5924] usb 10-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 510.429140][ T5924] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.452400][ T5924] usb 10-1: config 0 descriptor?? [ 510.903947][ T5924] viewsonic 0003:0543:E621.003D: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.9-1/input0 [ 511.085862][ T7293] usb 10-1: USB disconnect, device number 30 [ 511.219061][ T5924] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 511.349702][T18465] orangefs_mount: mount request failed with -4 [ 511.381109][ T5924] usb 9-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 511.411667][ T5924] usb 9-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.430062][ T5924] usb 9-1: config 0 interface 0 has no altsetting 0 [ 511.439333][ T5924] usb 9-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 511.451767][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.462938][ T5924] usb 9-1: config 0 descriptor?? [ 511.884002][ T5924] pantherlord 0003:0810:0002.003E: unknown global tag 0xc [ 511.899094][ T5924] pantherlord 0003:0810:0002.003E: item 0 4 1 12 parsing failed [ 511.910961][T18477] netlink: 'syz.7.5018': attribute type 6 has an invalid length. [ 511.919887][ T5924] pantherlord 0003:0810:0002.003E: parse failed [ 511.926283][ T5924] pantherlord 0003:0810:0002.003E: probe with driver pantherlord failed with error -22 [ 512.105893][ T5924] usb 9-1: USB disconnect, device number 40 [ 512.215010][ T1151] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.476746][ T1151] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.572557][ T1151] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.674314][ T1151] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.755663][T18498] loop9: detected capacity change from 0 to 7 [ 512.870686][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5031'. [ 513.116028][ T1151] bridge_slave_1: left allmulticast mode [ 513.137167][ T1151] bridge_slave_1: left promiscuous mode [ 513.152373][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.200788][ T1151] bridge_slave_0: left allmulticast mode [ 513.213016][ T1151] bridge_slave_0: left promiscuous mode [ 513.233921][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.535679][ T5156] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 513.546855][ T5156] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 513.571013][ T7293] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 513.594464][ T5156] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 513.605711][ T5156] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 513.732876][ T5156] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 513.759816][ T7293] usb 9-1: Using ep0 maxpacket: 16 [ 513.930293][ T7293] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 513.938464][ T7293] usb 9-1: config 0 has no interface number 0 [ 513.962541][ T7293] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.009055][ T7293] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.032639][ T7293] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 514.042011][ T7293] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.055652][ T7293] usb 9-1: config 0 descriptor?? [ 514.245594][ T1151] gretap0 (unregistering): left promiscuous mode [ 514.643456][ T1151] bond0 (unregistering): left promiscuous mode [ 514.650068][ T1151] bond_slave_0: left promiscuous mode [ 514.655679][ T1151] bond_slave_1: left promiscuous mode [ 514.663479][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.675965][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.685236][ T7293] uclogic 0003:28BD:0071.003F: pen parameters not found [ 514.701998][ T1151] bond0 (unregistering): Released all slaves [ 514.709389][ T7293] uclogic 0003:28BD:0071.003F: interface is invalid, ignoring [ 514.729319][ T7293] usb 9-1: USB disconnect, device number 41 [ 515.178415][ T30] audit: type=1326 audit(1753725390.244:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.9.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ceab8e9a9 code=0x7fc00000 [ 515.200375][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.496056][T18516] chnl_net:caif_netlink_parms(): no params data found [ 515.525922][T18548] syzkaller1: entered promiscuous mode [ 515.532181][T18548] syzkaller1: entered allmulticast mode [ 515.643155][ T1151] batadv_slave_1: left promiscuous mode [ 515.652739][ T1151] batadv0: left promiscuous mode [ 515.675008][ T1151] hsr_slave_0: left promiscuous mode [ 515.685915][ T1151] hsr_slave_1: left promiscuous mode [ 515.696259][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.721619][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.742707][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 515.750367][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.807203][ T1151] veth1_macvtap: left promiscuous mode [ 515.813396][ T1151] veth0_macvtap: left promiscuous mode [ 515.819139][ T1151] veth1_vlan: left promiscuous mode [ 515.824550][ T1151] veth0_vlan: left promiscuous mode [ 515.830374][ T5156] Bluetooth: hci0: command tx timeout [ 516.097486][ T1151] pimreg3 (unregistering): left allmulticast mode [ 516.669142][ T7293] usb 10-1: new low-speed USB device number 31 using dummy_hcd [ 516.833006][ T7293] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 516.848834][ T7293] usb 10-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 516.865973][ T7293] usb 10-1: config 0 interface 0 has no altsetting 0 [ 516.873251][ T7293] usb 10-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 516.894170][ T7293] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.911925][ T7293] usb 10-1: config 0 descriptor?? [ 516.918232][T18564] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 516.930262][ T1151] team_slave_1 (unregistering): left allmulticast mode [ 516.960769][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 517.041719][ T1151] team_slave_0 (unregistering): left allmulticast mode [ 517.056610][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 517.356980][ T7293] holtek_mouse 0003:04D9:A067.0040: item fetching failed at offset 7/8 [ 517.374446][ T7293] holtek_mouse 0003:04D9:A067.0040: hid parse failed: -22 [ 517.384048][ T7293] holtek_mouse 0003:04D9:A067.0040: probe with driver holtek_mouse failed with error -22 [ 517.574461][ T5909] usb 10-1: USB disconnect, device number 31 [ 517.589439][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 517.918711][ T5156] Bluetooth: hci0: command tx timeout [ 518.080386][T18516] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.087839][T18516] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.095400][T18516] bridge_slave_0: entered allmulticast mode [ 518.115836][T18516] bridge_slave_0: entered promiscuous mode [ 518.135003][T18516] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.153814][T18516] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.161760][T18516] bridge_slave_1: entered allmulticast mode [ 518.169584][ T7293] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 518.180541][T18516] bridge_slave_1: entered promiscuous mode [ 518.316498][T18516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.328754][ T7293] usb 7-1: Using ep0 maxpacket: 16 [ 518.330777][T18516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.373083][ T7293] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.389267][ T7293] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.403693][T18516] team0: Port device team_slave_0 added [ 518.409530][ T7293] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 518.409563][ T7293] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.412743][ T7293] usb 7-1: config 0 descriptor?? [ 518.447451][T18516] team0: Port device team_slave_1 added [ 518.448989][T18600] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000005 [ 518.494984][T18516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.502346][T18516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.535182][T18516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.551760][T18516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.564985][T18516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.637059][T18516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.657777][ T7293] usbhid 7-1:0.0: can't add hid device: -71 [ 518.664056][ T7293] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 518.678172][ T7293] usb 7-1: USB disconnect, device number 49 [ 518.694976][ T1151] IPVS: stop unused estimator thread 0... [ 518.725737][T18603] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5069'. [ 518.825452][T18516] hsr_slave_0: entered promiscuous mode [ 518.850722][T18516] hsr_slave_1: entered promiscuous mode [ 518.977549][T18606] nullb0: AHDI p1 [ 519.549160][ T5924] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 519.721578][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.734448][ T5924] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.747115][ T5924] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 519.758015][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.770476][ T5924] usb 7-1: config 0 descriptor?? [ 519.935610][T18516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 519.954680][T18516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 519.975588][T18516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 519.989394][ T5156] Bluetooth: hci0: command tx timeout [ 519.993657][T18516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 520.188344][T18516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.218767][ T5924] sony 0003:054C:0268.0041: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.6-1/input0 [ 520.231730][ T5924] sony 0003:054C:0268.0041: failed to claim input [ 520.254718][T18516] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.282447][T13325] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.289833][T13325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.347856][T13325] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.355103][T13325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.444445][ T5924] usb 7-1: USB disconnect, device number 50 [ 520.845702][T18516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.942508][T18516] veth0_vlan: entered promiscuous mode [ 520.966433][T18516] veth1_vlan: entered promiscuous mode [ 521.050524][T18516] veth0_macvtap: entered promiscuous mode [ 521.072201][T18516] veth1_macvtap: entered promiscuous mode [ 521.096866][T18516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.114196][T18679] vivid-002: disconnect [ 521.120213][T18516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.135414][T18675] vivid-002: reconnect [ 521.135484][T18516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.186990][T18516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.198451][T18516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.214523][T18516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.352897][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.372280][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.446253][T13310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.457821][T13310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.069359][ T5156] Bluetooth: hci0: command tx timeout [ 522.949265][ T7293] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 523.113561][ T7293] usb 7-1: unable to get BOS descriptor or descriptor too short [ 523.156373][ T7293] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.197439][ T7293] usb 7-1: config 1 interface 0 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.234572][ T7293] usb 7-1: config 1 interface 0 has no altsetting 0 [ 523.272681][ T7293] usb 7-1: string descriptor 0 read error: -22 [ 523.289268][ T7293] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 523.298737][ T7293] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.358671][ T7293] usb 7-1: bad CDC descriptors [ 523.630075][ T44] usb 7-1: USB disconnect, device number 51 [ 524.250684][ T30] audit: type=1326 audit(1753725399.324:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.6.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 524.318640][ T30] audit: type=1326 audit(1753725399.344:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.6.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 524.363701][ T30] audit: type=1326 audit(1753725399.344:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.6.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 524.386548][ T30] audit: type=1326 audit(1753725399.344:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.6.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 524.433576][ T30] audit: type=1326 audit(1753725399.344:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.6.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 524.482338][ T30] audit: type=1326 audit(1753725399.344:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.6.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 524.527176][ T30] audit: type=1326 audit(1753725399.344:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.6.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 524.638605][ T30] audit: type=1326 audit(1753725399.344:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.6.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 524.681535][ T30] audit: type=1326 audit(1753725399.354:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.6.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 524.729500][ T30] audit: type=1326 audit(1753725399.354:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18754 comm="syz.6.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4638e9a9 code=0x7ffc0000 [ 525.105681][T18776] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.5133'. [ 526.805325][T18831] input: syz1 as /devices/virtual/input/input69 [ 527.705337][T18866] netlink: 'syz.8.5172': attribute type 4 has an invalid length. [ 527.716015][T18866] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5172'. [ 528.095073][ T44] kernel write not supported for file bpf-prog (pid: 44 comm: kworker/1:1) [ 528.949530][ T1213] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 529.111806][ T1213] usb 10-1: config 0 has an invalid interface number: 229 but max is 0 [ 529.121593][ T1213] usb 10-1: config 0 has no interface number 0 [ 529.127878][ T1213] usb 10-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 529.169990][ T1213] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.183382][ T1213] usb 10-1: config 0 descriptor?? [ 529.299209][ T5909] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 529.414924][ T1213] usb 10-1: USB disconnect, device number 32 [ 529.463887][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.485269][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.516132][ T5909] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 529.542737][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.550459][T18933] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5203'. [ 529.568790][ T5909] usb 1-1: config 0 descriptor?? [ 529.579163][T18933] nbd: must specify at least one socket [ 530.017244][ T5909] cm6533_jd 0003:0D8C:0022.0042: unknown main item tag 0x0 [ 530.034433][ T5909] cm6533_jd 0003:0D8C:0022.0042: unknown main item tag 0x0 [ 530.048156][ T5909] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0042/input/input70 [ 530.096275][ T5909] cm6533_jd 0003:0D8C:0022.0042: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 530.234884][ T5909] usb 1-1: USB disconnect, device number 4 [ 531.735093][T18982] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 532.147926][T18998] overlayfs: workdir and upperdir must reside under the same mount [ 532.201461][T19001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5231'. [ 532.253934][T18994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.378684][T18994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.537597][T18994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.804903][T18994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.069317][ T44] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 533.090515][T18994] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.124458][T18994] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.147570][T18994] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.176746][T18994] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.240724][ T44] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 533.255768][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.264651][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 533.264669][ T30] audit: type=1326 audit(1753725408.334:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19028 comm="syz.7.5245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4dfff8e9a9 code=0x0 [ 533.314212][ T44] usb 10-1: config 0 descriptor?? [ 533.324586][ T44] cp210x 10-1:0.0: cp210x converter detected [ 533.744793][ T44] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 533.966268][ T44] usb 10-1: cp210x converter now attached to ttyUSB0 [ 534.077920][T19055] tmpfs: Too small a size for current use [ 534.129831][T19062] bridge1: entered promiscuous mode [ 534.202699][ T1213] usb 10-1: USB disconnect, device number 33 [ 534.241388][ T1213] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 534.270955][ T1213] cp210x 10-1:0.0: device disconnected [ 534.465296][T19074] Bluetooth: MGMT ver 1.23 [ 535.297802][T19103] loop6: detected capacity change from 0 to 2098 [ 535.345832][T19107] blk_print_req_error: 6 callbacks suppressed [ 535.345856][T19107] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 535.599900][T19116] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000004 [ 535.840497][ T44] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 536.009301][ T44] usb 10-1: Using ep0 maxpacket: 32 [ 536.030203][ T44] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 536.062785][ T44] usb 10-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 536.083562][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.092296][ T44] usb 10-1: Product: syz [ 536.096836][ T44] usb 10-1: Manufacturer: syz [ 536.102026][ T44] usb 10-1: SerialNumber: syz [ 536.119938][ T44] usb 10-1: config 0 descriptor?? [ 536.126030][T19115] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 536.151494][ T44] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input71 [ 536.296390][T19140] sctp: [Deprecated]: syz.6.5291 (pid 19140) Use of int in max_burst socket option. [ 536.296390][T19140] Use struct sctp_assoc_value instead [ 536.398065][ T44] usb 10-1: USB disconnect, device number 34 [ 536.404526][ C1] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 536.586852][T19150] sctp: [Deprecated]: syz.8.5295 (pid 19150) Use of int in max_burst socket option deprecated. [ 536.586852][T19150] Use struct sctp_assoc_value instead [ 537.059255][ T5924] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 537.222235][ T5924] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 537.230957][ T5924] usb 7-1: config 0 has no interface number 0 [ 537.238165][ T5924] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 537.254094][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.285113][ T5924] usb 7-1: config 0 descriptor?? [ 537.301517][ T5924] usb 7-1: selecting invalid altsetting 1 [ 537.309513][ T5924] dvb_ttusb_budget: ttusb_init_controller: error [ 537.320566][ T5924] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 537.349221][ T1213] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 537.512743][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.530458][ T5924] DVB: Unable to find symbol cx22700_attach() [ 537.546849][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.567153][ T1213] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 537.589284][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.647170][ T1213] usb 1-1: config 0 descriptor?? [ 537.708415][T19174] can0: slcan on ptm0. [ 537.733394][ T5924] DVB: Unable to find symbol tda10046_attach() [ 537.748412][ T5924] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 537.768170][ T5924] usb 7-1: USB disconnect, device number 52 [ 537.830625][T19173] can0 (unregistered): slcan off ptm0. [ 537.889301][ T7293] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 538.066116][ T7293] usb 9-1: Using ep0 maxpacket: 32 [ 538.084612][ T7293] usb 9-1: config 0 has an invalid interface number: 235 but max is 0 [ 538.091220][ T1213] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x2 [ 538.098277][ T7293] usb 9-1: config 0 has no interface number 0 [ 538.115588][ T1213] pyra 0003:1E7D:2CF6.0043: unknown global tag 0xc [ 538.125101][ T7293] usb 9-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 538.145995][ T7293] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.158955][ T1213] pyra 0003:1E7D:2CF6.0043: item 0 2 1 12 parsing failed [ 538.166875][ T1213] pyra 0003:1E7D:2CF6.0043: parse failed [ 538.167708][ T7293] usb 9-1: Product: syz [ 538.189837][ T7293] usb 9-1: Manufacturer: syz [ 538.199159][ T1213] pyra 0003:1E7D:2CF6.0043: probe with driver pyra failed with error -22 [ 538.211601][ T7293] usb 9-1: SerialNumber: syz [ 538.230492][ T7293] usb 9-1: config 0 descriptor?? [ 538.374814][ T1213] usb 1-1: USB disconnect, device number 5 [ 538.492159][ T7293] kaweth 9-1:0.235: Firmware present in device. [ 538.650511][ T7293] kaweth 9-1:0.235: Statistics collection: 0 [ 538.656682][ T7293] kaweth 9-1:0.235: Multicast filter limit: 0 [ 538.679060][ T7293] kaweth 9-1:0.235: MTU: 0 [ 538.683564][ T7293] kaweth 9-1:0.235: Read MAC address 00:00:00:00:00:00 [ 539.055310][ T7293] kaweth 9-1:0.235: Error setting SOFS wait [ 539.062258][ T7293] kaweth 9-1:0.235: probe with driver kaweth failed with error -5 [ 539.116516][ T7293] usb 9-1: USB disconnect, device number 42 [ 539.279045][ T5917] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 539.474400][ T5917] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 539.490781][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.512423][ T5917] usb 7-1: config 0 descriptor?? [ 539.543309][ T5917] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 539.769938][ T5917] gp8psk: usb in 128 operation failed. [ 539.984724][ T5917] gp8psk: usb in 146 operation failed. [ 539.994071][ T5917] gp8psk: failed to get FW version [ 540.007706][ T5917] gp8psk: FPGA Version = 247 [ 540.208317][ T5917] gp8psk: usb in 138 operation failed. [ 540.245897][ T5917] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 540.257405][ T5917] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 540.275192][ T5917] usb 7-1: USB disconnect, device number 53 [ 540.469553][ T30] audit: type=1326 audit(1753725415.534:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19253 comm="syz.8.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b78e9a9 code=0x7ffc0000 [ 540.532756][ T30] audit: type=1326 audit(1753725415.554:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19253 comm="syz.8.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fd79b78e9a9 code=0x7ffc0000 [ 540.595042][ T30] audit: type=1326 audit(1753725415.554:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19253 comm="syz.8.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b78e9a9 code=0x7ffc0000 [ 540.635329][T19262] program syz.8.5344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.657089][ T30] audit: type=1326 audit(1753725415.554:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19253 comm="syz.8.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b78e9a9 code=0x7ffc0000 [ 540.679752][ T30] audit: type=1326 audit(1753725415.554:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19253 comm="syz.8.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd79b78e9a9 code=0x7ffc0000 [ 540.701768][ T30] audit: type=1326 audit(1753725415.554:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19253 comm="syz.8.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b78e9a9 code=0x7ffc0000 [ 540.729575][ T30] audit: type=1326 audit(1753725415.554:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19253 comm="syz.8.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b78e9a9 code=0x7ffc0000 [ 540.756673][ T30] audit: type=1326 audit(1753725415.554:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19253 comm="syz.8.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd79b78e9a9 code=0x7ffc0000 [ 540.879146][ T30] audit: type=1326 audit(1753725415.554:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19253 comm="syz.8.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b78e9a9 code=0x7ffc0000 [ 540.943664][ T30] audit: type=1326 audit(1753725415.554:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19253 comm="syz.8.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd79b78e9a9 code=0x7ffc0000 [ 541.663965][T19295] binder: 19294:19295 ioctl c0306201 200000000100 returned -14 [ 543.109146][ T5917] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 543.279980][ T5917] usb 10-1: Using ep0 maxpacket: 32 [ 543.293198][ T5917] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 543.312035][ T5917] usb 10-1: config 0 has no interface number 0 [ 543.323602][T19366] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 543.323602][T19366] The task syz.8.5388 (19366) triggered the difference, watch for misbehavior. [ 543.353339][ T5917] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 543.365714][ T5917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.377750][ T5917] usb 10-1: Product: syz [ 543.390463][ T5917] usb 10-1: Manufacturer: syz [ 543.401059][ T5917] usb 10-1: SerialNumber: syz [ 543.418338][ T5917] usb 10-1: config 0 descriptor?? [ 543.437074][ T5917] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 543.646691][ T5917] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 543.670092][ T5917] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 544.075574][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 544.084950][ T5917] usb 10-1: USB disconnect, device number 35 [ 544.115852][ T5917] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 544.156652][ T5917] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 544.196848][T19384] netlink: 277 bytes leftover after parsing attributes in process `syz.7.5397'. [ 544.207759][ T5917] quatech2 10-1:0.51: device disconnected [ 544.843942][T19395] binder: 19394:19395 ioctl c0306201 200000001a80 returned -14 [ 544.855144][ T982] hid-generic 0005:16C0:5505.0044: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 545.346194][ T1213] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 545.514749][ T1213] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.528470][ T1213] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.544468][ T1213] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 545.554897][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 545.568465][ T1213] usb 1-1: SerialNumber: syz [ 545.637640][T19438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.645060][ T982] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 545.803050][ T1213] usb 1-1: 0:2 : does not exist [ 545.809061][ T982] usb 10-1: Using ep0 maxpacket: 32 [ 545.822389][ T982] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 545.844282][ T1213] usb 1-1: USB disconnect, device number 6 [ 545.854214][ T982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.927180][ T982] usb 10-1: config 0 descriptor?? [ 545.946771][ T982] gspca_main: sq930x-2.14.0 probing 041e:403c [ 546.564256][T19463] syzkaller1: entered promiscuous mode [ 546.582446][T19463] syzkaller1: entered allmulticast mode [ 546.765300][T19470] binder: 19468:19470 ioctl c018620b 200000000700 returned -14 [ 546.969412][ T982] gspca_sq930x: ucbus_write failed -71 [ 546.975041][ T982] sq930x 10-1:0.0: probe with driver sq930x failed with error -71 [ 547.017317][ T982] usb 10-1: USB disconnect, device number 36 [ 547.239455][ T9] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 547.407264][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.446788][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.476607][ T9] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 547.525392][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.576698][ T9] usb 9-1: config 0 descriptor?? [ 548.464850][ T9] uclogic 0003:256C:006D.0045: failed retrieving Huion firmware version: -71 [ 548.478695][ T9] uclogic 0003:256C:006D.0045: failed probing parameters: -71 [ 548.504401][ T9] uclogic 0003:256C:006D.0045: probe with driver uclogic failed with error -71 [ 548.538233][ T9] usb 9-1: USB disconnect, device number 43 [ 548.763213][T19487] syz.6.5437 (19487): drop_caches: 2 [ 548.898489][ T30] audit: type=1326 audit(1753725423.964:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19518 comm="syz.6.5454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d4638e9a9 code=0x0 [ 549.219522][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5459'. [ 549.321553][T19539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.484746][ T1213] hid-generic 0000:0000:0000.0046: unknown main item tag 0x0 [ 549.513325][ T1213] hid-generic 0000:0000:0000.0046: hidraw0: HID v0.00 Device [syz1] on syz0 [ 550.467615][T19569] netlink: 'syz.9.5474': attribute type 29 has an invalid length. [ 550.476345][T19569] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5474'. [ 550.548237][T19576] netlink: 'syz.7.5477': attribute type 1 has an invalid length. [ 550.563690][T19576] netlink: 144 bytes leftover after parsing attributes in process `syz.7.5477'. [ 550.576453][T19576] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5477'. [ 551.211302][T19598] input: syz0 as /devices/virtual/input/input72 [ 551.834426][T19613] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 552.162770][T19624] bond0: entered promiscuous mode [ 552.178273][T19624] bond_slave_0: entered promiscuous mode [ 552.188637][T19624] bond_slave_1: entered promiscuous mode [ 552.278476][T19628] overlay: filesystem on ./bus is read-only [ 552.304234][T19630] input: syz0 as /devices/virtual/input/input73 [ 552.499727][T19634] syzkaller1: entered promiscuous mode [ 552.512340][T19634] syzkaller1: entered allmulticast mode [ 552.523896][T19637] netlink: 'syz.7.5502': attribute type 29 has an invalid length. [ 553.009964][T19659] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5513'. [ 553.971906][T19706] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5537'. [ 554.024339][T19706] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5537'. [ 554.081269][T19706] erspan0: entered promiscuous mode [ 554.089435][T19706] gretap0: entered promiscuous mode [ 554.099288][ T7293] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 554.259196][ T7293] usb 7-1: Using ep0 maxpacket: 16 [ 554.271327][ T7293] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 554.296380][ T7293] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 554.342592][ T7293] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 554.359364][ T7293] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.367436][ T7293] usb 7-1: Product: syz [ 554.399032][ T7293] usb 7-1: Manufacturer: syz [ 554.403760][ T7293] usb 7-1: SerialNumber: syz [ 554.429576][ T7293] usb 7-1: config 0 descriptor?? [ 554.448042][ T7293] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 554.479619][ T7293] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 554.714971][T19724] batadv0: entered promiscuous mode [ 554.738630][T19724] macsec1: entered promiscuous mode [ 554.761068][T19724] macsec1: entered allmulticast mode [ 554.766513][T19724] batadv0: entered allmulticast mode [ 554.786654][T19724] batadv0: left allmulticast mode [ 554.794327][T19724] batadv0: left promiscuous mode [ 554.869538][ T5156] Bluetooth: hci0: command tx timeout [ 555.057841][ T7293] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 555.064303][ T30] audit: type=1400 audit(1753725430.124:497): lsm=SMACK fn=smack_key_permission action=denied subject="y" object="_" requested=w pid=19734 comm="syz.9.5550" key_serial=104827770 key_desc="_uid_ses.0" [ 555.094882][ T7293] em28xx 7-1:0.0: Config register raw data: 0x15 [ 555.290839][ T7293] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 555.297894][ T7293] em28xx 7-1:0.0: No AC97 audio processor [ 555.343330][ T7293] usb 7-1: USB disconnect, device number 54 [ 555.353012][ T7293] em28xx 7-1:0.0: Disconnecting em28xx [ 555.359519][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 555.371553][ T7293] em28xx 7-1:0.0: Freeing device [ 555.521293][ T9] usb 1-1: config index 0 descriptor too short (expected 3133, got 61) [ 555.549037][ T9] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 555.571023][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.583586][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 555.619120][ T9] usb 1-1: config 0 has no interface number 0 [ 555.625451][ T9] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 555.635792][ T9] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 555.647043][ T9] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 555.672538][ T9] usb 1-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 555.689154][ T9] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 555.718991][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.730337][ T9] usb 1-1: config 0 descriptor?? [ 555.739280][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 555.959597][ T9] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 555.976731][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 555.994251][ T9] usb 1-1: MIDIStreaming interface descriptor not found [ 556.084884][ T9] usb 1-1: USB disconnect, device number 7 [ 556.184232][ T5924] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 556.362993][ T5924] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 556.373948][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.383606][ T5924] usb 9-1: Product: syz [ 556.387885][ T5924] usb 9-1: Manufacturer: syz [ 556.396813][ T5924] usb 9-1: SerialNumber: syz [ 556.404038][ T5924] usb 9-1: config 0 descriptor?? [ 556.562240][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5568'. [ 556.571814][T19778] nbd: couldn't find a device at index 65546 [ 556.623080][ T5924] hso 9-1:0.0: Can't find BULK IN endpoint [ 556.642905][ T5924] usb-storage 9-1:0.0: USB Mass Storage device detected [ 556.777668][T19786] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 556.844172][ T9] usb 9-1: USB disconnect, device number 44 [ 557.068492][T19794] loop3: detected capacity change from 0 to 1 [ 557.083152][T19794] Dev loop3: unable to read RDB block 1 [ 557.093768][T19794] loop3: unable to read partition table [ 557.101182][T19794] loop3: partition table beyond EOD, truncated [ 557.107535][T19794] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 557.210715][T19796] netlink: 'syz.9.5575': attribute type 2 has an invalid length. [ 557.231984][T19796] netlink: 'syz.9.5575': attribute type 22 has an invalid length. [ 557.353575][T19805] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.5579'. [ 557.482848][ T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 557.659470][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 557.688096][ T9] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 557.709152][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.718043][ T9] usb 7-1: Product: syz [ 557.733037][ T9] usb 7-1: Manufacturer: syz [ 557.737724][ T9] usb 7-1: SerialNumber: syz [ 557.760275][ T9] usb 7-1: config 0 descriptor?? [ 557.985402][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5590'. [ 558.157220][ T30] audit: type=1800 audit(1753725433.224:498): pid=19832 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.5592" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 558.196463][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 558.251365][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 558.288400][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 558.312025][ T9] usb 7-1: media controller created [ 558.390561][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 558.464209][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 558.489090][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 558.508112][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 558.536731][ T9] usb 7-1: USB disconnect, device number 55 [ 558.638300][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 558.710411][ T5156] Bluetooth: hci0: command tx timeout [ 558.869768][ T5924] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 559.030921][ T5924] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 559.064946][ T5924] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 559.082713][ T5924] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.098534][T19855] 9pnet: p9_errstr2errno: server reported unknown error @ [ 559.106534][ T5924] usb 10-1: Product: syz [ 559.112614][ T5924] usb 10-1: Manufacturer: syz [ 559.117528][ T5924] usb 10-1: SerialNumber: syz [ 560.145652][ T5924] cdc_ncm 10-1:1.0: bind() failure [ 560.165380][ T5924] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71 [ 560.178034][ T5924] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71 [ 560.190090][ T9] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 560.206649][ T5924] usbtest 10-1:1.1: probe with driver usbtest failed with error -71 [ 560.235068][ T5924] usb 10-1: USB disconnect, device number 37 [ 560.350985][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.361736][ T9] usb 9-1: config 0 has no interfaces? [ 560.369535][ T982] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 560.376403][ T9] usb 9-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 560.386855][ T9] usb 9-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 560.399004][ T9] usb 9-1: Product: syz [ 560.403238][ T9] usb 9-1: Manufacturer: syz [ 560.412605][ T9] usb 9-1: SerialNumber: syz [ 560.423052][ T9] usb 9-1: config 0 descriptor?? [ 560.544478][ T982] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.557155][ T982] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 560.574499][ T982] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 560.586420][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 560.598145][ T982] usb 1-1: SerialNumber: syz [ 560.643352][ T5917] usb 9-1: USB disconnect, device number 45 [ 560.817865][ T982] usb 1-1: 0:2 : does not exist [ 560.866958][ T982] usb 1-1: USB disconnect, device number 8 [ 560.923188][T19912] block nbd6: NBD_DISCONNECT [ 560.942790][T19912] block nbd6: Send disconnect failed -22 [ 560.950783][T19911] block nbd6: Disconnected due to user request. [ 560.959067][T19911] block nbd6: shutting down sockets [ 561.402256][ T5917] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 561.559279][ T5917] usb 7-1: Using ep0 maxpacket: 16 [ 561.566503][ T5917] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 561.576111][ T5917] usb 7-1: config 0 has no interface number 0 [ 561.582872][ T5917] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 561.593287][ T5917] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 561.603947][ T5917] usb 7-1: config 0 interface 41 has no altsetting 0 [ 561.613290][ T5917] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 561.623117][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.631229][ T5917] usb 7-1: Product: syz [ 561.635603][ T5917] usb 7-1: Manufacturer: syz [ 561.640743][ T5917] usb 7-1: SerialNumber: syz [ 561.648695][ T5917] usb 7-1: config 0 descriptor?? [ 561.654624][T19917] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 561.662534][T19917] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 561.887727][T19917] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 561.901683][T19917] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 562.326658][ T5917] Error reading MAC address [ 562.336401][T19917] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 562.354548][T19917] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 562.499686][ T9] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 562.588882][ T5917] sr9700 7-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 562.620427][ T5917] usb 7-1: USB disconnect, device number 56 [ 562.671936][ T9] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 562.697949][ T9] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 562.708610][ T9] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 562.719786][ T9] usb 10-1: config 220 has no interface number 2 [ 562.727280][ T9] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 562.741763][ T9] usb 10-1: config 220 interface 0 has no altsetting 0 [ 562.748692][ T9] usb 10-1: config 220 interface 76 has no altsetting 0 [ 562.761641][ T9] usb 10-1: config 220 interface 1 has no altsetting 0 [ 562.771839][ T9] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 562.783788][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.797061][ T9] usb 10-1: Product: syz [ 562.804540][ T9] usb 10-1: Manufacturer: syz [ 562.813070][ T9] usb 10-1: SerialNumber: syz [ 563.060290][ T9] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 563.067034][ T9] usb 10-1: No valid video chain found. [ 563.082344][ T9] usb 10-1: selecting invalid altsetting 0 [ 563.141319][ T9] usb 10-1: selecting invalid altsetting 0 [ 563.147337][ T9] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 563.173579][ T9] usb 10-1: USB disconnect, device number 38 [ 563.365913][ T30] audit: type=1326 audit(1753725438.434:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19966 comm="syz.0.5651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8862b8e9a9 code=0x0 [ 563.741187][T19981] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5661'. [ 563.762121][T19981] ipvlan0: entered promiscuous mode [ 564.630978][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 564.799703][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 564.815523][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 564.832935][ T9] usb 7-1: config 0 has no interface number 0 [ 564.862731][ T9] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 564.878997][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.892849][ T9] usb 7-1: Product: syz [ 564.897143][ T9] usb 7-1: Manufacturer: syz [ 564.902221][ T9] usb 7-1: SerialNumber: syz [ 564.912163][ T9] usb 7-1: config 0 descriptor?? [ 564.920635][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 565.059828][ T5917] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 565.219533][ T5917] usb 9-1: Using ep0 maxpacket: 16 [ 565.229645][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.243073][ T5917] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 565.254537][ T5917] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 565.267685][ T5917] usb 9-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 565.276883][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.289921][ T5917] usb 9-1: config 0 descriptor?? [ 565.329152][ T5924] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 565.491833][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.505091][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.539209][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.552594][ T5924] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.561819][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.581280][ T5924] usb 1-1: config 0 descriptor?? [ 565.733148][ T5917] nintendo 0003:057E:2019.0047: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.8-1/input0 [ 565.954739][ T9] gspca_spca1528: reg_w err -71 [ 565.964003][ T9] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 565.977841][ T9] usb 7-1: USB disconnect, device number 57 [ 566.021713][ T5924] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 566.121113][ T5917] nintendo 0003:057E:2019.0047: Failed to get joycon info; ret=-71 [ 566.131036][ T5917] nintendo 0003:057E:2019.0047: Failed to retrieve controller info; ret=-71 [ 566.141518][ T5917] nintendo 0003:057E:2019.0047: Failed to initialize controller; ret=-71 [ 566.166212][ T5917] nintendo 0003:057E:2019.0047: probe - fail = -71 [ 566.174712][ T5917] nintendo 0003:057E:2019.0047: probe with driver nintendo failed with error -71 [ 566.187904][ T5917] usb 9-1: USB disconnect, device number 46 [ 566.272433][ T9] usb 1-1: USB disconnect, device number 9 [ 566.789262][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 567.169033][ T5917] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 567.349155][ T5917] usb 10-1: Using ep0 maxpacket: 16 [ 567.373711][ T5917] usb 10-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 567.389557][ T5917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.397743][ T5917] usb 10-1: Product: syz [ 567.415456][ T5917] usb 10-1: Manufacturer: syz [ 567.421466][ T5917] usb 10-1: SerialNumber: syz [ 567.437618][ T5917] usb 10-1: config 0 descriptor?? [ 567.448024][ T5917] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 567.526582][T20077] syzkaller1: entered promiscuous mode [ 567.537266][T20077] syzkaller1: entered allmulticast mode [ 567.657609][ T5917] gp8psk: usb in 128 operation failed. [ 567.701122][ T5917] gp8psk: usb in 137 operation failed. [ 567.708302][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 567.727107][ T5917] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 567.738021][ T5917] usb 10-1: media controller created [ 567.785016][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 567.823148][ T5917] gp8psk_fe: Frontend revision 1 attached [ 567.839729][ T5917] usb 10-1: DVB: registering adapter 3 frontend 0 (Genpix DVB-S)... [ 567.851653][ T5917] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 568.043423][ T5917] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 568.054449][ T5917] gp8psk: found Genpix USB device pID = 201 (hex) [ 568.189532][ T44] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 568.296718][ T5917] usb 10-1: USB disconnect, device number 39 [ 568.359152][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 568.375322][ T44] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 568.394956][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.412348][ T44] usb 9-1: Product: syz [ 568.419114][ T44] usb 9-1: Manufacturer: syz [ 568.427092][ T44] usb 9-1: SerialNumber: syz [ 568.449215][ T44] r8152-cfgselector 9-1: Unknown version 0x0000 [ 568.455543][ T44] r8152-cfgselector 9-1: config 0 descriptor?? [ 568.547341][ T5917] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 568.589859][ T982] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 568.766948][ T982] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 568.777345][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.796378][ T982] usb 1-1: config 0 descriptor?? [ 568.802369][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.812766][ T982] cp210x 1-1:0.0: cp210x converter detected [ 568.901210][ T44] r8152-cfgselector 9-1: USB disconnect, device number 47 [ 569.232804][ T982] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 569.467324][ T982] usb 1-1: cp210x converter now attached to ttyUSB0 [ 569.626400][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.643404][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.669166][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.676737][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.678399][ T982] usb 1-1: USB disconnect, device number 10 [ 569.719725][ T982] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 569.729246][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.738019][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.768747][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.774719][ T982] cp210x 1-1:0.0: device disconnected [ 569.799016][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.806500][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.850915][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.858473][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.881409][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.888872][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.906440][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.928973][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.936492][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.958995][ T5924] hid-generic 0002:0004:0009.0049: unknown main item tag 0x0 [ 569.979219][ T5924] hid-generic 0002:0004:0009.0049: hidraw0: HID v0.04 Device [syz0] on syz0 [ 570.308761][T20133] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 570.310438][ T982] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 570.485185][ T982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.499945][ T982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.511620][ T982] usb 10-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 570.521127][ T982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.531827][ T982] usb 10-1: config 0 descriptor?? [ 570.709651][ T44] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 570.880837][ T44] usb 9-1: Using ep0 maxpacket: 8 [ 570.891084][ T44] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.903000][ T44] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 570.917574][ T44] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 570.932556][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.942439][ T44] usb 9-1: Product: syz [ 570.947005][ T44] usb 9-1: Manufacturer: syz [ 570.955903][ T44] usb 9-1: SerialNumber: syz [ 570.975339][ T982] logitech-djreceiver 0003:046D:C534.004A: unknown main item tag 0x0 [ 570.987100][ T44] usb 9-1: config 0 descriptor?? [ 570.997738][ T982] logitech-djreceiver 0003:046D:C534.004A: unknown main item tag 0x0 [ 571.015037][ T982] logitech-djreceiver 0003:046D:C534.004A: unknown main item tag 0x0 [ 571.026895][ T982] logitech-djreceiver 0003:046D:C534.004A: unknown main item tag 0x0 [ 571.058042][ T982] logitech-djreceiver 0003:046D:C534.004A: unknown main item tag 0x0 [ 571.209967][ T5909] usb 10-1: USB disconnect, device number 40 [ 571.424274][ T44] usb 9-1: USB disconnect, device number 48 [ 571.541057][T20165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 571.571475][ T982] kernel read not supported for file /usbmon0 (pid: 982 comm: kworker/1:4) [ 572.290362][ T44] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 572.459290][ T44] usb 9-1: Using ep0 maxpacket: 32 [ 572.487379][ T44] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 572.519794][ T44] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 572.545080][ T44] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 572.566717][ T44] usb 9-1: config 1 has no interface number 0 [ 572.589291][ T44] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 572.621798][ T44] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 572.649320][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 572.651540][ T44] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 572.667040][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.716364][ T44] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 572.799159][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 572.823684][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.848294][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 572.875497][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.906802][ T44] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 572.916875][ T9] usb 7-1: config 0 descriptor?? [ 573.338625][ T9] hid-picolcd 0003:04D8:C002.004B: unknown main item tag 0x0 [ 573.367574][ T5924] usb 9-1: USB disconnect, device number 49 [ 573.385455][ T5924] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 573.399040][ T9] hid-picolcd 0003:04D8:C002.004B: unknown main item tag 0x0 [ 573.417965][ T9] hid-picolcd 0003:04D8:C002.004B: unknown main item tag 0x0 [ 573.445534][ T9] hid-picolcd 0003:04D8:C002.004B: unknown main item tag 0x0 [ 573.469044][ T9] hid-picolcd 0003:04D8:C002.004B: unknown main item tag 0x0 [ 573.544655][ T9] hid-picolcd 0003:04D8:C002.004B: No report with id 0x11 found [ 573.579614][ T9] usb 7-1: USB disconnect, device number 58 [ 574.370717][T20224] overlayfs: upper fs does not support tmpfile. [ 574.869294][ T5156] Bluetooth: hci5: command 0x1003 tx timeout [ 574.879354][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 574.889143][ T7293] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 575.114812][ T7293] usb 7-1: unable to get BOS descriptor or descriptor too short [ 575.138797][ T7293] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 575.159186][ T7293] usb 7-1: can't read configurations, error -71 [ 575.187026][ T30] audit: type=1800 audit(1753725450.254:500): pid=20243 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.5775" name="file0" dev="tmpfs" ino=5878 res=0 errno=0 [ 575.252769][T20248] syzkaller1: entered promiscuous mode [ 575.258557][T20248] syzkaller1: entered allmulticast mode [ 575.419174][ T44] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 575.579122][ T44] usb 10-1: Using ep0 maxpacket: 32 [ 575.586975][ T44] usb 10-1: config 0 has an invalid interface number: 235 but max is 0 [ 575.619353][ T44] usb 10-1: config 0 has no interface number 0 [ 575.630991][ T44] usb 10-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 575.668796][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.694433][ T44] usb 10-1: Product: syz [ 575.707568][ T44] usb 10-1: Manufacturer: syz [ 575.718246][ T44] usb 10-1: SerialNumber: syz [ 575.742007][ T44] usb 10-1: config 0 descriptor?? [ 575.959832][ T982] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 575.995497][ T44] kaweth 10-1:0.235: Firmware present in device. [ 576.097215][T20264] serio: Serial port pty21 [ 576.121472][ T982] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.134213][ T982] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 576.145803][ T982] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 576.169306][ T982] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 576.193156][ T44] kaweth 10-1:0.235: Statistics collection: 0 [ 576.211445][ T44] kaweth 10-1:0.235: Multicast filter limit: 0 [ 576.218337][ T982] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 576.239430][ T44] kaweth 10-1:0.235: MTU: 0 [ 576.247974][ T44] kaweth 10-1:0.235: Read MAC address 00:00:00:00:00:00 [ 576.255103][ T982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.284699][ T982] usb 9-1: config 0 descriptor?? [ 576.304046][T20259] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 576.743366][ T982] plantronics 0003:047F:FFFF.004C: reserved main item tag 0xd [ 576.786444][ T982] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 576.807281][ T44] kaweth 10-1:0.235: Error setting receive filter [ 576.816240][ T44] kaweth 10-1:0.235: probe with driver kaweth failed with error -5 [ 576.830320][ T44] usb 10-1: USB disconnect, device number 41 [ 577.004312][ T44] usb 9-1: USB disconnect, device number 50 [ 577.719076][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 577.903287][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 577.916474][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 577.928100][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 577.942868][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.955240][ T9] usb 1-1: config 0 descriptor?? [ 578.485822][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c5b3000: rx timeout, send abort [ 578.529257][ T44] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 578.679191][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 578.690933][ T44] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 578.703784][ T44] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.714994][ T44] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 578.727267][ T44] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.738604][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.747252][ T44] usb 9-1: Product: syz [ 578.752621][ T44] usb 9-1: Manufacturer: syz [ 578.757274][ T44] usb 9-1: SerialNumber: syz [ 578.768139][ T9] corsair-cpro 0003:1B1C:0C10.004D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 578.971093][ T9] corsair-cpro 0003:1B1C:0C10.004D: probe with driver corsair-cpro failed with error -71 [ 578.994172][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c5b3000: abort rx timeout. Force session deactivation [ 579.165409][ T9] usb 1-1: USB disconnect, device number 11 [ 579.177057][ T44] usb 9-1: 0:2 : does not exist [ 579.787005][ T44] usb 9-1: 1:0: failed to get current value for ch 0 (-22) [ 579.846012][ T44] usb 9-1: USB disconnect, device number 51 [ 580.018856][T20365] program syz.0.5829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.325766][T20407] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5847'. [ 581.651572][T20419] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 581.680154][T20419] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 582.187044][ T44] kernel write not supported for file /ppp (pid: 44 comm: kworker/1:1) [ 582.470822][T20437] netlink: 'syz.9.5860': attribute type 1 has an invalid length. [ 582.549383][ T9] IPVS: starting estimator thread 0... [ 582.655295][T20445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.669328][T20443] IPVS: using max 26 ests per chain, 62400 per kthread [ 582.849817][T20452] veth1_to_bond: entered allmulticast mode [ 582.864610][T20452] veth1_to_bond: entered promiscuous mode [ 582.906183][T20451] veth1_to_bond: left promiscuous mode [ 582.924007][T20451] veth1_to_bond: left allmulticast mode [ 583.562635][T20482] syzkaller1: entered promiscuous mode [ 583.579120][T20482] syzkaller1: entered allmulticast mode [ 583.913523][T20493] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5884'. [ 584.079040][ T9] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 584.252846][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.298348][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.318541][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 584.360289][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 584.389193][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.411596][ T9] usb 9-1: config 0 descriptor?? [ 584.850591][ T9] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 584.883454][T20499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5887'. [ 585.021863][T20501] overlayfs: invalid origin (0000) [ 585.101786][ T5917] usb 9-1: USB disconnect, device number 52 [ 585.140661][T20505] netlink: 'syz.0.5890': attribute type 1 has an invalid length. [ 585.170573][T20505] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5890'. [ 585.180262][T20505] netlink: 'syz.0.5890': attribute type 1 has an invalid length. [ 585.285198][T20509] sctp: [Deprecated]: syz.0.5892 (pid 20509) Use of int in max_burst socket option deprecated. [ 585.285198][T20509] Use struct sctp_assoc_value instead [ 585.897300][T20523] input: syz1 as /devices/virtual/input/input76 [ 586.399418][ T9] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 586.571079][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.588987][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 586.598097][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.626053][ T9] usb 9-1: config 0 descriptor?? [ 586.642523][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 586.769302][ T5917] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 586.931588][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 586.945782][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 586.957834][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 586.968122][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 586.982974][ T5917] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 586.992379][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.004735][ T5917] usb 1-1: config 0 descriptor?? [ 587.056341][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 587.064657][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 587.273175][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 587.281618][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 587.294654][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 587.302154][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 587.319432][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 587.330167][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 587.347397][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 587.376036][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 587.391975][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 587.399451][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 587.412252][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 587.422963][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 587.432125][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 587.442416][ T30] audit: type=1326 audit(1753725462.494:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20550 comm="syz.6.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d4638e9a9 code=0x7fc00000 [ 587.472389][ T9] pwc: Registered as video103. [ 587.489890][ T5917] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 587.489982][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input78 [ 587.561427][ T9] usb 9-1: USB disconnect, device number 53 [ 587.655029][T20563] tipc: Started in network mode [ 587.662242][T20563] tipc: Node identity ff75, cluster identity 4711 [ 587.669746][T20563] tipc: Enabling of bearer rejected, failed to enable media [ 587.702787][ T5917] usb 1-1: USB disconnect, device number 12 [ 588.819214][ T5917] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 588.900517][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5934'. [ 588.992107][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 589.005205][ T5917] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 589.029226][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.052704][ T5917] usb 7-1: config 0 descriptor?? [ 589.292313][ T5917] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 589.304597][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 589.335393][ T5917] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 589.360212][ T5917] usb 7-1: media controller created [ 589.394752][T20619] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 589.451114][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.527789][ T5917] az6027: usb out operation failed. (-71) [ 589.538767][ T5917] az6027: usb out operation failed. (-71) [ 589.545018][ T5917] stb0899_attach: Driver disabled by Kconfig [ 589.551249][ T5917] az6027: no front-end attached [ 589.551249][ T5917] [ 589.581427][ T5917] az6027: usb out operation failed. (-71) [ 589.587271][ T5917] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 589.631324][ T5917] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input79 [ 589.679676][ T5917] dvb-usb: schedule remote query interval to 400 msecs. [ 589.699655][ T5917] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 589.756340][ T5917] usb 7-1: USB disconnect, device number 61 [ 589.858389][ T5917] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 590.287769][T20640] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.309476][T20640] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.487482][T20640] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.499319][T20640] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.649367][T20640] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.664416][T20640] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.785899][T20640] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.817644][T20640] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.193760][T20640] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.222852][T20640] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.320186][T20640] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.358956][T20640] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.436115][T20640] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.478542][T20640] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.526920][T20640] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.538557][T20640] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.659442][ T9] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 592.835072][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.865078][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.876809][ T9] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 592.913395][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.945105][ T9] usb 7-1: config 0 descriptor?? [ 593.194883][T20704] bond_slave_0: entered promiscuous mode [ 593.201326][T20704] bond_slave_1: entered promiscuous mode [ 593.241659][T20703] bond_slave_0: left promiscuous mode [ 593.247776][T20703] bond_slave_1: left promiscuous mode [ 593.382359][ T9] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 593.402135][ T9] cp2112 0003:10C4:EA90.0050: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 593.576864][ T9] cp2112 0003:10C4:EA90.0050: Part Number: 0x82 Device Version: 0xFE [ 593.992095][ T9] cp2112 0003:10C4:EA90.0050: error setting SMBus config [ 594.008791][ T9] cp2112 0003:10C4:EA90.0050: probe with driver cp2112 failed with error -71 [ 594.044146][ T9] usb 7-1: USB disconnect, device number 62 [ 595.016379][T20740] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5995'. [ 595.822887][T20758] netlink: 'syz.8.6002': attribute type 3 has an invalid length. [ 595.856598][T20758] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6002'. [ 596.069900][ T982] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 596.231481][ T982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.258828][ T982] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 596.290165][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.342826][ T982] usb 7-1: config 0 descriptor?? [ 596.781773][ T982] keytouch 0003:0926:3333.0051: fixing up Keytouch IEC report descriptor [ 596.827098][ T982] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0051/input/input80 [ 596.939569][T20791] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 597.008364][ T982] keytouch 0003:0926:3333.0051: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 597.039395][T20791] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 597.267311][T20804] program syz.9.6021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 597.371884][ T44] usb 7-1: USB disconnect, device number 63 [ 598.209558][ T982] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 598.369026][ T982] usb 10-1: Using ep0 maxpacket: 16 [ 598.380901][ T982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.409441][ T982] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 598.418829][ T982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.453311][ T982] usb 10-1: config 0 descriptor?? [ 598.877197][ T982] mcp2221 0003:04D8:00DD.0052: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 598.999285][T20597] Set syz1 is full, maxelem 65536 reached [ 599.294479][ T982] usb 10-1: USB disconnect, device number 42 [ 600.683244][T20899] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6063'. [ 600.789264][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 600.795923][T20846] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 601.594459][T20846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 601.600786][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 601.612871][T20846] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 601.619931][T20846] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 601.627936][T20846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 601.634610][T20846] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 601.645080][T20846] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 601.909228][ T44] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 601.917092][ T982] usb 10-1: new low-speed USB device number 43 using dummy_hcd [ 602.071554][ T44] usb 9-1: Using ep0 maxpacket: 16 [ 602.080048][ T44] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 602.089507][ T982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 602.101192][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.109630][ T982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 8 [ 602.124783][ T44] usb 9-1: config 0 descriptor?? [ 602.130402][ T982] usb 10-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 602.140461][ T982] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.152267][ T44] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 602.163407][ T982] usb 10-1: config 0 descriptor?? [ 602.169915][T20880] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 602.185121][T20880] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 602.249427][ T5917] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 602.399573][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 602.407340][ T5917] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 602.416614][ T5917] usb 7-1: config 0 has no interface number 0 [ 602.437916][ T5917] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 602.457474][ T5917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.466309][ T5917] usb 7-1: Product: syz [ 602.476549][ T5917] usb 7-1: Manufacturer: syz [ 602.483702][ T5917] usb 7-1: SerialNumber: syz [ 602.499271][ T5917] usb 7-1: config 0 descriptor?? [ 602.517739][ T5917] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 602.528737][ T5917] usb 7-1: selecting invalid altsetting 1 [ 602.536763][ T5917] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 602.546867][ T5917] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 602.557989][ T5917] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 602.567833][ T5917] usb 7-1: media controller created [ 602.596412][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 602.643540][ T982] aquacomputer_d5next 0003:0C70:F0B6.0053: hidraw0: USB HID v8.da Device [HID 0c70:f0b6] on usb-dummy_hcd.9-1/input0 [ 602.715064][ T5917] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 602.727074][ T5917] zl10353_read_register: readreg error (reg=127, ret==-32) [ 602.735120][ T5917] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 602.777053][ T5917] usb 7-1: USB disconnect, device number 64 [ 602.847950][ T982] usb 10-1: USB disconnect, device number 43 [ 602.869223][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 603.137679][T20932] loop9: detected capacity change from 0 to 7 [ 603.145591][T20932] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 603.154050][T20932] loop9: partition table partially beyond EOD, truncated [ 603.163826][T20932] loop9: p1 size 2433217042 extends beyond EOD, truncated [ 603.171899][ T44] gspca_sonixj: reg_w1 err -71 [ 603.189521][ T44] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 603.204715][ T44] usb 9-1: USB disconnect, device number 54 [ 603.669386][ T5156] Bluetooth: hci1: command 0x0406 tx timeout [ 603.669897][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 603.675900][ T5156] Bluetooth: hci4: command 0x0c1a tx timeout [ 603.822236][T20955] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6088'. [ 604.214896][T20967] syzkaller1: entered promiscuous mode [ 604.239310][T20967] syzkaller1: entered allmulticast mode [ 604.432133][ T5909] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 604.601550][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.644238][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.689807][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 604.727529][ T5909] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 604.742815][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.761262][ T5909] usb 1-1: config 0 descriptor?? [ 605.207490][ T5924] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 605.228174][ T5909] acrux 0003:1A34:0802.0054: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.0-1/input0 [ 605.239663][ T5909] acrux 0003:1A34:0802.0054: no inputs found [ 605.245702][ T5909] acrux 0003:1A34:0802.0054: Failed to enable force feedback support, error: -19 [ 605.279686][T21002] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6108'. [ 605.379843][ T5924] usb 7-1: Using ep0 maxpacket: 16 [ 605.398202][ T5924] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.420403][ T5924] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.434911][ T5924] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.444443][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.452683][ T5924] usb 7-1: Product: syz [ 605.457463][ T5924] usb 7-1: Manufacturer: syz [ 605.463444][ T5924] usb 7-1: SerialNumber: syz [ 605.609074][ T5909] usb 10-1: new full-speed USB device number 44 using dummy_hcd [ 605.685776][ T5924] usb 7-1: 0:2 : does not exist [ 605.706167][ T5924] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 605.738224][ T5924] usb 7-1: USB disconnect, device number 65 [ 605.749004][ T5156] Bluetooth: hci0: command 0x0405 tx timeout [ 605.782916][ T5909] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 605.801656][ T5909] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.812210][ T5909] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 605.821589][ T5909] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.833694][ T5909] usb 10-1: config 0 descriptor?? [ 606.209110][ T5924] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 606.276504][ T5909] savu 0003:1E7D:2D5A.0055: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 606.375389][T21027] netlink: 'syz.6.6121': attribute type 5 has an invalid length. [ 606.383461][ T5924] usb 9-1: Using ep0 maxpacket: 32 [ 606.404558][ T5924] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 606.419359][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.427525][ T5924] usb 9-1: Product: syz [ 606.434979][ T5924] usb 9-1: Manufacturer: syz [ 606.439851][ T5924] usb 9-1: SerialNumber: syz [ 606.447540][ T5924] usb 9-1: config 0 descriptor?? [ 606.457180][ T5924] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 606.511912][ T982] usb 10-1: USB disconnect, device number 44 [ 606.966996][T21036] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6125'. [ 607.066165][ T1213] usb 1-1: USB disconnect, device number 13 [ 607.465356][T21046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 607.477425][ T5924] gspca_ov534_9: reg_w failed -71 [ 607.779021][ T5924] gspca_ov534_9: Unknown sensor 0000 [ 607.779121][ T5924] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 607.796281][ T5924] usb 9-1: USB disconnect, device number 55 [ 607.829250][ T5156] Bluetooth: hci0: command 0x0405 tx timeout [ 608.030526][ T982] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 608.209351][ T982] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 608.252050][ T982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 608.281789][ T982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 608.311717][ T982] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 608.342101][ T982] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 608.361596][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.383894][ T982] usb 7-1: config 0 descriptor?? [ 608.618770][ T30] audit: type=1326 audit(1753725483.684:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21067 comm="syz.8.6138" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd79b78e9a9 code=0x0 [ 608.639824][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.862455][ T982] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 608.957468][T21076] sp0: Synchronizing with TNC [ 609.151770][ T5924] usb 7-1: USB disconnect, device number 66 [ 609.686832][T21106] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6151'. [ 609.719413][ T5924] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 609.899573][ T5924] usb 9-1: Using ep0 maxpacket: 8 [ 609.906543][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 609.924432][ T5924] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 609.936880][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.952873][ T5924] usb 9-1: config 0 descriptor?? [ 610.181660][ T5924] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 610.608568][ T5924] usb 9-1: USB disconnect, device number 56 [ 610.989089][ T44] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 611.059166][ T982] usb 10-1: new full-speed USB device number 45 using dummy_hcd [ 611.139199][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 611.146096][ T44] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 611.154796][ T44] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.167912][ T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 611.182862][ T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 611.194987][ T44] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.216142][ T44] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 611.226378][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.239690][ T982] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.259107][ T982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 611.278347][ T982] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 611.289523][ T982] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 611.305146][ T982] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 611.315342][ T982] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 611.323729][ T982] usb 10-1: Manufacturer: syz [ 611.332404][ T982] usb 10-1: config 0 descriptor?? [ 611.485923][ T44] usb 7-1: usb_control_msg returned -32 [ 611.492595][ T44] usbtmc 7-1:16.0: can't read capabilities [ 611.609708][ T982] rc_core: IR keymap rc-hauppauge not found [ 611.616245][ T982] Registered IR keymap rc-empty [ 611.623020][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.649159][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.674551][ T982] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 611.694157][ T982] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input81 [ 611.713229][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.739474][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.759852][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.779451][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.799320][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.819541][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.839705][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.869430][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.909909][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.937163][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.959363][ T982] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 611.991678][ T982] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 612.019311][ T982] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 612.034615][ T982] usb 10-1: USB disconnect, device number 45 [ 612.579383][ T5924] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 612.770326][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 612.780783][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 612.823449][ T5924] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 612.845820][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.885825][ T5924] usb 1-1: config 0 descriptor?? [ 613.145052][ T5924] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 613.550750][ T5924] usb 1-1: USB disconnect, device number 14 [ 613.791529][ T44] usb 7-1: USB disconnect, device number 67 [ 614.251868][T21213] openvswitch: netlink: IPv4 tun info is not correct [ 614.455147][T21221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6207'. [ 614.905687][ T5924] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 615.069155][ T5924] usb 10-1: Using ep0 maxpacket: 16 [ 615.082095][ T5924] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 615.111871][ T5924] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 615.129009][ T5924] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.145259][ T5924] usb 10-1: Product: syz [ 615.172508][ T5924] usb 10-1: Manufacturer: syz [ 615.177294][ T5924] usb 10-1: SerialNumber: syz [ 615.221308][ T5924] usb 10-1: config 0 descriptor?? [ 615.229783][ T5924] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 615.267631][ T5924] usb 10-1: Detected FT232R [ 615.274321][ T30] audit: type=1326 audit(1753725490.344:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21235 comm="syz.0.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8862b8e9a9 code=0x7ffc0000 [ 615.303203][ T30] audit: type=1326 audit(1753725490.344:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21235 comm="syz.0.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8862b8e9a9 code=0x7ffc0000 [ 615.333852][ T30] audit: type=1326 audit(1753725490.354:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21235 comm="syz.0.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8862b8e9a9 code=0x7ffc0000 [ 615.366265][ T30] audit: type=1326 audit(1753725490.354:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21235 comm="syz.0.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8862b8e9a9 code=0x7ffc0000 [ 615.394860][ T30] audit: type=1326 audit(1753725490.354:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21235 comm="syz.0.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8862b8e9a9 code=0x7ffc0000 [ 615.424522][ T30] audit: type=1326 audit(1753725490.364:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21235 comm="syz.0.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f8862b8e9a9 code=0x7ffc0000 [ 615.452451][ T5924] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 615.462828][ T30] audit: type=1326 audit(1753725490.364:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21235 comm="syz.0.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8862b8e9a9 code=0x7ffc0000 [ 615.494161][ T30] audit: type=1326 audit(1753725490.364:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21235 comm="syz.0.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8862b8e9a9 code=0x7ffc0000 [ 615.520554][ T30] audit: type=1326 audit(1753725490.364:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21235 comm="syz.0.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8862b8e9a9 code=0x7ffc0000 [ 615.543171][ T30] audit: type=1326 audit(1753725490.364:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21235 comm="syz.0.6213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f8862b8e9a9 code=0x7ffc0000 [ 615.667030][ T5924] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 615.763622][T21251] nbd: device at index 6 is going down [ 615.871846][ T44] usb 10-1: USB disconnect, device number 46 [ 615.894796][ T44] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 615.925182][ T44] ftdi_sio 10-1:0.0: device disconnected [ 616.359098][ T5924] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 616.519029][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 616.538005][ T5924] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.587834][ T5924] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 616.622914][ T5924] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 616.638339][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.647616][ T5924] usb 1-1: Product: syz [ 616.655199][ T5924] usb 1-1: Manufacturer: syz [ 616.661896][ T5924] usb 1-1: SerialNumber: syz [ 616.888566][T21263] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 617.159523][T21286] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 617.531989][T21263] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 617.742565][ T5924] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 617.761541][ T5924] cdc_ncm 1-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 617.808946][ T5924] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 617.953588][ T5924] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 618.035414][ T5924] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 618.124212][ T5924] usb 1-1: USB disconnect, device number 15 [ 618.141419][ T5924] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 618.651895][T21325] netlink: 'syz.0.6248': attribute type 10 has an invalid length. [ 618.732681][T21325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.788342][T21325] team0: Port device bond0 added [ 618.924744][T21329] syzkaller1: entered promiscuous mode [ 618.943948][T21329] syzkaller1: entered allmulticast mode [ 619.269076][ T5924] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 619.469147][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 619.476585][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.528981][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 619.569048][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 619.604035][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 619.629264][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 619.668643][ T5924] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 619.695142][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 619.695771][T21320] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6247'. [ 619.703420][ T5924] usb 1-1: Product: syz [ 619.703443][ T5924] usb 1-1: Manufacturer: syz [ 619.703458][ T5924] usb 1-1: SerialNumber: syz [ 619.706866][ T5924] usb 1-1: config 0 descriptor?? [ 620.018057][ T5924] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 620.069492][ T5924] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 620.219333][ T5924] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 620.242562][ T5924] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 620.257317][ T5924] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 620.422856][ T5924] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 620.575245][ T5917] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 620.720514][ T1213] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 620.731313][ T5917] usb 7-1: Using ep0 maxpacket: 32 [ 620.749521][ T5917] usb 7-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 620.775549][ T5917] usb 7-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.787482][ T5917] usb 7-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 620.802069][ T5917] usb 7-1: config 0 interface 0 has no altsetting 0 [ 620.809464][ T5917] usb 7-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 620.819163][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.849814][ T5917] usb 7-1: config 0 descriptor?? [ 620.872698][T21386] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6275'. [ 620.897529][ T1213] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 620.909700][T21386] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6275'. [ 620.922749][ T1213] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.944037][ T1213] usb 10-1: config 0 descriptor?? [ 620.970930][ T1213] cp210x 10-1:0.0: cp210x converter detected [ 621.042446][ T5924] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 621.053520][ T5924] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 621.101554][ T5924] usb 1-1: USB disconnect, device number 16 [ 621.282721][ T5917] zeroplus 0003:0C12:0030.0057: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.6-1/input0 [ 621.299135][ T5917] zeroplus 0003:0C12:0030.0057: no inputs found [ 621.384929][ T1213] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 621.398355][ T1213] usb 10-1: cp210x converter now attached to ttyUSB0 [ 621.498302][ T5917] usb 7-1: USB disconnect, device number 68 [ 621.613509][ T1213] usb 10-1: USB disconnect, device number 47 [ 621.623934][ T1213] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 621.662606][ T1213] cp210x 10-1:0.0: device disconnected [ 622.081844][T21413] Bluetooth: hci0: service_discovery: too big uuid_count value 48421 [ 622.397349][T21428] veth1_to_bond: entered allmulticast mode [ 622.462216][T21428] veth1_to_bond: left allmulticast mode [ 622.929027][ T5924] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 623.219107][ T5924] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 623.234724][ T5924] usb 9-1: config 0 interface 0 has no altsetting 0 [ 623.265973][ T5924] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 623.320080][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 623.341289][ T5924] usb 9-1: Product: syz [ 623.357796][ T5924] usb 9-1: Manufacturer: syz [ 623.365360][ T5924] usb 9-1: SerialNumber: syz [ 623.373823][ T5924] usb 9-1: config 0 descriptor?? [ 623.403551][ T5924] usb 9-1: selecting invalid altsetting 0 [ 623.580084][ T5924] kernel write not supported for file bpf-prog (pid: 5924 comm: kworker/0:5) [ 623.653728][ T5924] usb 9-1: USB disconnect, device number 57 [ 624.419176][T21488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 624.579086][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 624.751786][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 624.794308][ T44] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 624.819178][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 624.842560][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 624.871377][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 624.904364][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 624.929001][ T44] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 624.944258][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.963015][ T44] usb 1-1: Product: syz [ 624.967278][ T44] usb 1-1: Manufacturer: syz [ 624.985095][ T44] usb 1-1: SerialNumber: syz [ 625.006745][ T44] usb 1-1: config 0 descriptor?? [ 625.094586][T21507] syzkaller1: entered promiscuous mode [ 625.100713][T21507] syzkaller1: entered allmulticast mode [ 625.107680][T21507] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 625.449890][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 625.475015][ T44] input input82: Device does not respond to id packet M [ 625.503336][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 625.519595][ T44] input input82: Device does not respond to id packet P [ 625.536204][ T44] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 625.550383][ T44] input input82: Device does not respond to id packet B [ 625.601540][T21525] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6334'. [ 625.782002][ T44] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 625.794457][ T44] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 625.806129][ T44] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 625.849624][ T44] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 625.858526][ T44] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input82 [ 625.907517][ T44] usb 1-1: USB disconnect, device number 17 [ 626.669275][ T44] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 626.820717][ T44] usb 9-1: Using ep0 maxpacket: 8 [ 626.854403][ T44] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 626.879076][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.907290][ T44] usb 9-1: Product: syz [ 626.915209][ T44] usb 9-1: Manufacturer: syz [ 626.922101][ T44] usb 9-1: SerialNumber: syz [ 626.944286][ T44] usb 9-1: config 0 descriptor?? [ 626.969887][T21566] kvm: apic: phys broadcast and lowest prio [ 626.970707][ T44] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 627.005788][T21570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 627.407390][T21580] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.999113][ T5924] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 628.197152][ T5924] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 628.212742][ T44] gspca_sonixj: reg_w1 err -71 [ 628.237655][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.263863][ T5924] usb 7-1: config 0 descriptor?? [ 628.282760][ T5924] cp210x 7-1:0.0: cp210x converter detected [ 628.299186][ T44] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 628.329403][ T44] usb 9-1: USB disconnect, device number 58 [ 628.510320][T21600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.523753][T21600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.754789][ T5924] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 628.786597][ T5924] usb 7-1: cp210x converter now attached to ttyUSB0 [ 628.991511][ T5924] usb 7-1: USB disconnect, device number 69 [ 629.002861][ T5924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 629.010671][ T44] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 629.090355][ T5924] cp210x 7-1:0.0: device disconnected [ 629.199112][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 629.207630][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.232285][ T44] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 629.264030][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.296247][ T44] usb 1-1: config 0 descriptor?? [ 629.745590][ T44] mcp2221 0003:04D8:00DD.0058: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 629.904015][T21651] "syz.6.6390" (21651) uses obsolete ecb(arc4) skcipher [ 630.151734][ T5917] usb 1-1: USB disconnect, device number 18 [ 630.169640][ T44] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 630.205904][T21671] veth1_macvtap: left promiscuous mode [ 630.218116][T21671] macsec0: entered promiscuous mode [ 630.237095][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.242915][T21659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.266869][T21671] veth1_macvtap: entered promiscuous mode [ 630.277125][T21671] veth1_macvtap: entered allmulticast mode [ 630.360810][ T44] usb 10-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 630.379024][ T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.387311][ T44] usb 10-1: Product: syz [ 630.412579][ T44] usb 10-1: Manufacturer: syz [ 630.417361][ T44] usb 10-1: SerialNumber: syz [ 630.435211][ T44] usb 10-1: config 0 descriptor?? [ 630.760345][T21687] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.6405'. [ 631.461613][ T44] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 631.662959][ T44] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 631.678604][T21722] Bluetooth: hci0: unsupported parameter 5148 [ 631.692260][ T44] asix 10-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 631.707556][T21722] Bluetooth: hci0: unsupported parameter 65024 [ 631.727345][ T44] asix 10-1:0.0: probe with driver asix failed with error -71 [ 631.729004][T21722] Bluetooth: hci0: unsupported parameter 5148 [ 631.754245][T21722] Bluetooth: hci0: unsupported parameter 65024 [ 631.766255][ T44] usb 10-1: USB disconnect, device number 48 [ 631.906356][T21732] netlink: 328 bytes leftover after parsing attributes in process `syz.0.6423'. [ 632.119139][ T5917] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 632.289617][ T5917] usb 7-1: Using ep0 maxpacket: 8 [ 632.302883][ T5917] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 632.318040][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.329899][ T5917] usb 7-1: config 0 descriptor?? [ 632.408393][ T5924] kernel write not supported for file /610/loginuid (pid: 5924 comm: kworker/0:5) [ 632.555280][ T5917] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 632.729228][ T5924] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 632.890000][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 632.897422][ T5924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.908055][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 632.919714][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 632.930700][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 632.940544][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.955972][ T5924] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 632.965986][ T5924] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 632.974188][ T5924] usb 1-1: Manufacturer: syz [ 632.982231][ T5924] usb 1-1: config 0 descriptor?? [ 633.384286][ T5924] rc_core: IR keymap rc-hauppauge not found [ 633.391331][ T5924] Registered IR keymap rc-empty [ 633.396700][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.445393][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.480391][ T5924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 633.499619][ T5924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input83 [ 633.522783][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.569352][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.591092][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.592218][ T5917] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 633.628585][ T5917] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 633.639831][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.655018][ T5917] asix 7-1:0.0: probe with driver asix failed with error -71 [ 633.666838][ T5917] usb 7-1: USB disconnect, device number 70 [ 633.671228][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.719339][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.739153][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.761431][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.799179][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.829466][ T5924] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 633.881352][ T5924] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 633.900938][ T5924] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 633.929525][ T5924] usb 1-1: USB disconnect, device number 19 [ 634.355799][T21785] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 635.682516][T21825] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 636.070848][T21837] syz_tun: entered promiscuous mode [ 636.098235][T21837] batadv_slave_0: entered promiscuous mode [ 636.192185][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 636.192206][ T30] audit: type=1804 audit(1753725511.264:514): pid=21843 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.6469" name="/" dev="pidfs" ino=21841 res=1 errno=0 [ 636.383891][T21850] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6472'. [ 636.633281][T21857] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.6474'. [ 637.283178][T21871] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.6480'. [ 639.062902][T21936] vlan2: entered allmulticast mode [ 639.068102][T21936] macvtap0: entered allmulticast mode [ 639.110357][T21936] veth0_macvtap: entered allmulticast mode [ 639.308480][T21947] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6513'. [ 639.642518][T21963] unknown channel width for channel at 909000KHz? [ 639.656877][T21963] unknown channel width for channel at 909000KHz? [ 639.668796][T21963] unknown channel width for channel at 909000KHz? [ 640.008055][T21975] netlink: 'syz.8.6525': attribute type 21 has an invalid length. [ 640.020030][T21975] netlink: 'syz.8.6525': attribute type 22 has an invalid length. [ 640.036861][T21974] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 640.054411][T21974] mac80211_hwsim hwsim26 wlan0: left promiscuous mode [ 640.090591][T21975] netlink: 'syz.8.6525': attribute type 23 has an invalid length. [ 640.119444][T21975] netlink: 'syz.8.6525': attribute type 25 has an invalid length. [ 640.127352][T21975] netlink: 'syz.8.6525': attribute type 26 has an invalid length. [ 640.155929][T21975] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6525'. [ 717.274893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.172998][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 745.180044][ C0] rcu: 1-...!: (0 ticks this GP) idle=fb7c/1/0x4000000000000000 softirq=121917/121917 fqs=0 [ 745.191958][ C0] rcu: (detected by 0, t=10502 jiffies, g=111453, q=196 ncpus=2) [ 745.199917][ C0] Sending NMI from CPU 0 to CPUs 1: [ 745.199961][ C1] NMI backtrace for cpu 1 [ 745.199995][ C1] CPU: 1 UID: 0 PID: 21789 Comm: syz.6.6447 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 745.200018][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.200034][ C1] RIP: 0010:lock_release+0x14d/0x3e0 [ 745.200065][ C1] Code: 79 43 c8 09 44 89 64 24 14 45 89 e5 85 c0 0f 84 dd 00 00 00 48 85 ed 0f 84 19 01 00 00 83 7d 24 00 0f 85 ea 01 00 00 8b 45 20 <3d> 00 00 20 00 48 8b 5c 24 08 8b 54 24 14 72 25 89 c1 81 e1 00 00 [ 745.200082][ C1] RSP: 0018:ffffc90000a08c18 EFLAGS: 00000046 [ 745.200100][ C1] RAX: 00000000000c4000 RBX: 000000000000000a RCX: 45b34fbdc796db00 [ 745.200113][ C1] RDX: 0000000000000001 RSI: ffffffff99d5d648 RDI: ffff88807a0ee540 [ 745.200127][ C1] RBP: ffff88807a0ee540 R08: 0000000000000003 R09: 0000000000000004 [ 745.200139][ C1] R10: dffffc0000000000 R11: fffff52000141170 R12: 0000000000000002 [ 745.200153][ C1] R13: 0000000000000002 R14: ffffffff99d5d648 R15: ffff88807a0eda00 [ 745.200167][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 745.200182][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 745.200195][ C1] CR2: 000000110c2b68f4 CR3: 000000005844a000 CR4: 00000000003526f0 [ 745.200212][ C1] Call Trace: [ 745.200226][ C1] [ 745.200238][ C1] ? debug_deactivate+0x1d/0x200 [ 745.200263][ C1] _raw_spin_unlock_irqrestore+0x70/0x110 [ 745.200296][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 745.200326][ C1] ? debug_object_deactivate+0x9a/0x250 [ 745.200359][ C1] debug_deactivate+0x1d/0x200 [ 745.200381][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 745.200412][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 745.200431][ C1] ? read_tsc+0x9/0x20 [ 745.200465][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 745.200500][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 745.200525][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 745.200544][ C1] [ 745.200551][ C1] [ 745.200559][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 745.200580][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 745.200598][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 da 33 35 f6 48 89 df e8 32 cb 35 f6 e8 3d 9b 5e f6 fb bf 01 00 00 00 c2 cb 27 f6 65 8b 05 7b 79 33 07 85 c0 74 07 5b c3 cc cc cc cc [ 745.200615][ C1] RSP: 0018:ffffc9000d647298 EFLAGS: 00000282 [ 745.200631][ C1] RAX: 45b34fbdc796db00 RBX: ffff88805862c4f8 RCX: 45b34fbdc796db00 [ 745.200646][ C1] RDX: 0000000000000006 RSI: ffffffff8d982fba RDI: 0000000000000001 [ 745.200659][ C1] RBP: ffffc9000d6476b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 745.200673][ C1] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 745.200688][ C1] R13: 1ffff1100b0c589e R14: ffff88805862c4f0 R15: ffff88805862c4f8 [ 745.200713][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 745.200729][ C1] filemap_remove_folio+0xee/0x1f0 [ 745.200756][ C1] truncate_inode_folio+0x5d/0x70 [ 745.200777][ C1] shmem_undo_range+0x3a9/0x14b0 [ 745.200815][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 745.200854][ C1] ? __lock_acquire+0xab9/0xd20 [ 745.200896][ C1] shmem_evict_inode+0x272/0xa70 [ 745.200921][ C1] ? inode_wait_for_writeback+0xf9/0x290 [ 745.200949][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 745.200970][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 745.201001][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 745.201028][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 745.201049][ C1] evict+0x501/0x9c0 [ 745.201092][ C1] ? __pfx_evict+0x10/0x10 [ 745.201117][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 745.201143][ C1] ? _raw_spin_unlock+0x28/0x50 [ 745.201171][ C1] ? iput+0x6d8/0x9d0 [ 745.201196][ C1] __dentry_kill+0x209/0x660 [ 745.201218][ C1] ? dput+0x37/0x2b0 [ 745.201239][ C1] dput+0x19f/0x2b0 [ 745.201259][ C1] __fput+0x68e/0xa70 [ 745.201290][ C1] task_work_run+0x1d1/0x260 [ 745.201320][ C1] ? __pfx_task_work_run+0x10/0x10 [ 745.201352][ C1] do_exit+0x6b5/0x22e0 [ 745.201383][ C1] ? __pfx_do_exit+0x10/0x10 [ 745.201408][ C1] ? proc_coredump_connector+0x172/0x4b0 [ 745.201433][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 745.201469][ C1] do_group_exit+0x21c/0x2d0 [ 745.201494][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.201515][ C1] get_signal+0x125e/0x1310 [ 745.201546][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 745.201579][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 745.201606][ C1] ? __bad_area_nosemaphore+0x3fb/0x780 [ 745.201643][ C1] ? local_irq_enable_exit_to_user+0x5/0x10 [ 745.201665][ C1] irqentry_exit_to_user_mode+0x81/0x120 [ 745.201686][ C1] exc_page_fault+0x9f/0xf0 [ 745.201707][ C1] asm_exc_page_fault+0x26/0x30 [ 745.201725][ C1] RIP: 0033:0x7f3d4638e9b1 [ 745.201740][ C1] Code: Unable to access opcode bytes at 0x7f3d4638e987. [ 745.201751][ C1] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 745.201765][ C1] RAX: 0000000000000000 RBX: 00007f3d465b5fa0 RCX: 00007f3d4638e9a9 [ 745.201779][ C1] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000000 [ 745.201790][ C1] RBP: 00007f3d46410d69 R08: 0000000000000000 R09: 0000000000000000 [ 745.201802][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.201862][ C1] R13: 0000000000000001 R14: 00007f3d465b5fa0 R15: 00007ffd79b056d8 [ 745.201901][ C1] [ 745.201951][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g111453 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 745.732268][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 745.742271][ C0] rcu: RCU grace-period kthread stack dump: [ 745.748183][ C0] task:rcu_preempt state:R running task stack:27320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 745.761739][ C0] Call Trace: [ 745.765088][ C0] [ 745.768066][ C0] __schedule+0x16aa/0x4c90 [ 745.772621][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 745.777892][ C0] ? schedule+0x165/0x360 [ 745.782265][ C0] ? __lock_acquire+0xab9/0xd20 [ 745.787154][ C0] ? __pfx___schedule+0x10/0x10 [ 745.792064][ C0] ? schedule+0x91/0x360 [ 745.796348][ C0] schedule+0x165/0x360 [ 745.800545][ C0] schedule_timeout+0x12b/0x270 [ 745.805447][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 745.810872][ C0] ? __pfx_process_timeout+0x10/0x10 [ 745.816204][ C0] ? prepare_to_swait_event+0x341/0x380 [ 745.821840][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 745.826732][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 745.832135][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.837384][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 745.842700][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 745.847958][ C0] ? finish_swait+0xcd/0x1f0 [ 745.852713][ C0] rcu_gp_kthread+0x99/0x390 [ 745.857463][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 745.862720][ C0] ? __kthread_parkme+0x7b/0x200 [ 745.867872][ C0] ? __kthread_parkme+0x1a1/0x200 [ 745.872963][ C0] kthread+0x70e/0x8a0 [ 745.877093][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 745.882320][ C0] ? __pfx_kthread+0x10/0x10 [ 745.886960][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 745.892200][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.897437][ C0] ? __pfx_kthread+0x10/0x10 [ 745.902075][ C0] ret_from_fork+0x3fc/0x770 [ 745.906713][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 745.911896][ C0] ? __switch_to_asm+0x39/0x70 [ 745.916700][ C0] ? __switch_to_asm+0x33/0x70 [ 745.921591][ C0] ? __pfx_kthread+0x10/0x10 [ 745.926323][ C0] ret_from_fork_asm+0x1a/0x30 [ 745.931150][ C0] [ 745.934289][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 745.940899][ C0] CPU: 0 UID: 0 PID: 21979 Comm: syz.9.6527 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 745.950949][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.961041][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 745.967854][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 80 6e 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 2b 6a 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 10 6a 0b [ 745.987507][ C0] RSP: 0018:ffffc9000c4274a0 EFLAGS: 00000293 [ 745.993611][ C0] RAX: ffffffff81b4bbb0 RBX: ffff8880b863b040 RCX: ffff888026cbbc00 [ 746.001643][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 746.009649][ C0] RBP: ffffc9000c427600 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 746.017652][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 1ffff110170e7f2d [ 746.025668][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b873f968 [ 746.033675][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 746.042639][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 746.049249][ C0] CR2: 00007fd20447de9c CR3: 0000000053cec000 CR4: 00000000003526f0 [ 746.057256][ C0] Call Trace: [ 746.060563][ C0] [ 746.063543][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 746.070000][ C0] ? free_pgd_range+0x144b/0x14c0 [ 746.075102][ C0] ? rcu_is_watching+0x15/0xb0 [ 746.079912][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 746.085242][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 746.090402][ C0] flush_tlb_mm_range+0x6b1/0x12c0 [ 746.095651][ C0] ? free_pgtables+0xa12/0xaf0 [ 746.100460][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 746.106052][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 746.111206][ C0] tlb_flush_mmu+0x1a7/0x680 [ 746.115838][ C0] ? __pfx_down_write+0x10/0x10 [ 746.120729][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 746.125483][ C0] exit_mmap+0x44c/0xb50 [ 746.129882][ C0] ? uprobe_clear_state+0x20f/0x290 [ 746.135217][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 746.140157][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 746.145859][ C0] ? __pfx_exit_aio+0x10/0x10 [ 746.152060][ C0] ? uprobe_clear_state+0x274/0x290 [ 746.157294][ C0] ? mm_update_next_owner+0xa7/0x870 [ 746.162713][ C0] __mmput+0x118/0x410 [ 746.166913][ C0] exit_mm+0x1da/0x2c0 [ 746.171036][ C0] ? __pfx_exit_mm+0x10/0x10 [ 746.175672][ C0] ? rcu_is_watching+0x15/0xb0 [ 746.180474][ C0] do_exit+0x648/0x22e0 [ 746.184769][ C0] ? do_raw_spin_lock+0x121/0x290 [ 746.189932][ C0] ? __pfx_do_exit+0x10/0x10 [ 746.194579][ C0] do_group_exit+0x21c/0x2d0 [ 746.199302][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.204554][ C0] get_signal+0x125e/0x1310 [ 746.209118][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 746.214714][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 746.220954][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 746.226451][ C0] exit_to_user_mode_loop+0x75/0x110 [ 746.231767][ C0] do_syscall_64+0x2bd/0x3b0 [ 746.236397][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 746.241628][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.247723][ C0] ? clear_bhb_loop+0x60/0xb0 [ 746.252467][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.258431][ C0] RIP: 0033:0x7f6ceab8e9a9 [ 746.262891][ C0] Code: Unable to access opcode bytes at 0x7f6ceab8e97f. [ 746.270027][ C0] RSP: 002b:00007f6ceb9770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 746.278590][ C0] RAX: fffffffffffffe00 RBX: 00007f6ceadb5fa8 RCX: 00007f6ceab8e9a9 [ 746.286695][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6ceadb5fa8 [ 746.294705][ C0] RBP: 00007f6ceadb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 746.302703][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ceadb5fac [ 746.310712][ C0] R13: 0000000000000000 R14: 00007ffca76dd030 R15: 00007ffca76dd118 [ 746.318740][ C0]