last executing test programs: 35.263032204s ago: executing program 4 (id=1732): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 34.948369971s ago: executing program 4 (id=1737): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"]) 34.796077823s ago: executing program 4 (id=1740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001040)={0x1c, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x14) 34.632673013s ago: executing program 4 (id=1742): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 34.526724665s ago: executing program 4 (id=1744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x0, 0x40005, 0x29) 33.897957409s ago: executing program 4 (id=1756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff054d564b"]) 33.538362482s ago: executing program 32 (id=1756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff054d564b"]) 2.387409871s ago: executing program 2 (id=2150): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.297723858s ago: executing program 3 (id=2151): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ppoll(&(0x7f0000000200)=[{r0, 0x20c}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 1.71224452s ago: executing program 5 (id=2157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, 0x0, 0x0) 1.593774071s ago: executing program 5 (id=2159): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @local, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x0) 1.480462446s ago: executing program 0 (id=2161): signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 1.371304681s ago: executing program 5 (id=2162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r1, 0x701, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40404) 1.369225585s ago: executing program 1 (id=2163): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x1, 0x4, 0x5, {0x200002, 0x5, 0x5, 0xa, 0x8000, 0x9, 0x4, 0x5, 0x9, 0xd25, 0x7, 0x60b, 0x6d, 0xfffd, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 1.360842639s ago: executing program 3 (id=2164): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x2040000) listen(r0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) 1.249178703s ago: executing program 1 (id=2165): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x6, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 1.249054856s ago: executing program 3 (id=2166): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 1.248452427s ago: executing program 5 (id=2167): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = eventfd(0x3ff) mount$9p_fd(0x0, &(0x7f0000004280)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1.141591039s ago: executing program 2 (id=2168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x200000100000011, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2503000000050003000000000005000500000000000c00018008000100", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) 1.068904942s ago: executing program 5 (id=2169): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0x6, 0x10}, 0xc) 1.031694573s ago: executing program 2 (id=2170): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 848.664617ms ago: executing program 1 (id=2171): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r1, &(0x7f0000000200), &(0x7f0000000100)=""/22}, 0x20) 816.353719ms ago: executing program 1 (id=2172): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00080010000d0425bd7000dcdb88e0f9cedeff", @ANYRES32=0x0, @ANYBLOB="10000000000000001c0012800b0001006272696467650000"], 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00('], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 589.060873ms ago: executing program 2 (id=2173): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 561.619988ms ago: executing program 0 (id=2174): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) 531.157332ms ago: executing program 1 (id=2175): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0)=[{0x4, 0xffffffff}], 0x1, 0x1c3, 0x0, 0x0, 0x42, 0x2e}) 476.651649ms ago: executing program 2 (id=2176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x8070bd25, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x2c}}, 0x20004804) 419.558532ms ago: executing program 0 (id=2177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x40, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x8810) 367.305983ms ago: executing program 1 (id=2178): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) fanotify_init(0x200, 0x0) r1 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 299.389721ms ago: executing program 3 (id=2179): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 216.681275ms ago: executing program 0 (id=2180): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)="d90fb9c29c20a22212502696c4f3e17dfe2826e14b", 0x0, 0xf}, 0x38) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000240)=r2) 216.538119ms ago: executing program 2 (id=2181): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = io_uring_setup(0x5491, &(0x7f00000001c0)={0x0, 0x554, 0x1, 0xfffffffc, 0x211}) close(r1) ioctl$TCSETSW2(r0, 0x5425, 0x0) 208.878553ms ago: executing program 3 (id=2182): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4000009}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040810) r0 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000304000000d9ff00000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e6400"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) 113.345741ms ago: executing program 0 (id=2183): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x2, r0, 0x1}) unshare(0x22020400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x3ffffffffffffffc, 0xffffffffffffffff, 0x100, 0x0, 0x10, 0xfffc}, &(0x7f0000000580)={0x10, 0x0, 0x7, 0x2, 0x0, 0xfffffffffffffffd, 0x4, 0x3}, 0x0, 0x0, 0x0) 99.624302ms ago: executing program 5 (id=2184): openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 17.77294ms ago: executing program 3 (id=2185): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {r1, r2+60000000}}, 0x0) 0s ago: executing program 0 (id=2186): io_setup(0x2, &(0x7f0000000040)=0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendto$inet6(r1, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) kernel console output (not intermixed with test programs): B device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.252709][ T5862] usb 1-1: config 0 descriptor?? [ 150.398602][ T5876] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 150.473543][ T24] usb 1-1: USB disconnect, device number 6 [ 150.484637][ T5905] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.557252][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.572074][ T5876] usb 5-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 150.581487][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.589888][ T5876] usb 5-1: Product: syz [ 150.594073][ T5876] usb 5-1: Manufacturer: syz [ 150.598916][ T5876] usb 5-1: SerialNumber: syz [ 150.608433][ T5876] usb 5-1: config 0 descriptor?? [ 150.616348][ T5876] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 150.627687][ T5876] dvb-usb: bulk message failed: -22 (3/0) [ 150.634794][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 150.647632][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.657332][ T5905] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 150.663772][ T5876] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 150.666703][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.681456][ T5876] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 150.685465][ T5905] usb 2-1: Product: syz [ 150.698913][ T5905] usb 2-1: Manufacturer: syz [ 150.700921][ T5876] usb 5-1: media controller created [ 150.703515][ T5905] usb 2-1: SerialNumber: syz [ 150.711851][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.724801][ T5905] usb 2-1: config 0 descriptor?? [ 150.737544][ T5876] dvb-usb: bulk message failed: -22 (6/0) [ 150.744543][ T5876] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 150.761432][ T5876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 150.775339][ T5876] dvb-usb: schedule remote query interval to 150 msecs. [ 150.782513][ T5876] dvb-usb: bulk message failed: -22 (3/0) [ 150.804182][ T5876] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 150.862024][ T7421] dvb-usb: bulk message failed: -22 (4/0) [ 150.872978][ T7421] dvb-usb: bulk message failed: -22 (2/0) [ 150.889243][ T5830] usb 5-1: USB disconnect, device number 7 [ 150.912083][ T5830] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 151.163804][ T5905] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 151.489682][ T7438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.567376][ T5905] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 151.595589][ T5905] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 151.853322][ T24] usb 2-1: USB disconnect, device number 5 [ 152.465640][ T5830] usb 3-1: USB disconnect, device number 10 [ 152.513349][ T5905] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 152.681779][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.710953][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.740033][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 152.768053][ T5905] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.783720][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.810272][ T5905] usb 4-1: config 0 descriptor?? [ 152.967390][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 152.967427][ T30] audit: type=1800 audit(1748017160.169:67): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.706" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 153.165527][ T7502] netlink: 'syz.1.708': attribute type 29 has an invalid length. [ 153.178242][ T7502] netlink: 'syz.1.708': attribute type 29 has an invalid length. [ 153.195238][ T7502] netlink: 500 bytes leftover after parsing attributes in process `syz.1.708'. [ 153.235476][ T7502] unsupported nla_type 58 [ 153.247494][ T5905] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 153.259368][ T5905] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 153.296351][ T5905] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 153.732722][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 153.915860][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 153.934970][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.947614][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.957752][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 153.982574][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.010248][ T10] usb 3-1: config 0 descriptor?? [ 154.041346][ T7528] sctp: [Deprecated]: syz.1.720 (pid 7528) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.041346][ T7528] Use struct sctp_sack_info instead [ 154.220404][ T7531] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.260455][ T10] usb 3-1: string descriptor 0 read error: -71 [ 154.295375][ T10] usb 3-1: USB disconnect, device number 11 [ 154.309832][ T24] libceph: connect (1)[c::]:6789 error -101 [ 154.342744][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 154.366148][ T24] libceph: connect (1)[c::]:6789 error -101 [ 154.387648][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 154.653961][ T48] libceph: connect (1)[c::]:6789 error -101 [ 154.660425][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 155.073559][ T7532] ceph: No mds server is up or the cluster is laggy [ 155.653304][ T5830] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 155.665593][ T5830] usb 4-1: device reset changed ep0 maxpacket size! [ 155.679386][ T24] usb 4-1: USB disconnect, device number 7 [ 155.801663][ T5876] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 155.862116][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.971576][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 155.978727][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 155.989992][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 156.002826][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 156.015006][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 156.026315][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 156.040140][ T5876] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 156.049548][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 156.058115][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.066426][ T5876] usb 2-1: Product: syz [ 156.085600][ T5876] usb 2-1: Manufacturer: syz [ 156.090336][ T5876] usb 2-1: SerialNumber: syz [ 156.098406][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 156.107695][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.120584][ T5876] usb 2-1: config 0 descriptor?? [ 156.125701][ T24] usb 4-1: Product: syz [ 156.129927][ T24] usb 4-1: Manufacturer: syz [ 156.134893][ T24] usb 4-1: SerialNumber: syz [ 156.140097][ T7563] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 156.152993][ T5876] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 156.153110][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 156.168638][ T24] usb 4-1: config 0 descriptor?? [ 156.180894][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 156.204305][ T5173] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 156.252164][ T5173] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 156.284197][ T5173] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 156.303514][ T5173] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 156.341608][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 156.355972][ T7563] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 156.356635][ T10] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 156.382655][ T10] usb 3-1: config 150 has no interface number 0 [ 156.389010][ T10] usb 3-1: config 150 interface 204 has no altsetting 0 [ 156.400588][ T10] usb 3-1: config 150 interface 1 has no altsetting 0 [ 156.402336][ T5876] usb 2-1: USB disconnect, device number 6 [ 156.412236][ T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 156.428626][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.438496][ T10] usb 3-1: Product: syz [ 156.449833][ T10] usb 3-1: Manufacturer: syz [ 156.454830][ T10] usb 3-1: SerialNumber: syz [ 156.654613][ T7587] batadv_slave_0: entered promiscuous mode [ 156.663335][ T7586] batadv_slave_0: left promiscuous mode [ 156.707294][ T10] xr_serial 3-1:150.204: xr_serial converter detected [ 157.197464][ T24] gspca_sonixj: reg_w1 err -71 [ 157.282430][ T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 157.312975][ T24] usb 4-1: USB disconnect, device number 8 [ 157.518247][ T10] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 157.530935][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 157.564782][ T10] usb 3-1: USB disconnect, device number 12 [ 157.583258][ T10] xr_serial 3-1:150.204: device disconnected [ 157.650726][ T5876] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.820717][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 157.827694][ T5876] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 157.837774][ T5876] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 157.859955][ T5876] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.902977][ T5876] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.928866][ T5876] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.953466][ T5876] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 157.964607][ T5876] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 157.990845][ T5876] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.040617][ T5876] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.070636][ T5876] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.126677][ T5876] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 158.170559][ T5876] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.214510][ T5876] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.250575][ T5876] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.283072][ T5876] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.323541][ T5876] usb 2-1: string descriptor 0 read error: -22 [ 158.334718][ T5876] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 158.366485][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.386788][ T5876] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 158.636688][ T5876] usb 2-1: USB disconnect, device number 7 [ 159.327362][ T7664] dlm: non-version read from control device 4 [ 159.513108][ T30] audit: type=1326 audit(1748017166.722:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7667 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051818e969 code=0x7fc00000 [ 160.212618][ T30] audit: type=1326 audit(1748017167.422:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7667 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f051818e969 code=0x7fc00000 [ 160.239608][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 160.294706][ T30] audit: type=1326 audit(1748017167.422:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7667 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051818e969 code=0x7fc00000 [ 160.324240][ T30] audit: type=1326 audit(1748017167.422:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7667 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051818e969 code=0x7fc00000 [ 160.349468][ T30] audit: type=1326 audit(1748017167.422:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7667 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051818e969 code=0x7fc00000 [ 160.399430][ T30] audit: type=1326 audit(1748017167.422:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7667 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051818e969 code=0x7fc00000 [ 160.441775][ T30] audit: type=1326 audit(1748017167.422:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7667 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051818e969 code=0x7fc00000 [ 160.467052][ T30] audit: type=1326 audit(1748017167.422:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7667 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051818e969 code=0x7fc00000 [ 160.484663][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.492413][ T30] audit: type=1326 audit(1748017167.422:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7667 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051818e969 code=0x7fc00000 [ 160.537448][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.553343][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.569027][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.578965][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.585529][ T30] audit: type=1326 audit(1748017167.422:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7667 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051818e969 code=0x7fc00000 [ 160.588342][ T5830] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 160.695919][ T10] usb 4-1: config 0 descriptor?? [ 160.801656][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 160.809684][ T5830] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 160.821154][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.872660][ T5830] usb 1-1: config 0 descriptor?? [ 161.094644][ T5830] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 161.127171][ T10] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 161.136230][ T5830] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.156690][ T5830] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 161.164263][ T10] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 161.180444][ T5830] usb 1-1: media controller created [ 161.214023][ T5830] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.432490][ T10] usb 4-1: USB disconnect, device number 9 [ 161.435060][ T7715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.475294][ T5876] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.538516][ T7720] netlink: 'syz.4.799': attribute type 1 has an invalid length. [ 161.546466][ T7720] netlink: 'syz.4.799': attribute type 2 has an invalid length. [ 161.569795][ T7720] netlink: 'syz.4.799': attribute type 1 has an invalid length. [ 161.578766][ T7720] netlink: 'syz.4.799': attribute type 2 has an invalid length. [ 161.652857][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.664106][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.705090][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.751893][ T5876] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.761469][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.779654][ T5876] usb 2-1: config 0 descriptor?? [ 161.912456][ T5830] az6027: usb out operation failed. (-71) [ 161.922716][ T5830] stb0899_attach: Driver disabled by Kconfig [ 161.938579][ T5830] az6027: no front-end attached [ 161.938579][ T5830] [ 161.968692][ T5830] az6027: usb out operation failed. (-71) [ 161.974480][ T5830] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 162.010711][ T5830] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13 [ 162.042987][ T5830] dvb-usb: schedule remote query interval to 400 msecs. [ 162.052852][ T5830] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 162.082531][ T5830] usb 1-1: USB disconnect, device number 7 [ 162.149685][ T5830] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 162.181941][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.806'. [ 162.211230][ T5876] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 162.235464][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.806'. [ 162.237571][ T5876] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 162.439749][ T7740] syzkaller1: entered promiscuous mode [ 162.451470][ T7740] syzkaller1: entered allmulticast mode [ 162.459538][ T7742] input: syz1 as /devices/virtual/input/input15 [ 162.544547][ T5876] usb 2-1: USB disconnect, device number 8 [ 162.961753][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.819'. [ 163.860594][ T7797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.833'. [ 165.067042][ T5876] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 165.249274][ T5876] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 165.276938][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.296205][ T5876] usb 4-1: config 0 descriptor?? [ 165.596720][ T5876] kaweth 4-1:0.0: Firmware present in device. [ 165.736251][ T5876] kaweth 4-1:0.0: Statistics collection: 0 [ 165.747008][ T5876] kaweth 4-1:0.0: Multicast filter limit: 0 [ 165.752977][ T5876] kaweth 4-1:0.0: MTU: 0 [ 165.762945][ T5876] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 165.890068][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.850'. [ 165.899428][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.850'. [ 166.191011][ T7856] sctp: [Deprecated]: syz.2.856 (pid 7856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.191011][ T7856] Use struct sctp_sack_info instead [ 166.339438][ T5876] kaweth 4-1:0.0: Error setting receive filter [ 166.367573][ T5876] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 166.410103][ T5876] usb 4-1: USB disconnect, device number 10 [ 166.777599][ T7874] pim6reg1: entered promiscuous mode [ 166.782961][ T7874] pim6reg1: entered allmulticast mode [ 167.099203][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.868'. [ 168.028331][ T7914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 168.787426][ T7935] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 170.536080][ T7984] bridge0: port 3(dummy0) entered disabled state [ 170.608893][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.643180][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.862167][ T7991] bridge0: port 3(dummy0) entered blocking state [ 170.868834][ T7991] bridge0: port 3(dummy0) entered forwarding state [ 171.003853][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.011212][ T7991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.071515][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.079708][ T7991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.482447][ T8012] netlink: 56 bytes leftover after parsing attributes in process `syz.1.923'. [ 172.173971][ T8025] macvlan0: entered promiscuous mode [ 172.182145][ T8025] batadv0: entered promiscuous mode [ 172.264394][ T5862] IPVS: starting estimator thread 0... [ 172.364394][ T8032] IPVS: using max 30 ests per chain, 72000 per kthread [ 172.585263][ T8044] loop6: detected capacity change from 0 to 63 [ 172.622319][ T8044] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.648300][ T8044] Buffer I/O error on dev loop6, logical block 1, async page read [ 172.666988][ T8044] Buffer I/O error on dev loop6, logical block 2, async page read [ 172.691443][ T8044] Buffer I/O error on dev loop6, logical block 3, async page read [ 172.713585][ T8044] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.734242][ T8044] Buffer I/O error on dev loop6, logical block 1, async page read [ 172.753411][ T8044] Buffer I/O error on dev loop6, logical block 2, async page read [ 172.771667][ T8044] Buffer I/O error on dev loop6, logical block 3, async page read [ 172.790158][ T8044] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.803322][ T8044] Buffer I/O error on dev loop6, logical block 1, async page read [ 173.546614][ T8059] syz.3.945 (8059) used obsolete PPPIOCDETACH ioctl [ 174.545737][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 174.552898][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 174.799880][ T8098] netlink: 32 bytes leftover after parsing attributes in process `syz.3.961'. [ 175.351684][ T8124] can0: slcan on ptm0. [ 175.582782][ T8123] can0 (unregistered): slcan off ptm0. [ 176.261429][ T5905] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 176.433104][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 176.444611][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.474204][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.503215][ T5905] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 176.521428][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 176.551147][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.573942][ T5905] usb 4-1: config 0 descriptor?? [ 176.721393][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 176.738479][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 176.761320][ T10] usb 3-1: config 0 has no interface number 0 [ 176.767531][ T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.799366][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 176.813199][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 176.831205][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.839427][ T10] usb 3-1: Product: syz [ 176.844404][ T10] usb 3-1: Manufacturer: syz [ 176.881372][ T10] usb 3-1: SerialNumber: syz [ 176.902422][ T10] usb 3-1: config 0 descriptor?? [ 177.192220][ T5905] usbhid 4-1:0.0: can't add hid device: -71 [ 177.198535][ T5905] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 177.215097][ T5905] usb 4-1: USB disconnect, device number 11 [ 177.530868][ T10] appletouch 3-1:0.85: Geyser mode initialized. [ 177.533285][ T10] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input16 [ 177.744751][ T10] usb 3-1: USB disconnect, device number 13 [ 177.847067][ T10] appletouch 3-1:0.85: input: appletouch disconnected [ 178.041465][ T5830] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 178.260477][ T5830] usb 4-1: Using ep0 maxpacket: 8 [ 178.292994][ T5830] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 178.336330][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 178.367626][ T5876] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 178.399259][ T5830] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.464366][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.478222][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 178.570509][ T5830] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 178.590250][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 178.610334][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 178.627370][ T5830] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.650444][ T5876] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 178.656535][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.659551][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.720545][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 178.804162][ T5830] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 178.819907][ T5876] usb 5-1: config 0 descriptor?? [ 178.820572][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 178.859978][ T5830] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.887494][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.898807][ T5830] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 178.918065][ T5830] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 178.927724][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.947700][ T5830] usb 4-1: Product: syz [ 178.954340][ T5830] usb 4-1: Manufacturer: syz [ 178.959022][ T5830] usb 4-1: SerialNumber: syz [ 179.050143][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 179.209956][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 179.217741][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.233136][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.244321][ T5830] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 179.248366][ T5830] usb 4-1: USB disconnect, device number 12 [ 179.256239][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 179.271693][ T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 179.305118][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.321415][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 179.330860][ T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.338957][ T24] usb 3-1: Manufacturer: syz [ 179.367318][ T24] usb 3-1: config 0 descriptor?? [ 179.715515][ T24] rc_core: IR keymap rc-hauppauge not found [ 179.735600][ T24] Registered IR keymap rc-empty [ 179.743891][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 179.779775][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 179.812734][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 179.842241][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 179.859850][ T5876] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 179.880100][ T5876] asix 5-1:0.0: probe with driver asix failed with error -71 [ 179.898187][ T5876] usb 5-1: USB disconnect, device number 8 [ 179.905933][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 179.929809][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 179.978320][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.019715][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.049911][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.080017][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.099647][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.129816][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.161639][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.191402][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.229496][ T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 180.275988][ T24] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 180.289624][ T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 180.304987][ T24] usb 3-1: USB disconnect, device number 14 [ 180.656270][ T8284] syzkaller1: entered promiscuous mode [ 180.664859][ T8284] syzkaller1: entered allmulticast mode [ 181.426954][ T5828] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 181.437343][ T5828] Bluetooth: hci3: Injecting HCI hardware error event [ 181.446215][ T5828] Bluetooth: hci3: hardware error 0x00 [ 181.898964][ T48] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 182.080310][ T48] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.125227][ T48] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 182.154305][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.169617][ T48] usb 5-1: Product: syz [ 182.178249][ T48] usb 5-1: Manufacturer: syz [ 182.193530][ T48] usb 5-1: SerialNumber: syz [ 182.252182][ T48] usb 5-1: config 0 descriptor?? [ 182.532774][ T48] usb 5-1: USB disconnect, device number 9 [ 183.527883][ T5876] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 183.567787][ T8378] input: syz0 as /devices/virtual/input/input18 [ 183.659463][ T5828] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 183.720647][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 183.743179][ T5876] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 183.780689][ T5876] usb 5-1: config 0 has no interface number 0 [ 183.827679][ T5876] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 183.871005][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.886424][ T5876] usb 5-1: Product: syz [ 183.931247][ T5876] usb 5-1: Manufacturer: syz [ 183.935924][ T5876] usb 5-1: SerialNumber: syz [ 183.968611][ T5876] usb 5-1: config 0 descriptor?? [ 183.986512][ T8387] macvlan1: entered promiscuous mode [ 183.990289][ T5876] smsc95xx v2.0.0 [ 184.006025][ T8387] ipvlan0: entered promiscuous mode [ 184.029269][ T8387] ipvlan0: left promiscuous mode [ 184.065662][ T8387] macvlan1: left promiscuous mode [ 184.658764][ T8407] loop6: detected capacity change from 0 to 524287999 [ 184.994320][ T8418] netlink: 408 bytes leftover after parsing attributes in process `syz.0.1082'. [ 185.019839][ T5876] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 185.051168][ T5876] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 185.051772][ T8418] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1082'. [ 185.066792][ T5876] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 185.111791][ T5876] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 185.157662][ T5876] usb 5-1: USB disconnect, device number 10 [ 185.560649][ T8439] program syz.2.1089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.828411][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 185.828429][ T30] audit: type=1326 audit(1748017194.040:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8446 comm="syz.4.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051812ab39 code=0x7ffc0000 [ 185.913949][ T30] audit: type=1326 audit(1748017194.040:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8446 comm="syz.4.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051818e969 code=0x7ffc0000 [ 185.974250][ T30] audit: type=1326 audit(1748017194.040:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8446 comm="syz.4.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051812ab39 code=0x7ffc0000 [ 185.996178][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.002719][ T48] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 186.016771][ T48] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 186.094683][ T30] audit: type=1326 audit(1748017194.040:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8446 comm="syz.4.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051812ab39 code=0x7ffc0000 [ 186.159867][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1098'. [ 186.168985][ T30] audit: type=1326 audit(1748017194.040:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8446 comm="syz.4.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051812ab39 code=0x7ffc0000 [ 186.169037][ T30] audit: type=1326 audit(1748017194.040:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8446 comm="syz.4.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f051818e969 code=0x7ffc0000 [ 186.169082][ T30] audit: type=1326 audit(1748017194.040:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8446 comm="syz.4.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051812ab39 code=0x7ffc0000 [ 186.169131][ T30] audit: type=1326 audit(1748017194.040:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8446 comm="syz.4.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f051818e969 code=0x7ffc0000 [ 186.259164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 186.300467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 186.310541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 186.336978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 186.375812][ T30] audit: type=1326 audit(1748017194.040:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8446 comm="syz.4.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051812ab39 code=0x7ffc0000 [ 186.397641][ T30] audit: type=1326 audit(1748017194.040:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8446 comm="syz.4.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f051812ab39 code=0x7ffc0000 [ 186.967056][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1109'. [ 188.105848][ T5862] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 188.138763][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 188.142135][ T48] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 188.151673][ T48] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 188.331273][ T5862] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.368552][ T5862] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.412970][ T5862] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 188.435357][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 188.460903][ T5862] usb 3-1: SerialNumber: syz [ 188.694051][ T5862] usb 3-1: 0:2 : does not exist [ 188.755426][ T5862] usb 3-1: USB disconnect, device number 15 [ 189.475291][ T8608] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1144'. [ 189.875649][ T8625] team_slave_0: entered promiscuous mode [ 189.881743][ T8625] team_slave_1: entered promiscuous mode [ 189.932407][ T8625] vlan2: entered promiscuous mode [ 189.956320][ T8625] team0: entered promiscuous mode [ 190.294788][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.328760][ T48] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 190.372359][ T48] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 190.413956][ T8652] pimreg: entered allmulticast mode [ 190.459473][ T8652] pimreg: left allmulticast mode [ 190.585620][ T5905] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 190.768848][ T5905] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.804317][ T5905] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.839475][ T5905] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.886531][ T5905] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.907394][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.934516][ T5905] usb 1-1: Product: syz [ 190.946558][ T5905] usb 1-1: Manufacturer: syz [ 190.961502][ T5905] usb 1-1: SerialNumber: syz [ 191.568884][ T8706] syz_tun: entered allmulticast mode [ 191.617031][ T8706] dvmrp1: entered allmulticast mode [ 191.647670][ T8706] netlink: 'syz.1.1176': attribute type 39 has an invalid length. [ 191.694258][ T8706] syz_tun (unregistering): left allmulticast mode [ 191.904351][ T8722] kernel read not supported for file /eth0 (pid: 8722 comm: syz.2.1182) [ 191.922330][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 191.922351][ T30] audit: type=1800 audit(1748017200.123:208): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1182" name="eth0" dev="mqueue" ino=9306 res=0 errno=0 [ 192.010076][ T5905] cdc_ncm 1-1:1.0: bind() failure [ 192.037274][ T5905] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 192.070510][ T5905] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 192.091309][ T5905] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 192.128432][ T5905] usb 1-1: USB disconnect, device number 8 [ 192.498017][ T8742] vivid-000: disconnect [ 192.515895][ T8740] vivid-000: reconnect [ 192.533440][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.540935][ T48] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 192.555874][ T48] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 192.855519][ T5862] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 193.023216][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 193.040607][ T5862] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 193.057508][ T5862] usb 3-1: config 0 has no interface number 0 [ 193.081357][ T5862] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 193.100967][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.117422][ T5862] usb 3-1: Product: syz [ 193.121796][ T5862] usb 3-1: Manufacturer: syz [ 193.130379][ T5862] usb 3-1: SerialNumber: syz [ 193.145982][ T5862] usb 3-1: config 0 descriptor?? [ 193.156558][ T5862] smsc95xx v2.0.0 [ 193.543224][ T5884] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 193.571648][ T5862] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 193.612171][ T5862] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 193.715265][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 193.737386][ T5884] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 193.745769][ T5884] usb 5-1: config 0 has no interface number 0 [ 193.751912][ T5884] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.773929][ T5884] usb 5-1: config 0 interface 85 has no altsetting 0 [ 193.799496][ T5884] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 193.814555][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.833525][ T5884] usb 5-1: Product: syz [ 193.837911][ T5884] usb 5-1: Manufacturer: syz [ 193.842612][ T5884] usb 5-1: SerialNumber: syz [ 193.854719][ T5884] usb 5-1: config 0 descriptor?? [ 194.039492][ T5862] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 194.051824][ T5862] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 194.080485][ T5862] usb 3-1: USB disconnect, device number 16 [ 194.377172][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.475066][ T5884] appletouch 5-1:0.85: Geyser mode initialized. [ 194.483990][ T5884] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input19 [ 194.622308][ T48] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 194.693644][ T5905] usb 5-1: USB disconnect, device number 11 [ 194.718086][ T5905] appletouch 5-1:0.85: input: appletouch disconnected [ 194.774070][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.789862][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.799820][ T48] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.821141][ T48] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.830951][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.848570][ T48] usb 1-1: config 0 descriptor?? [ 195.269825][ T48] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 195.299388][ T48] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 195.322147][ T5862] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 195.481920][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 195.495099][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.507758][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.518584][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.532373][ T5862] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.538323][ T5905] usb 1-1: USB disconnect, device number 9 [ 195.541436][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.544864][ T5862] usb 4-1: config 0 descriptor?? [ 195.977031][ T5862] microsoft 0003:045E:07DA.000A: unknown main item tag 0x1 [ 196.011893][ T5862] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000A/input/input21 [ 196.137590][ T5862] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 196.178287][ T5862] usb 4-1: USB disconnect, device number 13 [ 196.377408][ T8845] tracefs: Invalid uid '0x00000000ffffffff' [ 196.771321][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 196.941886][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 196.956615][ T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 196.971743][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.014875][ T10] usb 2-1: config 0 descriptor?? [ 197.062656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 197.072793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 197.091387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 197.167009][ T30] audit: type=1326 audit(1748017205.386:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 197.238202][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 197.244287][ T30] audit: type=1326 audit(1748017205.386:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 197.329239][ T30] audit: type=1326 audit(1748017205.386:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 197.433669][ T30] audit: type=1326 audit(1748017205.386:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 197.505427][ T30] audit: type=1326 audit(1748017205.386:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 197.549693][ T5862] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 197.597315][ T5862] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 197.627403][ T30] audit: type=1326 audit(1748017205.386:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 197.681103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 197.728251][ T30] audit: type=1326 audit(1748017205.386:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 197.798164][ T30] audit: type=1326 audit(1748017205.386:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 197.862666][ T8893] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.907439][ T30] audit: type=1326 audit(1748017205.386:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 198.031357][ T30] audit: type=1326 audit(1748017205.386:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8880 comm="syz.2.1245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 198.078088][ T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 198.132452][ T10] asix 2-1:0.0: probe with driver asix failed with error -71 [ 198.159767][ T10] usb 2-1: USB disconnect, device number 9 [ 199.192359][ T8919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.270126][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 199.350646][ T8926] loop9: detected capacity change from 0 to 7 [ 199.367713][ T8926] Dev loop9: unable to read RDB block 7 [ 199.390117][ T8926] loop9: AHDI p1 [ 199.393943][ T8926] loop9: partition table partially beyond EOD, truncated [ 199.440013][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 199.451676][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 199.473520][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 199.489903][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 199.491357][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.538101][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 199.552940][ T24] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 199.576340][ T24] usb 5-1: Product: syz [ 199.586491][ T24] usb 5-1: Manufacturer: syz [ 199.596625][ T24] usb 5-1: SerialNumber: syz [ 199.618528][ T24] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input22 [ 199.675873][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 199.703534][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.716946][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.727872][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 199.737406][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.750349][ T10] usb 2-1: config 0 descriptor?? [ 199.858257][ T24] usb 5-1: USB disconnect, device number 12 [ 199.864360][ C1] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 199.926662][ T24] appletouch 5-1:1.0: input: appletouch disconnected [ 200.176220][ T10] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.000C/input/input23 [ 200.311214][ T10] appleir 0003:05AC:8241.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 200.422103][ T10] usb 2-1: USB disconnect, device number 10 [ 200.549402][ T48] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 200.721766][ T48] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 200.761423][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.795050][ T48] usb 4-1: config 0 descriptor?? [ 201.049302][ T5876] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 201.231512][ T5876] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 201.240635][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.251518][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 39875, setting to 64 [ 201.262868][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.288383][ T5876] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 201.308502][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.321611][ T48] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 201.328992][ T48] [drm] Initialized udl on minor 2 [ 201.334554][ T5876] usb 5-1: Product: syz [ 201.343567][ T5876] usb 5-1: Manufacturer: syz [ 201.358605][ T5876] usb 5-1: SerialNumber: syz [ 201.367892][ T5876] usb 5-1: config 0 descriptor?? [ 201.384419][ T5876] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 201.489297][ T48] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 201.510771][ T48] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 201.535154][ T5862] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 201.544125][ T48] usb 4-1: USB disconnect, device number 14 [ 201.560597][ T5862] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 202.207142][ T5876] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 202.446755][ T10] usb 5-1: USB disconnect, device number 13 [ 203.216485][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 203.558059][ T48] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 203.741639][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.759897][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.798494][ T48] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.817602][ T48] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.827429][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.841711][ T48] usb 2-1: config 0 descriptor?? [ 203.939017][ T5876] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 204.121554][ T5876] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 204.141143][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.182130][ T5876] usb 5-1: config 0 descriptor?? [ 204.260020][ T48] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 204.308541][ T48] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 204.471758][ T24] usb 2-1: USB disconnect, device number 11 [ 205.216575][ T5876] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 205.243202][ T5876] asix 5-1:0.0: probe with driver asix failed with error -71 [ 205.279638][ T5876] usb 5-1: USB disconnect, device number 14 [ 205.553135][ T30] kauditd_printk_skb: 999 callbacks suppressed [ 205.553154][ T30] audit: type=1326 audit(1748017213.780:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 205.602133][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 205.613909][ T30] audit: type=1326 audit(1748017213.820:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 205.640902][ T30] audit: type=1326 audit(1748017213.820:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 205.670857][ T30] audit: type=1326 audit(1748017213.820:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 205.733936][ T30] audit: type=1326 audit(1748017213.820:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 205.825240][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 205.848604][ T30] audit: type=1326 audit(1748017213.820:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 205.874661][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.915143][ T10] usb 2-1: Product: syz [ 205.919703][ T10] usb 2-1: Manufacturer: syz [ 205.925025][ T10] usb 2-1: SerialNumber: syz [ 205.932319][ T30] audit: type=1326 audit(1748017213.820:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 205.958195][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 205.993451][ T5905] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 206.030644][ T30] audit: type=1326 audit(1748017213.820:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 206.052235][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.275670][ T30] audit: type=1326 audit(1748017213.820:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 206.439443][ T30] audit: type=1326 audit(1748017213.820:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.2.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c5672ab39 code=0x7ffc0000 [ 206.737428][ T10] usb 2-1: USB disconnect, device number 12 [ 207.127942][ T9104] openvswitch: netlink: IPv4 tun info is not correct [ 207.327396][ T5905] usb 2-1: Service connection timeout for: 256 [ 207.395926][ T5905] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 207.427482][ T5905] ath9k_htc: Failed to initialize the device [ 207.455374][ T9106] syzkaller1: entered allmulticast mode [ 207.473491][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 209.245920][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 209.415260][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 209.448708][ T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 209.461874][ T24] usb 4-1: config 0 has no interface number 0 [ 209.498613][ T24] usb 4-1: config 0 interface 184 has no altsetting 0 [ 209.554726][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 209.566007][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.592370][ T24] usb 4-1: Product: syz [ 209.598197][ T24] usb 4-1: Manufacturer: syz [ 209.603428][ T24] usb 4-1: SerialNumber: syz [ 209.621015][ T24] usb 4-1: config 0 descriptor?? [ 209.637994][ T24] smsc75xx v1.0.0 [ 209.983954][ T9185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1380'. [ 210.008331][ T9185] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1380'. [ 210.038108][ T9185] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1380'. [ 210.094986][ T48] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 210.259210][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 210.270304][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 210.294873][ T48] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 210.307029][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 210.334727][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 210.367493][ T48] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 210.397170][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.424357][ T48] usb 3-1: Product: syz [ 210.427609][ T9197] vivid-003: disconnect [ 210.428600][ T48] usb 3-1: Manufacturer: syz [ 210.454933][ T9194] vivid-003: reconnect [ 210.456157][ T48] usb 3-1: SerialNumber: syz [ 210.478182][ T48] usb 3-1: config 0 descriptor?? [ 210.491618][ T9181] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.504419][ T9181] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 210.523673][ T48] usb 3-1: ucan: probing device on interface #0 [ 210.532985][ T9201] syzkaller1: entered promiscuous mode [ 210.543833][ T9201] syzkaller1: entered allmulticast mode [ 210.550388][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 210.561808][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 210.584280][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 210.609245][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 210.639560][ T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 210.659584][ T24] usb 4-1: USB disconnect, device number 15 [ 211.180903][ T48] ucan 3-1:0.0 can0: registered device [ 211.275338][ T5884] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 211.351007][ T48] ucan 3-1:0.0 can0: firmware string: [ 211.495110][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.513766][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.558791][ T5905] usb 3-1: USB disconnect, device number 17 [ 211.567382][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 211.603042][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.639219][ T5884] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.679208][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.776552][ T5884] usb 2-1: config 0 descriptor?? [ 212.202762][ T5884] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 212.233921][ T5884] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 213.161411][ T9286] netlink: 'syz.4.1419': attribute type 10 has an invalid length. [ 213.169791][ T9289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1420'. [ 213.214377][ T9286] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.241924][ T9286] bond0: (slave team0): Enslaving as an active interface with an up link [ 213.623490][ T48] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 213.786395][ T48] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 213.811064][ T48] usb 5-1: config 0 has no interface number 0 [ 213.825046][ T48] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 213.851345][ T48] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 213.862895][ T48] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 213.876412][ T48] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 213.888383][ T48] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 213.902044][ T48] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 213.940981][ T48] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 213.982598][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.038438][ T48] usb 5-1: config 0 descriptor?? [ 214.053654][ T9296] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 214.071483][ T9296] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 214.121706][ T48] ldusb 5-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 214.244857][ T24] usb 2-1: USB disconnect, device number 13 [ 214.377823][ T5905] usb 5-1: USB disconnect, device number 15 [ 214.403033][ T5905] ldusb 5-1:0.55: LD USB Device #1 now disconnected [ 214.603885][ T9336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.694072][ T9344] loop2: detected capacity change from 0 to 7 [ 214.706286][ T9344] Dev loop2: unable to read RDB block 7 [ 214.711949][ T9344] loop2: AHDI p1 p2 p3 p4 [ 214.732322][ T9344] loop2: partition table partially beyond EOD, truncated [ 214.742585][ T9344] loop2: p1 start 1601398130 is beyond EOD, truncated [ 214.749428][ T9344] loop2: p2 start 1702059890 is beyond EOD, truncated [ 214.759262][ T9344] loop2: p3 size 150995200 extends beyond EOD, truncated [ 214.820490][ T9346] evm: overlay not supported [ 214.862090][ T5905] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 215.030510][ T5905] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 215.052040][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.069208][ T5905] usb 1-1: config 0 descriptor?? [ 215.295782][ T9366] program syz.3.1453 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.503298][ T5905] [drm:udl_init] *ERROR* Selecting channel failed [ 215.548970][ T5905] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 215.571994][ T5905] [drm] Initialized udl on minor 2 [ 215.580746][ T9372] random: crng reseeded on system resumption [ 215.590495][ T5905] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 215.600812][ T5905] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 215.609641][ T5830] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 215.637009][ T5830] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 215.653333][ T5905] usb 1-1: USB disconnect, device number 10 [ 215.671846][ T5830] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 215.830791][ T9381] pimreg: entered allmulticast mode [ 216.451300][ T5862] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 216.469118][ T9407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1472'. [ 216.625878][ T5862] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 216.643740][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.682230][ T5862] usb 1-1: config 0 descriptor?? [ 216.692388][ T5862] cp210x 1-1:0.0: cp210x converter detected [ 217.017830][ T9420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1478'. [ 217.301374][ T5862] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 217.309709][ T5862] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 217.325711][ T5862] usb 1-1: cp210x converter now attached to ttyUSB0 [ 217.334734][ T5862] usb 1-1: USB disconnect, device number 11 [ 217.346046][ T5862] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 217.367149][ T5862] cp210x 1-1:0.0: device disconnected [ 217.372593][ T9434] syzkaller1: entered promiscuous mode [ 217.372617][ T9434] syzkaller1: entered allmulticast mode [ 217.676934][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 217.746907][ T9451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1493'. [ 217.778423][ T9451] bridge0: port 3(vlan0) entered blocking state [ 217.795054][ T9451] bridge0: port 3(vlan0) entered disabled state [ 217.802061][ T9451] vlan0: entered allmulticast mode [ 217.807344][ T9451] dummy0: entered allmulticast mode [ 217.816961][ T9451] vlan0: entered promiscuous mode [ 217.831203][ T9451] dummy0: entered promiscuous mode [ 218.960495][ T5905] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 219.010243][ T9501] netlink: 'syz.4.1515': attribute type 29 has an invalid length. [ 219.132698][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.149963][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.187079][ T5905] usb 1-1: New USB device found, idVendor=1018, idProduct=1410, bcdDevice=40.00 [ 219.209993][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.233080][ T5905] usb 1-1: config 0 descriptor?? [ 219.645860][ T5905] hid (null): invalid report_count 1366374106 [ 219.663325][ T5905] hid-generic 0003:1018:1410.000F: invalid report_count 1366374106 [ 219.689146][ T5905] hid-generic 0003:1018:1410.000F: item 0 4 1 9 parsing failed [ 219.700281][ T5905] hid-generic 0003:1018:1410.000F: probe with driver hid-generic failed with error -22 [ 219.812289][ T9536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1532'. [ 219.913459][ T5862] usb 1-1: USB disconnect, device number 12 [ 219.927800][ T9540] sock: sock_set_timeout: `syz.1.1534' (pid 9540) tries to set negative timeout [ 220.394950][ T9558] input: syz0 as /devices/virtual/input/input27 [ 220.804249][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1538'. [ 221.149194][ T5830] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 221.339259][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 221.356472][ T5830] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 221.379074][ T5830] usb 5-1: config 0 has no interface number 0 [ 221.398900][ T5830] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.406840][ T9595] GUP no longer grows the stack in syz.0.1559 (9595): 200000004000-20000000a000 (200000002000) [ 221.432694][ T5830] usb 5-1: config 0 interface 85 has no altsetting 0 [ 221.456050][ T5830] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 221.458493][ T9595] CPU: 1 UID: 0 PID: 9595 Comm: syz.0.1559 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 221.458524][ T9595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.458548][ T9595] Call Trace: [ 221.458559][ T9595] [ 221.458572][ T9595] dump_stack_lvl+0x189/0x250 [ 221.458615][ T9595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.458645][ T9595] ? __pfx__printk+0x10/0x10 [ 221.458676][ T9595] ? find_vma+0xe7/0x160 [ 221.458716][ T9595] __get_user_pages+0x24e4/0x2a40 [ 221.458793][ T9595] ? __pfx___get_user_pages+0x10/0x10 [ 221.458838][ T9595] get_user_pages_remote+0x2f9/0xaa0 [ 221.458871][ T9595] ? __pfx_mtree_load+0x10/0x10 [ 221.458907][ T9595] ? __pfx_get_user_pages_remote+0x10/0x10 [ 221.458951][ T9595] __access_remote_vm+0x1f7/0x580 [ 221.459001][ T9595] ? __pfx___access_remote_vm+0x10/0x10 [ 221.459036][ T9595] ? set_page_refcounted+0xa0/0x1e0 [ 221.459076][ T9595] ? alloc_pages_noprof+0xbe/0x190 [ 221.459099][ T9595] proc_pid_cmdline_read+0x440/0x840 [ 221.459133][ T9595] ? __asan_memset+0x22/0x50 [ 221.459170][ T9595] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 221.459209][ T9595] ? rw_verify_area+0x258/0x650 [ 221.459245][ T9595] vfs_readv+0x5a5/0x840 [ 221.459265][ T9595] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 221.459306][ T9595] ? __pfx_vfs_readv+0x10/0x10 [ 221.459347][ T9595] ? __fget_files+0x2a/0x420 [ 221.459374][ T9595] ? __fget_files+0x3a0/0x420 [ 221.459393][ T9595] ? __fget_files+0x2a/0x420 [ 221.459423][ T9595] __x64_sys_preadv+0x197/0x2a0 [ 221.459455][ T9595] ? rcu_is_watching+0x15/0xb0 [ 221.459489][ T9595] ? __pfx___x64_sys_preadv+0x10/0x10 [ 221.459527][ T9595] ? do_syscall_64+0xba/0x210 [ 221.459559][ T9595] do_syscall_64+0xf6/0x210 [ 221.459589][ T9595] ? clear_bhb_loop+0x60/0xb0 [ 221.459617][ T9595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.459638][ T9595] RIP: 0033:0x7fd44eb8e969 [ 221.459669][ T9595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.459689][ T9595] RSP: 002b:00007fd44f9ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 221.459714][ T9595] RAX: ffffffffffffffda RBX: 00007fd44edb5fa0 RCX: 00007fd44eb8e969 [ 221.459730][ T9595] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 221.459745][ T9595] RBP: 00007fd44ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 221.459760][ T9595] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 221.459780][ T9595] R13: 0000000000000000 R14: 00007fd44edb5fa0 R15: 00007ffd02411ab8 [ 221.459816][ T9595] [ 221.752814][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.761361][ T5830] usb 5-1: Product: syz [ 221.818650][ T5830] usb 5-1: Manufacturer: syz [ 221.831329][ T5830] usb 5-1: SerialNumber: syz [ 221.853345][ T5830] usb 5-1: config 0 descriptor?? [ 222.480354][ T5830] appletouch 5-1:0.85: Geyser mode initialized. [ 222.504680][ T5830] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input28 [ 222.743097][ T5905] usb 5-1: USB disconnect, device number 16 [ 222.809351][ T5905] appletouch 5-1:0.85: input: appletouch disconnected [ 223.238094][ T5830] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 223.417933][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 223.431594][ T5830] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 223.463311][ T5830] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.493314][ T5830] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 223.524341][ T5830] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 223.537734][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.554764][ T5830] usb 2-1: Product: syz [ 223.563799][ T5830] usb 2-1: Manufacturer: syz [ 223.579525][ T5830] usb 2-1: SerialNumber: syz [ 223.937158][ T9676] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 224.021069][ T5830] usb 2-1: 0:2 : does not exist [ 224.121835][ T5884] kernel read not supported for file /vcsa (pid: 5884 comm: kworker/0:4) [ 224.641629][ T5876] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 224.657056][ T5830] usb 2-1: USB disconnect, device number 14 [ 224.657774][ T5876] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.688350][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 224.793097][ T9694] team_slave_1 (unregistering): left promiscuous mode [ 224.804981][ T9694] team0: Port device team_slave_1 removed [ 224.907315][ T5862] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 225.068861][ T5862] usb 5-1: config 0 has no interfaces? [ 225.092436][ T5862] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 225.105641][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.125958][ T5862] usb 5-1: Product: syz [ 225.134918][ T5862] usb 5-1: Manufacturer: syz [ 225.148928][ T5862] usb 5-1: SerialNumber: syz [ 225.159816][ T5862] usb 5-1: config 0 descriptor?? [ 225.277779][ T5876] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 225.442733][ T5876] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 225.448886][ T10] usb 5-1: USB disconnect, device number 17 [ 225.464362][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.504484][ T5876] usb 3-1: config 0 descriptor?? [ 225.535113][ T5876] cp210x 3-1:0.0: cp210x converter detected [ 225.832093][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 225.846178][ T9716] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1616'. [ 225.876800][ T5828] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 225.876859][ T5835] Bluetooth: hci5: command 0x1003 tx timeout [ 225.911566][ T5862] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 225.947812][ T5876] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 226.094139][ T5862] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 226.119788][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.150525][ T5862] usb 2-1: Product: syz [ 226.154821][ T5862] usb 2-1: Manufacturer: syz [ 226.173063][ T5862] usb 2-1: SerialNumber: syz [ 226.179761][ T5876] usb 3-1: cp210x converter now attached to ttyUSB0 [ 226.188963][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 226.193777][ T5862] usb 2-1: config 0 descriptor?? [ 226.360800][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 226.371015][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 226.394931][ T5884] usb 3-1: USB disconnect, device number 18 [ 226.412394][ T5862] usb 2-1: ignoring: probably an ADSL modem [ 226.431581][ T5884] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 226.446565][ T10] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 226.463972][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.474130][ T5884] cp210x 3-1:0.0: device disconnected [ 226.482455][ T10] usb 1-1: Product: syz [ 226.489082][ T10] usb 1-1: Manufacturer: syz [ 226.493721][ T10] usb 1-1: SerialNumber: syz [ 226.502750][ T10] usb 1-1: config 0 descriptor?? [ 226.509340][ T9718] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 226.517704][ T9718] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 226.740854][ T9718] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 226.754044][ T9718] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 226.814171][ T5862] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 226.826207][ T5830] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 226.927137][ T9749] sctp: [Deprecated]: syz.3.1632 (pid 9749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.927137][ T9749] Use struct sctp_sack_info instead [ 227.006526][ T5830] usb 5-1: Using ep0 maxpacket: 16 [ 227.019861][ T5830] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 227.040543][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.051671][ T5830] usb 5-1: Product: syz [ 227.054867][ T9753] syzkaller1: entered promiscuous mode [ 227.056008][ T5830] usb 5-1: Manufacturer: syz [ 227.063708][ T9753] syzkaller1: entered allmulticast mode [ 227.066415][ T5830] usb 5-1: SerialNumber: syz [ 227.080572][ T5830] usb 5-1: config 0 descriptor?? [ 227.089269][ T5830] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 227.168994][ T10] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 227.317900][ T5884] usb 5-1: USB disconnect, device number 18 [ 227.331209][ T9759] sctp: [Deprecated]: syz.2.1636 (pid 9759) Use of int in maxseg socket option. [ 227.331209][ T9759] Use struct sctp_assoc_value instead [ 227.379730][ T10] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 227.394728][ T10] usb 1-1: USB disconnect, device number 13 [ 228.235968][ T5862] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 228.396298][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 228.430580][ T5862] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.449496][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.468061][ T5862] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.477765][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.492192][ T5862] usb 1-1: Product: syz [ 228.505490][ T5862] usb 1-1: Manufacturer: syz [ 228.510166][ T5862] usb 1-1: SerialNumber: syz [ 228.695977][ T5876] usb 2-1: USB disconnect, device number 15 [ 228.810182][ T5862] usb 1-1: USB disconnect, device number 14 [ 228.935465][ T9817] input: syz0 as /devices/virtual/input/input30 [ 229.315210][ T5884] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 229.494807][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 229.502071][ T5884] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 229.513772][ T9836] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 229.521243][ T5884] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.531967][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.542621][ T5830] IPVS: starting estimator thread 0... [ 229.564463][ T5884] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.575027][ T5884] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.598182][ T5884] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.616260][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.664812][ T9838] IPVS: using max 26 ests per chain, 62400 per kthread [ 229.854080][ T5884] usb 2-1: usb_control_msg returned -32 [ 229.877671][ T5884] usbtmc 2-1:16.0: can't read capabilities [ 230.049938][ T9856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1677'. [ 230.409797][ T5884] usb 2-1: USB disconnect, device number 16 [ 230.593854][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1687'. [ 231.084145][ T5862] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 231.184563][ T5830] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 231.279495][ T5862] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 231.289838][ T5862] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 231.324539][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 231.333625][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 231.351085][ T5862] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 231.360631][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.388776][ T5862] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 231.392870][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.399942][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 231.441412][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.444940][ T5862] usb 1-1: Product: syz [ 231.469651][ T5830] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.472607][ T5862] usb 1-1: Manufacturer: syz [ 231.488959][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.510242][ T5830] usb 4-1: config 0 descriptor?? [ 231.517451][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 231.522717][ T5862] cdc_wdm 1-1:1.0: skipping garbage [ 231.550493][ T5862] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 231.558145][ T5862] cdc_wdm 1-1:1.0: Unknown control protocol [ 231.793313][ T5876] usb 1-1: USB disconnect, device number 15 [ 231.951328][ T5830] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 231.979089][ T5830] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 232.216533][ T5876] usb 4-1: USB disconnect, device number 16 [ 232.357141][ T9943] netlink: 'syz.4.1715': attribute type 29 has an invalid length. [ 232.665326][ T9957] syzkaller1: entered promiscuous mode [ 232.670879][ T9957] syzkaller1: entered allmulticast mode [ 232.732439][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 232.754986][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 232.762761][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 232.783205][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 232.790673][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x2 [ 232.808637][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 232.823131][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 232.832915][ T9962] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 232.841208][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 232.864141][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 232.882587][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 232.895133][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 232.902631][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 232.921975][ T10] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 232.943448][ T10] hid-generic 00A0:0006:0003.0012: hidraw0: HID v0.05 Device [syz1] on syz0 [ 232.983056][ T5830] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 233.135078][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 233.157329][ T5830] usb 3-1: config 0 has no interfaces? [ 233.166226][ T5830] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 233.183288][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.202263][ T5830] usb 3-1: Product: syz [ 233.224367][ T5830] usb 3-1: Manufacturer: syz [ 233.238924][ T5830] usb 3-1: SerialNumber: syz [ 233.255976][ T5830] usb 3-1: config 0 descriptor?? [ 233.432309][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1735'. [ 233.460835][ T9985] vlan0: entered promiscuous mode [ 233.474343][ T9985] team0: entered promiscuous mode [ 233.476085][ T5862] usb 3-1: USB disconnect, device number 19 [ 233.479745][ T9985] team_slave_0: entered promiscuous mode [ 233.498839][ T9985] team_slave_1: entered promiscuous mode [ 233.669761][ T9991] bond_slave_0: entered promiscuous mode [ 233.675924][ T9991] bond_slave_1: entered promiscuous mode [ 233.683666][ T9991] macsec1: entered promiscuous mode [ 233.689360][ T9991] bond0: entered promiscuous mode [ 233.714168][ T9991] macsec1: entered allmulticast mode [ 233.719680][ T9991] bond0: entered allmulticast mode [ 233.731211][ T9991] bond_slave_0: entered allmulticast mode [ 233.737463][ T9991] bond_slave_1: entered allmulticast mode [ 233.758493][ T9991] bond0: left allmulticast mode [ 233.777334][ T9991] bond_slave_0: left allmulticast mode [ 233.802029][ T9991] bond_slave_1: left allmulticast mode [ 233.823241][ T9991] bond0: left promiscuous mode [ 233.830202][ T9991] bond_slave_0: left promiscuous mode [ 233.835817][ T9991] bond_slave_1: left promiscuous mode [ 233.893018][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1741'. [ 234.161722][T10009] Invalid source name [ 234.480237][T10019] syzkaller1: entered promiscuous mode [ 234.496123][T10019] syzkaller1: entered allmulticast mode [ 234.706308][ T1157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.841813][ T1157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.892124][ T5862] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 234.926865][ T1157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.030135][T10035] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 235.050001][ T1157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.074235][ T5862] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 235.102979][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.124488][ T5862] usb 3-1: config 0 descriptor?? [ 235.144407][ T5862] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 235.402303][ T1157] vlan0: left allmulticast mode [ 235.418561][ T1157] dummy0: left allmulticast mode [ 235.433152][ T1157] vlan0: left promiscuous mode [ 235.456388][ T1157] dummy0: left promiscuous mode [ 235.494218][ T1157] bridge0: port 3(vlan0) entered disabled state [ 235.530806][ T1157] bridge_slave_1: left allmulticast mode [ 235.540604][ T1157] bridge_slave_1: left promiscuous mode [ 235.547901][ T5862] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 235.556237][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.576984][ T1157] bridge_slave_0: left allmulticast mode [ 235.595971][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.604567][ T1157] bridge_slave_0: left promiscuous mode [ 235.614009][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.622873][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.630738][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.645944][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.660917][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.691481][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.703291][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.711007][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.723219][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.731130][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.007403][ T5862] gspca_cpia1: usb_control_msg 02, error -71 [ 236.020412][ T5862] gspca_cpia1: usb_control_msg 05, error -71 [ 236.029851][ T5862] cpia1 3-1:0.0: unexpected systemstate: 00 [ 236.063862][ T5862] usb 3-1: USB disconnect, device number 20 [ 236.354755][ T30] kauditd_printk_skb: 658 callbacks suppressed [ 236.354778][ T30] audit: type=1400 audit(1748017244.586:1886): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=10069 comm="syz.0.1775" src=1 dest=20000 [ 236.527057][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.539511][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.550907][ T1157] bond0 (unregistering): (slave team0): Releasing backup interface [ 236.577067][ T1157] bond0 (unregistering): Released all slaves [ 237.308363][ T1157] hsr_slave_0: left promiscuous mode [ 237.335681][ T1157] hsr_slave_1: left promiscuous mode [ 237.352625][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.377383][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.388777][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.401901][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.449757][ T1157] veth1_macvtap: left promiscuous mode [ 237.471234][ T1157] veth0_macvtap: left promiscuous mode [ 237.477005][ T1157] veth1_vlan: left promiscuous mode [ 237.482885][ T1157] veth0_vlan: left promiscuous mode [ 237.790735][ T5835] Bluetooth: hci0: command tx timeout [ 238.376984][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 238.438391][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 238.967145][T10051] chnl_net:caif_netlink_parms(): no params data found [ 239.000219][ T5830] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 239.116013][T10123] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 239.164374][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 239.177438][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.206842][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.222500][ T5830] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 239.238696][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.264105][ T5830] usb 4-1: config 0 descriptor?? [ 239.408825][T10051] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.430997][T10051] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.454751][T10051] bridge_slave_0: entered allmulticast mode [ 239.485373][T10051] bridge_slave_0: entered promiscuous mode [ 239.502333][T10051] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.516997][T10051] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.524582][T10051] bridge_slave_1: entered allmulticast mode [ 239.552562][T10051] bridge_slave_1: entered promiscuous mode [ 239.717894][T10051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.742927][T10051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.774444][ T5830] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 239.870109][ T5835] Bluetooth: hci0: command tx timeout [ 239.936266][T10051] team0: Port device team_slave_0 added [ 239.975100][ T5876] usb 4-1: USB disconnect, device number 17 [ 239.985630][T10051] team0: Port device team_slave_1 added [ 240.113787][T10051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.130954][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.188242][T10051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.205565][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 240.208330][T10051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.227021][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.259769][T10051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.638754][T10051] hsr_slave_0: entered promiscuous mode [ 240.699376][T10051] hsr_slave_1: entered promiscuous mode [ 240.705805][T10051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.734330][T10051] Cannot create hsr debugfs directory [ 241.488860][T10051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.544789][T10051] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.595775][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.603040][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.655091][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.662300][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.949245][ T5835] Bluetooth: hci0: command tx timeout [ 242.372274][T10051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.848136][ T5830] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 243.048245][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 243.133087][ T5830] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 243.152046][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.184261][ T5830] usb 2-1: config 0 descriptor?? [ 243.221942][T10224] tipc: Started in network mode [ 243.226871][T10224] tipc: Node identity 6, cluster identity 4711 [ 243.231983][ T5830] as10x_usb: device has been detected [ 243.243711][T10224] tipc: Node number set to 6 [ 243.249677][ T5830] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 243.314356][ T5830] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 243.349919][T10051] veth0_vlan: entered promiscuous mode [ 243.403269][ T5830] as10x_usb: error during firmware upload part1 [ 243.413229][T10051] veth1_vlan: entered promiscuous mode [ 243.446955][ T5830] Registered device nBox DVB-T Dongle [ 243.462880][ T5830] usb 2-1: USB disconnect, device number 17 [ 243.548772][ T5830] Unregistered device nBox DVB-T Dongle [ 243.550721][T10051] veth0_macvtap: entered promiscuous mode [ 243.562949][ T5830] as10x_usb: device has been disconnected [ 243.592268][T10051] veth1_macvtap: entered promiscuous mode [ 243.633822][T10051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.666488][T10051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.885509][ T8228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.934037][ T8228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.027601][ T5835] Bluetooth: hci0: command tx timeout [ 244.079394][ T4096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.105502][ T4096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.335308][T10244] netlink: 'syz.0.1846': attribute type 11 has an invalid length. [ 244.418602][T10247] Bluetooth: MGMT ver 1.23 [ 244.425526][T10247] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 244.632648][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1851'. [ 244.898632][T10266] syzkaller1: entered promiscuous mode [ 244.920901][T10266] syzkaller1: entered allmulticast mode [ 246.279121][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 246.292949][T10321] nullb0: AHDI p1 p2 [ 246.297616][T10321] nullb0: p1 start 795240812 is beyond EOD, truncated [ 246.316888][ T5876] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 246.450681][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 246.466584][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 246.489317][ T10] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 246.499868][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 246.507672][ T5876] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 246.510205][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.524406][ T5876] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.531220][ T10] usb 6-1: Product: syz [ 246.546663][ T5876] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.552574][ T10] usb 6-1: Manufacturer: syz [ 246.556795][ T5876] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 246.578509][ T5876] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 246.586226][ T10] usb 6-1: SerialNumber: syz [ 246.589848][ T5876] usb 2-1: config 0 has no interface number 0 [ 246.598205][ T5876] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 246.611057][ T5876] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 246.612027][ T10] usb 6-1: config 0 descriptor?? [ 246.621444][ T5876] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.621494][ T5876] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.621522][ T5876] usb 2-1: config 0 interface 125 has no altsetting 0 [ 246.621559][ T5876] usb 2-1: config 0 interface 125 has no altsetting 2 [ 246.624902][ T5876] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 246.637837][T10307] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.679471][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.695908][T10307] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.720081][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.743936][ T5876] usb 2-1: Product: syz [ 246.752066][ T5876] usb 2-1: Manufacturer: syz [ 246.762770][ T5876] usb 2-1: SerialNumber: syz [ 246.782370][ T5876] usb 2-1: config 0 descriptor?? [ 246.791020][ T5876] usb 2-1: selecting invalid altsetting 2 [ 246.956471][T10307] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 246.975688][T10307] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 247.588977][ T10] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 247.620035][ T10] usb 6-1: USB disconnect, device number 2 [ 247.805125][ T5884] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 247.826095][ T5830] usb 2-1: USB disconnect, device number 18 [ 247.986247][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 248.007483][ T5884] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 248.027510][ T5884] usb 3-1: config 0 has no interface number 0 [ 248.046750][ T5884] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.060559][ T5884] usb 3-1: config 0 interface 85 has no altsetting 0 [ 248.089521][ T5884] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 248.098691][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.116146][ T5884] usb 3-1: Product: syz [ 248.120372][ T5884] usb 3-1: Manufacturer: syz [ 248.125028][ T5884] usb 3-1: SerialNumber: syz [ 248.158250][ T5884] usb 3-1: config 0 descriptor?? [ 248.774269][ T5884] appletouch 3-1:0.85: Geyser mode initialized. [ 248.783399][ T5884] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input31 [ 248.887929][T10402] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 248.914458][ T5862] kernel write not supported for file /vcs (pid: 5862 comm: kworker/1:3) [ 249.022767][ T5884] usb 3-1: USB disconnect, device number 21 [ 249.056359][ T5884] appletouch 3-1:0.85: input: appletouch disconnected [ 249.626468][ T5884] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 249.680659][T10433] syzkaller1: entered promiscuous mode [ 249.693650][T10433] syzkaller1: entered allmulticast mode [ 249.726093][T10435] input: syz1 as /devices/virtual/input/input32 [ 249.797471][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.834720][ T5884] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 249.843831][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.880328][ T5884] usb 1-1: config 0 descriptor?? [ 249.899949][ T5884] pwc: Askey VC010 type 2 USB webcam detected. [ 250.320961][ T5884] pwc: recv_control_msg error -32 req 02 val 2b00 [ 250.332891][ T5884] pwc: recv_control_msg error -32 req 02 val 2700 [ 250.560698][ T5884] pwc: recv_control_msg error -71 req 04 val 1000 [ 250.584943][ T5884] pwc: recv_control_msg error -71 req 04 val 1300 [ 250.604784][ T5884] pwc: recv_control_msg error -71 req 04 val 1400 [ 250.618945][ T5884] pwc: recv_control_msg error -71 req 02 val 2000 [ 250.644734][ T5884] pwc: recv_control_msg error -71 req 02 val 2100 [ 250.673873][ T5884] pwc: recv_control_msg error -71 req 04 val 1500 [ 250.705169][ T5884] pwc: recv_control_msg error -71 req 02 val 2500 [ 250.735830][ T5884] pwc: recv_control_msg error -71 req 02 val 2400 [ 250.751387][ T5884] pwc: recv_control_msg error -71 req 02 val 2600 [ 250.770194][ T5884] pwc: recv_control_msg error -71 req 02 val 2900 [ 250.880928][ T5884] pwc: recv_control_msg error -71 req 02 val 2800 [ 250.891059][ T5884] pwc: recv_control_msg error -71 req 04 val 1100 [ 250.904527][ T5884] pwc: recv_control_msg error -71 req 04 val 1200 [ 250.994209][ T5884] pwc: Registered as video103. [ 251.001135][ T5884] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input33 [ 251.077235][ T30] audit: type=1326 audit(1748017259.313:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f058e969 code=0x7ffc0000 [ 251.106596][ T5884] usb 1-1: USB disconnect, device number 16 [ 251.213944][ T30] audit: type=1326 audit(1748017259.313:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f058e969 code=0x7ffc0000 [ 251.324058][ T30] audit: type=1326 audit(1748017259.353:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa3f058e969 code=0x7ffc0000 [ 251.366642][ T30] audit: type=1326 audit(1748017259.383:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f058e969 code=0x7ffc0000 [ 251.394836][ T30] audit: type=1326 audit(1748017259.383:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f058e969 code=0x7ffc0000 [ 251.472997][ T30] audit: type=1326 audit(1748017259.393:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa3f058e969 code=0x7ffc0000 [ 251.533892][ T30] audit: type=1326 audit(1748017259.393:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f058e969 code=0x7ffc0000 [ 251.587063][ T30] audit: type=1326 audit(1748017259.393:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3f058e969 code=0x7ffc0000 [ 251.662967][ T30] audit: type=1326 audit(1748017259.393:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa3f058e969 code=0x7ffc0000 [ 251.686720][ T30] audit: type=1326 audit(1748017259.403:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10460 comm="syz.1.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa3f052ab39 code=0x7ffc0000 [ 251.708675][ T5884] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 251.889638][ T5884] usb 3-1: Using ep0 maxpacket: 8 [ 251.905985][ T5884] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 251.928059][ T5884] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.958696][ T5884] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.993849][ T5884] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.004601][ T5884] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.043254][ T5884] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.086627][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.352207][ T5884] usb 3-1: usb_control_msg returned -32 [ 252.371995][ T5884] usbtmc 3-1:16.0: can't read capabilities [ 252.718233][T10525] erspan0: entered promiscuous mode [ 252.726766][T10525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1977'. [ 252.753371][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 252.903973][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 252.913066][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 252.925780][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 252.941198][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.959054][ T10] usb 1-1: config 0 descriptor?? [ 253.180362][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 253.236388][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 253.263400][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 253.270595][ T10] usb 1-1: media controller created [ 253.307346][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.334071][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 253.345427][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 253.352358][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 253.361926][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.379327][ T24] usb 4-1: config 0 descriptor?? [ 253.391453][ T10] az6027: usb out operation failed. (-71) [ 253.407632][ T10] az6027: usb out operation failed. (-71) [ 253.418353][ T10] stb0899_attach: Driver disabled by Kconfig [ 253.425931][ T10] az6027: no front-end attached [ 253.425931][ T10] [ 253.436929][ T10] az6027: usb out operation failed. (-71) [ 253.447128][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 253.459626][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input34 [ 253.482126][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 253.490106][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 253.506278][ T10] usb 1-1: USB disconnect, device number 17 [ 253.588726][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 253.815896][ T24] hid (null): unknown global tag 0xe [ 254.011978][ T24] usb 4-1: USB disconnect, device number 18 [ 254.333893][T10563] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1993'. [ 254.509999][ T24] usb 3-1: USB disconnect, device number 22 [ 254.600340][ T5884] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 255.001415][T10569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1996'. [ 255.082025][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 255.097068][ T5884] usb 2-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 255.121977][ T5884] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.147965][ T5884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.163303][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.184965][ T5884] usb 2-1: Product: syz [ 255.194143][ T5884] usb 2-1: Manufacturer: syz [ 255.205466][ T5884] usb 2-1: SerialNumber: syz [ 255.272047][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 255.451773][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 255.459471][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 255.478676][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.494118][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 255.508286][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.517619][ T24] usb 1-1: Product: syz [ 255.533027][ T24] usb 1-1: Manufacturer: syz [ 255.537703][ T24] usb 1-1: SerialNumber: syz [ 255.566509][ T24] usb 1-1: config 0 descriptor?? [ 255.602008][ T5830] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 255.602436][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 255.632320][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 255.641082][ T5884] usb 2-1: 0:2 : does not exist [ 255.791970][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.795913][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.829005][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 255.853781][ T5830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 255.875197][ T5830] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 255.928059][ T5830] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 255.964115][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.995885][ T5830] usb 4-1: config 0 descriptor?? [ 256.002409][T10577] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 256.050294][ T5884] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 256.125309][ T5884] usb 2-1: USB disconnect, device number 19 [ 256.225731][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 256.243356][ T24] em28xx 1-1:0.0: Config register raw data: 0x41 [ 256.449692][ T24] usb 1-1: USB disconnect, device number 18 [ 256.454539][ T5830] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd [ 256.466470][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 256.485467][ T5830] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 256.511555][ T5830] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 256.511713][ T24] em28xx 1-1:0.0: Freeing device [ 256.753272][ T5905] usb 4-1: USB disconnect, device number 19 [ 256.794617][T10609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.897261][T10609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.917007][ T5862] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 256.940497][T10611] tipc: Started in network mode [ 256.947062][T10611] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 256.957670][T10611] tipc: Enabled bearer , priority 10 [ 257.075136][ T5862] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.120936][ T5862] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 257.129906][ T5862] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 257.158821][ T5862] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 257.168751][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.183171][T10605] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.210011][ T5862] hub 2-1:1.0: bad descriptor, ignoring hub [ 257.218346][ T5862] hub 2-1:1.0: probe with driver hub failed with error -5 [ 257.230342][ T5862] cdc_wdm 2-1:1.0: skipping garbage [ 257.238176][ T5862] cdc_wdm 2-1:1.0: skipping garbage [ 257.245585][ T5862] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 257.251719][ T5862] cdc_wdm 2-1:1.0: Unknown control protocol [ 257.561152][ T5905] usb 2-1: USB disconnect, device number 20 [ 257.910839][ T5862] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 257.919361][ T5905] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 257.950941][ T48] tipc: Node number set to 4269801491 [ 258.065323][T10659] input: syz1 as /devices/virtual/input/input36 [ 258.093329][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.094035][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 258.109896][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 258.112311][ T5862] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 258.125623][ T5905] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 258.156579][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 258.157688][ T5905] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 258.184559][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.201993][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 258.202531][T10605] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 258.228525][ T5905] hub 2-1:1.0: bad descriptor, ignoring hub [ 258.232860][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 258.235693][ T5905] hub 2-1:1.0: probe with driver hub failed with error -5 [ 258.263088][ T5905] cdc_wdm 2-1:1.0: skipping garbage [ 258.268568][ T5905] cdc_wdm 2-1:1.0: skipping garbage [ 258.279402][ T5862] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 258.291249][ T5905] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 258.299871][ T5905] cdc_wdm 2-1:1.0: Unknown control protocol [ 258.319074][ T5862] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 258.339192][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.361602][ T5862] usb 4-1: Product: syz [ 258.366244][ T5862] usb 4-1: Manufacturer: syz [ 258.371448][ T5862] usb 4-1: SerialNumber: syz [ 258.391355][ T5862] usb 4-1: config 0 descriptor?? [ 258.614336][ T24] usb 2-1: USB disconnect, device number 21 [ 258.807522][ T5862] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 258.815896][ T5862] input input37: Device does not respond to id packet M [ 258.831811][ T5862] iforce 4-1:0.0: usb_submit_urb failed: -32 [ 258.838628][ T5862] input input37: Device does not respond to id packet P [ 259.060189][ T5862] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 259.083322][ T5862] input input37: Device does not respond to id packet N [ 259.099958][ T5862] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 259.118298][ T5862] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 259.138486][ T5862] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 259.154738][ T5862] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 259.183268][ T5862] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input37 [ 259.296800][ T5862] usb 4-1: USB disconnect, device number 20 [ 259.620284][ T5905] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 259.808794][ T5905] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 259.849274][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.891764][ T5905] usb 2-1: config 0 descriptor?? [ 259.911097][ T5905] cp210x 2-1:0.0: cp210x converter detected [ 260.061576][T10728] pim6reg: entered allmulticast mode [ 260.109601][T10732] pim6reg: left allmulticast mode [ 260.314055][ T5905] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 260.349762][ T5905] usb 2-1: cp210x converter now attached to ttyUSB0 [ 260.356914][T10738] pim6reg: entered allmulticast mode [ 260.376263][T10738] pim6reg: left allmulticast mode [ 260.450251][ T24] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 260.552872][ T5905] usb 2-1: USB disconnect, device number 22 [ 260.573213][ T5905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 260.616543][ T24] usb 4-1: config 0 has no interfaces? [ 260.623265][ T5905] cp210x 2-1:0.0: device disconnected [ 260.629858][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 260.662043][ T24] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 260.689251][ T24] usb 4-1: Manufacturer: syz [ 260.716541][ T24] usb 4-1: config 0 descriptor?? [ 260.954821][ T24] usb 4-1: USB disconnect, device number 21 [ 261.183577][T10760] loop8: detected capacity change from 0 to 7 [ 261.193272][T10760] Dev loop8: unable to read RDB block 7 [ 261.199750][T10760] loop8: AHDI p1 p3 p4 [ 261.204164][T10760] loop8: partition table partially beyond EOD, truncated [ 261.211798][T10760] loop8: p1 start 975770946 is beyond EOD, truncated [ 261.218759][T10760] loop8: p3 start 6514546 is beyond EOD, truncated [ 261.853899][T10787] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 261.895217][T10787] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 262.133276][T10803] program syz.1.2099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.228007][T10807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.338594][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 262.418516][ T5905] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 262.518545][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 262.526656][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 262.537494][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.548000][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.563347][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.568342][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 262.576340][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.589563][ T5905] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 262.590272][ T5862] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 262.597967][ T5905] usb 2-1: config 0 has no interface number 0 [ 262.617894][ T5905] usb 2-1: config 0 interface 46 has no altsetting 0 [ 262.618247][ T24] usb 6-1: Product: syz [ 262.629375][ T5876] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 262.641486][ T5905] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=f3.33 [ 262.653652][ T24] usb 6-1: Manufacturer: syz [ 262.653685][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.667043][ T24] usb 6-1: SerialNumber: syz [ 262.681073][ T5905] usb 2-1: Product: syz [ 262.685327][ T5905] usb 2-1: Manufacturer: syz [ 262.693192][ T5905] usb 2-1: SerialNumber: syz [ 262.703675][ T5905] usb 2-1: config 0 descriptor?? [ 262.802479][ T5876] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 262.827405][ T5876] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 262.845095][ T5862] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 262.854275][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.867709][ T5876] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 262.889643][ T5862] usb 3-1: config 0 descriptor?? [ 262.910461][ T5876] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.928319][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.933970][ T5905] f81534a_ctrl 2-1:0.46: failed to set register 0x116: -5 [ 262.940070][ T5876] usb 1-1: Product: syz [ 262.955728][ T5876] usb 1-1: Manufacturer: syz [ 262.960698][ T5876] usb 1-1: SerialNumber: syz [ 262.966683][ T5905] f81534a_ctrl 2-1:0.46: failed to enable ports: -5 [ 262.973920][ T5905] f81534a_ctrl 2-1:0.46: probe with driver f81534a_ctrl failed with error -5 [ 262.986235][T10813] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 262.995737][ T5905] usb 2-1: USB disconnect, device number 23 [ 263.109787][ T24] usb 6-1: 0:2 : does not exist [ 263.208676][T10813] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 263.233658][T10822] Dead loop on virtual device ip6_vti0, fix it urgently! [ 263.242505][T10822] Dead loop on virtual device ip6_vti0, fix it urgently! [ 263.251990][T10822] Dead loop on virtual device ip6_vti0, fix it urgently! [ 263.259655][T10822] Dead loop on virtual device ip6_vti0, fix it urgently! [ 263.267106][T10822] Dead loop on virtual device ip6_vti0, fix it urgently! [ 263.274790][T10822] Dead loop on virtual device ip6_vti0, fix it urgently! [ 263.587804][ T5905] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 263.636810][ T4096] Bluetooth: hci5: Frame reassembly failed (-84) [ 263.732702][ T24] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 263.745459][ T5905] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.757038][ T5905] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.769173][ T5905] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.778533][ T24] usb 6-1: USB disconnect, device number 3 [ 263.778771][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.792639][ T5905] usb 4-1: Product: syz [ 263.796842][ T5905] usb 4-1: Manufacturer: syz [ 263.801609][ T5905] usb 4-1: SerialNumber: syz [ 263.820088][T10813] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 263.915174][ T5862] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 263.929200][ T5862] usb 3-1: USB disconnect, device number 23 [ 264.023399][ T5905] usb 4-1: 0:2 : does not exist [ 264.036831][ T5876] cdc_ncm 1-1:1.0: bind() failure [ 264.043223][ T5905] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 264.052247][ T5876] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 264.064202][ T5876] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 264.076452][ T5876] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 264.091383][ T5876] usb 1-1: USB disconnect, device number 19 [ 264.092533][ T5905] usb 4-1: USB disconnect, device number 22 [ 264.498676][T10839] binder: 10838:10839 ioctl c018620b 200000000700 returned -14 [ 264.681899][T10849] binder: 10848:10849 ioctl 4018620d 0 returned -22 [ 264.767342][T10853] trusted_key: syz.2.2120 sent an empty control message without MSG_MORE. [ 264.923028][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 264.923047][ T30] audit: type=1326 audit(1748017273.180:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10862 comm="syz.0.2125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd44eb8e969 code=0x0 [ 264.950474][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.706653][ T5828] Bluetooth: hci5: command 0x1003 tx timeout [ 265.706922][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 266.702112][T10935] tipc: Enabling of bearer rejected, already enabled [ 267.052402][ T30] audit: type=1326 audit(1748017275.311:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10947 comm="syz.0.2161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd44eb8e969 code=0x0 [ 267.101977][T10944] syz.5.2159 (10944) used greatest stack depth: 19368 bytes left [ 267.262543][T10956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.347033][ T10] kernel write not supported for file [eventfd] (pid: 10 comm: kworker/0:1) [ 267.710658][T10972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2172'. [ 268.333121][T10997] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2182'. [ 268.367432][T10997] netlink: 'syz.3.2182': attribute type 32 has an invalid length. [ 268.396842][T10997] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 268.454204][ T5862] kernel write not supported for file /input/mice (pid: 5862 comm: kworker/1:3) [ 373.452687][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 373.459963][ C1] rcu: (detected by 1, t=10502 jiffies, g=42465, q=265 ncpus=2) [ 373.467797][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294974461-4294963959), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 373.481192][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g42465 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 373.492406][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 373.502411][ C1] rcu: RCU grace-period kthread stack dump: [ 373.508397][ C1] task:rcu_preempt state:R running task stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 373.521937][ C1] Call Trace: [ 373.525231][ C1] [ 373.528201][ C1] __schedule+0x168f/0x4c70 [ 373.532776][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 373.538044][ C1] ? schedule+0x165/0x360 [ 373.542435][ C1] ? __pfx___schedule+0x10/0x10 [ 373.547384][ C1] ? schedule+0x91/0x360 [ 373.551667][ C1] schedule+0x165/0x360 [ 373.555877][ C1] schedule_timeout+0x12b/0x270 [ 373.560812][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 373.566242][ C1] ? __pfx_process_timeout+0x10/0x10 [ 373.571562][ C1] ? prepare_to_swait_event+0x341/0x380 [ 373.577324][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 373.582287][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.587525][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 373.592575][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 373.597903][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 373.603857][ C1] ? finish_swait+0xcd/0x1f0 [ 373.608499][ C1] rcu_gp_kthread+0x99/0x390 [ 373.613141][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 373.618369][ C1] ? __kthread_parkme+0x7b/0x200 [ 373.623352][ C1] ? __kthread_parkme+0x1a1/0x200 [ 373.628447][ C1] kthread+0x711/0x8a0 [ 373.632569][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 373.637815][ C1] ? __pfx_kthread+0x10/0x10 [ 373.642616][ C1] ? __pfx_kthread+0x10/0x10 [ 373.647236][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.652496][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.657718][ C1] ? __pfx_kthread+0x10/0x10 [ 373.662342][ C1] ret_from_fork+0x4b/0x80 [ 373.666780][ C1] ? __pfx_kthread+0x10/0x10 [ 373.671509][ C1] ret_from_fork_asm+0x1a/0x30 [ 373.676319][ C1] [ 373.679535][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 373.685888][ C1] Sending NMI from CPU 1 to CPUs 0: [ 373.691130][ C0] NMI backtrace for cpu 0 [ 373.691155][ C0] CPU: 0 UID: 0 PID: 11001 Comm: syz.5.2184 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 373.691185][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.691201][ C0] RIP: 0010:_raw_spin_lock_irq+0x97/0xf0 [ 373.691231][ C0] Code: 44 24 20 fa a9 00 02 00 00 74 05 e8 e3 67 75 f6 bf 01 00 00 00 e8 99 e6 3e f6 48 8d 7b 18 31 f6 31 d2 31 c9 41 b8 01 00 00 00 <45> 31 c9 ff 75 08 e8 ae 35 4c f6 48 83 c4 08 48 89 df e8 d2 d9 4c [ 373.691246][ C0] RSP: 0018:ffffc90000007ca0 EFLAGS: 00000046 [ 373.691262][ C0] RAX: 0000000000010002 RBX: ffff8880b88276c0 RCX: 0000000000000000 [ 373.691274][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b88276d8 [ 373.691285][ C0] RBP: ffffc90000007d30 R08: 0000000000000001 R09: 1ffffffff1efc16e [ 373.691297][ C0] R10: dffffc0000000000 R11: fffffbfff1efc16f R12: ffff888059f03340 [ 373.691310][ C0] R13: dffffc0000000000 R14: 1ffff92000000f94 R15: dffffc0000000000 [ 373.691323][ C0] FS: 0000000000000000(0000) GS:ffff8881260f6000(0000) knlGS:0000000000000000 [ 373.691337][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.691349][ C0] CR2: 0000555580eee808 CR3: 0000000023906000 CR4: 00000000003526f0 [ 373.691364][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 373.691374][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 373.691384][ C0] Call Trace: [ 373.691393][ C0] [ 373.691402][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 373.691437][ C0] __hrtimer_run_queues+0x602/0xc60 [ 373.691487][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 373.691519][ C0] ? read_tsc+0x9/0x20 [ 373.691561][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 373.691608][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 373.691631][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 373.691650][ C0] [ 373.691656][ C0] [ 373.691662][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.691681][ C0] RIP: 0010:kasan_check_range+0x10/0x2b0 [ 373.691697][ C0] Code: cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 b0 01 48 85 f6 0f 84 b8 01 00 00 55 <41> 57 41 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 6c 02 00 00 [ 373.691711][ C0] RSP: 0018:ffffc900033f73d8 EFLAGS: 00000202 [ 373.691726][ C0] RAX: ffffffff81fa8c01 RBX: ffffea0001837fc0 RCX: ffffffff81fa8cb9 [ 373.691739][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0001837fc0 [ 373.691749][ C0] RBP: 1ffffd4000306ff9 R08: ffffea0001837fc7 R09: 1ffffd4000306ff8 [ 373.691762][ C0] R10: dffffc0000000000 R11: fffff94000306ff9 R12: dffffc0000000000 [ 373.691775][ C0] R13: 1ffffd4000306ff8 R14: ffffea0001837fc8 R15: 0000000000000000 [ 373.691791][ C0] ? folio_mark_accessed+0x221/0x4a0 [ 373.691805][ C0] ? folio_mark_accessed+0x2d9/0x4a0 [ 373.691825][ C0] folio_mark_accessed+0x2d9/0x4a0 [ 373.691848][ C0] unmap_page_range+0x1d84/0x4210 [ 373.691886][ C0] ? mas_next_slot+0xc20/0xcf0 [ 373.691910][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 373.691933][ C0] ? unmap_single_vma+0x1b2/0x2a0 [ 373.691955][ C0] unmap_vmas+0x25d/0x3c0 [ 373.691977][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 373.692009][ C0] exit_mmap+0x245/0xba0 [ 373.692028][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 373.692042][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 373.692070][ C0] ? __pfx_exit_aio+0x10/0x10 [ 373.692098][ C0] ? uprobe_clear_state+0x274/0x290 [ 373.692115][ C0] ? mm_update_next_owner+0xa7/0x870 [ 373.692138][ C0] __mmput+0x118/0x410 [ 373.692163][ C0] exit_mm+0x1da/0x2c0 [ 373.692183][ C0] ? __pfx_exit_mm+0x10/0x10 [ 373.692202][ C0] ? taskstats_exit+0x43c/0xa30 [ 373.692221][ C0] ? tty_audit_exit+0x153/0x200 [ 373.692239][ C0] do_exit+0x859/0x2550 [ 373.692263][ C0] ? do_raw_spin_lock+0x121/0x290 [ 373.692281][ C0] ? __pfx_do_exit+0x10/0x10 [ 373.692300][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 373.692327][ C0] do_group_exit+0x21c/0x2d0 [ 373.692346][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.692367][ C0] get_signal+0x125e/0x1310 [ 373.692402][ C0] arch_do_signal_or_restart+0x95/0x780 [ 373.692431][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 373.692463][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 373.692489][ C0] syscall_exit_to_user_mode+0x8b/0x120 [ 373.692510][ C0] do_syscall_64+0x103/0x210 [ 373.692533][ C0] ? clear_bhb_loop+0x60/0xb0 [ 373.692552][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.692568][ C0] RIP: 0033:0x7f038758e969 [ 373.692588][ C0] Code: Unable to access opcode bytes at 0x7f038758e93f. [ 373.692599][ C0] RSP: 002b:00007f03883a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 373.692615][ C0] RAX: fffffffffffffe00 RBX: 00007f03877b5fa8 RCX: 00007f038758e969 [ 373.692627][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f03877b5fa8 [ 373.692638][ C0] RBP: 00007f03877b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 373.692649][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f03877b5fac [ 373.692660][ C0] R13: 0000000000000000 R14: 00007ffe37836960 R15: 00007ffe37836a48 [ 373.692680][ C0]