last executing test programs: 2m27.061897164s ago: executing program 1 (id=10): r0 = socket(0x10, 0x3, 0x0) read(r0, &(0x7f0000002380)=""/255, 0xff) write(r0, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f0016040000", 0x24) 2m26.934191045s ago: executing program 1 (id=12): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 2m26.823995797s ago: executing program 1 (id=13): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e004800", 0x2, 0x6, 0x1, 0x0, 0x1, "f7faffffa2e0a2894cdf26a4ff00", "0200", '\x00', '\x00', ["000000000100", "807917edb91c4e621eff00", "0cdd42000000000000853e00"]}) 2m26.803312179s ago: executing program 1 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 2m26.599915423s ago: executing program 1 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000680)={0x1, 0x0, [{0x1, 0x519c, 0xd, 0xfffffffd}]}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) 2m26.1265377s ago: executing program 1 (id=22): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r3, r1, 0x0) 2m25.805542321s ago: executing program 32 (id=22): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r3, r1, 0x0) 1m16.045995009s ago: executing program 3 (id=745): syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x1, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}]}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m15.485941178s ago: executing program 3 (id=749): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000800) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r1, &(0x7f00000009c0)=[{&(0x7f0000000a00)=""/95, 0x5f}], 0xf5) getdents(0xffffffffffffffff, 0x0, 0x0) 1m14.856423293s ago: executing program 3 (id=756): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, r1, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000640)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8br\xae\xe8\xc9)', 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = fanotify_init(0x8, 0x101000) fanotify_mark(r4, 0x90, 0x48100018, r3, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000400)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x0, @empty, 0x800}, @in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x1, @mcast2, 0xfa}, @in6={0xa, 0x4e21, 0x3, @private2, 0x9}, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa80}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0xbc) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r5 = syz_open_dev$vbi(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f82, 0x19f5, 0x4, 0x5, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xca56818c2ee5910d, 0x1, {0x45, 0x80}, 0xcd, 0x3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="18166100", @ANYRES16=r7], 0x18}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}, {@volatile}, {@index_off}, {@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@fsmagic={'fsmagic', 0x3d, 0x77e2}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lowerdir'}}, {@fsuuid={'fsuuid', 0x3d, {[0x53, 0x36, 0x36, 0x38, 0x64, 0x61, 0x30, 0x34], 0x2d, [0x38, 0x64, 0x64, 0x38], 0x2d, [0x63, 0x31, 0x38, 0x66], 0x2d, [0x64, 0x30, 0x30, 0x33], 0x2d, [0x51, 0x35, 0x39, 0x61, 0x65, 0x65, 0x36, 0x64]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x62, 0x66, 0x31, 0x62, 0x65, 0x64, 0x61], 0x2d, [0x31, 0x36, 0x63, 0x65], 0x2d, [0x37, 0x34, 0x56, 0x65], 0x2d, [0x35, 0x36, 0x62, 0x36], 0x2d, [0x35, 0x34, 0x37, 0x63, 0x65, 0x32, 0x30, 0x35]}}}, {@fsmagic={'fsmagic', 0x3d, 0xe00000}}, {@fowner_lt={'fowner<', 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x30, 0x34, 0x0, 0x31, 0x32, 0x36, 0x30], 0x2d, [0x38, 0x34, 0x65, 0x66], 0x2d, [0x61, 0x56, 0x36, 0x38], 0x2d, [0x31, 0x31, 0x64], 0x2d, [0x0, 0x64, 0x61, 0x39, 0x62, 0x33, 0x62, 0x56]}}}]}) 1m13.003396399s ago: executing program 33 (id=774): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x7ed548a2, 0xca000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)=0x2) gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000001c0)="01de079bda40795e9cfbe698f1208cb22ebef11a06e0baf196ecbcd58bee3f0884576b8ed1387318c78f7f027c3e83d5db6d574b73f982879e077b5888b78a21b967fafb821602c98eb7cabf13c55ad568da41a87970c9b34916f5a52849fd25c623822964d0fe389577294058834dce853c2495cf602e28975e10156b05266dfc67662f57de7e6fe0425986bf505f012586f2561f87b5889b226cae5c", &(0x7f0000000740)="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"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000700)=""/40, 0x28) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = fanotify_init(0x8, 0x101000) fanotify_mark(r4, 0x90, 0x48100018, r3, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000400)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x0, @empty, 0x800}, @in6={0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x1, @mcast2, 0xfa}, @in6={0xa, 0x4e21, 0x3, @private2, 0x9}, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa80}, @in={0x2, 0x4e22, @rand_addr=0x64010102}], 0xbc) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') r5 = syz_open_dev$vbi(&(0x7f0000000180), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f82, 0x19f5, 0x4, 0x5, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xca56818c2ee5910d, 0x1, {0x45, 0x80}, 0xcd, 0x3}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="18166100", @ANYRES16=r7], 0x18}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}, {@volatile}, {@index_off}, {@metacopy_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@fsmagic={'fsmagic', 0x3d, 0x77e2}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lowerdir'}}, {@fsuuid={'fsuuid', 0x3d, {[0x53, 0x36, 0x36, 0x38, 0x64, 0x61, 0x30, 0x34], 0x2d, [0x38, 0x64, 0x64, 0x38], 0x2d, [0x63, 0x31, 0x38, 0x66], 0x2d, [0x64, 0x30, 0x30, 0x33], 0x2d, [0x51, 0x35, 0x39, 0x61, 0x65, 0x65, 0x36, 0x64]}}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x62, 0x66, 0x31, 0x62, 0x65, 0x64, 0x61], 0x2d, [0x31, 0x36, 0x63, 0x65], 0x2d, [0x37, 0x34, 0x56, 0x65], 0x2d, [0x35, 0x36, 0x62, 0x36], 0x2d, [0x35, 0x34, 0x37, 0x63, 0x65, 0x32, 0x30, 0x35]}}}, {@fsmagic={'fsmagic', 0x3d, 0xe00000}}, {@fowner_lt={'fowner<', 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x30, 0x34, 0x0, 0x31, 0x32, 0x36, 0x30], 0x2d, [0x38, 0x34, 0x65, 0x66], 0x2d, [0x61, 0x56, 0x36, 0x38], 0x2d, [0x31, 0x31, 0x64], 0x2d, [0x0, 0x64, 0x61, 0x39, 0x62, 0x33, 0x62, 0x56]}}}]}) 59.288841213s ago: executing program 0 (id=928): r0 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 59.166996207s ago: executing program 0 (id=931): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 56.856651914s ago: executing program 0 (id=958): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x7434, 0x0) 56.815854398s ago: executing program 0 (id=960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) 56.765314753s ago: executing program 0 (id=961): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) r1 = open(&(0x7f0000000080)='./file1\x00', 0x145842, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) 56.659384228s ago: executing program 0 (id=963): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xd40, 0xd2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) close(r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 41.637508817s ago: executing program 34 (id=963): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xd40, 0xd2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) close(r0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 11.366235084s ago: executing program 5 (id=1262): prctl$PR_SET_NAME(0xf, &(0x7f0000000100)='\x00\x00\x00\x00\x00E:\x06*\x01J\x91\x1a\x82sB\a\xe9\'B\r\xe9\xfcW6nKW\xdd\xd6@\x9a-\xecAw\x92\x0fn\x82\xc4\xa8Y`E\x169\x15\x93\xba\x87\xf53\xbd6\x14QK\xef\x01E\x8a\x12\xed\x1b\xb6f\x90\xb0\x0e\x02\x81\x0f\xd4\xbcp/b\xd9\x1bW\x9c4X\x1b\x95v\xc94|\xa4\xa4W\x93\xd8RJ\xac\xe1\x918\xb6$P\xe8\xd3L\xac') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, 0x0, 0x0) 11.14431526s ago: executing program 5 (id=1266): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x200008c1) splice(r1, 0x0, r0, 0x0, 0x46, 0x6) 11.049664608s ago: executing program 5 (id=1268): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 10.823136594s ago: executing program 4 (id=1270): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = open(0x0, 0x109042, 0x88) pwritev(r1, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000005c0)="c0f744fc822f406ef979caf5a036548f894d7be948441f25516f7e1ebeaa7a8deb8affea49e0a60bca5e240920825416049674f2d847", 0x36}], 0x2, 0x4, 0x1) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 10.800183956s ago: executing program 6 (id=1271): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) close(0x3) 10.6082683s ago: executing program 6 (id=1272): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00009ef000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@wrmsr={0x65, 0x20, {0x40000072, 0xda71}}], 0x20}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 10.482147187s ago: executing program 6 (id=1273): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b22, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) msgget(0x0, 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x8) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5c, &(0x7f0000000080)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @remote}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e1e}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 9.920395057s ago: executing program 5 (id=1274): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, 0x0, 0x0) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x24, 0x6, @broadcast}, 0x14) 7.803922937s ago: executing program 5 (id=1275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x3}) 7.692941426s ago: executing program 4 (id=1276): semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000001280)) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 7.530172571s ago: executing program 6 (id=1277): r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0x2, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 7.348602688s ago: executing program 4 (id=1279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="d40000000001010400000000000000000a0000003c0001802c00018014000300ff02000000000000000000000000000114000400fc0000000000000000000000000000000c00028005000100840000003c0002800c00028005000100840000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa0800074000000000400006800c0003"], 0xd4}}, 0x0) 5.840409937s ago: executing program 6 (id=1280): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, 0x0}}], 0x1, 0x4001c00) gettid() timer_create(0x9, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r3) 4.383295098s ago: executing program 4 (id=1281): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00009ef000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000080)={0x0, &(0x7f0000000140)=[@wrmsr={0x65, 0x20, {0x40000072, 0xda71}}], 0x20}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r1, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 4.169974872s ago: executing program 2 (id=1283): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x0, 0x8000, {{0x5, 0x4, 0x0, 0x1, 0x13, 0x67, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @rand_addr=0x64010100, @empty}}}}) 4.000055286s ago: executing program 2 (id=1284): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x243, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0x59dc, 0xd, 0x1, {0x22, 0x230}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x40}}}}}]}}]}}, 0x0) 2.078519837s ago: executing program 6 (id=1285): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/67, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000e40)) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 1.97101674s ago: executing program 5 (id=1286): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x95, 0x5a, 0x4f, 0x40, 0xcf3, 0xe019, 0xfb4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x80, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x94, 0x9, 0x1, 0x74, 0x83, 0x31, 0x80, [], [{{0x9, 0x5, 0x7, 0x0, 0x0, 0x6, 0x8, 0x0, [@generic={0x9, 0x11, "62b367e12306af"}]}}]}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x2, {0x2, 0xa}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) 1.970168688s ago: executing program 4 (id=1287): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100, 0x80000100008b}, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x664001) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 347.982666ms ago: executing program 4 (id=1288): setrlimit(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x9}) r0 = syz_open_dev$evdev(&(0x7f0000001f80), 0x34, 0x181002) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000140)=""/106) 331.125697ms ago: executing program 2 (id=1289): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 209.458081ms ago: executing program 2 (id=1290): ioperm(0x0, 0x8, 0x20) clock_settime(0x0, &(0x7f0000000000)={0x0, 0x3938700}) 88.651077ms ago: executing program 2 (id=1291): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002280)=ANY=[@ANYBLOB="240000001900010000000000fbdbdf250a01"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 0s ago: executing program 2 (id=1292): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd2(0x1ff, 0x80001) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000000)={0x1, r5}) r6 = eventfd(0x8) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000480)=r6) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000340)=0x1) kernel console output (not intermixed with test programs): ith driver ft260 failed with error -71 [ 109.079981][ T24] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 109.098656][ T121] usb 5-1: USB disconnect, device number 2 [ 109.099359][ T24] usb 3-1: config 128 has no interface number 0 [ 109.122530][ T24] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 109.151015][ T45] usb 4-1: config 8 has an invalid interface number: 59 but max is 0 [ 109.168441][ T24] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 109.186909][ T45] usb 4-1: config 8 has no interface number 0 [ 109.193687][ T45] usb 4-1: config 8 interface 59 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 109.204259][ T24] usb 3-1: config 128 interface 148 has no altsetting 0 [ 109.212268][ T45] usb 4-1: config 8 interface 59 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 109.225972][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 109.235437][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.245086][ T45] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=f6.ce [ 109.254500][ T24] usb 3-1: Product: syz [ 109.258845][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.266947][ T24] usb 3-1: Manufacturer: syz [ 109.271631][ T24] usb 3-1: SerialNumber: syz [ 109.277747][ T45] usb 4-1: Product: syz [ 109.281940][ T45] usb 4-1: Manufacturer: syz [ 109.286548][ T45] usb 4-1: SerialNumber: syz [ 109.530976][ T24] usb 3-1: USB disconnect, device number 4 [ 109.656940][ T6405] netlink: 428 bytes leftover after parsing attributes in process `syz.0.152'. [ 109.684602][ T6405] netlink: 32 bytes leftover after parsing attributes in process `syz.0.152'. [ 109.697674][ T45] kvaser_usb 4-1:8.59: error -EPROTO: Cannot get software info [ 109.720041][ T45] kvaser_usb 4-1:8.59: probe with driver kvaser_usb failed with error -71 [ 109.743787][ T45] usb 4-1: USB disconnect, device number 6 [ 110.058737][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.220644][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 110.235734][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 110.244782][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.255837][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.269018][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 110.308464][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.321849][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.336683][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.463889][ T6428] random: crng reseeded on system resumption [ 110.561401][ T24] usb 3-1: usb_control_msg returned -32 [ 110.567338][ T24] usbtmc 3-1:16.0: can't read capabilities [ 110.604016][ T6431] Unrecognized hibernate image header format! [ 110.614507][ T6431] PM: hibernation: Image mismatch: architecture specific data [ 111.081415][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 112.337827][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.499684][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 112.513795][ T24] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 112.524089][ T24] usb 5-1: config 0 has no interface number 0 [ 112.532071][ T24] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 112.548321][ T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 112.558360][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.567329][ T24] usb 5-1: Product: syz [ 112.572026][ T24] usb 5-1: Manufacturer: syz [ 112.577421][ T24] usb 5-1: SerialNumber: syz [ 112.586924][ T24] usb 5-1: config 0 descriptor?? [ 112.601917][ T6479] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.660353][ T6408] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.830311][ T6408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.842650][ T6479] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.864370][ T6408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.893402][ T6408] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 112.905109][ T6408] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 112.913781][ T6408] usb 4-1: Manufacturer: syz [ 112.929566][ T6408] usb 4-1: config 0 descriptor?? [ 113.749154][ T6408] uclogic 0003:256C:006D.0004: interface is invalid, ignoring [ 113.966760][ T5893] usb 4-1: USB disconnect, device number 7 [ 114.283925][ T24] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 114.305104][ T24] asix 5-1:0.188: probe with driver asix failed with error -71 [ 114.327061][ T24] usb 5-1: USB disconnect, device number 3 [ 115.154804][ T30] audit: type=1326 audit(1766716216.309:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 115.207428][ T30] audit: type=1326 audit(1766716216.309:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 115.232131][ T30] audit: type=1326 audit(1766716216.309:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 115.267834][ T30] audit: type=1326 audit(1766716216.309:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 115.294022][ T30] audit: type=1326 audit(1766716216.309:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 115.317199][ T30] audit: type=1326 audit(1766716216.309:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 115.367641][ T30] audit: type=1326 audit(1766716216.309:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 115.405468][ T30] audit: type=1326 audit(1766716216.309:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 115.459412][ T30] audit: type=1326 audit(1766716216.309:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 115.499290][ T6572] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 115.506462][ T30] audit: type=1326 audit(1766716216.319:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.4.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 115.517043][ T6572] overlayfs: failed to set xattr on upper [ 115.535034][ T6572] overlayfs: ...falling back to redirect_dir=nofollow. [ 115.618120][ T6572] overlayfs: ...falling back to index=off. [ 115.630482][ T6572] overlayfs: ...falling back to uuid=null. [ 116.222247][ T6604] QAT: failed to copy from user cfg_data. [ 116.417970][ T6458] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 116.491928][ T9] usb 3-1: USB disconnect, device number 5 [ 117.367620][ T6640] binder: binder_mmap: 6639 200000000000-200000200000 bad vm_flags failed -1 [ 117.478040][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.652231][ T24] usb 1-1: config 128 has an invalid interface number: 148 but max is 0 [ 117.668276][ T24] usb 1-1: config 128 has no interface number 0 [ 117.683796][ T24] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 117.694700][ T24] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 117.707214][ T24] usb 1-1: config 128 interface 148 has no altsetting 0 [ 117.729923][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 117.747590][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.755976][ T24] usb 1-1: Product: syz [ 117.762224][ T24] usb 1-1: Manufacturer: syz [ 117.768463][ T24] usb 1-1: SerialNumber: syz [ 117.907447][ T6652] input: syz0 as /devices/virtual/input/input6 [ 118.007086][ T24] usb 1-1: USB disconnect, device number 6 [ 118.464439][ T6670] vivid-000: ================= START STATUS ================= [ 118.472243][ T6670] vivid-000: Test Pattern: 75% Colorbar [ 118.478070][ T6670] vivid-000: Fill Percentage of Frame: 100 [ 118.483940][ T6670] vivid-000: Horizontal Movement: No Movement [ 118.490142][ T6670] vivid-000: Vertical Movement: No Movement [ 118.496071][ T6670] vivid-000: OSD Text Mode: All [ 118.501084][ T6670] vivid-000: Show Border: false [ 118.505994][ T6670] vivid-000: Show Square: false [ 118.510938][ T6670] vivid-000: Sensor Flipped Horizontally: false [ 118.517217][ T6670] vivid-000: Sensor Flipped Vertically: false [ 118.517744][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.523379][ T6670] vivid-000: Insert SAV Code in Image: false [ 118.523408][ T6670] vivid-000: Insert EAV Code in Image: false [ 118.543191][ T6670] vivid-000: Insert Video Guard Band: false [ 118.549178][ T6670] vivid-000: Reduced Framerate: false [ 118.554590][ T6670] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 118.563522][ T6670] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 118.571761][ T6670] vivid-000: Enable Capture Cropping: true [ 118.577794][ T6670] vivid-000: Enable Capture Composing: true [ 118.583733][ T6670] vivid-000: Enable Capture Scaler: true [ 118.589502][ T6670] vivid-000: Timestamp Source: End of Frame [ 118.595443][ T6670] vivid-000: Colorspace: sRGB [ 118.600306][ T6670] vivid-000: Transfer Function: Default [ 118.605893][ T6670] vivid-000: Y'CbCr Encoding: Default [ 118.611516][ T6670] vivid-000: HSV Encoding: Hue 0-179 [ 118.616833][ T6670] vivid-000: Quantization: Default [ 118.622036][ T6670] vivid-000: Apply Alpha To Red Only: false [ 118.628030][ T6670] vivid-000: Standard Aspect Ratio: 4x3 [ 118.634225][ T6670] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 118.642333][ T6670] vivid-000: DV Timings: 640x480p59 inactive [ 118.648534][ T6670] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 118.655882][ T6670] vivid-000: Maximum EDID Blocks: 2 [ 118.662392][ T6670] vivid-000: Limited RGB Range (16-235): false [ 118.668773][ T6670] vivid-000: Rx RGB Quantization Range: Automatic [ 118.675231][ T6670] vivid-000: Power Present: 0x00000001 [ 118.680802][ T6670] tpg source WxH: 320x240 (Y'CbCr) [ 118.685938][ T6670] tpg field: 1 [ 118.689402][ T6670] tpg crop: (0,0)/320x240 [ 118.693753][ T6670] tpg compose: (0,0)/320x240 [ 118.698433][ T6670] tpg colorspace: 8 [ 118.702270][ T6670] tpg transfer function: 0/0 [ 118.706883][ T6670] tpg Y'CbCr encoding: 0/0 [ 118.711428][ T6670] tpg quantization: 0/0 [ 118.715605][ T6670] tpg RGB range: 0/2 [ 118.719686][ T6670] vivid-000: ================== END STATUS ================== [ 118.728687][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 118.740091][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 118.750617][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.760803][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.775206][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 118.786718][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.807919][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.838215][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.063441][ T24] usb 1-1: usb_control_msg returned -32 [ 119.079819][ T24] usbtmc 1-1:16.0: can't read capabilities [ 119.152254][ T6683] comedi comedi0: Cannot bond this driver to itself! [ 120.077723][ T6408] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 120.241085][ T6408] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 120.253250][ T6408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.267837][ T6408] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 120.278004][ T6408] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.291485][ T6408] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.302400][ T6408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.314751][ T6408] usb 5-1: config 0 descriptor?? [ 120.753303][ T6408] usbhid 5-1:0.0: can't add hid device: -71 [ 120.760166][ T6408] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 120.780073][ T6408] usb 5-1: USB disconnect, device number 4 [ 121.137833][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 122.857351][ T6784] netlink: 32 bytes leftover after parsing attributes in process `syz.4.287'. [ 123.242012][ T6795] Set syz1 is full, maxelem 768 reached [ 123.489409][ T6804] binder: 6802:6804 ioctl c0306201 200000000280 returned -14 [ 123.497877][ T6806] netlink: 32 bytes leftover after parsing attributes in process `syz.4.297'. [ 124.032812][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 124.162495][ T6833] netlink: 32 bytes leftover after parsing attributes in process `syz.3.309'. [ 124.201618][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.225531][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.236220][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.254510][ T24] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 124.265435][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.276707][ T24] usb 5-1: config 0 descriptor?? [ 124.695008][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 124.714994][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 124.748587][ T24] usb 5-1: USB disconnect, device number 5 [ 124.899320][ T6700] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 124.926746][ T9] usb 1-1: USB disconnect, device number 7 [ 125.199514][ T6854] netlink: 32 bytes leftover after parsing attributes in process `syz.3.318'. [ 125.677681][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 125.849914][ T9] usb 4-1: config 128 has an invalid interface number: 148 but max is 0 [ 125.861261][ T9] usb 4-1: config 128 has no interface number 0 [ 125.862298][ T6882] netlink: 32 bytes leftover after parsing attributes in process `syz.0.332'. [ 125.868209][ T9] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 125.898653][ T9] usb 4-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 125.912179][ T9] usb 4-1: config 128 interface 148 has no altsetting 0 [ 125.923325][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 125.947156][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.974021][ T9] usb 4-1: Product: syz [ 125.981029][ T9] usb 4-1: Manufacturer: syz [ 125.985756][ T9] usb 4-1: SerialNumber: syz [ 126.204347][ T6893] warning: `syz.0.337' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.226909][ T9] usb 4-1: USB disconnect, device number 8 [ 126.318340][ T5894] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.502197][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 126.514096][ T5894] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 126.528117][ T5894] usb 3-1: config 0 has no interface number 0 [ 126.543081][ T5894] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 126.564330][ T5894] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 126.573967][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.584084][ T5894] usb 3-1: Product: syz [ 126.593122][ T6905] netlink: 32 bytes leftover after parsing attributes in process `syz.4.343'. [ 126.602342][ T5894] usb 3-1: Manufacturer: syz [ 126.606995][ T5894] usb 3-1: SerialNumber: syz [ 126.618721][ T5894] usb 3-1: config 0 descriptor?? [ 126.645023][ T5894] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 126.658659][ T5894] em28xx 3-1:0.132: Video interface 132 found: [ 126.708976][ T6408] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 126.877641][ T6408] usb 4-1: Using ep0 maxpacket: 8 [ 126.885196][ T6408] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 126.893922][ T6408] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.904102][ T6408] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.914395][ T6408] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 126.924923][ T5893] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.932964][ T6408] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.946774][ T6408] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.956493][ T6408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.043840][ T5894] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 127.087611][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 127.094666][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.106350][ T5893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.116207][ T5893] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.125451][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.142844][ T5893] usb 1-1: config 0 descriptor?? [ 127.156685][ T5893] hub 1-1:0.0: USB hub found [ 127.172633][ T6408] usb 4-1: usb_control_msg returned -32 [ 127.178955][ T6408] usbtmc 4-1:16.0: can't read capabilities [ 127.361740][ T5893] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 127.377404][ T5893] usbhid 1-1:0.0: can't add hid device: -71 [ 127.384503][ T5893] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 127.429375][ T5893] usb 1-1: USB disconnect, device number 8 [ 127.452575][ T5894] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 127.467005][ T5894] em28xx 3-1:0.132: board has no eeprom [ 127.707756][ T5894] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 127.716032][ T5894] em28xx 3-1:0.132: analog set to bulk mode. [ 127.722388][ T5893] em28xx 3-1:0.132: Registering V4L2 extension [ 127.742172][ T5894] usb 3-1: USB disconnect, device number 6 [ 127.761878][ T5894] em28xx 3-1:0.132: Disconnecting em28xx [ 127.833782][ T5893] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 127.841081][ T5893] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 127.854263][ T5893] em28xx 3-1:0.132: No AC97 audio processor [ 127.864257][ T5893] usb 3-1: Decoder not found [ 127.869723][ T5893] em28xx 3-1:0.132: failed to create media graph [ 127.878726][ T5893] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 127.897863][ T121] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.899826][ T5893] em28xx 3-1:0.132: Remote control support is not available for this card. [ 127.919303][ T5894] em28xx 3-1:0.132: Closing input extension [ 127.949719][ T5894] em28xx 3-1:0.132: Freeing device [ 128.073859][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.086325][ T121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.096938][ T121] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 128.106552][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.117127][ T121] usb 5-1: config 0 descriptor?? [ 128.532028][ T121] hid-thrustmaster 0003:044F:B65D.0005: unknown main item tag 0x0 [ 128.546478][ T121] hid-thrustmaster 0003:044F:B65D.0005: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 128.559787][ T121] hid-thrustmaster 0003:044F:B65D.0005: Wrong number of endpoints? [ 128.785042][ C0] hid-thrustmaster 0003:044F:B65D.0005: URB to get model id failed with error -71 [ 128.795103][ T121] usb 5-1: USB disconnect, device number 6 [ 128.870828][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 128.934185][ T5920] usb 4-1: USB disconnect, device number 9 [ 129.209502][ T6948] netlink: 256 bytes leftover after parsing attributes in process `syz.0.359'. [ 129.355070][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'. [ 129.647704][ T5920] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.819945][ T5920] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 129.835228][ T5920] usb 3-1: config 128 has no interface number 0 [ 129.848422][ T5920] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 129.877888][ T5920] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 129.893467][ T5920] usb 3-1: config 128 interface 148 has no altsetting 0 [ 129.918564][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 129.931111][ T5920] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 129.965220][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.985579][ T5920] usb 3-1: Product: syz [ 129.989930][ T5920] usb 3-1: Manufacturer: syz [ 129.994844][ T5920] usb 3-1: SerialNumber: syz [ 130.235855][ T5920] usb 3-1: USB disconnect, device number 7 [ 130.341428][ T6993] ======================================================= [ 130.341428][ T6993] WARNING: The mand mount option has been deprecated and [ 130.341428][ T6993] and is ignored by this kernel. Remove the mand [ 130.341428][ T6993] option from the mount to silence this warning. [ 130.341428][ T6993] ======================================================= [ 130.378998][ T121] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 130.422937][ T6995] random: crng reseeded on system resumption [ 130.530932][ T121] usb 5-1: Using ep0 maxpacket: 8 [ 130.544058][ T121] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 130.553891][ T121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.563569][ T121] usb 5-1: Product: syz [ 130.578750][ T121] usb 5-1: Manufacturer: syz [ 130.583801][ T121] usb 5-1: SerialNumber: syz [ 130.592827][ T121] usb 5-1: config 0 descriptor?? [ 130.625145][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 130.718217][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.816661][ T121] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 130.877785][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 130.885586][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 130.895146][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.909798][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.920214][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 130.930530][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.945814][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.959255][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.174671][ T9] usb 3-1: usb_control_msg returned -32 [ 131.183692][ T9] usbtmc 3-1:16.0: can't read capabilities [ 131.251008][ T7017] input: syz0 as /devices/virtual/input/input8 [ 131.535130][ T7023] netlink: 152 bytes leftover after parsing attributes in process `syz.0.392'. [ 131.613793][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.393'. [ 131.972529][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 132.224099][ T7049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.403'. [ 132.242224][ T121] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 132.271043][ T121] usb 5-1: USB disconnect, device number 7 [ 132.875444][ T7069] vivid-000: ================= START STATUS ================= [ 132.892235][ T7069] vivid-000: Test Pattern: 75% Colorbar [ 132.908269][ T7069] vivid-000: Fill Percentage of Frame: 100 [ 132.923302][ T7069] vivid-000: Horizontal Movement: No Movement [ 132.937783][ T7069] vivid-000: Vertical Movement: No Movement [ 132.945081][ T7069] vivid-000: OSD Text Mode: All [ 132.951316][ T7069] vivid-000: Show Border: false [ 132.961833][ T7069] vivid-000: Show Square: false [ 132.962182][ T5920] usb 3-1: USB disconnect, device number 8 [ 132.976806][ T7069] vivid-000: Sensor Flipped Horizontally: false [ 132.994129][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.010889][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.047654][ T7069] vivid-000: Sensor Flipped Vertically: false [ 133.053941][ T7069] vivid-000: Insert SAV Code in Image: false [ 133.061469][ T7069] vivid-000: Insert EAV Code in Image: false [ 133.068233][ T7069] vivid-000: Insert Video Guard Band: false [ 133.075499][ T7069] vivid-000: Reduced Framerate: false [ 133.081993][ T7069] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 133.091347][ T7069] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 133.101022][ T7069] vivid-000: Enable Capture Cropping: true [ 133.111498][ T7069] vivid-000: Enable Capture Composing: true [ 133.158159][ T7069] vivid-000: Enable Capture Scaler: true [ 133.168076][ T7069] vivid-000: Timestamp Source: End of Frame [ 133.176014][ T7069] vivid-000: Colorspace: sRGB [ 133.188909][ T7069] vivid-000: Transfer Function: Default [ 133.194645][ T7069] vivid-000: Y'CbCr Encoding: Default [ 133.205202][ T7069] vivid-000: HSV Encoding: Hue 0-179 [ 133.229072][ T7069] vivid-000: Quantization: Default [ 133.238125][ T7069] vivid-000: Apply Alpha To Red Only: false [ 133.251179][ T7069] vivid-000: Standard Aspect Ratio: 4x3 [ 133.263802][ T7069] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 133.286833][ T7069] vivid-000: DV Timings: 640x480p59 inactive [ 133.307256][ T7069] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 133.342107][ T7069] vivid-000: Maximum EDID Blocks: 2 [ 133.352007][ T7069] vivid-000: Limited RGB Range (16-235): false [ 133.361739][ T7069] vivid-000: Rx RGB Quantization Range: Automatic [ 133.373999][ T7069] vivid-000: Power Present: 0x00000001 [ 133.380365][ T7069] tpg source WxH: 320x240 (Y'CbCr) [ 133.385655][ T7069] tpg field: 1 [ 133.394181][ T7069] tpg crop: (0,0)/320x240 [ 133.409449][ T7069] tpg compose: (0,0)/320x240 [ 133.422972][ T7069] tpg colorspace: 8 [ 133.430808][ T7069] tpg transfer function: 0/0 [ 133.460097][ T7069] tpg Y'CbCr encoding: 0/0 [ 133.466644][ T7069] tpg quantization: 0/0 [ 133.498564][ T7069] tpg RGB range: 0/2 [ 133.512269][ T7069] vivid-000: ================== END STATUS ================== [ 133.564932][ T7090] process 'syz.2.417' launched './file2' with NULL argv: empty string added [ 133.987661][ T888] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.044155][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 134.088205][ T5894] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 134.140845][ T888] usb 5-1: config 128 has an invalid interface number: 148 but max is 0 [ 134.149861][ T888] usb 5-1: config 128 has no interface number 0 [ 134.158510][ T888] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 134.169983][ T888] usb 5-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 134.181746][ T888] usb 5-1: config 128 interface 148 has no altsetting 0 [ 134.191245][ T888] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 134.201973][ T888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.210255][ T888] usb 5-1: Product: syz [ 134.214722][ T888] usb 5-1: Manufacturer: syz [ 134.219475][ T888] usb 5-1: SerialNumber: syz [ 134.250404][ T5894] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 134.261547][ T5894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.270760][ T5894] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 134.288882][ T5894] usb 3-1: string descriptor 0 read error: -22 [ 134.295341][ T5894] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 134.304725][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.327268][ T5894] usb 3-1: 0:2 : does not exist [ 134.348770][ T121] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 134.446256][ T888] usb 5-1: USB disconnect, device number 8 [ 134.509864][ T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.525375][ T5920] usb 3-1: USB disconnect, device number 9 [ 134.531400][ T121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.559440][ T121] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 134.569056][ T121] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 134.578263][ T121] usb 4-1: Manufacturer: syz [ 134.592297][ T121] usb 4-1: config 0 descriptor?? [ 134.878125][ T888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.027717][ T888] usb 5-1: Using ep0 maxpacket: 8 [ 135.035013][ T888] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 135.046114][ T888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.061967][ T888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.077697][ T888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 135.097643][ T888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.111325][ T888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.127398][ T888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.360892][ T888] usb 5-1: usb_control_msg returned -32 [ 135.366736][ T888] usbtmc 5-1:16.0: can't read capabilities [ 135.410058][ T121] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 135.431814][ T121] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 135.437925][ T5894] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 135.445677][ T121] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 135.464938][ T121] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 135.472960][ T121] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 135.489842][ T121] usb 4-1: USB disconnect, device number 10 [ 135.607729][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 135.619544][ T5894] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 135.629017][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.637976][ T5894] usb 1-1: Product: syz [ 135.642284][ T5894] usb 1-1: Manufacturer: syz [ 135.647163][ T5894] usb 1-1: SerialNumber: syz [ 135.655977][ T5894] usb 1-1: config 0 descriptor?? [ 135.664484][ T5894] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 136.003098][ T7142] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 136.072090][ T5894] usb 1-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 136.269941][ T5894] usb 1-1: USB disconnect, device number 9 [ 136.284887][ T5894] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 136.309286][ T5894] visor 1-1:0.0: device disconnected [ 136.652837][ T7154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.444'. [ 137.118459][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 137.131373][ T5907] usb 5-1: USB disconnect, device number 9 [ 137.208876][ T7180] nbd: socks must be embedded in a SOCK_ITEM attr [ 137.248622][ T6171] block nbd64: NBD_DISCONNECT [ 137.357976][ T7188] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.433056][ T5843] udevd[5843]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 137.577822][ T5907] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 137.676441][ T5833] Bluetooth: hci3: unexpected event 0x14 length: 7 > 6 [ 137.739645][ T5907] usb 5-1: config 7 has an invalid interface number: 252 but max is 0 [ 137.757056][ T5907] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 137.767745][ T5907] usb 5-1: config 7 has no interface number 0 [ 137.773899][ T5907] usb 5-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.787444][ T5907] usb 5-1: config 7 interface 252 has no altsetting 0 [ 137.801347][ T5907] usb 5-1: string descriptor 0 read error: -22 [ 137.807911][ T5907] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 137.818898][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.867979][ T5894] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 137.967695][ T888] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 138.030219][ T5894] usb 1-1: config 0 has no interfaces? [ 138.035892][ T5907] usb 5-1: USB disconnect, device number 10 [ 138.038720][ T5894] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 138.063800][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.072778][ T5894] usb 1-1: Product: syz [ 138.076965][ T5894] usb 1-1: Manufacturer: syz [ 138.081909][ T5894] usb 1-1: SerialNumber: syz [ 138.090265][ T5894] usb 1-1: config 0 descriptor?? [ 138.129568][ T888] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 138.138726][ T888] usb 3-1: config 128 has no interface number 0 [ 138.145024][ T888] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 138.155321][ T888] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 138.166956][ T888] usb 3-1: config 128 interface 148 has no altsetting 0 [ 138.176321][ T888] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 138.185713][ T888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.193805][ T888] usb 3-1: Product: syz [ 138.198293][ T6408] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 138.206269][ T888] usb 3-1: Manufacturer: syz [ 138.211594][ T888] usb 3-1: SerialNumber: syz [ 138.338553][ T5907] usb 1-1: USB disconnect, device number 10 [ 138.360021][ T6408] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x67, changing to 0x7 [ 138.371566][ T6408] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 138.384792][ T6408] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 138.395932][ T6408] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 138.405357][ T6408] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 138.413544][ T6408] usb 4-1: SerialNumber: syz [ 138.437719][ T6408] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 138.447673][ T888] usb 3-1: USB disconnect, device number 10 [ 138.457803][ T6408] usb-storage 4-1:1.0: USB Mass Storage device detected [ 138.481755][ T6408] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 138.634127][ T7209] netlink: 'syz.3.465': attribute type 10 has an invalid length. [ 138.649632][ T7209] macvlan0: entered allmulticast mode [ 138.661707][ T7209] veth1_vlan: entered allmulticast mode [ 138.674038][ T7209] team0: Port device macvlan0 added [ 138.685627][ T5907] usb 4-1: USB disconnect, device number 11 [ 138.745817][ T7217] netlink: 32 bytes leftover after parsing attributes in process `syz.4.468'. [ 138.881694][ T5920] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 138.939021][ T7228] random: crng reseeded on system resumption [ 139.037646][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 139.045594][ T5920] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 139.053967][ T5920] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.067410][ T5920] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.077251][ T5920] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 139.087218][ T5920] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.101060][ T5920] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.112263][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.247702][ T5907] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 139.326752][ T5920] usb 3-1: usb_control_msg returned -32 [ 139.333474][ T5920] usbtmc 3-1:16.0: can't read capabilities [ 139.429590][ T5907] usb 1-1: config 162 has an invalid interface number: 187 but max is 1 [ 139.438427][ T5907] usb 1-1: config 162 has an invalid interface number: 192 but max is 1 [ 139.446877][ T5907] usb 1-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 139.458550][ T5907] usb 1-1: config 162 has no interface number 0 [ 139.465206][ T5907] usb 1-1: config 162 has no interface number 1 [ 139.471967][ T5907] usb 1-1: config 162 interface 187 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.485418][ T5907] usb 1-1: config 162 interface 192 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 139.495595][ T5907] usb 1-1: config 162 interface 192 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 139.507262][ T5907] usb 1-1: config 162 interface 192 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 139.518523][ T5907] usb 1-1: config 162 interface 192 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 139.530710][ T5907] usb 1-1: config 162 interface 192 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0 [ 139.541028][ T5907] usb 1-1: config 162 interface 187 has no altsetting 0 [ 139.548278][ T5907] usb 1-1: config 162 interface 192 has no altsetting 0 [ 139.559142][ T5907] usb 1-1: New USB device found, idVendor=13d3, idProduct=3350, bcdDevice=74.1e [ 139.568625][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.576909][ T5907] usb 1-1: Product: syz [ 139.581257][ T5907] usb 1-1: Manufacturer: syz [ 139.586193][ T5907] usb 1-1: SerialNumber: syz [ 139.802134][ T5907] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 139.817088][ T5907] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 139.837648][ T5907] usb 1-1: USB disconnect, device number 11 [ 139.897494][ T7237] netlink: 32 bytes leftover after parsing attributes in process `syz.4.477'. [ 140.609461][ T5907] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 140.644672][ T7263] netlink: 32 bytes leftover after parsing attributes in process `syz.0.487'. [ 140.787729][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 140.797740][ T5907] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 140.807163][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.815893][ T5907] usb 5-1: Product: syz [ 140.820568][ T5907] usb 5-1: Manufacturer: syz [ 140.825299][ T5907] usb 5-1: SerialNumber: syz [ 140.839318][ T5907] r8152-cfgselector 5-1: Unknown version 0x0000 [ 140.845704][ T5907] r8152-cfgselector 5-1: config 0 descriptor?? [ 141.258965][ T7254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.269385][ T7254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.279160][ T6408] r8152-cfgselector 5-1: USB disconnect, device number 11 [ 141.457782][ T5907] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 141.638655][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 141.646696][ T5907] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 141.657272][ T5907] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 141.665847][ T5907] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 141.674743][ T5907] usb 4-1: config 0 has no interface number 1 [ 141.681300][ T5907] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 141.692947][ T5907] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 141.704739][ T5907] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 141.715518][ T5907] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.729020][ T5907] usb 4-1: config 0 interface 125 has no altsetting 0 [ 141.737713][ T5907] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 141.746832][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.755126][ T5907] usb 4-1: Product: syz [ 141.759442][ T5907] usb 4-1: Manufacturer: syz [ 141.764176][ T5907] usb 4-1: SerialNumber: syz [ 141.772145][ T5907] usb 4-1: config 0 descriptor?? [ 141.939932][ T5833] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 141.948669][ T5833] Bluetooth: hci2: Injecting HCI hardware error event [ 141.956590][ T5833] Bluetooth: hci2: hardware error 0x00 [ 142.498421][ T7295] binder: 7294:7295 ioctl c0306201 200000000280 returned -14 [ 142.937758][ T5894] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 143.092222][ T5894] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 143.101487][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.110156][ T5894] usb 5-1: Product: syz [ 143.114462][ T5894] usb 5-1: Manufacturer: syz [ 143.119508][ T5894] usb 5-1: SerialNumber: syz [ 143.126971][ T5894] usb 5-1: config 0 descriptor?? [ 143.140084][ T5894] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 144.027744][ T5833] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 144.153692][ T5894] gspca_stk1135: reg_w 0x7 err -71 [ 144.163948][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 144.171454][ T5894] gspca_stk1135: Sensor write failed [ 144.176907][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 144.183436][ T5894] gspca_stk1135: Sensor write failed [ 144.189035][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 144.195397][ T5894] gspca_stk1135: Sensor read failed [ 144.201352][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 144.209323][ T5894] gspca_stk1135: Sensor read failed [ 144.214559][ T5894] gspca_stk1135: Detected sensor type unknown (0x0) [ 144.237590][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 144.243989][ T5894] gspca_stk1135: Sensor read failed [ 144.253516][ T6408] usb 4-1: USB disconnect, device number 12 [ 144.259661][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 144.277000][ T5894] gspca_stk1135: Sensor read failed [ 144.291048][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 144.306234][ T5894] gspca_stk1135: Sensor write failed [ 144.318253][ T5894] gspca_stk1135: serial bus timeout: status=0x00 [ 144.324731][ T5894] gspca_stk1135: Sensor write failed [ 144.332779][ T5894] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 144.348131][ T5894] usb 5-1: USB disconnect, device number 12 [ 144.740975][ T7233] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 144.782771][ T5907] usb 3-1: USB disconnect, device number 11 [ 145.327866][ T6408] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 145.397660][ T5894] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 145.487736][ T6408] usb 1-1: Using ep0 maxpacket: 16 [ 145.496733][ T6408] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 145.506192][ T6408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.514298][ T6408] usb 1-1: Product: syz [ 145.518653][ T6408] usb 1-1: Manufacturer: syz [ 145.523285][ T6408] usb 1-1: SerialNumber: syz [ 145.531483][ T6408] usb 1-1: config 0 descriptor?? [ 145.551468][ T5894] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 145.560083][ T5894] usb 3-1: config 128 has no interface number 0 [ 145.566448][ T5894] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 145.576703][ T5894] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 145.588381][ T5894] usb 3-1: config 128 interface 148 has no altsetting 0 [ 145.599775][ T5894] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 145.609001][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.617105][ T5894] usb 3-1: Product: syz [ 145.621507][ T5894] usb 3-1: Manufacturer: syz [ 145.626170][ T5894] usb 3-1: SerialNumber: syz [ 145.741125][ T6408] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 145.750052][ T6408] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 145.766471][ T6408] usb 1-1: USB disconnect, device number 12 [ 145.863355][ T5894] usb 3-1: USB disconnect, device number 12 [ 146.287646][ T5894] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 146.324094][ T7364] UHID_CREATE from different security context by process 303 (syz.0.533), this is not allowed. [ 146.447704][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 146.463567][ T5894] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 146.480039][ T5894] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.493067][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.503570][ T5894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 146.515384][ T5894] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.529102][ T5894] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.547376][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.769879][ T5894] usb 3-1: usb_control_msg returned -32 [ 146.770479][ T7383] sg_read: process 352 (syz.3.541) changed security contexts after opening file descriptor, this is not allowed. [ 146.778536][ T5894] usbtmc 3-1:16.0: can't read capabilities [ 147.043669][ T7397] bridge0: entered allmulticast mode [ 147.061701][ T7397] pim6reg: entered allmulticast mode [ 147.317794][ T121] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 147.481695][ T121] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 147.497596][ T121] usb 1-1: config 0 has no interface number 0 [ 147.503908][ T121] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x3E, changing to 0xE [ 147.516774][ T121] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 147.531653][ T121] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 147.553500][ T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.562170][ T121] usb 1-1: Product: syz [ 147.566457][ T121] usb 1-1: Manufacturer: syz [ 147.571339][ T121] usb 1-1: SerialNumber: syz [ 147.579665][ T121] usb 1-1: config 0 descriptor?? [ 147.805445][ T121] qcserial 1-1:0.49: Qualcomm USB modem converter detected [ 147.835066][ T121] usb 1-1: USB disconnect, device number 13 [ 147.851226][ T121] qcserial 1-1:0.49: device disconnected [ 147.966258][ T5833] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 148.016395][ T7431] netlink: 192 bytes leftover after parsing attributes in process `syz.4.564'. [ 148.808561][ T7461] netlink: 664 bytes leftover after parsing attributes in process `syz.0.578'. [ 149.107664][ T6408] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 149.275556][ T6408] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.289316][ T6408] usb 5-1: config 0 has no interface number 0 [ 149.299587][ T6408] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 149.308980][ T6408] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.317076][ T6408] usb 5-1: Product: syz [ 149.322688][ T6408] usb 5-1: Manufacturer: syz [ 149.327426][ T6408] usb 5-1: SerialNumber: syz [ 149.335422][ T6408] usb 5-1: config 0 descriptor?? [ 149.467694][ T888] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 149.517701][ T5894] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 149.546288][ T6408] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 149.558221][ T6408] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 149.569438][ T6408] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 149.577826][ T6408] usb 5-1: media controller created [ 149.594653][ T6408] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.619906][ T888] usb 4-1: Using ep0 maxpacket: 16 [ 149.628666][ T888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.641010][ T888] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.651831][ T888] usb 4-1: config 0 interface 0 has no altsetting 0 [ 149.659198][ T888] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 149.668427][ T888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.677658][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 149.685276][ T5894] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 149.695543][ T888] usb 4-1: config 0 descriptor?? [ 149.701766][ T5894] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 149.710953][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.725109][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 149.734272][ T5894] usb 1-1: config 1 has no interface number 0 [ 149.740578][ T5894] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 149.749836][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.770066][ T5894] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 149.966355][ T5894] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 149.975326][ T5894] snd_usb_pod 1-1:1.1: invalid control EP [ 149.981238][ T5894] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 149.988332][ T5894] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 149.996905][ T5894] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 150.135350][ T888] hid (null): unknown global tag 0xd [ 150.171941][ T5920] usb 1-1: USB disconnect, device number 14 [ 150.331061][ T5907] usb 4-1: USB disconnect, device number 13 [ 150.658729][ T6408] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 150.915949][ T7489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.590'. [ 151.287661][ T5894] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 151.314175][ T7502] evm: overlay not supported [ 151.437885][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 151.445926][ T5894] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 151.454948][ T5894] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 151.464142][ T5894] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 151.476451][ T5894] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 151.485870][ T5894] usb 1-1: config 250 has no interface number 0 [ 151.492811][ T5894] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 151.502784][ T30] audit: type=1326 audit(1766716508.661:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7507 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 151.505187][ T5894] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 151.540713][ T5894] usb 1-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 151.555032][ T5894] usb 1-1: config 250 interface 228 has no altsetting 0 [ 151.566786][ T5894] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 151.577092][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 151.586558][ T5894] usb 1-1: Product: syz [ 151.589655][ T30] audit: type=1326 audit(1766716508.691:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7507 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 151.592214][ T5894] usb 1-1: SerialNumber: syz [ 151.613033][ T30] audit: type=1326 audit(1766716508.691:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7507 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 151.643833][ T30] audit: type=1326 audit(1766716508.691:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7507 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 151.649455][ T5894] hub 1-1:250.228: bad descriptor, ignoring hub [ 151.668658][ T30] audit: type=1326 audit(1766716508.691:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7507 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 151.675447][ T5894] hub 1-1:250.228: probe with driver hub failed with error -5 [ 151.750543][ T30] audit: type=1326 audit(1766716508.691:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7507 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 151.773635][ T30] audit: type=1326 audit(1766716508.691:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7507 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 151.916835][ T7512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.601'. [ 152.018009][ T5833] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 152.026774][ T5833] Bluetooth: hci1: Injecting HCI hardware error event [ 152.035229][ T5833] Bluetooth: hci1: hardware error 0x00 [ 152.180867][ T7402] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 152.193416][ T5894] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 152.240667][ T5893] usb 3-1: USB disconnect, device number 13 [ 152.282070][ T7525] fuse: Bad value for 'fd' [ 152.411819][ T5837] Bluetooth: hci3: ISO packet for unknown connection handle 1037 [ 152.666136][ T7542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.612'. [ 153.167666][ T5893] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 153.331133][ T5893] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 153.340185][ T5893] usb 3-1: config 128 has no interface number 0 [ 153.347095][ T5893] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 153.358439][ T5893] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 153.375696][ T5893] usb 3-1: config 128 interface 148 has no altsetting 0 [ 153.388169][ T5893] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 153.397778][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.406120][ T5893] usb 3-1: Product: syz [ 153.411676][ T5893] usb 3-1: Manufacturer: syz [ 153.416642][ T5893] usb 3-1: SerialNumber: syz [ 153.677488][ T5893] usb 3-1: USB disconnect, device number 14 [ 154.099032][ T5833] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 154.110906][ T5894] usb 1-1: failed to restore interface 228 altsetting 255 (error=-71) [ 154.130472][ T5894] usb 1-1: USB disconnect, device number 15 [ 154.190864][ T7566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.624'. [ 154.235854][ T30] audit: type=1107 audit(1766716511.391:19): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ê' [ 154.259815][ T5893] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 154.417677][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 154.433848][ T5893] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 154.450177][ T5893] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.463991][ T5893] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.480151][ T5893] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 154.491285][ T5893] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.505963][ T5893] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.515318][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.741347][ T5893] usb 3-1: usb_control_msg returned -32 [ 154.747008][ T5893] usbtmc 3-1:16.0: can't read capabilities [ 154.914959][ T7586] syz.4.633 (7586): attempted to duplicate a private mapping with mremap. This is not supported. [ 154.938776][ T7595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.636'. [ 155.089642][ T7603] netlink: 128 bytes leftover after parsing attributes in process `syz.4.640'. [ 155.413977][ T7621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.648'. [ 155.755734][ T7638] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.765002][ T7638] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 155.774737][ T7638] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.813291][ T7638] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 155.938773][ T7647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.660'. [ 156.085197][ T7655] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 156.120179][ T7657] sctp: [Deprecated]: syz.0.666 (pid 7657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.120179][ T7657] Use struct sctp_sack_info instead [ 156.348028][ T7667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.357209][ T7667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.406557][ T7671] netlink: 32 bytes leftover after parsing attributes in process `syz.0.673'. [ 156.795610][ T7692] netlink: 32 bytes leftover after parsing attributes in process `syz.3.683'. [ 157.031258][ T30] audit: type=1326 audit(1766716514.181:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde1d8f749 code=0x7ffc0000 [ 157.081571][ T30] audit: type=1326 audit(1766716514.211:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fbde1d8f749 code=0x7ffc0000 [ 157.104304][ T30] audit: type=1326 audit(1766716514.211:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde1d8f749 code=0x7ffc0000 [ 157.129636][ T30] audit: type=1326 audit(1766716514.211:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbde1d8f749 code=0x7ffc0000 [ 157.153010][ T30] audit: type=1326 audit(1766716514.221:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbde1d8df90 code=0x7ffc0000 [ 157.200543][ T30] audit: type=1326 audit(1766716514.221:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbde1d8f34b code=0x7ffc0000 [ 157.225544][ T30] audit: type=1326 audit(1766716514.221:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbde1d8f34b code=0x7ffc0000 [ 157.248514][ T30] audit: type=1326 audit(1766716514.231:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbde1d8f34b code=0x7ffc0000 [ 157.280310][ T30] audit: type=1326 audit(1766716514.231:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbde1d8f34b code=0x7ffc0000 [ 157.314139][ T30] audit: type=1326 audit(1766716514.351:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7704 comm="syz.0.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbde1d8f34b code=0x7ffc0000 [ 157.337381][ T5894] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 157.500995][ T5894] usb 1-1: not running at top speed; connect to a high speed hub [ 157.511694][ T5894] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 157.522046][ T5894] usb 1-1: config 95 has no interface number 0 [ 157.534137][ T5894] usb 1-1: config 95 interface 1 has no altsetting 0 [ 157.546825][ T5894] usb 1-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f [ 157.556766][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.564868][ T5894] usb 1-1: Product: syz [ 157.569441][ T5894] usb 1-1: Manufacturer: syz [ 157.575285][ T5894] usb 1-1: SerialNumber: syz [ 157.824536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 157.977435][ T5894] usb 1-1: USB disconnect, device number 17 [ 158.177389][ T7719] (syz.4.693,7719,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 158.189472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 158.800258][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 158.955157][ T7736] bridge0: entered allmulticast mode [ 158.962768][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.978809][ T24] usb 1-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 158.993074][ T7736] pim6reg: entered allmulticast mode [ 158.998961][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.021014][ T24] usb 1-1: config 0 descriptor?? [ 159.449154][ T24] hid-alps 0003:044E:1215.0008: item fetching failed at offset 3/5 [ 159.459385][ T24] hid-alps 0003:044E:1215.0008: parse failed [ 159.465524][ T24] hid-alps 0003:044E:1215.0008: probe with driver hid-alps failed with error -22 [ 159.648407][ T121] usb 1-1: USB disconnect, device number 18 [ 160.098267][ T7604] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 160.113990][ T7762] pim6reg: left allmulticast mode [ 160.123230][ T7762] bridge0: left allmulticast mode [ 160.145814][ T5920] usb 3-1: USB disconnect, device number 15 [ 160.507799][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.721'. [ 160.847654][ T5920] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 161.769286][ T5920] usb 1-1: config 128 has an invalid interface number: 148 but max is 0 [ 161.784343][ T5920] usb 1-1: config 128 has no interface number 0 [ 161.791967][ T5920] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 161.802771][ T5920] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 161.814565][ T5920] usb 1-1: config 128 interface 148 has no altsetting 0 [ 161.837296][ T5920] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 161.850146][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.865483][ T5920] usb 1-1: Product: syz [ 161.871394][ T5920] usb 1-1: Manufacturer: syz [ 161.880985][ T5920] usb 1-1: SerialNumber: syz [ 162.065082][ T7818] 9p: Bad value for 'rfdno' [ 162.129031][ T5920] usb 1-1: USB disconnect, device number 19 [ 162.277661][ T121] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 162.442068][ T121] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 162.451375][ T121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.459650][ T121] usb 3-1: Product: syz [ 162.463957][ T121] usb 3-1: Manufacturer: syz [ 162.468972][ T121] usb 3-1: SerialNumber: syz [ 162.476240][ T121] usb 3-1: config 0 descriptor?? [ 162.484363][ T121] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 162.597655][ T5920] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 162.697899][ T5907] usb 3-1: USB disconnect, device number 16 [ 162.747594][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 162.759073][ T5920] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 162.770511][ T5920] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.780487][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.791347][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 162.803444][ T5920] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.816930][ T5920] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.826470][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.855414][ T7832] netlink: 48 bytes leftover after parsing attributes in process `syz.3.744'. [ 163.042432][ T5920] usb 1-1: usb_control_msg returned -32 [ 163.048479][ T5920] usbtmc 1-1:16.0: can't read capabilities [ 163.152226][ T7836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.161379][ T7836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.401884][ T7841] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 163.411777][ T5920] usb 1-1: USB disconnect, device number 20 [ 163.557701][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 163.707652][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 163.715128][ T24] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 163.732754][ T24] usb 3-1: config 0 has no interface number 0 [ 163.742079][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 163.760987][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.769481][ T24] usb 3-1: Product: syz [ 163.773681][ T24] usb 3-1: Manufacturer: syz [ 163.778594][ T24] usb 3-1: SerialNumber: syz [ 163.787089][ T24] usb 3-1: config 0 descriptor?? [ 163.801257][ T24] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 163.809233][ T24] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 164.012409][ T24] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 164.213084][ T24] radio-raremono 3-1:0.35: raremono_cmd_main failed (-71) [ 164.233938][ T24] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 164.245652][ T24] usb 3-1: USB disconnect, device number 17 [ 164.258496][ T24] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 164.364065][ T7862] syz.3.758 (7862) used greatest stack depth: 17592 bytes left [ 164.387763][ T7870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.410595][ T7870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.713776][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.831364][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.934355][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.103771][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.430581][ T50] bridge_slave_1: left allmulticast mode [ 165.467640][ T50] bridge_slave_1: left promiscuous mode [ 165.473687][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.496733][ T50] bridge_slave_0: left allmulticast mode [ 165.507020][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.516687][ T50] bridge_slave_0: left promiscuous mode [ 165.523550][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.536265][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.132664][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 166.143347][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.162767][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.180015][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.182824][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.205189][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 166.210617][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.314048][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.335386][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.347427][ T50] bond0 (unregistering): Released all slaves [ 166.668135][ T5907] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 166.827396][ T50] hsr_slave_0: left promiscuous mode [ 166.841218][ T5907] usb 1-1: config 128 has an invalid interface number: 148 but max is 0 [ 166.857947][ T50] hsr_slave_1: left promiscuous mode [ 166.868715][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.876267][ T5907] usb 1-1: config 128 has no interface number 0 [ 166.896559][ T5907] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 166.908195][ T5907] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 166.908435][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.919739][ T5907] usb 1-1: config 128 interface 148 has no altsetting 0 [ 166.928666][ T5907] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 166.949354][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.960038][ T5907] usb 1-1: Product: syz [ 166.964501][ T5907] usb 1-1: Manufacturer: syz [ 166.965847][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.969644][ T5907] usb 1-1: SerialNumber: syz [ 167.006479][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.050730][ T50] veth1_macvtap: left promiscuous mode [ 167.056741][ T50] veth0_macvtap: left promiscuous mode [ 167.063611][ T50] veth1_vlan: left allmulticast mode [ 167.069891][ T50] veth1_vlan: left promiscuous mode [ 167.075501][ T50] veth0_vlan: left promiscuous mode [ 167.226966][ T5907] usb 1-1: USB disconnect, device number 21 [ 167.496754][ T50] team0 (unregistering): Port device macvlan0 removed [ 167.718691][ T5907] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 167.832504][ T50] team0 (unregistering): Port device team_slave_1 removed [ 167.879614][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 167.887274][ T5907] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 167.896807][ T5907] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.907665][ T50] team0 (unregistering): Port device team_slave_0 removed [ 167.919849][ T5907] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.939913][ T5907] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 167.950495][ T5907] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.970460][ T5907] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 167.992747][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.239831][ T5907] usb 1-1: usb_control_msg returned -32 [ 168.246836][ T5907] usbtmc 1-1:16.0: can't read capabilities [ 168.269163][ T5833] Bluetooth: hci2: command tx timeout [ 168.533857][ T7967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.545776][ T7967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.618087][ T7968] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 168.634287][ T5932] usb 1-1: USB disconnect, device number 22 [ 168.875914][ T7902] chnl_net:caif_netlink_parms(): no params data found [ 169.135992][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.150207][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.158058][ T7902] bridge_slave_0: entered allmulticast mode [ 169.166668][ T7902] bridge_slave_0: entered promiscuous mode [ 169.177697][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.185013][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.193091][ T7902] bridge_slave_1: entered allmulticast mode [ 169.202494][ T7902] bridge_slave_1: entered promiscuous mode [ 169.327089][ T7902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.371160][ T7902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.521189][ T7902] team0: Port device team_slave_0 added [ 169.549762][ T7902] team0: Port device team_slave_1 added [ 169.761619][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.769293][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 169.785102][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.857705][ T7902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.899377][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.906537][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.941992][ T7902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.007618][ T5932] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 170.090972][ T7902] hsr_slave_0: entered promiscuous mode [ 170.099272][ T7902] hsr_slave_1: entered promiscuous mode [ 170.105916][ T7902] debugfs: 'hsr0' already exists in 'hsr' [ 170.118131][ T7902] Cannot create hsr debugfs directory [ 170.174417][ T5932] usb 1-1: config 128 has an invalid interface number: 148 but max is 0 [ 170.183197][ T5932] usb 1-1: config 128 has no interface number 0 [ 170.201648][ T5932] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 170.227594][ T5932] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 170.245435][ T5932] usb 1-1: config 128 interface 148 has no altsetting 0 [ 170.260209][ T5932] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 170.269855][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.307902][ T5932] usb 1-1: Product: syz [ 170.315538][ T5932] usb 1-1: Manufacturer: syz [ 170.330614][ T5932] usb 1-1: SerialNumber: syz [ 170.339828][ T5833] Bluetooth: hci2: command tx timeout [ 170.467318][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.488143][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.554008][ T5907] kernel write not supported for file /313/clear_refs (pid: 5907 comm: kworker/0:6) [ 170.595403][ T5932] usb 1-1: USB disconnect, device number 23 [ 170.805060][ T7902] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 170.838383][ T7902] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 170.859648][ T7902] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 170.889360][ T7902] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.117674][ T5932] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 171.184001][ T7902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.233199][ T7902] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.252848][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.260156][ T6240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.287801][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 171.303850][ T5932] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 171.305538][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.319435][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.327637][ T5932] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.358036][ T5932] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.401254][ T5932] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 171.432069][ T5932] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.472984][ T5932] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.483410][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.741369][ T7902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.202371][ T7902] veth0_vlan: entered promiscuous mode [ 172.224823][ T7902] veth1_vlan: entered promiscuous mode [ 172.274503][ T7902] veth0_macvtap: entered promiscuous mode [ 172.291617][ T7902] veth1_macvtap: entered promiscuous mode [ 172.308769][ T8108] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 172.328125][ T5932] usb 1-1: USB disconnect, device number 24 [ 172.372804][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.401658][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.419700][ T5837] Bluetooth: hci2: command tx timeout [ 172.442051][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.461796][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.483659][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.504314][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.681023][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.695756][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.778853][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.788289][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.218552][ T5833] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 173.218752][ T5837] Bluetooth: hci4: command 0x1003 tx timeout [ 173.297215][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.844'. [ 173.621327][ T5932] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 173.809836][ T5932] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 173.828035][ T5932] usb 3-1: config 128 has no interface number 0 [ 173.845101][ T5932] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 173.867681][ T5932] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 173.883123][ T5932] usb 3-1: config 128 interface 148 has no altsetting 0 [ 173.911986][ T5932] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 173.932428][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.947626][ T5932] usb 3-1: Product: syz [ 173.957863][ T5932] usb 3-1: Manufacturer: syz [ 173.962778][ T5932] usb 3-1: SerialNumber: syz [ 174.057750][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 174.149702][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.164034][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.208991][ T5932] usb 3-1: USB disconnect, device number 18 [ 174.241595][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 174.251989][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.263365][ T24] usb 1-1: Product: syz [ 174.269036][ T24] usb 1-1: Manufacturer: syz [ 174.273759][ T24] usb 1-1: SerialNumber: syz [ 174.293371][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 174.322593][ T5894] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 174.497747][ T5833] Bluetooth: hci2: command tx timeout [ 174.727718][ T5932] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 174.888012][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 174.893369][ T5833] Bluetooth: hci2: unexpected cc 0x1005 length: 9 > 8 [ 174.912914][ T5932] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 174.946730][ T5932] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.948631][ T5907] usb 1-1: USB disconnect, device number 25 [ 174.970839][ T5932] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.982253][ T5932] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 174.993009][ T5932] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.009447][ T5932] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 175.020778][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.184874][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'. [ 175.377654][ T5894] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 175.387012][ T5894] ath9k_htc: Failed to initialize the device [ 175.406185][ T5907] usb 1-1: ath9k_htc: USB layer deinitialized [ 175.724473][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 175.724493][ T30] audit: type=1326 audit(1766716532.881:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 175.749455][ T8213] pimreg0: tun_chr_ioctl cmd 1074812118 [ 175.767309][ T30] audit: type=1326 audit(1766716532.921:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 175.795395][ T30] audit: type=1326 audit(1766716532.921:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 175.838239][ T30] audit: type=1326 audit(1766716532.921:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 175.861794][ T30] audit: type=1326 audit(1766716532.921:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 175.886709][ T8214] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 175.895081][ T30] audit: type=1326 audit(1766716532.921:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 175.914299][ T5894] usb 3-1: USB disconnect, device number 19 [ 175.942424][ T30] audit: type=1326 audit(1766716532.921:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 176.037394][ T30] audit: type=1326 audit(1766716532.921:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 176.100181][ T30] audit: type=1326 audit(1766716532.921:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 176.160071][ T30] audit: type=1326 audit(1766716532.921:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8208 comm="syz.4.875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 176.457952][ T5907] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 176.629632][ T5907] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 176.646612][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.656125][ T5907] usb 6-1: Product: syz [ 176.662027][ T5907] usb 6-1: Manufacturer: syz [ 176.666677][ T5907] usb 6-1: SerialNumber: syz [ 176.687899][ T5907] usb 6-1: config 0 descriptor?? [ 176.719021][ T8245] netlink: 104 bytes leftover after parsing attributes in process `syz.2.890'. [ 176.721711][ T8246] netlink: 96 bytes leftover after parsing attributes in process `syz.4.891'. [ 176.874507][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.883980][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.103900][ T5907] airspy 6-1:0.0: Board ID: 00 [ 177.109834][ T5907] airspy 6-1:0.0: Firmware version: [ 177.113995][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.126088][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.314366][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.898'. [ 177.530988][ T8277] binder_alloc: 8276: binder_alloc_buf, no vma [ 177.731021][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805bb3bc00: rx timeout, send abort [ 177.741671][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805bb3bc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 177.878283][ T8291] Bluetooth: MGMT ver 1.23 [ 178.037207][ T8298] binder_alloc: 8296: binder_alloc_buf, no vma [ 178.123320][ T5907] airspy 6-1:0.0: usb_control_msg() failed -71 request 10 [ 178.159354][ T5907] airspy 6-1:0.0: Registered as swradio24 [ 178.165145][ T5907] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 178.208007][ T5907] usb 6-1: USB disconnect, device number 2 [ 178.329883][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 178.500005][ T24] usb 1-1: config 128 has an invalid interface number: 148 but max is 0 [ 178.517464][ T24] usb 1-1: config 128 has no interface number 0 [ 178.527317][ T24] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 178.544237][ T24] usb 1-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 178.561856][ T24] usb 1-1: config 128 interface 148 has no altsetting 0 [ 178.587188][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 178.603736][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.632206][ T24] usb 1-1: Product: syz [ 178.636430][ T24] usb 1-1: Manufacturer: syz [ 178.653009][ T24] usb 1-1: SerialNumber: syz [ 179.071034][ T24] usb 1-1: USB disconnect, device number 26 [ 179.393800][ T8326] binder_alloc: 8325: binder_alloc_buf, no vma [ 180.087649][ T5932] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 180.120642][ T8359] mmap: syz.5.935 (8359) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 180.247619][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 180.256210][ T5932] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 180.270014][ T5932] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.280958][ T5932] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 180.290945][ T5932] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 180.301107][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.301794][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.313091][ T5932] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.330513][ T5932] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 180.340074][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.556037][ T5932] usb 1-1: usb_control_msg returned -32 [ 180.561869][ T5932] usbtmc 1-1:16.0: can't read capabilities [ 181.023868][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 181.023888][ T30] audit: type=1326 audit(1766716538.181:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c218f749 code=0x7ffc0000 [ 181.056117][ T30] audit: type=1326 audit(1766716538.181:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c218f749 code=0x7ffc0000 [ 181.091313][ T30] audit: type=1326 audit(1766716538.201:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c218f749 code=0x7ffc0000 [ 181.125511][ T30] audit: type=1326 audit(1766716538.221:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f22c218f749 code=0x7ffc0000 [ 181.148011][ T30] audit: type=1326 audit(1766716538.221:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c218f749 code=0x7ffc0000 [ 181.173012][ T30] audit: type=1326 audit(1766716538.221:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c218f749 code=0x7ffc0000 [ 181.200428][ T30] audit: type=1326 audit(1766716538.221:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c218f749 code=0x7ffc0000 [ 181.222887][ T30] audit: type=1326 audit(1766716538.221:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c218f749 code=0x7ffc0000 [ 181.252397][ T30] audit: type=1326 audit(1766716538.221:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f22c218f749 code=0x7ffc0000 [ 181.279385][ T30] audit: type=1326 audit(1766716538.221:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8381 comm="syz.2.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22c218f749 code=0x7ffc0000 [ 181.339301][ T8390] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 181.481835][ T5932] usb 1-1: USB disconnect, device number 27 [ 182.018206][ T5932] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 182.180017][ T5932] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 182.197620][ T5932] usb 3-1: config 128 has no interface number 0 [ 182.213735][ T5932] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 182.244440][ T5932] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 182.281364][ T8420] random: crng reseeded on system resumption [ 182.287431][ T5932] usb 3-1: config 128 interface 148 has no altsetting 0 [ 182.291668][ T5932] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 182.306546][ T8422] binder: BINDER_SET_CONTEXT_MGR already set [ 182.307612][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.316977][ T8422] binder: 8421:8422 ioctl 4018620d 200000004a80 returned -16 [ 182.322060][ T5932] usb 3-1: Product: syz [ 182.332937][ T5932] usb 3-1: Manufacturer: syz [ 182.338730][ T5932] usb 3-1: SerialNumber: syz [ 182.585127][ T5932] usb 3-1: USB disconnect, device number 20 [ 182.867251][ T8436] netlink: 52 bytes leftover after parsing attributes in process `syz.5.970'. [ 182.933600][ T8438] netlink: 20 bytes leftover after parsing attributes in process `syz.5.971'. [ 183.354506][ T5894] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 183.364166][ T5894] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 183.372546][ T5894] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 183.390594][ T5894] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 183.399343][ T8452] capability: warning: `syz.2.978' uses 32-bit capabilities (legacy support in use) [ 184.485495][ T8490] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 184.960118][ T5894] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 185.037397][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.052393][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.133346][ T5894] usb 6-1: config 128 has an invalid interface number: 148 but max is 0 [ 185.145677][ T5894] usb 6-1: config 128 has no interface number 0 [ 185.152347][ T5894] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 185.162770][ T5894] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 185.174634][ T5894] usb 6-1: config 128 interface 148 has no altsetting 0 [ 185.184751][ T5894] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 185.194332][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.202757][ T5894] usb 6-1: Product: syz [ 185.207086][ T5894] usb 6-1: Manufacturer: syz [ 185.212078][ T5894] usb 6-1: SerialNumber: syz [ 185.445682][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.476941][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.508366][ T5894] usb 6-1: USB disconnect, device number 3 [ 186.354040][ T8570] binder: BINDER_SET_CONTEXT_MGR already set [ 186.363152][ T8570] binder: 8569:8570 ioctl 4018620d 200000004a80 returned -16 [ 186.697771][ T5894] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 186.810000][ T8593] binder: BINDER_SET_CONTEXT_MGR already set [ 186.817376][ T8593] binder: 8592:8593 ioctl 4018620d 200000004a80 returned -16 [ 186.869470][ T5894] usb 6-1: config 128 has an invalid interface number: 148 but max is 0 [ 186.878739][ T5894] usb 6-1: config 128 has no interface number 0 [ 186.885060][ T5894] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 186.895233][ T5894] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 129, changing to 11 [ 186.910643][ T5894] usb 6-1: config 128 interface 148 has no altsetting 0 [ 186.922871][ T5894] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 186.932457][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.941795][ T5894] usb 6-1: Product: syz [ 186.946518][ T5894] usb 6-1: Manufacturer: syz [ 186.952781][ T5894] usb 6-1: SerialNumber: syz [ 187.175986][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.192738][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.234918][ T5894] usb 6-1: USB disconnect, device number 4 [ 187.313609][ T8616] binder: BINDER_SET_CONTEXT_MGR already set [ 187.320688][ T8616] binder: 8615:8616 ioctl 4018620d 200000004a80 returned -16 [ 188.094019][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.106066][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.122000][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.133628][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.624937][ T8704] dummy0: entered allmulticast mode [ 190.631552][ T8703] dummy0: left allmulticast mode [ 190.745315][ T8698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.758311][ T8698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.861317][ T8754] syz.2.1074 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 192.260947][ T8760] netlink: 'syz.2.1077': attribute type 49 has an invalid length. [ 192.299432][ T8760] netlink: 'syz.2.1077': attribute type 49 has an invalid length. [ 192.728355][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 192.887597][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 192.900909][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 192.917638][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.938520][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.948433][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 192.958403][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 192.968330][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.004259][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.017174][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.043101][ T24] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 194.424870][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.434372][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.645907][ T8815] kvm: kvm [8814]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x600004e0 [ 194.673036][ T8815] kvm: kvm [8814]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x5a5c [ 194.682094][ T8815] kvm: kvm [8814]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0x651 [ 194.693402][ T8815] kvm: kvm [8814]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x5755 [ 194.702668][ T8815] kvm: kvm [8814]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x661 [ 194.723239][ T8815] kvm: kvm [8814]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0xcc20 [ 194.732202][ T8815] kvm: kvm [8814]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0xce5 [ 194.750823][ T8815] kvm: kvm [8814]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x70e0 [ 194.759905][ T8815] kvm: kvm [8814]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0x505 [ 194.769165][ T8815] kvm: kvm [8814]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x29 [ 195.027405][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 195.027432][ T30] audit: type=1326 audit(1766716552.181:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 195.059429][ T30] audit: type=1326 audit(1766716552.181:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 195.085838][ T30] audit: type=1326 audit(1766716552.221:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 195.133267][ T30] audit: type=1326 audit(1766716552.221:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 195.170588][ T30] audit: type=1326 audit(1766716552.221:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 195.194399][ T30] audit: type=1326 audit(1766716552.221:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 195.236423][ T30] audit: type=1326 audit(1766716552.221:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 195.287377][ T30] audit: type=1326 audit(1766716552.221:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 195.311905][ T30] audit: type=1326 audit(1766716552.221:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 195.353526][ T30] audit: type=1326 audit(1766716552.221:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.4.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438758f749 code=0x7ffc0000 [ 195.409156][ T5907] usb 6-1: USB disconnect, device number 5 [ 197.227734][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 197.397589][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 197.420748][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 197.437599][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.458119][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.473470][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 197.495984][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 197.506744][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.518249][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.526296][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.526537][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.548519][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.558083][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.566752][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.574726][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.616406][ T10] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 197.844423][ T8886] binder: 8883:8886 ioctl 4018620d 0 returned -22 [ 197.936021][ T8878] chnl_net:caif_netlink_parms(): no params data found [ 198.119872][ T8878] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.132194][ T8878] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.143679][ T8878] bridge_slave_0: entered allmulticast mode [ 198.154831][ T8878] bridge_slave_0: entered promiscuous mode [ 198.169274][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.179032][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.188814][ T8878] bridge_slave_1: entered allmulticast mode [ 198.200362][ T8878] bridge_slave_1: entered promiscuous mode [ 198.258330][ T8878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.276490][ T8878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.337112][ T8878] team0: Port device team_slave_0 added [ 198.349220][ T8878] team0: Port device team_slave_1 added [ 198.381775][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.389187][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.415160][ T8878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.428198][ T8878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.435181][ T8878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.462265][ T8878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.523569][ T8878] hsr_slave_0: entered promiscuous mode [ 198.530906][ T8878] hsr_slave_1: entered promiscuous mode [ 198.538083][ T8878] debugfs: 'hsr0' already exists in 'hsr' [ 198.543837][ T8878] Cannot create hsr debugfs directory [ 198.738935][ T8878] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 198.750212][ T8878] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 198.761276][ T8878] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 198.771787][ T8878] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 198.805103][ T8878] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.812550][ T8878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.821279][ T8878] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.828489][ T8878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.890652][ T8878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.903847][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.916293][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.946669][ T8878] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.962161][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.969588][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.985926][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.993176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.201246][ T8878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.437036][ T8878] veth0_vlan: entered promiscuous mode [ 199.456656][ T8878] veth1_vlan: entered promiscuous mode [ 199.493611][ T8878] veth0_macvtap: entered promiscuous mode [ 199.504654][ T8878] veth1_macvtap: entered promiscuous mode [ 199.527717][ T8878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.548322][ T8878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.565888][ T3007] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.577016][ T3007] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.591587][ T3007] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.601140][ T3007] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.618165][ T5837] Bluetooth: hci4: command tx timeout [ 199.688223][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.697128][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.735940][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.745213][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.962703][ T5894] usb 6-1: USB disconnect, device number 6 [ 200.189778][ T8940] sock: sock_set_timeout: `syz.2.1132' (pid 8940) tries to set negative timeout [ 200.692167][ T8961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.705112][ T8961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.978186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 201.267775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 201.267862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 201.276142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 201.458487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 201.537819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 201.546166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 201.677435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 202.390862][ T5837] Bluetooth: hci4: command tx timeout [ 202.467973][ T5914] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 202.637814][ T5914] usb 7-1: Using ep0 maxpacket: 8 [ 202.648963][ T5914] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 202.668421][ T5914] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.692666][ T5914] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.713982][ T5914] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 202.739208][ T5914] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 202.760678][ T5914] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.787736][ T5914] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.796841][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.824318][ T8978] kvm_pr_unimpl_wrmsr: 17 callbacks suppressed [ 202.824341][ T8978] kvm: kvm [8977]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x600004e0 [ 202.860539][ T5914] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 202.871700][ T8978] kvm: kvm [8977]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x5a5c [ 202.880940][ T8978] kvm: kvm [8977]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0x651 [ 202.890640][ T8978] kvm: kvm [8977]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc2) = 0x5755 [ 202.900657][ T8978] kvm: kvm [8977]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc2) = 0x661 [ 202.928589][ T8978] kvm: kvm [8977]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0xcc20 [ 202.939737][ T8978] kvm: kvm [8977]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0xce5 [ 202.966952][ T8978] kvm: kvm [8977]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x70e0 [ 202.981964][ T8978] kvm: kvm [8977]: vcpu10, guest rIP: 0x9145 Unhandled WRMSR(0xc1) = 0x505 [ 202.991599][ T8978] kvm: kvm [8977]: vcpu10, guest rIP: 0x9121 Unhandled WRMSR(0xc1) = 0x29 [ 203.987718][ T5914] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 204.099693][ T8971] usb 7-1: USB disconnect, device number 2 [ 204.161544][ T5914] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 204.190314][ T5914] usb 6-1: config 0 has no interface number 0 [ 204.204048][ T5914] usb 6-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 204.213924][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.227183][ T5914] usb 6-1: config 0 descriptor?? [ 204.238603][ T5914] hub 6-1:0.3: bad descriptor, ignoring hub [ 204.244805][ T5914] hub 6-1:0.3: probe with driver hub failed with error -5 [ 204.247941][ T5920] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 204.253223][ T5914] sierra 6-1:0.3: Sierra USB modem converter detected [ 204.422502][ T5920] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 204.427892][ T5837] Bluetooth: hci4: command tx timeout [ 204.451068][ T5920] usb 3-1: config 1 has no interface number 0 [ 204.457433][ T5920] usb 3-1: config 1 interface 105 has no altsetting 0 [ 204.459033][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.470563][ T5920] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 204.474818][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.490614][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.518709][ T5914] usb 6-1: Sierra USB modem converter now attached to ttyUSB0 [ 204.544652][ T5920] usb 3-1: Product: syz [ 204.558788][ T5920] usb 3-1: Manufacturer: syz [ 204.559150][ T5914] usb 6-1: USB disconnect, device number 7 [ 204.565661][ T5920] usb 3-1: SerialNumber: syz [ 204.582079][ T5914] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 204.605457][ T5914] sierra 6-1:0.3: device disconnected [ 204.858661][ T5920] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 204.888852][ T5920] usb 3-1: USB disconnect, device number 21 [ 205.418039][ T5914] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 205.597631][ T5914] usb 7-1: Using ep0 maxpacket: 16 [ 205.605888][ T5914] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.623093][ T5914] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.662163][ T5914] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 205.690249][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.699096][ T5914] usb 7-1: Product: syz [ 205.703298][ T5914] usb 7-1: Manufacturer: syz [ 205.708119][ T5914] usb 7-1: SerialNumber: syz [ 205.724952][ T5914] usb 7-1: config 0 descriptor?? [ 205.917614][ T6165] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 205.949668][ T5914] usb 7-1: USB disconnect, device number 3 [ 206.077616][ T6165] usb 3-1: Using ep0 maxpacket: 8 [ 206.096988][ T6165] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 206.117852][ T6165] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 206.146997][ T6165] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 206.157757][ T6165] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 206.169759][ T6165] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 206.181089][ T6165] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.198733][ T6165] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 206.208389][ T6165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.230497][ T6165] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 207.601781][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 207.607933][ T5833] Bluetooth: hci4: command tx timeout [ 207.607985][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 208.738682][ T5874] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 208.782834][ T5920] usb 3-1: USB disconnect, device number 22 [ 208.861229][ T5837] Bluetooth: hci3: unexpected event for opcode 0x2010 [ 208.928000][ T5874] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 208.942602][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.987736][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.004820][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.033449][ T5874] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.043198][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.063872][ T5874] usb 7-1: config 0 descriptor?? [ 210.846634][ T5874] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 213.279615][ T5829] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 215.826184][ T9121] usb 7-1: USB disconnect, device number 4 [ 215.926826][ T5894] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 216.098447][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 216.107316][ T5894] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 216.149512][ T5894] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.183618][ T5894] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.208717][ T5894] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 216.227580][ T5894] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 216.237461][ T5894] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.294533][ T5894] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.325176][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.365325][ T5894] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 218.739999][ T5894] usb 6-1: USB disconnect, device number 8 [ 220.617582][ T5894] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 220.787920][ T5894] usb 6-1: Using ep0 maxpacket: 16 [ 220.795607][ T5894] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.818230][ T5894] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.838132][ T5894] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 220.867695][ T5894] usb 6-1: config 0 interface 0 has no altsetting 0 [ 220.877882][ T5894] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 220.897361][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.927179][ T5894] usb 6-1: config 0 descriptor?? [ 221.368870][ T5894] hid (null): usage index exceeded [ 221.382378][ T5894] hid (null): unknown global tag 0xe [ 221.407641][ T5894] hid (null): invalid report_count 711813789 [ 221.413865][ T5894] hid (null): report_id 0 is invalid [ 221.424097][ T5894] hid (null): invalid report_size 30729 [ 221.434159][ T5894] hid (null): invalid report_size 14488 [ 221.444321][ T5894] hid (null): unknown global tag 0xd [ 221.457611][ T5894] hid (null): unknown global tag 0xa0 [ 221.559445][ T5894] usb 6-1: USB disconnect, device number 9 [ 223.532424][ T9121] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 225.328297][ T9121] usb 7-1: device descriptor read/all, error -71 [ 226.070322][ T9265] input: syz0 as /devices/virtual/input/input12 [ 226.967612][ T980] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 226.980809][ T9277] binder: BINDER_SET_CONTEXT_MGR already set [ 226.986845][ T9277] binder: 9276:9277 ioctl 4018620d 200000004a80 returned -16 [ 227.149779][ T980] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 227.169016][ T980] usb 3-1: config 128 has no interface number 0 [ 227.178891][ T980] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 227.211512][ T980] usb 3-1: config 128 interface 148 has no altsetting 0 [ 227.241938][ T980] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 227.265026][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.279381][ T980] usb 3-1: Product: syz [ 227.283611][ T980] usb 3-1: Manufacturer: syz [ 227.304489][ T980] usb 3-1: SerialNumber: syz [ 227.385625][ T9288] usb usb7: usbfs: process 9288 (syz.5.1258) did not claim interface 0 before use [ 227.548858][ T980] usb 3-1: USB disconnect, device number 23 [ 227.701953][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 227.701973][ T30] audit: type=1326 audit(1766716584.861:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf87f8f749 code=0x7ffc0000 [ 227.777675][ T30] audit: type=1326 audit(1766716584.861:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf87f8f749 code=0x7ffc0000 [ 227.837620][ T30] audit: type=1326 audit(1766716584.861:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fdf87f8f749 code=0x7ffc0000 [ 227.907726][ T30] audit: type=1326 audit(1766716584.861:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf87f8f749 code=0x7ffc0000 [ 227.936206][ T30] audit: type=1326 audit(1766716584.861:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9300 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf87f8f749 code=0x7ffc0000 [ 228.227679][ T980] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 228.292286][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.343489][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.397602][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 228.410877][ T980] usb 3-1: config index 0 descriptor too short (expected 301, got 36) [ 228.430272][ T980] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.468651][ T980] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.511709][ T980] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 228.547614][ T980] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 228.567219][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.177185][ T980] usbtmc 3-1:16.0: bulk endpoints not found [ 231.448456][ T9121] usb 3-1: USB disconnect, device number 24 [ 234.534990][ T5200] udevd[5200]: worker [5843] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 235.187607][ T9121] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 235.367609][ T9121] usb 3-1: Using ep0 maxpacket: 8 [ 235.375554][ T9121] usb 3-1: config 1 interface 0 has no altsetting 0 [ 235.420640][ T9121] usb 3-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 235.447588][ T9121] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.455882][ T9121] usb 3-1: Product: syz [ 235.475465][ T9121] usb 3-1: Manufacturer: syz [ 235.487973][ T9121] usb 3-1: SerialNumber: syz [ 236.864013][ T9121] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input13 [ 236.936241][ T5185] bcm5974 3-1:1.0: could not read from device [ 236.991640][ T9121] usb 3-1: USB disconnect, device number 25 [ 238.685115][ T8972] kernel read not supported for file /cpu/0/msr (pid: 8972 comm: kworker/0:9) [ 238.798002][ T980] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 238.867761][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 238.969432][ T980] usb 6-1: config 128 has an invalid interface number: 148 but max is 0 [ 238.997644][ T980] usb 6-1: config 128 has no interface number 0 [ 239.003991][ T980] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 344.027442][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 344.034569][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5978/2:b..l [ 344.042998][ C0] rcu: (detected by 0, t=10502 jiffies, g=36465, q=343 ncpus=2) [ 344.050771][ C0] task:syz-executor state:R running task stack:19496 pid:5978 tgid:5978 ppid:5972 task_flags:0x400140 flags:0x00080000 [ 344.065311][ C0] Call Trace: [ 344.068598][ C0] [ 344.071536][ C0] __schedule+0x150e/0x5070 [ 344.076214][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 344.081528][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 344.086904][ C0] ? __pfx___schedule+0x10/0x10 [ 344.091822][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 344.097129][ C0] preempt_schedule_irq+0xb5/0x150 [ 344.102297][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 344.108021][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 344.112981][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 344.118919][ C0] irqentry_exit+0x5d8/0x660 [ 344.123515][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 344.129489][ C0] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 344.134882][ C0] Code: c7 c7 20 42 34 8e e8 6f 34 2a 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 53 65 ff 05 90 68 1c 11 e8 7b 86 bf 09 89 [ 344.154658][ C0] RSP: 0018:ffffc90004c77528 EFLAGS: 00000293 [ 344.160807][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 344.168778][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e33f2e0 [ 344.176922][ C0] RBP: ffffffff81fab9ec R08: 0000000000000000 R09: 0000000000000000 [ 344.184885][ C0] R10: 0000000000000406 R11: 0000000000000000 R12: 0000000000000002 [ 344.193004][ C0] R13: ffffffff8e33f2e0 R14: 0000000000000000 R15: 0000000000000000 [ 344.200978][ C0] ? folio_try_get+0x1c/0x340 [ 344.205659][ C0] lock_acquire+0x5f/0x340 [ 344.210127][ C0] ? folio_try_get+0x1c/0x340 [ 344.215063][ C0] folio_try_get+0x38/0x340 [ 344.220170][ C0] ? folio_try_get+0x1c/0x340 [ 344.224883][ C0] find_lock_entries+0x24f/0xa60 [ 344.230075][ C0] ? find_lock_entries+0x10d/0xa60 [ 344.235358][ C0] ? __pfx_find_lock_entries+0x10/0x10 [ 344.240830][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 344.247151][ C0] shmem_undo_range+0x254/0x1490 [ 344.252173][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 344.257468][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 344.262659][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 344.268045][ C0] ? stack_depot_save_flags+0x40/0x850 [ 344.273545][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 344.278508][ C0] shmem_evict_inode+0x26e/0xa70 [ 344.283456][ C0] ? inode_wait_for_writeback+0x14d/0x370 [ 344.289179][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 344.294640][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 344.300719][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 344.306011][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 344.311600][ C0] evict+0x5f4/0xae0 [ 344.315522][ C0] ? __pfx_evict+0x10/0x10 [ 344.319951][ C0] ? _raw_spin_unlock+0x28/0x50 [ 344.324912][ C0] ? iput+0xcc6/0x1030 [ 344.328985][ C0] do_unlinkat+0x41d/0x5d0 [ 344.333400][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 344.338413][ C0] ? strncpy_from_user+0x150/0x2c0 [ 344.343600][ C0] ? getname_flags+0x1e5/0x540 [ 344.348358][ C0] __x64_sys_unlink+0x47/0x50 [ 344.353028][ C0] do_syscall_64+0xfa/0xf80 [ 344.357525][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.363582][ C0] ? clear_bhb_loop+0x60/0xb0 [ 344.368254][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.374224][ C0] RIP: 0033:0x7f438758ecf7 [ 344.378632][ C0] RSP: 002b:00007ffd5e7a8918 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 344.387128][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f438758ecf7 [ 344.395110][ C0] RDX: 00007ffd5e7a8940 RSI: 00007ffd5e7a89d0 RDI: 00007ffd5e7a89d0 [ 344.403092][ C0] RBP: 00007ffd5e7a89d0 R08: 0000000000000000 R09: 0000000000000000 [ 344.411050][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd5e7a9a60 [ 344.419014][ C0] R13: 00007f4387613d7d R14: 0000000000039da0 R15: 00007ffd5e7a9aa0 [ 344.426999][ C0] [ 344.430020][ C0] rcu: rcu_preempt kthread starved for 10542 jiffies! g36465 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 344.441204][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 344.451166][ C0] rcu: RCU grace-period kthread stack dump: [ 344.457151][ C0] task:rcu_preempt state:R running task stack:27536 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 344.470984][ C0] Call Trace: [ 344.474263][ C0] [ 344.477459][ C0] __schedule+0x150e/0x5070 [ 344.482080][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 344.487271][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 344.493154][ C0] ? __pfx___schedule+0x10/0x10 [ 344.498026][ C0] ? schedule+0x91/0x360 [ 344.502262][ C0] schedule+0x165/0x360 [ 344.506409][ C0] schedule_timeout+0x12b/0x270 [ 344.511264][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 344.516632][ C0] ? __pfx_process_timeout+0x10/0x10 [ 344.522020][ C0] ? prepare_to_swait_event+0x341/0x380 [ 344.527571][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 344.532451][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 344.537378][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 344.542677][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 344.548059][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 344.553266][ C0] ? finish_swait+0xcd/0x1f0 [ 344.557868][ C0] rcu_gp_kthread+0x99/0x390 [ 344.562556][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 344.567766][ C0] ? __kthread_parkme+0x7b/0x200 [ 344.572738][ C0] ? __kthread_parkme+0x1a1/0x200 [ 344.577783][ C0] kthread+0x711/0x8a0 [ 344.581956][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 344.587179][ C0] ? __pfx_kthread+0x10/0x10 [ 344.591803][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 344.597000][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 344.602277][ C0] ? __pfx_kthread+0x10/0x10 [ 344.606866][ C0] ret_from_fork+0x599/0xb30 [ 344.611467][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 344.616710][ C0] ? __switch_to_asm+0x39/0x70 [ 344.621478][ C0] ? __switch_to_asm+0x33/0x70 [ 344.626323][ C0] ? __pfx_kthread+0x10/0x10 [ 344.630928][ C0] ret_from_fork_asm+0x1a/0x30 [ 344.635880][ C0] [ 344.638906][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 344.645855][ C0] Sending NMI from CPU 0 to CPUs 1: [ 344.651102][ C1] NMI backtrace for cpu 1 [ 344.651122][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.651143][ C1] Tainted: [L]=SOFTLOCKUP [ 344.651149][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.651157][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 344.651179][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 0e 21 00 f3 0f 1e fa fb f4 48 ee 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 344.651193][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 344.651208][ C1] RAX: f4bcffaa7208c000 RBX: ffffffff8197c6ba RCX: f4bcffaa7208c000 [ 344.651220][ C1] RDX: 0000000000000001 RSI: ffffffff8daa9dc3 RDI: ffffffff8be247e0 [ 344.651231][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 344.651242][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fc3d070 [ 344.651253][ C1] R13: 1ffff11003b57b70 R14: 0000000000000001 R15: 0000000000000001 [ 344.651263][ C1] FS: 0000000000000000(0000) GS:ffff888125adc000(0000) knlGS:0000000000000000 [ 344.651275][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.651286][ C1] CR2: 00007f22c2172a60 CR3: 000000002232c000 CR4: 00000000003526f0 [ 344.651302][ C1] Call Trace: [ 344.651311][ C1] [ 344.651317][ C1] default_idle+0x13/0x20 [ 344.651335][ C1] default_idle_call+0x73/0xb0 [ 344.651353][ C1] do_idle+0x1ea/0x520 [ 344.651368][ C1] ? irqentry_exit+0x5ba/0x660 [ 344.651385][ C1] ? __pfx_do_idle+0x10/0x10 [ 344.651405][ C1] cpu_startup_entry+0x44/0x60 [ 344.651419][ C1] start_secondary+0x101/0x110 [ 344.651438][ C1] common_startup_64+0x13e/0x147 [ 344.651461][ C1]