last executing test programs: 3m9.000302567s ago: executing program 4 (id=261): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) openat$nullb(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4440) 3m7.3935057s ago: executing program 4 (id=280): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f00000000c0)=0x8000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6}) 3m7.146841428s ago: executing program 4 (id=285): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2ac00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x400000b4, 0x0, 0x0}) 3m6.849982245s ago: executing program 4 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m6.587027691s ago: executing program 4 (id=293): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000400)={@broadcast, @empty, 0x1, "7d1f88f80bbe8d286c57f04c843abbec3737db4a9d77a557438242a50a4dad20", 0xaa4, 0x3, 0x3, 0x1}, 0x3c) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}) 3m5.905557018s ago: executing program 4 (id=303): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000000840)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x81, 0x1ff, "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"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/34, 0x22}, 0x240}], 0x1, 0x40010022, 0x0) 3m5.396210917s ago: executing program 32 (id=303): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000000840)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e20, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x81, 0x1ff, "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"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/34, 0x22}, 0x240}], 0x1, 0x40010022, 0x0) 7.416539233s ago: executing program 2 (id=2406): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x4e21, @multicast1}}}, 0x96) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2, @ANYBLOB="014000000000000034001680300001802c000c80140001"], 0x54}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 6.284080257s ago: executing program 2 (id=2412): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) close_range(r0, r1, 0x0) 5.973576739s ago: executing program 2 (id=2415): r0 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 5.525839249s ago: executing program 3 (id=2418): r0 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0], 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.519959047s ago: executing program 2 (id=2419): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/58, 0x3a}, 0x7ff}], 0x1, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 4.463473498s ago: executing program 2 (id=2425): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000270000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r1}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000600), &(0x7f0000000340)=@udp6=r2, 0x1}, 0x20) 4.396477917s ago: executing program 1 (id=2426): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = syz_io_uring_setup(0x1110, &(0x7f0000000140)={0x0, 0x4, 0x400}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x440000, 0x1, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.37556578s ago: executing program 3 (id=2427): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}]}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 4.142903135s ago: executing program 2 (id=2429): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, 0x1}, 0x10) 3.829573062s ago: executing program 0 (id=2430): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0xc8101, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x40000039}) 3.432394568s ago: executing program 0 (id=2432): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3.192364801s ago: executing program 3 (id=2433): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x175) close(r0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = fanotify_init(0x12, 0x141402) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 3.174594452s ago: executing program 5 (id=2434): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1f0, 0x238, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x9, 0x0, 0x57, 0x0, 0x0, 0x1, 0xe1, 0x3}}}, @inet=@rpfilter={{0x28}, {0xbb}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x428) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x20044085) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) 2.912888626s ago: executing program 0 (id=2435): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.723681942s ago: executing program 1 (id=2436): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1ff, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x2}) 2.68325176s ago: executing program 5 (id=2437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000040), &(0x7f0000000080)) setresuid(0x0, r1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0) 1.762731436s ago: executing program 0 (id=2440): syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="ff"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001800dd8d000000000000000002000000ff0000060000000008000700ac1414bb08001e006907000008000700ac1e010108000b00ffffffff0800", @ANYRES8=r0], 0x60}}, 0x44000) 1.533105044s ago: executing program 5 (id=2441): r0 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x4, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) io_uring_enter(r0, 0x1e76, 0x0, 0x6, 0x0, 0x0) 1.38499715s ago: executing program 1 (id=2442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x2, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009902"]) 1.225120989s ago: executing program 3 (id=2443): r0 = io_uring_setup(0x4b6e, &(0x7f00000002c0)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000001040), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.08493975s ago: executing program 0 (id=2444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x18) 915.466992ms ago: executing program 5 (id=2445): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x5) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x9) splice(r0, 0x0, r3, 0x0, 0x25, 0x5) 549.046701ms ago: executing program 5 (id=2446): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$can_bcm(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x7, 0x0, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) 402.583172ms ago: executing program 3 (id=2447): syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0x8, 0xa, {0x7, 0x25, 0x1, 0x80, 0x19, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x5, 0x0, {0x7, 0x25, 0x1, 0x0, 0x3, 0x7}}}}}}}]}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40095505, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 388.462688ms ago: executing program 1 (id=2448): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000005280)=[{&(0x7f00000050c0)='k', 0x1}, {&(0x7f00000005c0)='0', 0x1}, {&(0x7f0000005180)='^', 0x1}], 0x3}}], 0x1, 0x0) 161.161828ms ago: executing program 0 (id=2449): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000001640)={{}, {0x77359400}}, 0x0) 86.04933ms ago: executing program 5 (id=2450): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) 0s ago: executing program 1 (id=2451): ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@generic={0x0, 0x4, 0x8c}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xa, 0x5, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040)=')', &(0x7f0000000080)=""/59}, 0x20) kernel console output (not intermixed with test programs): usb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 148.512966][ T5902] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 148.552497][ T5902] usb 3-1: USB disconnect, device number 4 [ 148.815537][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.875023][ T5902] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.045099][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 150.076640][ T5902] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 150.098902][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.136011][ T5902] usb 4-1: config 0 descriptor?? [ 150.365123][ T5978] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 150.545063][ T5978] usb 1-1: Using ep0 maxpacket: 16 [ 150.563379][ T5978] usb 1-1: config index 0 descriptor too short (expected 32804, got 36) [ 150.582519][ T5902] koneplus 0003:1E7D:2E22.0004: unknown main item tag 0x1 [ 150.611356][ T5978] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.649067][ T5902] koneplus 0003:1E7D:2E22.0004: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 150.667127][ T5978] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.687305][ T5978] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.694158][ T5978] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 150.710344][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.751821][ T5978] usb 1-1: config 0 descriptor?? [ 150.787711][ T5902] usb 4-1: USB disconnect, device number 6 [ 150.900214][ T5883] net_ratelimit: 3 callbacks suppressed [ 150.900233][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.949108][ T7362] fido_id[7362]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 151.217995][ T5978] hid (null): unknown global tag 0xd [ 151.223377][ T5978] hid (null): unknown global tag 0xc [ 151.243397][ T5978] hid (null): unknown global tag 0xc [ 151.447833][ T5978] usb 1-1: USB disconnect, device number 6 [ 151.657709][ T7394] ======================================================= [ 151.657709][ T7394] WARNING: The mand mount option has been deprecated and [ 151.657709][ T7394] and is ignored by this kernel. Remove the mand [ 151.657709][ T7394] option from the mount to silence this warning. [ 151.657709][ T7394] ======================================================= [ 151.937219][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.544609][ T7420] bond0: entered promiscuous mode [ 152.568285][ T7426] CIFS: VFS: Malformed UNC in devname [ 152.572738][ T7420] bond_slave_0: entered promiscuous mode [ 152.581639][ T7420] bond_slave_1: entered promiscuous mode [ 152.601452][ T7420] bond1: entered promiscuous mode [ 152.692496][ T7420] bond0: left promiscuous mode [ 152.699772][ T7420] bond_slave_0: left promiscuous mode [ 152.728045][ T7420] bond_slave_1: left promiscuous mode [ 152.770552][ T7420] bond1: left promiscuous mode [ 152.911274][ T7436] capability: warning: `syz.1.584' uses 32-bit capabilities (legacy support in use) [ 152.985145][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.215211][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.513229][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'. [ 153.556272][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 154.044263][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.832285][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.855280][ T7497] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 155.056744][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.125127][ T5942] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 155.133211][ T918] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 155.306370][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 155.308871][ T918] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.308902][ T918] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 155.308987][ T918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 155.309022][ T918] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 155.309046][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.311515][ T5942] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 155.311540][ T5942] usb 4-1: config 0 has no interface number 0 [ 155.311580][ T5942] usb 4-1: config 0 interface 2 has no altsetting 0 [ 155.316320][ T918] usb 2-1: config 0 descriptor?? [ 155.317260][ T7502] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 155.331110][ T5942] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 155.331146][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.331167][ T5942] usb 4-1: Product: syz [ 155.331183][ T5942] usb 4-1: Manufacturer: syz [ 155.331225][ T5942] usb 4-1: SerialNumber: syz [ 155.362603][ T7520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.622'. [ 155.363799][ T5942] usb 4-1: config 0 descriptor?? [ 155.431774][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.621'. [ 155.599728][ T5942] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.767961][ T918] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x0 [ 155.768001][ T918] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x0 [ 155.768054][ T918] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x0 [ 155.768083][ T918] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x0 [ 155.768111][ T918] holtek_mouse 0003:04D9:A067.0006: unknown main item tag 0x0 [ 155.786069][ T918] holtek_mouse 0003:04D9:A067.0006: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input0 [ 155.932320][ T5942] usb 4-1: invalid MIDI in EP 0 [ 155.966145][ T9] usb 2-1: USB disconnect, device number 5 [ 156.061507][ T7535] fido_id[7535]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 156.123448][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.199377][ T5942] snd-usb-audio 4-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 156.245452][ T5942] usb 4-1: USB disconnect, device number 7 [ 156.277796][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.347220][ T5949] udevd[5949]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.737909][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.979830][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.056148][ T1155] wlan1: Trigger new scan to find an IBSS to join [ 157.139500][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.249634][ T7573] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.639'. [ 157.535455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.544130][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.552548][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.703373][ T7593] tipc: Started in network mode [ 157.743791][ T7593] tipc: Node identity ac14140c, cluster identity 4711 [ 157.780034][ T7593] tipc: New replicast peer: 255.255.255.255 [ 157.821885][ T7593] tipc: Enabled bearer , priority 10 [ 157.863765][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 157.902728][ T7599] tipc: Disabling bearer [ 157.941019][ T30] audit: type=1326 audit(1749609972.468:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7603 comm="syz.5.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13f8e929 code=0x7ffc0000 [ 157.964192][ T30] audit: type=1326 audit(1749609972.488:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7603 comm="syz.5.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f3c13f8e929 code=0x7ffc0000 [ 158.018648][ T7602] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 158.214403][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.254593][ T30] audit: type=1326 audit(1749609972.488:25): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7603 comm="syz.5.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13f8e929 code=0x7ffc0000 [ 158.325836][ T30] audit: type=1326 audit(1749609972.488:26): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=7603 comm="syz.5.651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c13f8e929 code=0x7ffc0000 [ 159.215738][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.491398][ T5902] IPVS: starting estimator thread 0... [ 159.516674][ T7650] IPVS: sh: FWM 4 0x00000004 - no destination available [ 159.585204][ T7652] IPVS: using max 26 ests per chain, 62400 per kthread [ 159.806889][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.671'. [ 159.886443][ T7659] block device autoloading is deprecated and will be removed. [ 159.925935][ T7666] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.674'. [ 159.938073][ T7659] syz.3.672: attempt to access beyond end of device [ 159.938073][ T7659] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 160.206706][ T7672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 160.690878][ T30] audit: type=1326 audit(1749609975.208:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7689 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bdf1858e7 code=0x7ffc0000 [ 160.784293][ T30] audit: type=1326 audit(1749609975.218:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7689 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdf12ab19 code=0x7ffc0000 [ 160.884360][ T30] audit: type=1326 audit(1749609975.218:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7689 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf18e929 code=0x7ffc0000 [ 160.982913][ T30] audit: type=1326 audit(1749609975.218:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7689 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9bdf1858e7 code=0x7ffc0000 [ 161.011810][ T30] audit: type=1326 audit(1749609975.218:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7689 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdf12ab19 code=0x7ffc0000 [ 161.042619][ T7703] loop6: detected capacity change from 0 to 63 [ 161.057568][ T7703] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 161.073604][ T30] audit: type=1326 audit(1749609975.218:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7689 comm="syz.2.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f9bdf18e929 code=0x7ffc0000 [ 161.103964][ T7703] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 161.112666][ T7703] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 161.125232][ T7703] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 161.134385][ T7703] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 161.170665][ T7703] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 161.188125][ T7703] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 161.296824][ T5942] net_ratelimit: 2 callbacks suppressed [ 161.296844][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.595287][ T5942] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 161.777104][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.814998][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.842957][ T5942] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 161.862777][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.903614][ T5942] usb 3-1: config 0 descriptor?? [ 162.275491][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 162.340376][ T5942] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 162.348227][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.372827][ T5942] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 162.419627][ T5942] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 162.461856][ T5942] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 162.505520][ T5942] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 162.513210][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.593890][ T5942] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 162.786026][ T5942] playstation 0003:054C:0DF2.0007: Invalid reportID received, expected 9 got 0 [ 162.823979][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.856585][ T5942] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 162.902612][ T5942] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 162.950672][ T5942] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 162.980382][ T5942] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 163.050950][ T5942] usb 3-1: USB disconnect, device number 5 [ 163.377757][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.590879][ T7829] netlink: 48 bytes leftover after parsing attributes in process `syz.5.720'. [ 164.052798][ T7853] Falling back ldisc for ptm0. [ 164.154623][ T7856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.185369][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 164.185388][ T30] audit: type=1326 audit(1749609978.708:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483098e929 code=0x7ffc0000 [ 164.212515][ T7862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.222169][ T7856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.229345][ T7864] batadv_slave_0: entered promiscuous mode [ 164.258655][ T7856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.267274][ T7863] batadv_slave_0: left promiscuous mode [ 164.273309][ T30] audit: type=1326 audit(1749609978.718:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.0.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f483098e929 code=0x7ffc0000 [ 164.302939][ T30] audit: type=1326 audit(1749609978.718:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7857 comm="syz.0.732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f483098e929 code=0x0 [ 164.418440][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.773201][ T7886] Driver unsupported XDP return value 0 on prog (id 72) dev N/A, expect packet loss! [ 164.892394][ T7893] netlink: 52 bytes leftover after parsing attributes in process `syz.5.745'. [ 165.812726][ T7928] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 165.820492][ T7928] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 165.915121][ T5902] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.060628][ T7934] vxcan0: tx address claim with dest, not broadcast [ 166.075157][ T5902] usb 1-1: Using ep0 maxpacket: 32 [ 166.089342][ T5902] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 166.114928][ T5902] usb 1-1: config 4 has no interface number 0 [ 166.121097][ T5902] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.188187][ T5902] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.205064][ T5902] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 166.224373][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.254740][ T5902] hub 1-1:4.128: USB hub found [ 166.475067][ T5902] hub 1-1:4.128: 2 ports detected [ 166.480223][ T5902] hub 1-1:4.128: Using single TT (err -22) [ 166.495518][ T5883] net_ratelimit: 3 callbacks suppressed [ 166.495535][ T5883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.703021][ T7961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 166.895413][ T5902] usb 1-1: USB disconnect, device number 7 [ 166.979873][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.357060][ T7988] Falling back ldisc for ptm0. [ 167.562907][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.580131][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.715643][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 168.733517][ T8045] sg_write: process 194 (syz.5.813) changed security contexts after opening file descriptor, this is not allowed. [ 168.899582][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 168.908748][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 168.918660][ T9] usb 3-1: config 0 has no interface number 0 [ 168.929148][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 168.939002][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.948898][ T9] usb 3-1: Product: syz [ 168.954559][ T9] usb 3-1: Manufacturer: syz [ 168.960264][ T9] usb 3-1: SerialNumber: syz [ 168.968196][ T9] usb 3-1: config 0 descriptor?? [ 168.977935][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 169.214955][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 169.260337][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 169.344041][ T8061] netlink: 60 bytes leftover after parsing attributes in process `syz.0.822'. [ 169.399790][ T8033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.422150][ T8033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.616114][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.657488][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 169.669466][ T5902] usb 3-1: USB disconnect, device number 6 [ 169.692084][ T5902] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 169.723820][ T5902] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 169.739166][ T5902] quatech2 3-1:0.51: device disconnected [ 169.751306][ T8074] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 170.015846][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.236367][ T8100] netlink: 68 bytes leftover after parsing attributes in process `syz.1.840'. [ 170.270995][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 170.335358][ T30] audit: type=1326 audit(1749609984.858:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8105 comm="syz.2.844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf18e929 code=0x0 [ 170.655939][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.695624][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.096752][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.428086][ T8208] loop6: detected capacity change from 0 to 63 [ 172.495549][ T8208] support for the xor transformation has been removed. [ 172.525127][ T8214] io-wq is not configured for unbound workers [ 172.655721][ T8222] netlink: 'syz.1.898': attribute type 1 has an invalid length. [ 172.719230][ T8224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.736700][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.744898][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.059769][ T5902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.221629][ T8247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.775511][ T918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.075158][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 174.398903][ T8286] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 174.407642][ T8286] netlink: 144 bytes leftover after parsing attributes in process `syz.1.929'. [ 174.416898][ T8286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.929'. [ 174.690165][ T8298] team0: No ports can be present during mode change [ 174.817309][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.855495][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.097536][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.342660][ T8366] loop6: detected capacity change from 0 to 524287999 [ 176.356654][ T8366] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.373266][ T8366] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.401741][ T8366] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.475176][ T8368] Invalid logical block size (3) [ 176.493319][ T8366] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.518905][ T8366] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.543920][ T8366] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.574641][ T8366] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.582775][ T8366] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.597062][ T8366] ldm_validate_partition_table(): Disk read failed. [ 176.603791][ T8366] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.618626][ T8366] Buffer I/O error on dev loop6, logical block 0, async page read [ 176.639205][ T8366] Dev loop6: unable to read RDB block 0 [ 176.678370][ T8366] loop6: unable to read partition table [ 176.694748][ T8366] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 176.875945][ T30] audit: type=1107 audit(1749609991.398:43): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='•' [ 176.906693][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.305497][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 177.438456][ T8414] dummy0: entered promiscuous mode [ 177.454695][ T8414] macsec1: entered promiscuous mode [ 177.460648][ T8414] macsec1: entered allmulticast mode [ 177.475064][ T8414] dummy0: entered allmulticast mode [ 177.487928][ T24] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 177.501184][ T8414] dummy0: left allmulticast mode [ 177.506987][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.519316][ T8414] dummy0: left promiscuous mode [ 177.531065][ T24] usb 2-1: config 0 has no interface number 0 [ 177.540644][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 177.564984][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.574207][ T24] usb 2-1: Product: syz [ 177.583018][ T24] usb 2-1: Manufacturer: syz [ 177.598696][ T24] usb 2-1: SerialNumber: syz [ 177.621435][ T24] usb 2-1: config 0 descriptor?? [ 177.643355][ T24] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 177.666774][ T24] usb 2-1: No valid video chain found. [ 177.792184][ T8421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.801747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.938700][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.092363][ T8442] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 178.224930][ T8447] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 178.232216][ T8447] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 178.606958][ T8468] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1012'. [ 178.637247][ T8470] syz.5.1014 uses obsolete (PF_INET,SOCK_PACKET) [ 178.966653][ T8468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.977809][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.001413][ T8468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.028719][ T8468] bond0 (unregistering): (slave bond1): Releasing backup interface [ 179.078615][ T8468] bond0 (unregistering): Released all slaves [ 179.141566][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.016393][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.107477][ T8510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.135025][ T5902] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.143191][ T9] usb 2-1: USB disconnect, device number 6 [ 180.151720][ T8510] bond0: (slave bond1): Enslaving as an active interface with an up link [ 180.346634][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.375956][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.395109][ T5902] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 180.414612][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.431459][ T5902] usb 3-1: config 0 descriptor?? [ 180.867662][ T5902] itetech 0003:06CB:73F6.0008: unknown main item tag 0x0 [ 180.892872][ T5902] itetech 0003:06CB:73F6.0008: unbalanced collection at end of report description [ 180.915472][ T5902] itetech 0003:06CB:73F6.0008: probe with driver itetech failed with error -22 [ 181.055565][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.128949][ T5902] usb 3-1: USB disconnect, device number 7 [ 181.297831][ T24] hid-generic 0005:16C0:0009.0009: unknown main item tag 0x0 [ 181.310323][ T24] hid-generic 0005:16C0:0009.0009: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 181.339127][ T30] audit: type=1326 audit(1749609995.868:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 181.390038][ T30] audit: type=1326 audit(1749609995.868:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 181.419936][ T30] audit: type=1326 audit(1749609995.948:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 181.472059][ T30] audit: type=1326 audit(1749609995.948:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 181.506104][ T8555] block nbd0: server does not support multiple connections per device. [ 181.516845][ T30] audit: type=1326 audit(1749609995.968:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 181.526509][ T8555] block nbd0: shutting down sockets [ 181.603912][ T30] audit: type=1326 audit(1749609995.968:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 181.678720][ T30] audit: type=1326 audit(1749609995.968:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 181.744978][ T30] audit: type=1326 audit(1749609995.978:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 181.825970][ T30] audit: type=1326 audit(1749609995.978:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 181.917850][ T30] audit: type=1326 audit(1749609995.978:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8554 comm="syz.1.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 182.095993][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.175506][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.224989][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 182.341236][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.397736][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.410260][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.415300][ T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 182.487772][ T9] usb 3-1: config 0 descriptor?? [ 182.498542][ T9] cp210x 3-1:0.0: cp210x converter detected [ 182.596695][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 182.628157][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.648668][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 182.666426][ T24] usb 4-1: config 1 has no interface number 1 [ 182.672727][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 182.705087][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.724415][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.744759][ T24] usb 4-1: Product: syz [ 182.755108][ T24] usb 4-1: Manufacturer: syz [ 182.759761][ T24] usb 4-1: SerialNumber: syz [ 182.906268][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 182.963727][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 182.986655][ T8616] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1082'. [ 183.006971][ T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 183.025160][ T24] usb 4-1: 2:1: All rates were zero [ 183.053859][ T24] usb 4-1: USB disconnect, device number 8 [ 183.138214][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.173115][ T5978] usb 3-1: USB disconnect, device number 8 [ 183.201236][ T5978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 183.237718][ T5978] cp210x 3-1:0.0: device disconnected [ 183.319467][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1090'. [ 183.539457][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1094'. [ 183.555014][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 183.731125][ T9] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 183.748815][ T9] usb 2-1: config 0 has no interface number 0 [ 183.762339][ T9] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 183.781331][ T9] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 183.815138][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 183.837163][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.863456][ T9] usb 2-1: Product: syz [ 183.873814][ T9] usb 2-1: Manufacturer: syz [ 183.888106][ T9] usb 2-1: SerialNumber: syz [ 183.919150][ T9] usb 2-1: config 0 descriptor?? [ 183.925527][ T8631] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.944072][ T9] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 184.113671][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.127882][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.144957][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.161069][ T5978] usb 2-1: USB disconnect, device number 7 [ 184.169972][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.180019][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.184420][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.198433][ T5978] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 184.218006][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.229598][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.239376][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.252941][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.269011][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.281606][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.289453][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.301261][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.309393][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.319533][ T9] hid-generic 009C:0008:0003.000A: unknown main item tag 0x0 [ 184.341130][ T9] hid-generic 009C:0008:0003.000A: hidraw0: HID v0.05 Device [syz1] on syz0 [ 185.215449][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.223611][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.285164][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.350299][ T8704] input: syz1 as /devices/virtual/input/input10 [ 185.449661][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 185.470056][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.493041][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.516008][ T24] usb 6-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 185.538284][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.570228][ T24] usb 6-1: config 0 descriptor?? [ 185.740470][ T8720] bridge0: entered promiscuous mode [ 185.748799][ T8720] macvlan2: entered promiscuous mode [ 185.795236][ T5942] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 185.965041][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 185.976197][ T5942] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 185.997417][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.025241][ T24] aquacomputer_d5next 0003:0C70:F014.000B: hidraw0: USB HID v0.04 Device [HID 0c70:f014] on usb-dummy_hcd.5-1/input0 [ 186.041078][ T5942] usb 1-1: config 0 descriptor?? [ 186.079146][ T8732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.088329][ T8732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.102263][ T8732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.175160][ T5883] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 186.228401][ T5978] usb 6-1: USB disconnect, device number 2 [ 186.261932][ T5942] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 186.274265][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.290662][ T5942] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 186.299182][ T5942] usb 1-1: media controller created [ 186.355216][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 186.377436][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.415566][ T5883] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.444076][ T5883] usb 3-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.456918][ T5883] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.474112][ T5942] az6027: usb out operation failed. (-71) [ 186.480680][ T5883] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.490927][ T5942] az6027: usb out operation failed. (-71) [ 186.497341][ T5942] stb0899_attach: Driver disabled by Kconfig [ 186.503762][ T5883] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 186.519181][ T5942] az6027: no front-end attached [ 186.519181][ T5942] [ 186.533142][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0 [ 186.540528][ T5883] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 186.555183][ T5942] az6027: usb out operation failed. (-71) [ 186.561070][ T5942] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 186.585011][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.597035][ T5942] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 186.609535][ T5883] usb 3-1: config 0 descriptor?? [ 186.647049][ T5942] dvb-usb: schedule remote query interval to 400 msecs. [ 186.654213][ T5942] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 186.669604][ T5942] usb 1-1: USB disconnect, device number 8 [ 186.762390][ T5942] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 187.030126][ T5883] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 187.055066][ T5883] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 187.074060][ T5883] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 187.104995][ T5883] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 187.112937][ T5883] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0 [ 187.168400][ T5883] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 187.205451][ T8752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1145'. [ 187.215366][ T5883] hid-thrustmaster 0003:044F:B65D.000C: setup data couldn't be sent [ 187.236046][ C1] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -71 [ 187.266535][ T5883] usb 3-1: USB disconnect, device number 9 [ 187.299023][ T5942] net_ratelimit: 1824 callbacks suppressed [ 187.299044][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.498511][ T8765] netlink: 'syz.3.1152': attribute type 18 has an invalid length. [ 187.859510][ T8782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'. [ 187.981820][ T8782] nbd: socks must be embedded in a SOCK_ITEM attr [ 188.256163][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.299326][ T8802] serio: Serial port ptm0 [ 188.337665][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.355238][ T8800] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1168'. [ 188.898607][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 189.065573][ T5883] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 189.076308][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.092838][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 189.097748][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1184'. [ 189.102703][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.135989][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.147575][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.156951][ T9] usb 2-1: Product: syz [ 189.162462][ T9] usb 2-1: Manufacturer: syz [ 189.168021][ T9] usb 2-1: SerialNumber: syz [ 189.187179][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 189.194076][ T9] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 189.205848][ T9] cdc_mbim 2-1:1.0: bind() failure [ 189.230064][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 189.256597][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.275001][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.284809][ T5883] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.314990][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.337014][ T5883] usb 3-1: config 0 descriptor?? [ 189.350413][ T5883] hub 3-1:0.0: USB hub found [ 189.386083][ T8807] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 189.399841][ T9] usb 2-1: USB disconnect, device number 8 [ 189.553978][ T5883] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 189.973439][ T5883] hid-generic 0003:046D:C31C.000D: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 190.212063][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1201'. [ 190.237487][ T8871] kvm: kvm [8867]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x200000000400 [ 190.265244][ T5883] usb 3-1: USB disconnect, device number 10 [ 190.585072][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 190.657331][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.665982][ T8862] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 190.672493][ T8862] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 190.741611][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.760677][ T8862] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.770734][ T8862] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 190.785041][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 190.810232][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.819847][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.836086][ T8862] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.842084][ T8862] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 190.856835][ T24] usb 6-1: Product: syz [ 190.861054][ T24] usb 6-1: Manufacturer: syz [ 190.867031][ T24] usb 6-1: SerialNumber: syz [ 190.880450][ T8862] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 190.905015][ T8862] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 190.955757][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 190.970981][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.987816][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 191.000762][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.040596][ T43] usb 1-1: config 0 descriptor?? [ 191.104474][ T24] cdc_ncm 6-1:1.0: bind() failure [ 191.146170][ T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 191.153193][ T24] cdc_ncm 6-1:1.1: bind() failure [ 191.197960][ T8862] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.204347][ T24] usb 6-1: USB disconnect, device number 3 [ 191.211035][ T8862] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 191.505346][ T43] logitech-djreceiver 0003:046D:C513.000E: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.0-1/input0 [ 191.690957][ T9] usb 1-1: USB disconnect, device number 9 [ 192.184711][ T8922] program syz.2.1224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.244533][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1225'. [ 193.137460][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.168485][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.177500][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.315663][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.462137][ T8957] veth0: entered promiscuous mode [ 193.476720][ T8957] veth0: left promiscuous mode [ 193.681777][ T8967] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.115319][ T8978] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 194.125007][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 194.177955][ T5835] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.285285][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 194.303338][ T24] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 194.325634][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.342270][ T24] usb 2-1: config 0 descriptor?? [ 194.353590][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 195.043752][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1256'. [ 195.168821][ T24] gspca_nw80x: reg_r err -71 [ 195.189499][ T24] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 195.209601][ T24] usb 2-1: USB disconnect, device number 9 [ 196.384280][ T9066] kvm: kvm [9064]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 196.895160][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 197.070006][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 197.089639][ T43] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 197.109874][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.131227][ T9104] random: crng reseeded on system resumption [ 197.138261][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.140579][ T43] usb 4-1: config 0 descriptor?? [ 197.174680][ T43] gspca_main: sunplus-2.14.0 probing 041e:400b [ 197.980886][ T43] gspca_sunplus: reg_r err -71 [ 197.995090][ T43] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 198.023720][ T9110] Restarting kernel threads ... [ 198.037040][ T9110] Done restarting kernel threads. [ 198.042978][ T43] usb 4-1: USB disconnect, device number 9 [ 198.911319][ T9171] IPv6: Can't replace route, no match found [ 199.003034][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'. [ 199.124428][ T9179] sctp: [Deprecated]: syz.1.1339 (pid 9179) Use of int in max_burst socket option. [ 199.124428][ T9179] Use struct sctp_assoc_value instead [ 199.222788][ T9188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.357415][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1344'. [ 199.404647][ T9194] vlan3: entered promiscuous mode [ 199.418845][ T9194] gretap0: entered promiscuous mode [ 199.528805][ T9199] Context (ID=0x0) not attached to queue pair (handle=0x0:0x2) [ 199.620902][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.629183][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.845080][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 199.947690][ T9216] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1355'. [ 200.005487][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 200.016992][ T9] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 200.036075][ T9] usb 1-1: config 0 has no interface number 0 [ 200.043006][ T9] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 200.067942][ T9] usb 1-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 200.093559][ T9] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 200.118285][ T9] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 200.145014][ T9] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 200.175035][ T9] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 200.209946][ T9] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 200.227488][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.246741][ T9] usb 1-1: Product: syz [ 200.250972][ T9] usb 1-1: Manufacturer: syz [ 200.259040][ T9] usb 1-1: SerialNumber: syz [ 200.280400][ T9] usb 1-1: config 0 descriptor?? [ 200.286561][ T9203] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 200.294466][ T9203] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 200.556869][ T9] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 200.752014][ T9] etas_es58x 1-1:0.219: could not parse product info: '424242424242' [ 201.006879][ T5978] usb 1-1: USB disconnect, device number 10 [ 201.015436][ T5978] etas_es58x 1-1:0.219: Disconnecting syz syz [ 201.840370][ T9268] block device autoloading is deprecated and will be removed. [ 202.343836][ T9288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'. [ 202.424980][ T5978] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 202.606369][ T5978] usb 2-1: Using ep0 maxpacket: 16 [ 202.632912][ T5978] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 202.644720][ T5978] usb 2-1: config 0 has no interface number 0 [ 202.669445][ T5978] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 202.703529][ T5978] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 202.748849][ T5978] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 202.775056][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.803864][ T5978] usb 2-1: Product: syz [ 202.824247][ T5978] usb 2-1: Manufacturer: syz [ 202.852289][ T5978] usb 2-1: SerialNumber: syz [ 202.869376][ T5978] usb 2-1: config 0 descriptor?? [ 202.875470][ T9280] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 202.906262][ T9280] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 202.970454][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1395'. [ 203.150618][ T9280] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.175256][ T9280] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 203.301535][ T9309] bridge0: left allmulticast mode [ 203.365925][ T9309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.559547][ T9321] netlink: 'syz.0.1403': attribute type 7 has an invalid length. [ 203.830208][ T5978] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 203.840521][ T5978] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 203.888235][ T5978] asix 2-1:0.251: probe with driver asix failed with error -71 [ 203.919552][ T5978] usb 2-1: USB disconnect, device number 10 [ 203.943462][ T9336] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 203.943462][ T9336] The task syz.2.1408 (9336) triggered the difference, watch for misbehavior. [ 204.022603][ T9338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1410'. [ 204.460876][ T9350] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 204.468460][ T9350] syzkaller1: linktype set to 1 [ 204.738783][ T9361] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1420'. [ 205.366286][ T9361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.375211][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.433703][ T9361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.473101][ T9361] bond0 (unregistering): (slave bond1): Releasing backup interface [ 205.517053][ T9361] bond0 (unregistering): Released all slaves [ 205.593663][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 205.617663][ T9369] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.627211][ T9369] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.636061][ T9369] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.644811][ T9369] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.665569][ T9369] vxlan0: entered promiscuous mode [ 205.680952][ T9369] vxlan0: entered allmulticast mode [ 206.156598][ T9401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1440'. [ 206.592105][ T9419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.654443][ T30] audit: type=1326 audit(1749610021.178:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9420 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 206.723364][ T30] audit: type=1326 audit(1749610021.178:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9420 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 206.759529][ T9424] random: crng reseeded on system resumption [ 206.781778][ T30] audit: type=1326 audit(1749610021.208:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9420 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9f8b8d290 code=0x7ffc0000 [ 206.840438][ T30] audit: type=1326 audit(1749610021.208:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9420 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd9f8b90157 code=0x7ffc0000 [ 206.923124][ T30] audit: type=1326 audit(1749610021.208:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9420 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 206.967738][ T30] audit: type=1326 audit(1749610021.208:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9420 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd9f8b90157 code=0x7ffc0000 [ 207.024549][ T30] audit: type=1326 audit(1749610021.208:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9420 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd9f8b8d58a code=0x7ffc0000 [ 207.078843][ T30] audit: type=1326 audit(1749610021.208:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9420 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 207.100518][ T9434] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1456'. [ 207.129930][ T30] audit: type=1326 audit(1749610021.208:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9420 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 207.185003][ T30] audit: type=1326 audit(1749610021.218:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9420 comm="syz.1.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd9f8b8e929 code=0x7ffc0000 [ 207.234500][ T9434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.269379][ T9434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.293802][ T9434] bond0 (unregistering): Released all slaves [ 207.361222][ T9438] netlink: 'syz.3.1458': attribute type 4 has an invalid length. [ 208.543018][ T9489] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1481'. [ 209.188520][ T9521] input: syz1 as /devices/virtual/input/input12 [ 209.269183][ T9529] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 209.341190][ T9527] nvme_fabrics: missing parameter 'transport=%s' [ 209.364350][ T9527] nvme_fabrics: missing parameter 'nqn=%s' [ 209.577483][ T5978] kernel write not supported for file /snd/pcmC0D0p (pid: 5978 comm: kworker/0:7) [ 209.945400][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 210.046837][ T9562] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 210.064474][ T9562] macvtap1: entered allmulticast mode [ 210.106002][ T9562] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 210.140960][ T9562] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 210.151463][ T9562] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 212.403939][ T9619] tap0: tun_chr_ioctl cmd 1074025677 [ 212.414102][ T9619] tap0: linktype set to 823 [ 212.583227][ T9621] bridge0: port 3(batadv1) entered blocking state [ 212.635155][ T9621] bridge0: port 3(batadv1) entered disabled state [ 212.645588][ T9621] batadv1: entered allmulticast mode [ 212.653253][ T9621] batadv1: entered promiscuous mode [ 212.702234][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 213.056973][ T7779] batman_adv: batadv1: IGMP Querier appeared [ 213.063757][ T7779] batman_adv: batadv1: MLD Querier appeared [ 214.337503][ T9693] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 214.647623][ T5978] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 214.742011][ T9708] netlink: 'syz.2.1577': attribute type 1 has an invalid length. [ 214.750204][ T9708] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1577'. [ 214.795155][ T5942] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 214.804979][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 214.817244][ T5978] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 214.839562][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 214.855318][ T5978] usb 4-1: SerialNumber: syz [ 214.872179][ T5978] usb 4-1: config 0 descriptor?? [ 214.882177][ T5978] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 214.892745][ T5978] usb 4-1: Detected FT232A [ 214.900851][ T5978] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 214.966338][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 214.984248][ T5942] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 215.030406][ T5942] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 215.077226][ T5942] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.101745][ T5942] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.129881][ T9] usb 4-1: USB disconnect, device number 10 [ 215.139008][ T5942] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.159460][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 215.160746][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.174527][ T9] ftdi_sio 4-1:0.0: device disconnected [ 215.451263][ T5942] usb 2-1: GET_CAPABILITIES returned 0 [ 215.463507][ T5942] usbtmc 2-1:16.0: can't read capabilities [ 215.655078][ T9734] syz.2.1588 (9734) used greatest stack depth: 19480 bytes left [ 215.693984][ T5978] usb 2-1: USB disconnect, device number 11 [ 215.723743][ T43] IPVS: starting estimator thread 0... [ 215.825652][ T9737] IPVS: using max 25 ests per chain, 60000 per kthread [ 215.878575][ T9745] netlink: 'syz.2.1593': attribute type 1 has an invalid length. [ 215.907110][ T9745] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1593'. [ 215.920872][ T9745] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1593'. [ 217.554947][ T918] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 217.725372][ T918] usb 2-1: Using ep0 maxpacket: 16 [ 217.743837][ T918] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 217.753623][ T918] usb 2-1: config 0 has no interface number 0 [ 217.773078][ T918] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 217.792718][ T918] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 217.812009][ T918] usb 2-1: config 0 interface 41 has no altsetting 0 [ 217.840117][ T918] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 217.855032][ T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.872853][ T918] usb 2-1: Product: syz [ 217.882417][ T918] usb 2-1: Manufacturer: syz [ 217.899769][ T918] usb 2-1: SerialNumber: syz [ 217.930208][ T918] usb 2-1: config 0 descriptor?? [ 217.941173][ T9792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.948816][ T9792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 218.121220][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 218.121238][ T30] audit: type=1326 audit(1749610032.648:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483098e929 code=0x7ffc0000 [ 218.160979][ T30] audit: type=1326 audit(1749610032.648:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483098e929 code=0x7ffc0000 [ 218.192794][ T30] audit: type=1326 audit(1749610032.648:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f483098e929 code=0x7ffc0000 [ 218.205468][ T9792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 218.220607][ T30] audit: type=1326 audit(1749610032.648:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483098e929 code=0x7ffc0000 [ 218.248933][ T30] audit: type=1326 audit(1749610032.648:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483098e929 code=0x7ffc0000 [ 218.282337][ T30] audit: type=1326 audit(1749610032.648:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f483098e929 code=0x7ffc0000 [ 218.285203][ T9792] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 218.325108][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 218.338305][ T30] audit: type=1326 audit(1749610032.648:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483098e929 code=0x7ffc0000 [ 218.393639][ T30] audit: type=1326 audit(1749610032.648:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.0.1624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483098e929 code=0x7ffc0000 [ 218.496998][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.508279][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 218.531493][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.565900][ T9] usb 4-1: config 0 descriptor?? [ 218.574446][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 218.820746][ T918] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 219.022219][ T918] dm9601 2-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 219.044155][ T918] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 219.083620][ T918] usb 2-1: USB disconnect, device number 12 [ 219.182013][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 219.197338][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 219.207838][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 219.224662][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 219.247150][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 219.254350][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 219.262252][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 219.280101][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 219.305062][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 219.322246][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 219.336633][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 219.353875][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 219.374191][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 219.394108][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 219.408513][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 219.416348][ T9861] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1647'. [ 219.430308][ T9] pwc: Registered as video103. [ 219.435560][ T9861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1647'. [ 219.447476][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 219.465247][ T9] usb 4-1: USB disconnect, device number 11 [ 219.899983][ T9882] vlan2: entered allmulticast mode [ 219.915455][ T9882] veth1: entered allmulticast mode [ 220.010678][ T9890] netlink: 'syz.5.1662': attribute type 39 has an invalid length. [ 220.342113][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1668'. [ 220.949695][ T9925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1678'. [ 221.027641][ T9925] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.036466][ T9925] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.125017][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 221.255018][ T5978] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 221.327623][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 221.336178][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.347844][ T43] usb 6-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 221.365199][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.385116][ T43] usb 6-1: config 0 descriptor?? [ 221.396025][ T43] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input14 [ 221.405075][ T5978] usb 1-1: Using ep0 maxpacket: 8 [ 221.422968][ T5978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.460056][ T5978] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 221.502150][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.538623][ T5978] usb 1-1: config 0 descriptor?? [ 221.627764][ T5180] bcm5974 6-1:0.0: could not read from device [ 221.659488][ T43] usb 6-1: USB disconnect, device number 4 [ 221.675618][ T5180] bcm5974 6-1:0.0: could not read from device [ 221.686044][ T5180] bcm5974 6-1:0.0: could not read from device [ 221.812170][ T9957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1689'. [ 221.976666][ T5978] hid-multitouch 0003:0EEF:72C4.000F: unknown main item tag 0x0 [ 222.011595][ T5978] hid-multitouch 0003:0EEF:72C4.000F: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 222.023975][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 222.327729][ T5978] usb 1-1: USB disconnect, device number 11 [ 222.969395][ T9989] gretap0: entered promiscuous mode [ 223.008052][ T9992] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1704'. [ 223.108282][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 223.127640][ T9998] netlink: 'syz.2.1709': attribute type 21 has an invalid length. [ 224.131123][T10036] netlink: 'syz.0.1725': attribute type 7 has an invalid length. [ 224.149394][T10036] netlink: 'syz.0.1725': attribute type 8 has an invalid length. [ 224.213143][T10036] netlink: 'syz.0.1725': attribute type 4 has an invalid length. [ 224.227738][T10036] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1725'. [ 225.107185][T10069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.395024][ T918] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 225.577551][ T918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 225.587685][ T918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 225.609544][ T918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 225.634940][ T918] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 225.670854][ T918] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 225.682447][ T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.702879][ T918] usb 4-1: Product: syz [ 225.713668][ T918] usb 4-1: Manufacturer: syz [ 225.726140][ T918] usb 4-1: SerialNumber: syz [ 225.748291][ T918] usb 4-1: config 0 descriptor?? [ 225.766879][ T918] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 225.794396][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1748'. [ 226.024970][ T918] scsi host1: usb-storage 4-1:0.0 [ 226.237979][ T918] usb 4-1: USB disconnect, device number 12 [ 227.085091][ T918] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 227.255192][ T918] usb 3-1: Using ep0 maxpacket: 16 [ 227.279369][ T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.299473][ T918] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 227.319259][ T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.344129][ T918] usb 3-1: config 0 descriptor?? [ 227.489882][T10151] binder: 10150:10151 ioctl c018620c 200000000700 returned -1 [ 227.796943][ T918] apple 0003:05AC:024B.0010: collection stack underflow [ 227.813452][ T918] apple 0003:05AC:024B.0010: item 0 1 0 12 parsing failed [ 227.831089][ T918] apple 0003:05AC:024B.0010: parse failed [ 227.837613][ T918] apple 0003:05AC:024B.0010: probe with driver apple failed with error -22 [ 228.007259][ T5942] usb 3-1: USB disconnect, device number 11 [ 229.155094][ T5902] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 229.332055][ T5902] usb 6-1: Using ep0 maxpacket: 8 [ 229.356677][ T5902] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.388498][ T5902] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 229.420311][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.450147][ T5902] usb 6-1: config 0 descriptor?? [ 229.536414][T10225] netlink: del zone limit has 4 unknown bytes [ 229.684237][ T5902] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 229.734174][T10235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.858097][T10241] netlink: 'syz.3.1817': attribute type 15 has an invalid length. [ 229.903838][ T5902] usb 6-1: USB disconnect, device number 5 [ 230.128609][T10254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1823'. [ 230.153403][T10254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1823'. [ 230.368979][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1828'. [ 230.985394][ T918] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 231.169934][ T918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.193181][ T918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 231.207756][T10309] serio: Serial port ttynull [ 231.233156][ T918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 231.254009][ T918] usb 6-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 231.263404][ T918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.298812][ T918] usb 6-1: config 0 descriptor?? [ 231.304618][T10284] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.336044][T10284] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 231.776078][ T918] nzxt-smart2 0003:1E71:200F.0011: hidraw0: USB HID v0.00 Device [HID 1e71:200f] on usb-dummy_hcd.5-1/input0 [ 231.990441][ T5978] usb 6-1: USB disconnect, device number 6 [ 232.037752][T10337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1863'. [ 232.388122][ T30] audit: type=1326 audit(1749610047.915:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf18e929 code=0x7ffc0000 [ 232.426352][ T30] audit: type=1326 audit(1749610047.915:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f9bdf18e929 code=0x7ffc0000 [ 232.457096][ T30] audit: type=1326 audit(1749610047.915:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf18e929 code=0x7ffc0000 [ 232.495656][ T30] audit: type=1326 audit(1749610047.915:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf18e929 code=0x7ffc0000 [ 232.589849][ T30] audit: type=1326 audit(1749610047.915:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f9bdf18e929 code=0x7ffc0000 [ 232.650824][ T30] audit: type=1326 audit(1749610047.915:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf18e929 code=0x7ffc0000 [ 232.732521][ T30] audit: type=1326 audit(1749610047.915:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf18e929 code=0x7ffc0000 [ 232.818732][ T30] audit: type=1326 audit(1749610047.915:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f9bdf18e929 code=0x7ffc0000 [ 232.903155][ T30] audit: type=1326 audit(1749610047.915:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf18e929 code=0x7ffc0000 [ 232.995685][ T30] audit: type=1326 audit(1749610047.915:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10352 comm="syz.2.1871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdf18e929 code=0x7ffc0000 [ 233.474783][ T918] kernel read not supported for file /dsp (pid: 918 comm: kworker/1:2) [ 233.729933][T10404] [U] ³ [ 233.915050][ T918] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 234.077809][T10419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 234.092957][ T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.131943][ T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.172796][ T918] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 234.191001][T10422] ptrace attach of "./syz-executor exec"[6662] was attempted by "./syz-executor exec"[10422] [ 234.223001][ T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.257021][ T918] usb 3-1: config 0 descriptor?? [ 234.615616][ T5978] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 234.641710][T10435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1910'. [ 234.767450][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 234.794674][ T5978] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 234.824187][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.840176][ T5978] usb 4-1: Product: syz [ 234.844580][ T5978] usb 4-1: Manufacturer: syz [ 234.851899][ T5978] usb 4-1: SerialNumber: syz [ 234.868659][ T5978] usb 4-1: config 0 descriptor?? [ 234.879120][ T5978] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.073580][ T918] hid-led 0003:0FC5:B080.0012: probe with driver hid-led failed with error -71 [ 235.095385][ T918] usb 3-1: USB disconnect, device number 12 [ 235.111724][ T5978] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 235.155206][ T5942] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 235.173946][T10448] input: syz0 as /devices/virtual/input/input18 [ 235.309006][ T5902] usb 4-1: USB disconnect, device number 13 [ 235.325476][ T5942] usb 6-1: Using ep0 maxpacket: 8 [ 235.349485][ T5942] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 235.393509][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.421408][ T5942] pvrusb2: Hardware description: Terratec Grabster AV400 [ 235.434899][ T5942] pvrusb2: ********** [ 235.444554][ T5942] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 235.468935][ T5942] pvrusb2: Important functionality might not be entirely working. [ 235.477715][ T5942] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 235.509482][ T5942] pvrusb2: ********** [ 235.589956][T10458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1921'. [ 235.627267][ T2347] pvrusb2: Invalid write control endpoint [ 235.740300][ T2347] pvrusb2: Invalid write control endpoint [ 235.748186][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 235.760245][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 235.768494][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 235.802590][ T2347] pvrusb2: Device being rendered inoperable [ 235.817342][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 235.836210][T10442] pvrusb2: Attempted to execute control transfer when device not ok [ 235.844675][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 235.867331][ T5902] usb 6-1: USB disconnect, device number 7 [ 235.898962][ T2347] pvrusb2: Attached sub-driver cx25840 [ 235.918945][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 235.958209][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 236.195907][ T5978] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 236.417899][ T5978] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 236.432257][ T5978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.457874][ T5978] usb 2-1: config 0 descriptor?? [ 236.466298][ T5978] cp210x 2-1:0.0: cp210x converter detected [ 237.077792][ T5978] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 237.106009][ T5978] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 237.144742][ T5978] usb 2-1: cp210x converter now attached to ttyUSB0 [ 237.185998][ T5978] usb 2-1: USB disconnect, device number 13 [ 237.226592][ T5978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 237.234785][ T5978] cp210x 2-1:0.0: device disconnected [ 237.795121][T10533] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1955'. [ 238.046899][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 238.091462][ T30] audit: type=1326 audit(1749610053.615:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10548 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c238e929 code=0x7ffc0000 [ 238.124279][ T30] audit: type=1326 audit(1749610053.615:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10548 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c238e929 code=0x7ffc0000 [ 238.195815][ T30] audit: type=1326 audit(1749610053.615:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10548 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff9c238e929 code=0x7ffc0000 [ 238.233903][ T30] audit: type=1326 audit(1749610053.685:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10548 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c238e929 code=0x7ffc0000 [ 238.275792][ T30] audit: type=1326 audit(1749610053.685:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10548 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c238e929 code=0x7ffc0000 [ 238.316165][ T30] audit: type=1326 audit(1749610053.695:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10548 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff9c238e929 code=0x7ffc0000 [ 238.363467][ T30] audit: type=1326 audit(1749610053.695:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10548 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c238e929 code=0x7ffc0000 [ 238.460287][ T30] audit: type=1326 audit(1749610053.695:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10548 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9c238e929 code=0x7ffc0000 [ 238.532369][ T30] audit: type=1326 audit(1749610053.705:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10548 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff9c238e929 code=0x7ffc0000 [ 238.587981][ T30] audit: type=1326 audit(1749610053.715:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10548 comm="syz.3.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9c232ab19 code=0x7ffc0000 [ 238.829110][T10570] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1970'. [ 239.072760][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 239.312478][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1979'. [ 239.408816][ T5978] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 239.462910][T10596] sctp: [Deprecated]: syz.1.1981 (pid 10596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.462910][T10596] Use struct sctp_sack_info instead [ 239.575942][ T5978] usb 3-1: Using ep0 maxpacket: 32 [ 239.591724][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.609426][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.623834][ T5978] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 239.642091][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.669851][ T5978] usb 3-1: config 0 descriptor?? [ 239.903764][ T5978] usbhid 3-1:0.0: can't add hid device: -71 [ 239.917201][ T5978] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 239.934577][ T5978] usb 3-1: USB disconnect, device number 13 [ 240.107425][T10613] program syz.3.1988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.670263][T10627] bridge0: port 3(veth0_to_bridge) entered blocking state [ 240.703395][T10627] bridge0: port 3(veth0_to_bridge) entered disabled state [ 240.714582][T10627] veth0_to_bridge: entered allmulticast mode [ 240.760291][T10627] veth0_to_bridge: entered promiscuous mode [ 240.767568][T10627] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 240.790400][T10627] bridge0: port 3(veth0_to_bridge) entered blocking state [ 240.797847][T10627] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 240.996758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 241.050589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 241.380120][T10647] IPVS: length: 91 != 24 [ 241.611987][T10662] input: syz0 as /devices/virtual/input/input19 [ 241.801388][T10667] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2011'. [ 242.132746][T10677] vlan3: entered promiscuous mode [ 243.508057][T10658] syz.3.2007 (10658): drop_caches: 2 [ 243.518294][T10705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.695514][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.707810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.719928][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.732046][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.744129][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.756204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.768263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.780336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.792390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.804461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.928312][ T979] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 244.132368][ T979] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 244.150637][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.229764][ T979] usb 2-1: config 0 descriptor?? [ 245.070345][T10730] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2041'. [ 245.273559][ T979] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 245.326364][ T979] usb 2-1: USB disconnect, device number 14 [ 245.381447][T10735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2043'. [ 245.670044][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2046'. [ 246.615988][ T979] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 246.807493][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.874081][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.945744][ T979] usb 6-1: New USB device found, idVendor=0416, idProduct=c168, bcdDevice= 0.00 [ 247.010854][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.083672][ T979] usb 6-1: config 0 descriptor?? [ 247.545889][ T979] hid (null): nested delimiters [ 247.572479][ T979] hid-generic 0003:0416:C168.0013: nested delimiters [ 247.590460][ T979] hid-generic 0003:0416:C168.0013: item 0 1 2 10 parsing failed [ 247.624526][ T979] hid-generic 0003:0416:C168.0013: probe with driver hid-generic failed with error -22 [ 247.752858][ T979] usb 6-1: USB disconnect, device number 8 [ 248.407715][T10796] syzkaller1: entered promiscuous mode [ 248.429838][T10796] syzkaller1: entered allmulticast mode [ 248.704916][ C1] net_ratelimit: 53830 callbacks suppressed [ 248.704939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.723003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.735078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.747229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.759331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.771438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.783535][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.795629][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.807688][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.819739][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 251.460110][T10884] block nbd5: NBD_DISCONNECT [ 251.496667][T10884] block nbd5: Send disconnect failed -22 [ 251.531578][T10878] block nbd5: Disconnected due to user request. [ 251.548505][T10878] block nbd5: shutting down sockets [ 251.855670][ T979] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 252.036408][ T979] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 252.075590][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.094018][ T979] usb 4-1: Product: syz [ 252.111192][ T979] usb 4-1: Manufacturer: syz [ 252.126012][ T979] usb 4-1: SerialNumber: syz [ 252.144497][ T979] usb 4-1: config 0 descriptor?? [ 252.169061][ T979] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 252.324167][ T7760] Bluetooth: hci5: Frame reassembly failed (-84) [ 252.609913][T10903] vxcan3: entered allmulticast mode [ 252.640432][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 252.874736][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 253.025814][ T24] usb 6-1: config 64 has an invalid interface number: 176 but max is 0 [ 253.034151][ T24] usb 6-1: config 64 has no interface number 0 [ 253.070515][ T24] usb 6-1: config 64 interface 176 has no altsetting 0 [ 253.203714][ T979] gspca_sunplus: reg_r err -71 [ 253.205155][ T24] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d [ 253.218815][ T979] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 253.269419][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.270194][ T979] usb 4-1: USB disconnect, device number 14 [ 253.301482][T10912] tipc: Enabled bearer , priority 10 [ 253.337436][ T24] usb 6-1: Product: syz [ 253.357519][ T24] usb 6-1: Manufacturer: syz [ 253.378375][ T24] usb 6-1: SerialNumber: syz [ 253.593313][T10918] input: syz1 as /devices/virtual/input/input20 [ 253.714969][ C1] net_ratelimit: 51124 callbacks suppressed [ 253.714993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.733125][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.745273][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.757387][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.769517][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.781656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.793883][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.806047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.818158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.830306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.259236][ T24] peak_usb 6-1:64.176 can0: unable to request usb[type=0 value=1] err=-71 [ 254.292110][ T24] peak_usb 6-1:64.176: unable to read PCAN-USB X6 firmware info (err -71) [ 254.331952][ T979] kernel write not supported for file /input/mice (pid: 979 comm: kworker/0:2) [ 254.341948][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 254.418248][ T979] tipc: Node number set to 2886997004 [ 254.655312][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 255.508348][ T24] peak_usb 6-1:64.176: probe with driver peak_usb failed with error -71 [ 255.593806][ T24] usb 6-1: USB disconnect, device number 9 [ 256.369759][T10967] netlink: 'syz.3.2124': attribute type 29 has an invalid length. [ 256.429815][T10970] netlink: 'syz.3.2124': attribute type 29 has an invalid length. [ 256.529660][T10967] netlink: 492 bytes leftover after parsing attributes in process `syz.3.2124'. [ 258.724899][ C1] net_ratelimit: 54426 callbacks suppressed [ 258.724919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.742969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.755035][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.767156][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.779267][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.791380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.803483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.815572][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.827670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.839774][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.815720][T11025] syz.5.2152 (11025) used obsolete PPPIOCDETACH ioctl [ 259.849787][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'. [ 259.890624][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'. [ 259.943640][T11029] loop8: detected capacity change from 0 to 7 [ 259.984674][T11029] Dev loop8: unable to read RDB block 7 [ 260.013578][T11029] loop8: AHDI p3 [ 260.040120][T11029] loop8: partition table partially beyond EOD, truncated [ 261.065948][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.074059][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.135974][ T979] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 261.335663][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.374848][ C1] sched: DL replenish lagged too much [ 261.384453][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.485619][ T979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 261.561850][ T979] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 261.605585][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.679367][ T979] usb 2-1: config 0 descriptor?? [ 261.945530][ T5978] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 262.123036][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.143438][ T979] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 262.176988][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.235528][ T5978] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 262.252080][ T979] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 262.287290][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.356477][ T5978] usb 3-1: config 0 descriptor?? [ 262.485991][ T979] usb 2-1: USB disconnect, device number 15 [ 263.036896][ T5978] usb 3-1: string descriptor 0 read error: -22 [ 263.511761][ T5978] uclogic 0003:256C:006D.0015: failed retrieving string descriptor #100: -71 [ 263.552967][ T5978] uclogic 0003:256C:006D.0015: failed retrieving pen parameters: -71 [ 263.640986][ T5978] uclogic 0003:256C:006D.0015: failed probing pen v1 parameters: -71 [ 263.686598][ T5978] uclogic 0003:256C:006D.0015: failed probing parameters: -71 [ 263.719174][ T5978] uclogic 0003:256C:006D.0015: probe with driver uclogic failed with error -71 [ 263.734949][ C1] net_ratelimit: 54573 callbacks suppressed [ 263.734967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.752990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.761669][ T5978] usb 3-1: USB disconnect, device number 14 [ 263.765063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.765209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.765328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.765446][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.765566][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.765684][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.843412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.855507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.046769][ T5897] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 264.145634][ T979] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 264.243519][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.277615][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.306980][T11074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.331863][ T5897] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.345821][ T979] usb 6-1: Using ep0 maxpacket: 16 [ 264.392612][ T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 264.416746][ T5897] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 264.436078][ T979] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 264.457999][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.475755][ T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.508999][ T5897] usb 1-1: config 0 descriptor?? [ 264.517623][ T979] usb 6-1: config 0 descriptor?? [ 264.958963][ T979] samsung 0003:0419:0600.0017: item fetching failed at offset 0/5 [ 264.983187][ T5897] pyra 0003:1E7D:2C24.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.0-1/input0 [ 265.012961][ T979] samsung 0003:0419:0600.0017: parse failed [ 265.045693][ T979] samsung 0003:0419:0600.0017: probe with driver samsung failed with error -22 [ 265.172572][ T979] usb 1-1: USB disconnect, device number 12 [ 265.237967][ T24] usb 6-1: USB disconnect, device number 10 [ 266.454546][T11102] sctp: [Deprecated]: syz.3.2185 (pid 11102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.454546][T11102] Use struct sctp_sack_info instead [ 268.636585][T11144] loop2: detected capacity change from 0 to 7 [ 268.703060][T11144] Dev loop2: unable to read RDB block 7 [ 268.721971][T11144] loop2: AHDI p2 p3 [ 268.732011][T11144] loop2: partition table partially beyond EOD, truncated [ 268.744882][ C1] net_ratelimit: 55331 callbacks suppressed [ 268.744900][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.761532][T11144] loop2: p2 size 150995456 extends beyond EOD, [ 268.762924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.770443][T11144] truncated [ 268.781298][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.781420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.781523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.781625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.781728][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.781830][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.781927][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 268.869206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.123592][T11139] syz.1.2200 (11139) used greatest stack depth: 17192 bytes left [ 269.506038][ T979] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 269.675709][ T979] usb 2-1: Using ep0 maxpacket: 16 [ 269.698608][ T979] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 269.742406][ T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 269.792742][ T979] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 269.812630][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.831648][ T979] usb 2-1: Product: syz [ 269.839665][ T979] usb 2-1: Manufacturer: syz [ 269.844488][ T979] usb 2-1: SerialNumber: syz [ 269.868197][ T979] usb 2-1: config 0 descriptor?? [ 269.881930][ T979] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 269.901860][ T979] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 270.512083][ T979] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 270.535698][ T979] em28xx 2-1:0.0: Config register raw data: 0x41 [ 270.785786][ T979] usb 2-1: USB disconnect, device number 16 [ 270.793060][ T979] em28xx 2-1:0.0: Disconnecting em28xx [ 270.857889][ T979] em28xx 2-1:0.0: Freeing device [ 271.136210][ T5897] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 271.332707][ T5897] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 271.365720][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.400831][ T5897] usb 6-1: Product: syz [ 271.433559][ T5897] usb 6-1: Manufacturer: syz [ 271.455599][ T5897] usb 6-1: SerialNumber: syz [ 271.487532][ T5897] usb 6-1: config 0 descriptor?? [ 271.762884][ T5897] usb 6-1: USB disconnect, device number 11 [ 272.425782][ T5897] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 272.594912][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 272.624475][ T5897] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 272.659548][T11212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.677606][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 272.726854][ T5897] usb 2-1: Product: syz [ 272.762653][ T5897] usb 2-1: Manufacturer: syz [ 272.807763][ T5897] usb 2-1: SerialNumber: syz [ 272.866483][ T5897] usb 2-1: config 0 descriptor?? [ 272.953342][ T30] kauditd_printk_skb: 158 callbacks suppressed [ 272.953362][ T30] audit: type=1326 audit(1749610088.475:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11215 comm="syz.2.2233" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bdf18e929 code=0x0 [ 273.184454][ T5897] usb 2-1: USB disconnect, device number 17 [ 273.754945][ C1] net_ratelimit: 53601 callbacks suppressed [ 273.754968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.773048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.785195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.797317][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.809410][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.821523][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.833617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.845694][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.857761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 273.869997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.779267][T11253] use of bytesused == 0 is deprecated and will be removed in the future, [ 274.794692][T11253] use the actual size instead. [ 276.439816][T11243] netlink: 264 bytes leftover after parsing attributes in process `syz.5.2245'. [ 276.489018][T11243] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2245'. [ 277.222455][T11280] pim6reg1: entered promiscuous mode [ 277.266084][T11280] pim6reg1: entered allmulticast mode [ 278.764924][ C1] net_ratelimit: 49109 callbacks suppressed [ 278.764944][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.783036][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.795137][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.807240][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.819335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.831461][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.843554][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.855641][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.867721][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 278.879795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.214242][T11319] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 281.423416][T11330] "syz.2.2277" (11330) uses obsolete ecb(arc4) skcipher [ 283.245675][ T5897] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 283.281408][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2296'. [ 283.320847][T11377] netlink: 'syz.5.2296': attribute type 18 has an invalid length. [ 283.351664][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2296'. [ 283.421809][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.473862][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.523584][ T5897] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 283.562970][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.608453][ T5897] usb 4-1: config 0 descriptor?? [ 283.774846][ C1] net_ratelimit: 53971 callbacks suppressed [ 283.774867][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.792913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.805005][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.817080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.829154][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.841253][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.853375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.865493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.877587][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 283.877603][ T979] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 283.889731][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.051752][ T5897] hid-steam 0003:28DE:1142.0018: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 284.138933][ T5897] hid-steam 0003:28DE:1142.0018: Steam wireless receiver connected [ 284.148937][ T979] usb 3-1: Using ep0 maxpacket: 8 [ 284.164288][ T979] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 284.188905][ T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.200938][ T5897] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 284.213785][ T979] usb 3-1: Product: syz [ 284.219186][ T979] usb 3-1: Manufacturer: syz [ 284.228078][ T979] usb 3-1: SerialNumber: syz [ 284.241392][ T979] usb 3-1: config 0 descriptor?? [ 284.266422][ T979] gspca_main: sq930x-2.14.0 probing 2770:930c [ 284.493896][ T5942] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 284.908343][ T5942] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 284.939259][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.969641][ T5942] usb 1-1: Product: syz [ 284.973878][ T5942] usb 1-1: Manufacturer: syz [ 284.996336][ T5942] usb 1-1: SerialNumber: syz [ 285.035648][ T5942] usb 1-1: config 0 descriptor?? [ 285.095015][ T979] gspca_sq930x: ucbus_write failed -71 [ 285.300255][ T5902] usb 1-1: USB disconnect, device number 13 [ 285.315758][ T979] gspca_sq930x: Sensor ov9630 not yet treated [ 285.334764][ T979] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 285.384417][ T979] usb 3-1: USB disconnect, device number 15 [ 285.430759][T11407] syz_tun: entered allmulticast mode [ 285.447700][T11405] sctp: [Deprecated]: syz.5.2305 (pid 11405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.447700][T11405] Use struct sctp_sack_info instead [ 285.480466][T11407] dvmrp1: entered allmulticast mode [ 285.506216][T11407] netlink: 'syz.1.2306': attribute type 39 has an invalid length. [ 285.592933][T11407] syz_tun (unregistering): left allmulticast mode [ 285.663010][T11409] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 285.966349][ T5978] usb 4-1: USB disconnect, device number 15 [ 286.022427][ T5978] hid-steam 0003:28DE:1142.0018: Steam wireless receiver disconnected [ 286.918707][T11433] input: syz0 as /devices/virtual/input/input22 [ 288.507369][T11463] ALSA: mixer_oss: invalid OSS volume '' [ 288.784963][ C1] net_ratelimit: 54034 callbacks suppressed [ 288.784986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.803168][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.815237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.827328][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.839378][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.851455][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.863556][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.875618][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.887697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 288.899792][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.386691][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2341'. [ 290.618134][ T5942] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 291.068341][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.098513][ T5942] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 291.113605][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.251527][ T5942] usb 2-1: config 0 descriptor?? [ 291.772621][ T5942] playstation 0003:054C:0BA0.001A: item fetching failed at offset 5/7 [ 291.809636][ T5942] playstation 0003:054C:0BA0.001A: Parse failed [ 291.823735][ T5942] playstation 0003:054C:0BA0.001A: probe with driver playstation failed with error -22 [ 292.104388][T11518] usb usb1: usbfs: process 11518 (syz.5.2351) did not claim interface 63 before use [ 293.265257][ T5942] usb 2-1: USB disconnect, device number 18 [ 293.794869][ C1] net_ratelimit: 52954 callbacks suppressed [ 293.794890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.812938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.825055][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.837166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.849260][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.861362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.873473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.885837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.897941][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 293.910037][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.885670][ T5978] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 295.086425][ T5978] usb 1-1: Using ep0 maxpacket: 16 [ 295.124481][ T5978] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.188854][ T5978] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.230111][ T5978] usb 1-1: config 0 interface 0 has no altsetting 0 [ 295.266859][ T5978] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 295.319474][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.396167][ T5978] usb 1-1: config 0 descriptor?? [ 295.957486][ T5978] hid (null): unknown global tag 0xd [ 295.994412][ T5978] hid (null): global environment stack underflow [ 296.041410][ T5978] hid (null): unknown global tag 0xd [ 296.075681][ T5978] hid (null): invalid report_size 20669 [ 296.165871][ T5978] usb 1-1: USB disconnect, device number 14 [ 296.707587][ T5978] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 296.779166][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2379'. [ 296.937749][ T5978] usb 2-1: Using ep0 maxpacket: 16 [ 296.962651][ T5978] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 297.002334][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.079143][ T5978] usb 2-1: Product: syz [ 297.116695][ T5978] usb 2-1: Manufacturer: syz [ 297.121359][ T5978] usb 2-1: SerialNumber: syz [ 297.170410][ T5978] usb 2-1: config 0 descriptor?? [ 297.622178][ T5978] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 297.668027][ T5978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 297.713659][ T5978] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 297.790917][ T5978] usb 2-1: media controller created [ 297.993058][ T5978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.077629][T11592] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.156686][ T5978] zl10353_read_register: readreg error (reg=127, ret==0) [ 298.216674][ T5978] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 298.240211][ T5978] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 298.326042][ T5978] usb 2-1: USB disconnect, device number 19 [ 298.620089][ T5978] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 298.804870][ C1] net_ratelimit: 53182 callbacks suppressed [ 298.804894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.822983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.835098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.847205][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.859259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.871417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.883546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.895619][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.907733][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 298.919798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.299353][T11592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.308084][T11592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.488687][T11592] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.503623][T11592] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.522143][T11592] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.532258][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 301.545704][T11592] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.626632][T11592] vlan0: left allmulticast mode [ 301.633359][T11592] veth0_vlan: left allmulticast mode [ 301.644733][T11592] vlan0: left promiscuous mode [ 301.653047][T11592] macvtap1: left promiscuous mode [ 301.703800][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.740828][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.782861][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 301.831005][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.864273][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.921091][ T9] usb 1-1: config 0 descriptor?? [ 302.407820][ T9] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 302.468272][ T9] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 302.678698][ T9] usb 1-1: USB disconnect, device number 15 [ 303.814868][ C1] net_ratelimit: 55860 callbacks suppressed [ 303.814890][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.832968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.845058][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.857165][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.869339][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.881438][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.893565][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.905660][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.917746][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 303.929871][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.367805][T11726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2440'. [ 308.824886][ C1] net_ratelimit: 54246 callbacks suppressed [ 308.824907][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.843022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.855095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.867199][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.879296][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.891379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.903476][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.915605][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.927670][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 308.939760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.825761][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 322.495081][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.714805][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 414.721863][ C0] rcu: 1-...!: (3 ticks this GP) idle=1c9c/1/0x4000000000000000 softirq=49259/49259 fqs=7 [ 414.732899][ C0] rcu: (detected by 0, t=10502 jiffies, g=42657, q=386 ncpus=2) [ 414.740657][ C0] Sending NMI from CPU 0 to CPUs 1: [ 414.740695][ C1] NMI backtrace for cpu 1 [ 414.740725][ C1] CPU: 1 UID: 0 PID: 11702 Comm: syz.2.2429 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 414.740744][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.740759][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 414.740787][ C1] Code: 8b 3d 44 d6 f8 0b 48 89 de 5b e9 33 86 56 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 a0 99 92 65 8b 15 28 52 d9 10 81 e2 00 01 ff 00 [ 414.740802][ C1] RSP: 0018:ffffc90000a07cd8 EFLAGS: 00000046 [ 414.740817][ C1] RAX: ffffffff81ae6313 RBX: ffff8880b8727c08 RCX: 5097b2540664de00 [ 414.740829][ C1] RDX: 0000000000000004 RSI: ffffffff8db594ef RDI: ffff88802e5f9e00 [ 414.740840][ C1] RBP: ffffc90000a07e28 R08: ffff88807bed315f R09: 1ffff1100f7da62b [ 414.740852][ C1] R10: dffffc0000000000 R11: ffffed100f7da62c R12: ffff88807bed3340 [ 414.740864][ C1] R13: 1ffff11005cbf51b R14: 0000000000000001 R15: ffff88802e5fa8d8 [ 414.740875][ C1] FS: 00007f9be000c6c0(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 414.740888][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.740899][ C1] CR2: 0000001b2fd16ff8 CR3: 0000000021b26000 CR4: 00000000003526f0 [ 414.740913][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 414.740922][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 414.740932][ C1] Call Trace: [ 414.740942][ C1] [ 414.740949][ C1] __hrtimer_run_queues+0x553/0xc60 [ 414.740991][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 414.741014][ C1] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 414.741038][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 414.741076][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 414.741103][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 414.741127][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.741145][ C1] RIP: 0010:kasan_check_range+0x1d6/0x2c0 [ 414.741166][ C1] Code: 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 b8 00 00 00 49 ff c3 49 ff cc 75 ee 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 45 84 ff 75 63 41 f7 c7 00 [ 414.741197][ C1] RSP: 0018:ffffc90000a08050 EFLAGS: 00000256 [ 414.741211][ C1] RAX: 1ffff92000141001 RBX: 0000000000000010 RCX: ffffffff817299d8 [ 414.741224][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000a081b8 [ 414.741235][ C1] RBP: 0000000000000000 R08: ffffc90000a081c7 R09: 1ffff92000141038 [ 414.741247][ C1] R10: dffffc0000000000 R11: fffff52000141039 R12: ffffc90000a08ff8 [ 414.741259][ C1] R13: ffffc90000a081b8 R14: fffff52000141039 R15: 1ffff92000141037 [ 414.741277][ C1] ? unwind_next_frame+0xc98/0x2390 [ 414.741308][ C1] __asan_memset+0x22/0x50 [ 414.741324][ C1] unwind_next_frame+0xc98/0x2390 [ 414.741352][ C1] ? unwind_next_frame+0xa5/0x2390 [ 414.741382][ C1] ? handle_softirqs+0x286/0x870 [ 414.741409][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 414.741427][ C1] arch_stack_walk+0x11c/0x150 [ 414.741456][ C1] ? do_softirq+0xec/0x180 [ 414.741482][ C1] stack_trace_save+0x9c/0xe0 [ 414.741499][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 414.741516][ C1] ? br_handle_frame_finish+0x14dd/0x19b0 [ 414.741541][ C1] kasan_save_track+0x3e/0x80 [ 414.741559][ C1] ? kasan_save_track+0x3e/0x80 [ 414.741575][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 414.741593][ C1] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 414.741612][ C1] ? skb_ext_add+0x148/0x8f0 [ 414.741632][ C1] ? br_nf_pre_routing_ipv6+0x132/0x6b0 [ 414.741663][ C1] ? br_handle_frame+0x97f/0x14c0 [ 414.741679][ C1] ? __netif_receive_skb_core+0x10de/0x4180 [ 414.741704][ C1] ? __netif_receive_skb+0x72/0x380 [ 414.741728][ C1] ? process_backlog+0x60e/0x14f0 [ 414.741743][ C1] ? __napi_poll+0xc4/0x480 [ 414.741756][ C1] ? net_rx_action+0x707/0xe30 [ 414.741771][ C1] ? handle_softirqs+0x286/0x870 [ 414.741817][ C1] __kasan_slab_alloc+0x6c/0x80 [ 414.741836][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 414.741854][ C1] ? skb_ext_add+0x148/0x8f0 [ 414.741876][ C1] skb_ext_add+0x148/0x8f0 [ 414.741900][ C1] br_nf_pre_routing_ipv6+0x132/0x6b0 [ 414.741921][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 414.741961][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 414.741997][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 414.742014][ C1] br_handle_frame+0x97f/0x14c0 [ 414.742038][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 414.742054][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 414.742072][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 414.742089][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 414.742118][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 414.742156][ C1] __netif_receive_skb_core+0x10de/0x4180 [ 414.742194][ C1] ? rcu_is_watching+0x15/0xb0 [ 414.742222][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 414.742263][ C1] ? process_backlog+0x2d5/0x14f0 [ 414.742281][ C1] ? process_backlog+0x2d5/0x14f0 [ 414.742300][ C1] __netif_receive_skb+0x72/0x380 [ 414.742330][ C1] ? process_backlog+0x2d5/0x14f0 [ 414.742348][ C1] process_backlog+0x60e/0x14f0 [ 414.742380][ C1] ? __pfx_process_backlog+0x10/0x10 [ 414.742398][ C1] ? do_raw_spin_lock+0x121/0x290 [ 414.742419][ C1] __napi_poll+0xc4/0x480 [ 414.742433][ C1] ? net_rx_action+0x46d/0xe30 [ 414.742452][ C1] net_rx_action+0x707/0xe30 [ 414.742480][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 414.742519][ C1] handle_softirqs+0x286/0x870 [ 414.742544][ C1] ? do_softirq+0xec/0x180 [ 414.742571][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 414.742598][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 414.742623][ C1] do_softirq+0xec/0x180 [ 414.742646][ C1] [ 414.742651][ C1] [ 414.742658][ C1] ? __pfx_do_softirq+0x10/0x10 [ 414.742680][ C1] ? __lock_acquire+0xab9/0xd20 [ 414.742707][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 414.742729][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 414.742754][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 414.742780][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 414.742804][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 414.742826][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 414.742850][ C1] __dev_queue_xmit+0x1cd7/0x3a70 [ 414.742881][ C1] ? __dev_queue_xmit+0x27e/0x3a70 [ 414.742906][ C1] ? ipt_do_table+0x13dd/0x1630 [ 414.742930][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 414.742963][ C1] ? __lock_acquire+0xab9/0xd20 [ 414.742996][ C1] ? ip_finish_output2+0xae7/0x1160 [ 414.743026][ C1] ip_finish_output2+0xd03/0x1160 [ 414.743056][ C1] ? ip_finish_output2+0x452/0x1160 [ 414.743084][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 414.743110][ C1] ? ip_skb_dst_mtu+0x147/0xc50 [ 414.743139][ C1] ? ip_skb_dst_mtu+0x970/0xc50 [ 414.743166][ C1] ? __ip_finish_output+0x336/0x3f0 [ 414.743193][ C1] ip_push_pending_frames+0xbe/0x150 [ 414.743221][ C1] raw_sendmsg+0x143f/0x18b0 [ 414.743254][ C1] ? __pfx_raw_sendmsg+0x10/0x10 [ 414.743280][ C1] ? smack_socket_sendmsg+0x1a7/0x520 [ 414.743307][ C1] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 414.743333][ C1] ? do_raw_spin_lock+0x121/0x290 [ 414.743357][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 414.743391][ C1] ? sock_rps_record_flow+0x19/0x410 [ 414.743409][ C1] ? inet_sendmsg+0x2f4/0x370 [ 414.743423][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.743446][ C1] __sock_sendmsg+0x19c/0x270 [ 414.743474][ C1] ____sys_sendmsg+0x52d/0x830 [ 414.743499][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.743526][ C1] ? import_iovec+0x74/0xa0 [ 414.743544][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 414.743566][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.743613][ C1] ? __might_fault+0xb0/0x130 [ 414.743636][ C1] __sys_sendmmsg+0x227/0x430 [ 414.743661][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 414.743681][ C1] ? do_futex+0x333/0x420 [ 414.743704][ C1] ? __sys_connect+0x38d/0x440 [ 414.743732][ C1] ? rcu_is_watching+0x15/0xb0 [ 414.743761][ C1] __x64_sys_sendmmsg+0xa0/0xc0 [ 414.743783][ C1] do_syscall_64+0xfa/0x3b0 [ 414.743798][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.743822][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.743839][ C1] ? clear_bhb_loop+0x60/0xb0 [ 414.743858][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.743875][ C1] RIP: 0033:0x7f9bdf18e929 [ 414.743895][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.743910][ C1] RSP: 002b:00007f9be000c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 414.743927][ C1] RAX: ffffffffffffffda RBX: 00007f9bdf3b5fa0 RCX: 00007f9bdf18e929 [ 414.743939][ C1] RDX: 0000000004000095 RSI: 0000200000005240 RDI: 0000000000000003 [ 414.743950][ C1] RBP: 00007f9bdf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 414.743961][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.743971][ C1] R13: 0000000000000000 R14: 00007f9bdf3b5fa0 R15: 00007ffda616e588 [ 414.743992][ C1] [ 414.744683][ C0] rcu: rcu_preempt kthread starved for 10488 jiffies! g42657 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 415.630164][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 415.640151][ C0] rcu: RCU grace-period kthread stack dump: [ 415.646054][ C0] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 415.659579][ C0] Call Trace: [ 415.662902][ C0] [ 415.665857][ C0] __schedule+0x16a2/0x4cb0 [ 415.670417][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 415.675680][ C0] ? schedule+0x165/0x360 [ 415.680039][ C0] ? __lock_acquire+0xab9/0xd20 [ 415.684929][ C0] ? __pfx___schedule+0x10/0x10 [ 415.689907][ C0] ? schedule+0x91/0x360 [ 415.694189][ C0] schedule+0x165/0x360 [ 415.698382][ C0] schedule_timeout+0x12b/0x270 [ 415.703258][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 415.708655][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 415.714574][ C0] ? __pfx_process_timeout+0x10/0x10 [ 415.719919][ C0] ? prepare_to_swait_event+0x341/0x380 [ 415.725499][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 415.730394][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 415.736596][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 415.741901][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 415.747133][ C0] ? finish_swait+0xcd/0x1f0 [ 415.751764][ C0] rcu_gp_kthread+0x99/0x390 [ 415.756400][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 415.761626][ C0] ? __kthread_parkme+0x7b/0x200 [ 415.766593][ C0] ? __kthread_parkme+0x1a1/0x200 [ 415.771660][ C0] kthread+0x70e/0x8a0 [ 415.775759][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 415.780983][ C0] ? __pfx_kthread+0x10/0x10 [ 415.785641][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.790872][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.796099][ C0] ? __pfx_kthread+0x10/0x10 [ 415.800709][ C0] ret_from_fork+0x3fc/0x770 [ 415.805327][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 415.810473][ C0] ? __switch_to_asm+0x39/0x70 [ 415.815252][ C0] ? __switch_to_asm+0x33/0x70 [ 415.820030][ C0] ? __pfx_kthread+0x10/0x10 [ 415.824645][ C0] ret_from_fork_asm+0x1a/0x30 [ 415.829445][ C0] [ 415.832481][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 415.838827][ C0] CPU: 0 UID: 0 PID: 7760 Comm: kworker/u8:21 Not tainted 6.16.0-rc1-syzkaller-00004-gaef17cb3d3c4 #0 PREEMPT(full) [ 415.851077][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.861156][ C0] Workqueue: events_unbound toggle_allocation_gate [ 415.867695][ C0] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 415.874424][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 50 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 fb 73 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 e0 73 0b [ 415.894057][ C0] RSP: 0018:ffffc900033476a0 EFLAGS: 00000293 [ 415.900152][ C0] RAX: ffffffff81b4da10 RBX: ffff8880b863c9c0 RCX: ffff888064988000 [ 415.908143][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 415.916133][ C0] RBP: ffffc90003347800 R08: ffffffff8f9fdef7 R09: 1ffffffff1f3fbde [ 415.924125][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fbdf R12: 1ffff110170e825d [ 415.932114][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b87412e8 [ 415.940102][ C0] FS: 0000000000000000(0000) GS:ffff888125c86000(0000) knlGS:0000000000000000 [ 415.949051][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 415.955647][ C0] CR2: 0000001b2f520000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 415.963641][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 415.971633][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 415.979623][ C0] Call Trace: [ 415.982924][ C0] [ 415.985894][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 415.992259][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 415.997648][ C0] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 416.003739][ C0] ? __pfx___text_poke+0x10/0x10 [ 416.008696][ C0] ? rcu_is_watching+0x15/0xb0 [ 416.013490][ C0] ? trace_contention_end+0x39/0x120 [ 416.018800][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 416.023844][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 416.029004][ C0] smp_text_poke_batch_finish+0x5e0/0x1100 [ 416.034843][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 416.039886][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 416.046148][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 416.052420][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 416.058420][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 416.064339][ C0] static_key_enable+0x1a/0x20 [ 416.069135][ C0] toggle_allocation_gate+0xad/0x240 [ 416.074486][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 416.080528][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 416.086280][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 416.092048][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 416.097802][ C0] process_scheduled_works+0xade/0x17b0 [ 416.103402][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 416.109430][ C0] worker_thread+0x8a0/0xda0 [ 416.114101][ C0] kthread+0x70e/0x8a0 [ 416.118195][ C0] ? __pfx_worker_thread+0x10/0x10 [ 416.123330][ C0] ? __pfx_kthread+0x10/0x10 [ 416.127947][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.133173][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.138418][ C0] ? __pfx_kthread+0x10/0x10 [ 416.143031][ C0] ret_from_fork+0x3fc/0x770 [ 416.147649][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 416.152789][ C0] ? __switch_to_asm+0x39/0x70 [ 416.157573][ C0] ? __switch_to_asm+0x33/0x70 [ 416.162358][ C0] ? __pfx_kthread+0x10/0x10 [ 416.166966][ C0] ret_from_fork_asm+0x1a/0x30 [ 416.171769][ C0]