last executing test programs: 6.394019011s ago: executing program 4 (id=461): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x8100}, 'syz1\x00', 0xa}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_DEV_CREATE(r0, 0x5501) 6.209983121s ago: executing program 4 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x4, r0, &(0x7f00000000c0), 0x10000) 5.621634892s ago: executing program 4 (id=465): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="000c010000002e"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x24, &(0x7f00000002c0)={0x0, 0x10, 0x4, "01d392e7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.796359038s ago: executing program 1 (id=473): r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000700)=""/255, 0xff}, {&(0x7f00000008c0)=""/214, 0xd6}], 0x2}, 0x8000}], 0x1, 0x20, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002580)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 4.637938217s ago: executing program 1 (id=475): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 4.468182649s ago: executing program 1 (id=477): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884f01a506, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000003000/0x3000)=nil, 0x4000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 4.366758487s ago: executing program 0 (id=478): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0x2, 0x7}}}, 0x24}}, 0x40440c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014008000008080002"], 0x1ec}}, 0x0) 4.174637091s ago: executing program 0 (id=480): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x4848e}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x80035}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 4.031366205s ago: executing program 0 (id=481): syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x9, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, {0x4e24, 0x17c1, 0x8}}}}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c04", 0x54}], 0x1, 0x0, 0x0, 0x7400}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 3.834351217s ago: executing program 0 (id=483): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 3.644599641s ago: executing program 1 (id=485): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000001e40)=""/104, 0x63}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca124", 0x91}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 3.560066583s ago: executing program 0 (id=486): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000034709d405f0530c2acb6010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x24, &(0x7f0000000580)={0x20, 0xf}, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x81, 0x1, "8f"}, &(0x7f0000000700)={0x20, 0x82, 0x1, ','}, 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0) 3.285696352s ago: executing program 4 (id=488): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000440)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x9, 0x1, 0x0, 0x4, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x5, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xfb}, {0x3000, 0xeeef0000, 0xc, 0x0, 0x4, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xeeee0000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xc, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000, 0xfffe}, 0xddfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1, 0x2]}) 3.041167092s ago: executing program 1 (id=490): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048091}, 0x8010) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x26) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x26, 0x0) 3.002959707s ago: executing program 2 (id=491): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x3) r1 = syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x9e92, 0x10100, 0x0, 0x86}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) 2.950829542s ago: executing program 4 (id=492): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000001c0)={0x40, 0x30, 0x3, "c0b23d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000800)={0x10, &(0x7f0000000740)={0x0, 0x17, 0x8, "9c323c4c11ce10e9"}, 0x0, 0x0}) 2.817528296s ago: executing program 2 (id=493): unshare(0x68040200) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000700300801280102d52a000000010902"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x2, 0xfffffffe, 0x4}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001}, 0x80, 0x0}, 0x0) 2.030147002s ago: executing program 1 (id=494): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') 1.528848887s ago: executing program 3 (id=498): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 1.438051046s ago: executing program 3 (id=499): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1d11, 0x5e) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000500)="24ba921337", 0x5, 0x300208d1, 0x0, 0x0) 1.372473945s ago: executing program 2 (id=500): sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0xfffe, 0xd, 0x17ae, 0x0, 0x0, 0x20, 0x5}}, 0x50) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1.31568698s ago: executing program 0 (id=501): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x41, 0x107, 0x0, 0x7, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 1.315294211s ago: executing program 3 (id=502): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') 1.127485813s ago: executing program 2 (id=503): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000240)=[{r1, 0x4080}, {r1, 0x400}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 1.011203465s ago: executing program 2 (id=504): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f000024e000/0x1000)=nil, 0x1000, 0x2000005, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 974.024128ms ago: executing program 4 (id=505): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000001140)=0x10000000) r2 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 565.793779ms ago: executing program 2 (id=506): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 386.119687ms ago: executing program 3 (id=507): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000}, 0x8000) 206.718455ms ago: executing program 3 (id=508): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) close(r0) write$snddsp(r2, &(0x7f0000000200), 0x0) 0s ago: executing program 3 (id=509): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1}, 0x4}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x3, 0x7fffffff, 0x40, 0x0, 0xd}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 66.250724][ T5815] cgroup: Unknown subsys name 'net' [ 66.409408][ T5815] cgroup: Unknown subsys name 'cpuset' [ 66.418326][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.878561][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.462270][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.475942][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.643034][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.658990][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.666914][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.674962][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.697261][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.716755][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.726988][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.738890][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.742254][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.754892][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.757738][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.762689][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.777871][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.786470][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.790781][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.794587][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.803187][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.809689][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.815699][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.825433][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.850082][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.857849][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.869406][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.877293][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.887022][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.458556][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 72.482835][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 72.704756][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 72.790796][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 72.880142][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.887704][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.895404][ T5843] bridge_slave_0: entered allmulticast mode [ 72.903751][ T5843] bridge_slave_0: entered promiscuous mode [ 72.927736][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 72.945342][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.952548][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.959786][ T5846] bridge_slave_0: entered allmulticast mode [ 72.966941][ T5846] bridge_slave_0: entered promiscuous mode [ 72.974914][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.982241][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.989502][ T5843] bridge_slave_1: entered allmulticast mode [ 72.996620][ T5843] bridge_slave_1: entered promiscuous mode [ 73.032794][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.040518][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.048249][ T5846] bridge_slave_1: entered allmulticast mode [ 73.055232][ T5846] bridge_slave_1: entered promiscuous mode [ 73.155918][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.163120][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.170575][ T5848] bridge_slave_0: entered allmulticast mode [ 73.177737][ T5848] bridge_slave_0: entered promiscuous mode [ 73.190504][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.203527][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.223293][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.231057][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.239167][ T5848] bridge_slave_1: entered allmulticast mode [ 73.246355][ T5848] bridge_slave_1: entered promiscuous mode [ 73.255559][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.281313][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.370882][ T5846] team0: Port device team_slave_0 added [ 73.389934][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.397545][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.404698][ T5847] bridge_slave_0: entered allmulticast mode [ 73.412225][ T5847] bridge_slave_0: entered promiscuous mode [ 73.433752][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.444716][ T5846] team0: Port device team_slave_1 added [ 73.452364][ T5843] team0: Port device team_slave_0 added [ 73.458571][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.465718][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.473381][ T5847] bridge_slave_1: entered allmulticast mode [ 73.480490][ T5847] bridge_slave_1: entered promiscuous mode [ 73.512977][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.534267][ T5843] team0: Port device team_slave_1 added [ 73.569140][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.576428][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.583739][ T5844] bridge_slave_0: entered allmulticast mode [ 73.591010][ T5844] bridge_slave_0: entered promiscuous mode [ 73.635463][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.645552][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.652815][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.660660][ T5844] bridge_slave_1: entered allmulticast mode [ 73.667766][ T5844] bridge_slave_1: entered promiscuous mode [ 73.685197][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.692577][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.719178][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.732396][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.739929][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.765965][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.777677][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.784649][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.811036][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.824630][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.846196][ T5848] team0: Port device team_slave_0 added [ 73.856849][ T5834] Bluetooth: hci1: command tx timeout [ 73.861321][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.866062][ T5838] Bluetooth: hci0: command tx timeout [ 73.870171][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.901072][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.936124][ T5834] Bluetooth: hci4: command tx timeout [ 73.936840][ T5838] Bluetooth: hci2: command tx timeout [ 73.947319][ T5834] Bluetooth: hci3: command tx timeout [ 73.948695][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.965498][ T5848] team0: Port device team_slave_1 added [ 74.006373][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.013372][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.039887][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.066260][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.088813][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.095776][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.122630][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.135846][ T5847] team0: Port device team_slave_0 added [ 74.187024][ T5847] team0: Port device team_slave_1 added [ 74.206864][ T5844] team0: Port device team_slave_0 added [ 74.218328][ T5846] hsr_slave_0: entered promiscuous mode [ 74.224674][ T5846] hsr_slave_1: entered promiscuous mode [ 74.260060][ T5844] team0: Port device team_slave_1 added [ 74.295563][ T5843] hsr_slave_0: entered promiscuous mode [ 74.302585][ T5843] hsr_slave_1: entered promiscuous mode [ 74.308816][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 74.314605][ T5843] Cannot create hsr debugfs directory [ 74.347589][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.354556][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.380635][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.416302][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.423250][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.449405][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.462001][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.469105][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.495199][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.532685][ T5848] hsr_slave_0: entered promiscuous mode [ 74.538958][ T5848] hsr_slave_1: entered promiscuous mode [ 74.544998][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 74.550959][ T5848] Cannot create hsr debugfs directory [ 74.572948][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.580260][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.606235][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.725631][ T5844] hsr_slave_0: entered promiscuous mode [ 74.732039][ T5844] hsr_slave_1: entered promiscuous mode [ 74.738950][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 74.744688][ T5844] Cannot create hsr debugfs directory [ 74.780150][ T5847] hsr_slave_0: entered promiscuous mode [ 74.786850][ T5847] hsr_slave_1: entered promiscuous mode [ 74.792946][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 74.798725][ T5847] Cannot create hsr debugfs directory [ 75.298311][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.312324][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.323421][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.334041][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.414874][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.431232][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.451272][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.461379][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.520200][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.543938][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.573539][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.584685][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.691416][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.701748][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.712928][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.751019][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.772680][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.828273][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.864170][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.876547][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.888699][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.899862][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.928296][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.935898][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.937097][ T5834] Bluetooth: hci0: command tx timeout [ 75.947027][ T5838] Bluetooth: hci1: command tx timeout [ 75.971606][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.978801][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.994463][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.016014][ T5838] Bluetooth: hci2: command tx timeout [ 76.021462][ T5838] Bluetooth: hci3: command tx timeout [ 76.027701][ T5834] Bluetooth: hci4: command tx timeout [ 76.057813][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.082798][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.089932][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.117122][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.124241][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.249684][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.285350][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.310506][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.340935][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.354626][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.361842][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.380864][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.388085][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.415740][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.427892][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.445030][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.469133][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.476322][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.485496][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.492696][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.557857][ T5843] veth0_vlan: entered promiscuous mode [ 76.594750][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.629320][ T5846] veth0_vlan: entered promiscuous mode [ 76.643296][ T5843] veth1_vlan: entered promiscuous mode [ 76.655306][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.662448][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.684640][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.691837][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.705213][ T5846] veth1_vlan: entered promiscuous mode [ 76.770954][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.794064][ T5843] veth0_macvtap: entered promiscuous mode [ 76.818024][ T5843] veth1_macvtap: entered promiscuous mode [ 76.867406][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.879841][ T5846] veth0_macvtap: entered promiscuous mode [ 76.900785][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.923538][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.931974][ T5846] veth1_macvtap: entered promiscuous mode [ 76.961616][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.982909][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.024370][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.033566][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.081799][ T5848] veth0_vlan: entered promiscuous mode [ 77.102051][ T5847] veth0_vlan: entered promiscuous mode [ 77.127969][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.140023][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.149783][ T5848] veth1_vlan: entered promiscuous mode [ 77.174723][ T5847] veth1_vlan: entered promiscuous mode [ 77.203827][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.262814][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.275519][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.288307][ T1143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.300626][ T1143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.332969][ T1143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.342210][ T1143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.354296][ T5848] veth0_macvtap: entered promiscuous mode [ 77.367316][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.377601][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.394524][ T5848] veth1_macvtap: entered promiscuous mode [ 77.418348][ T5847] veth0_macvtap: entered promiscuous mode [ 77.440104][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.462173][ T5847] veth1_macvtap: entered promiscuous mode [ 77.482557][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.518642][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.529201][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.551515][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.576369][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.605404][ T5844] veth0_vlan: entered promiscuous mode [ 77.622208][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.646279][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.659032][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.691078][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.769263][ T5844] veth1_vlan: entered promiscuous mode [ 77.779755][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.792132][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.807548][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.864204][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.875789][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.920391][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.934762][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.955133][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.962043][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.016879][ T5838] Bluetooth: hci1: command tx timeout [ 78.022330][ T5838] Bluetooth: hci0: command tx timeout [ 78.077167][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.081204][ T5844] veth0_macvtap: entered promiscuous mode [ 78.085596][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.096700][ T5844] veth1_macvtap: entered promiscuous mode [ 78.104274][ T5838] Bluetooth: hci2: command tx timeout [ 78.111608][ T5834] Bluetooth: hci3: command tx timeout [ 78.117126][ T5830] Bluetooth: hci4: command tx timeout [ 78.136150][ T5927] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.177674][ T5895] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.239596][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.273621][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.281735][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.294402][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.367952][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 78.383962][ T5895] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 78.391653][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.397693][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.411116][ T5895] usb 3-1: Product: syz [ 78.415330][ T5895] usb 3-1: Manufacturer: syz [ 78.422116][ T5895] usb 3-1: SerialNumber: syz [ 78.425556][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.448463][ T5895] usb 3-1: config 0 descriptor?? [ 78.465111][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.480793][ T5895] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 78.497812][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.520154][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.536604][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.697262][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.736902][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.866996][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.884142][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.396350][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 79.438645][ T5958] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 79.499642][ T5956] vxlan0: entered promiscuous mode [ 79.512059][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.534996][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.564094][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.575702][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.709692][ T5895] gspca_ov534_9: reg_w failed -71 [ 80.017209][ T5895] gspca_ov534_9: Unknown sensor 0000 [ 80.017300][ T5895] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 80.050472][ T5895] usb 3-1: USB disconnect, device number 2 [ 80.105947][ T5838] Bluetooth: hci0: command tx timeout [ 80.111471][ T5838] Bluetooth: hci1: command tx timeout [ 80.177762][ T5838] Bluetooth: hci4: command tx timeout [ 80.183835][ T5834] Bluetooth: hci2: command tx timeout [ 80.183848][ T5830] Bluetooth: hci3: command tx timeout [ 80.419051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.800168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.862822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.913984][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 80.996398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.096208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.126132][ T5881] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.129084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.267859][ T5993] vivid-001: disconnect [ 81.280118][ T5992] vivid-001: reconnect [ 81.306147][ T5881] usb 5-1: Using ep0 maxpacket: 8 [ 81.315776][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.323857][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.339258][ T5881] usb 5-1: config 150 has an invalid interface number: 204 but max is 0 [ 81.361825][ T5881] usb 5-1: config 150 has no interface number 0 [ 81.389388][ T5881] usb 5-1: config 150 interface 204 has no altsetting 0 [ 81.408936][ T5881] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 81.422947][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.438135][ T5881] usb 5-1: Product: syz [ 81.447136][ T5881] usb 5-1: Manufacturer: syz [ 81.452978][ T5995] syz.1.30 (5995) used greatest stack depth: 17784 bytes left [ 81.466195][ T5881] usb 5-1: SerialNumber: syz [ 81.976336][ T5881] usb 5-1: USB disconnect, device number 2 [ 82.013165][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.028788][ T5916] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 82.080590][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.218355][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.250584][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 82.306820][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 82.310944][ T5986] geneve2: entered promiscuous mode [ 82.327887][ T5986] geneve2: entered allmulticast mode [ 82.344171][ T5916] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 82.365117][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.384670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.396476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.428507][ T5916] usb 4-1: config 0 descriptor?? [ 82.448844][ T6003] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 82.501956][ T6016] program syz.2.38 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.604344][ T6018] netlink: 'syz.2.39': attribute type 4 has an invalid length. [ 82.738380][ T6003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.756360][ T6003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.777844][ T5881] usb 4-1: USB disconnect, device number 2 [ 83.188336][ T6035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.235965][ T5881] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.245147][ T6035] netlink: 'syz.1.46': attribute type 12 has an invalid length. [ 83.264406][ T6035] netlink: 'syz.1.46': attribute type 29 has an invalid length. [ 83.280373][ T6035] netlink: 148 bytes leftover after parsing attributes in process `syz.1.46'. [ 83.289948][ T6035] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 83.310131][ T6035] Zero length message leads to an empty skb [ 83.362049][ T6040] sctp: [Deprecated]: syz.4.49 (pid 6040) Use of int in max_burst socket option. [ 83.362049][ T6040] Use struct sctp_assoc_value instead [ 83.406352][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 83.420344][ T5881] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.445984][ T5881] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 83.471255][ T5881] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 83.493737][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.526099][ T5881] usb 4-1: config 0 descriptor?? [ 83.547790][ T5881] hub 4-1:0.0: USB hub found [ 83.740666][ T5881] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 83.754851][ T6047] syz.0.52 uses obsolete (PF_INET,SOCK_PACKET) [ 84.107309][ T5920] usb 4-1: USB disconnect, device number 3 [ 84.228251][ T5881] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.386139][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 84.396736][ T5881] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 84.406209][ T5881] usb 2-1: config 0 has no interface number 0 [ 84.417864][ T5881] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.443003][ T5881] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.464402][ T5881] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 84.484681][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.510690][ T5881] usb 2-1: config 0 descriptor?? [ 84.617311][ T6072] syzkaller1: entered promiscuous mode [ 84.625362][ T6072] syzkaller1: entered allmulticast mode [ 84.647429][ T6072] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 85.106196][ T49] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 85.161217][ T5881] input: HID 28bd:0094 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0001/input/input5 [ 85.277907][ T49] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.295191][ T49] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 85.298253][ T5881] uclogic 0003:28BD:0094.0001: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 85.315939][ T49] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 85.340818][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.379623][ T6078] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 85.386693][ T5881] usb 2-1: USB disconnect, device number 2 [ 85.405029][ T49] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 85.503422][ T6084] fido_id[6084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 85.663633][ T6087] syzkaller1: entered promiscuous mode [ 85.667625][ T49] usb 4-1: USB disconnect, device number 4 [ 85.692992][ T6087] syzkaller1: entered allmulticast mode [ 86.545935][ T49] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.716207][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 86.727820][ T49] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.748396][ T49] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.772356][ T49] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.803958][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.831508][ T49] usb 5-1: Product: syz [ 86.836699][ T24] cfg80211: failed to load regulatory.db [ 86.845657][ T49] usb 5-1: Manufacturer: syz [ 86.865935][ T49] usb 5-1: SerialNumber: syz [ 86.912750][ T6122] syzkaller1: entered promiscuous mode [ 86.932923][ T6122] syzkaller1: entered allmulticast mode [ 87.026464][ T5916] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 87.100184][ T49] usb 5-1: 0:2 : does not exist [ 87.130594][ T49] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 87.175676][ T49] usb 5-1: USB disconnect, device number 3 [ 87.223569][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 87.231728][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.255260][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 87.288396][ T5916] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 87.313947][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.339188][ T5916] usb 2-1: config 0 descriptor?? [ 87.351679][ T6120] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 87.572994][ T6120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.602043][ T6120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.636052][ T5916] usbhid 2-1:0.0: can't add hid device: -71 [ 87.645550][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 87.659793][ T5916] usb 2-1: USB disconnect, device number 3 [ 87.913941][ T5916] IPVS: starting estimator thread 0... [ 88.029835][ T6144] IPVS: using max 34 ests per chain, 81600 per kthread [ 88.146034][ T5920] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 88.302575][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 88.310733][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 88.328182][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 88.346396][ T5920] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 88.359816][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.378529][ T5920] usb 2-1: config 0 descriptor?? [ 88.406517][ T5920] hub 2-1:0.0: bad descriptor, ignoring hub [ 88.415949][ T5920] hub 2-1:0.0: probe with driver hub failed with error -5 [ 88.484849][ T6159] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 88.775940][ T5881] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.795076][ T5920] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 88.810380][ T5920] betop 0003:20BC:5500.0002: unknown main item tag 0x0 [ 88.836198][ T5920] betop 0003:20BC:5500.0002: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.1-1/input0 [ 88.868591][ T5920] betop 0003:20BC:5500.0002: no inputs found [ 88.938006][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 88.949726][ T5881] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 88.965602][ T5881] usb 1-1: config 0 has no interface number 0 [ 88.983844][ T5881] usb 1-1: config 0 interface 12 has no altsetting 0 [ 88.993970][ T6175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.107'. [ 89.003506][ T5881] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 89.022921][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.043371][ T5881] usb 1-1: Product: syz [ 89.050607][ T5881] usb 1-1: Manufacturer: syz [ 89.055331][ T5881] usb 1-1: SerialNumber: syz [ 89.065983][ T5916] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 89.071977][ T6178] process 'syz.2.108' launched './file1' with NULL argv: empty string added [ 89.074034][ T5881] usb 1-1: config 0 descriptor?? [ 89.090418][ T6175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.107'. [ 89.167352][ T5908] usb 2-1: USB disconnect, device number 4 [ 89.245930][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 89.249895][ T6182] loop6: detected capacity change from 0 to 7 [ 89.263558][ T6182] Dev loop6: unable to read RDB block 7 [ 89.265515][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.270692][ T6182] loop6: AHDI p1 p2 p3 [ 89.284477][ T6182] loop6: partition table partially beyond EOD, truncated [ 89.291913][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.291963][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 89.291983][ T5916] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 89.292005][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.305446][ T6182] loop6: p1 start 368115439 is beyond EOD, [ 89.336265][ T5916] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 89.352987][ T5916] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 89.361502][ T5916] usb 4-1: Manufacturer: syz [ 89.361598][ T6182] truncated [ 89.369914][ T6182] loop6: p2 size 108 extends beyond EOD, truncated [ 89.372799][ T5916] usb 4-1: config 0 descriptor?? [ 89.383903][ T6184] syzkaller1: entered promiscuous mode [ 89.389590][ T6184] syzkaller1: entered allmulticast mode [ 89.687199][ T5916] rc_core: IR keymap rc-hauppauge not found [ 89.693188][ T5916] Registered IR keymap rc-empty [ 89.717209][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 89.757312][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 89.778477][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.797856][ T5916] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 89.819968][ T5916] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 89.839504][ T6197] usb usb8: usbfs: process 6197 (syz.1.117) did not claim interface 0 before use [ 89.848286][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 89.887302][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 89.926906][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 89.947459][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 89.977105][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 89.982641][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 89.991919][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.011721][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.029911][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.041411][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.049380][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.058184][ T5908] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.067597][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.074924][ T9] usb 5-1: Product: syz [ 90.079987][ T9] usb 5-1: Manufacturer: syz [ 90.085229][ T9] usb 5-1: SerialNumber: syz [ 90.091610][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.130707][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.176276][ T5916] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.201797][ T5916] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 90.211222][ T5916] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 90.231147][ T5916] usb 4-1: USB disconnect, device number 5 [ 90.246065][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 90.263739][ T5908] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 90.284634][ T5908] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.354806][ T5908] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.367280][ T9] usb 5-1: 0:2 : does not exist [ 90.377109][ T5908] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.387675][ T5908] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.405658][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 90.414580][ T5881] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 90.434185][ T5908] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.443974][ T5881] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 90.464105][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.474724][ T5881] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 90.502179][ T5881] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 90.542684][ T5881] usb 1-1: USB disconnect, device number 2 [ 90.551411][ T9] usb 5-1: USB disconnect, device number 4 [ 90.646206][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.768352][ T5908] usb 3-1: usb_control_msg returned -32 [ 90.782381][ T5908] usbtmc 3-1:16.0: can't read capabilities [ 91.260670][ T6213] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 91.462674][ T9] usb 3-1: USB disconnect, device number 3 [ 91.556053][ T5875] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.673132][ T6234] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 91.683908][ T6234] block device autoloading is deprecated and will be removed. [ 91.717733][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.734427][ T5920] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.743784][ T5875] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 91.754775][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.769657][ T5875] usb 2-1: config 0 descriptor?? [ 91.782064][ T5875] pwc: Askey VC010 type 2 USB webcam detected. [ 91.896060][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 91.902991][ T5920] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 91.912641][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.922526][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.932376][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.948613][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.964043][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.975072][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.202610][ T5875] pwc: recv_control_msg error -32 req 02 val 2b00 [ 92.216697][ T5920] usb 5-1: usb_control_msg returned -32 [ 92.243643][ T5875] pwc: recv_control_msg error -32 req 02 val 2700 [ 92.251407][ T5920] usbtmc 5-1:16.0: can't read capabilities [ 92.263556][ T5875] pwc: recv_control_msg error -32 req 02 val 2c00 [ 92.477392][ T5875] pwc: recv_control_msg error -71 req 04 val 1300 [ 92.496900][ T5875] pwc: recv_control_msg error -71 req 04 val 1400 [ 92.509867][ T5875] pwc: recv_control_msg error -71 req 02 val 2000 [ 92.525276][ T5875] pwc: recv_control_msg error -71 req 02 val 2100 [ 92.555919][ T5875] pwc: recv_control_msg error -71 req 04 val 1500 [ 92.588852][ T5875] pwc: recv_control_msg error -71 req 02 val 2500 [ 92.596015][ T5875] pwc: recv_control_msg error -71 req 02 val 2400 [ 92.602992][ T5875] pwc: recv_control_msg error -71 req 02 val 2600 [ 92.619832][ T5875] pwc: recv_control_msg error -71 req 02 val 2900 [ 92.636449][ T5875] pwc: recv_control_msg error -71 req 02 val 2800 [ 92.659998][ T5875] pwc: recv_control_msg error -71 req 04 val 1100 [ 92.666999][ T5875] pwc: recv_control_msg error -71 req 04 val 1200 [ 92.707872][ T5875] pwc: Registered as video103. [ 92.726991][ T5875] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 92.760845][ T5875] usb 2-1: USB disconnect, device number 5 [ 92.945699][ T6263] usbtmc 5-1:16.0: usb_clear_halt returned -32 [ 93.148774][ T5920] usb 5-1: USB disconnect, device number 5 [ 93.656730][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'. [ 94.476009][ T5881] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 94.647735][ T5881] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.664908][ T5881] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 94.692774][ T5881] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.705692][ T5881] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 94.735985][ T5881] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 94.758047][ T5881] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.777802][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.789381][ T5881] usb 5-1: Product: syz [ 94.793735][ T5881] usb 5-1: Manufacturer: syz [ 94.814265][ T5881] cdc_wdm 5-1:1.0: skipping garbage [ 94.820582][ T5881] cdc_wdm 5-1:1.0: skipping garbage [ 94.829168][ T5881] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 94.845883][ T5881] cdc_wdm 5-1:1.0: Unknown control protocol [ 94.855906][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 94.898085][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 95.022218][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.042582][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.081200][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 95.100740][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.107215][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 95.115547][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 95.121842][ T9] usb 3-1: config 0 descriptor?? [ 95.122328][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 95.133396][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 95.142077][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 95.148715][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 95.155484][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 95.162107][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 95.169591][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 95.176223][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 95.183365][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 95.189990][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 95.197384][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 95.204016][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 95.210328][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 95.216960][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 95.220854][ T5881] usb 5-1: USB disconnect, device number 6 [ 95.223052][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 95.646947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.026453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 96.358342][ T9] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 96.441508][ T9] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 96.460943][ T9] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 96.487255][ T9] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 96.520593][ T9] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 96.574735][ T9] usb 3-1: USB disconnect, device number 4 [ 97.617643][ T6402] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 97.655973][ T5875] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 97.827679][ T5875] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 97.842565][ T5875] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 97.855602][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.895497][ T5875] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 97.916378][ T5875] usb 3-1: config 0 has no interface number 0 [ 97.923412][ T5875] usb 3-1: config 0 interface 156 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 97.935362][ T5875] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 97.950748][ T5875] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 97.967424][ T5875] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 97.977597][ T5875] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.991011][ T5875] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 98.000179][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.014295][ T5875] usb 3-1: config 0 descriptor?? [ 98.043176][ T5875] gspca_main: spca561-2.14.0 probing abcd:cdee [ 98.133239][ T6421] sctp: [Deprecated]: syz.4.203 (pid 6421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.133239][ T6421] Use struct sctp_sack_info instead [ 98.285575][ T5875] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 98.322700][ T5875] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 98.346843][ T5875] usb 3-1: MIDIStreaming interface descriptor not found [ 98.462456][ T5875] usb 3-1: USB disconnect, device number 5 [ 98.524164][ T30] audit: type=1326 audit(1761596764.928:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6424 comm="syz.3.204" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd539 code=0x0 [ 98.545216][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.225957][ T5920] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.399294][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.419079][ T5920] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 99.432017][ T6460] trusted_key: syz.3.218 sent an empty control message without MSG_MORE. [ 99.441115][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.455666][ T5920] usb 1-1: config 0 descriptor?? [ 99.480461][ T5920] pwc: Askey VC010 type 2 USB webcam detected. [ 99.890709][ T5920] pwc: recv_control_msg error -32 req 02 val 2b00 [ 99.907297][ T5920] pwc: recv_control_msg error -32 req 02 val 2700 [ 100.128258][ T5920] pwc: recv_control_msg error -71 req 04 val 1000 [ 100.148712][ T5920] pwc: recv_control_msg error -71 req 04 val 1300 [ 100.168592][ T5920] pwc: recv_control_msg error -71 req 04 val 1400 [ 100.183428][ T5920] pwc: recv_control_msg error -71 req 02 val 2000 [ 100.213973][ T5920] pwc: recv_control_msg error -71 req 02 val 2100 [ 100.228064][ T5920] pwc: recv_control_msg error -71 req 04 val 1500 [ 100.238318][ T5920] pwc: recv_control_msg error -71 req 02 val 2500 [ 100.248404][ T5920] pwc: recv_control_msg error -71 req 02 val 2400 [ 100.260433][ T5920] pwc: recv_control_msg error -71 req 02 val 2600 [ 100.278195][ T5920] pwc: recv_control_msg error -71 req 02 val 2900 [ 100.293546][ T5920] pwc: recv_control_msg error -71 req 02 val 2800 [ 100.314661][ T5920] pwc: recv_control_msg error -71 req 04 val 1100 [ 100.325971][ T5920] pwc: recv_control_msg error -71 req 04 val 1200 [ 100.343629][ T5920] pwc: Registered as video103. [ 100.386785][ T5920] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 100.452064][ T5920] usb 1-1: USB disconnect, device number 3 [ 100.605957][ T5915] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 100.786403][ T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 100.795600][ T5915] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.816731][ T5915] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.840123][ T5915] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 100.850781][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.969974][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.000772][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.044829][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.062469][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.078843][ T5915] usb 3-1: usb_control_msg returned -32 [ 101.092715][ T5915] usbtmc 3-1:16.0: can't read capabilities [ 101.324237][ T9] usb 2-1: usb_control_msg returned -32 [ 101.346380][ T9] usbtmc 2-1:16.0: can't read capabilities [ 101.463014][ T5915] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.655919][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 101.667106][ T5915] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 101.685206][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.697438][ T5915] usb 1-1: config 0 descriptor?? [ 101.708199][ T5915] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 101.836399][ T5920] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.906027][ T5875] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 101.985918][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 101.993387][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 102.002465][ T5920] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1064, setting to 1024 [ 102.013847][ T5920] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 102.023934][ T5920] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.037243][ T5920] usb 5-1: config 1 interface 0 has no altsetting 0 [ 102.047254][ T5920] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 102.056801][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.065142][ T5920] usb 5-1: Product: syz [ 102.070117][ T5920] usb 5-1: Manufacturer: syz [ 102.074936][ T5920] usb 5-1: SerialNumber: syz [ 102.080774][ T5875] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 102.092575][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.102602][ T6506] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 102.113748][ T5875] usb 4-1: config 0 descriptor?? [ 102.364716][ T5920] usb 5-1: USB disconnect, device number 7 [ 102.920986][ T5915] gspca_sonixj: reg_w1 err -71 [ 102.946061][ T5915] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 102.972063][ T5915] usb 1-1: USB disconnect, device number 4 [ 103.245927][ T5920] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 103.338248][ T5875] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 103.348482][ T5875] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 103.360154][ T5875] asix 4-1:0.0: probe with driver asix failed with error -71 [ 103.368316][ T5915] usb 3-1: USB disconnect, device number 6 [ 103.371004][ T5875] usb 4-1: USB disconnect, device number 6 [ 103.396196][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 103.403996][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.420767][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.467034][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 103.485046][ T5920] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 103.537474][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.557486][ T49] usb 2-1: USB disconnect, device number 6 [ 103.577713][ T5920] usb 5-1: config 0 descriptor?? [ 104.070379][ T5920] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0004/input/input9 [ 104.228177][ T5920] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 104.275740][ T5920] usb 5-1: USB disconnect, device number 8 [ 104.356238][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 104.421893][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 104.454572][ T6537] netlink: 104 bytes leftover after parsing attributes in process `syz.1.249'. [ 104.463830][ T6537] netlink: 104 bytes leftover after parsing attributes in process `syz.1.249'. [ 104.482529][ T6538] fido_id[6538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 105.586315][ T5920] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 105.745361][ T5920] usb 5-1: config 0 has no interfaces? [ 105.754024][ T5920] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 105.774561][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.783611][ T5920] usb 5-1: Product: syz [ 105.788198][ T5920] usb 5-1: Manufacturer: syz [ 105.792817][ T5920] usb 5-1: SerialNumber: syz [ 105.806965][ T5920] usb 5-1: config 0 descriptor?? [ 106.152788][ T5920] usb 5-1: USB disconnect, device number 9 [ 106.625932][ T5920] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.785949][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 106.807914][ T5920] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 106.843793][ T5920] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.873653][ T5920] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 106.908862][ T5920] usb 1-1: config 0 interface 0 has no altsetting 0 [ 106.926943][ T5920] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 106.954755][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.998019][ T5920] usb 1-1: config 0 descriptor?? [ 107.107900][ T5875] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 107.122811][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.300792][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 107.309684][ T5875] usb 5-1: config 0 has no interfaces? [ 107.315281][ T5875] usb 5-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 107.356003][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.399540][ T5875] usb 5-1: config 0 descriptor?? [ 107.439687][ T5920] sony 0003:054C:024B.0005: hiddev0,hidraw0: USB HID v0.03 Device [HID 054c:024b] on usb-dummy_hcd.0-1/input0 [ 107.492839][ T5920] sony 0003:054C:024B.0005: failed to claim input [ 107.696861][ T5920] usb 1-1: USB disconnect, device number 5 [ 107.779794][ T6624] netlink: 'syz.4.287': attribute type 2 has an invalid length. [ 107.805758][ T5875] usb 5-1: USB disconnect, device number 10 [ 108.270136][ T6665] syzkaller1: entered promiscuous mode [ 108.275745][ T6665] syzkaller1: entered allmulticast mode [ 108.463593][ T49] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 108.476080][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.671307][ T9] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 108.673025][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.691012][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.711302][ T9] usb 2-1: Product: syz [ 108.719943][ T9] usb 2-1: Manufacturer: syz [ 108.728531][ T9] usb 2-1: SerialNumber: syz [ 108.736409][ T49] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 108.747151][ T9] usb 2-1: config 0 descriptor?? [ 108.777969][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 108.809407][ T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 108.833538][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 108.850427][ T49] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 108.870081][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 108.888843][ T49] usb 3-1: Product: syz [ 108.893850][ T49] usb 3-1: Manufacturer: syz [ 108.903764][ T49] usb 3-1: SerialNumber: syz [ 108.924625][ T49] usb 3-1: config 0 descriptor?? [ 108.988382][ T9] usb 2-1: ignoring: probably an ADSL modem [ 109.184362][ T49] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 109.197040][ T49] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 109.393025][ T49] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 109.393528][ T9] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 109.408885][ T49] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 109.445552][ T49] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 109.594686][ T49] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 109.667520][ T9] usb 2-1: USB disconnect, device number 7 [ 109.860399][ T5920] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 110.018673][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 110.034836][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.053897][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.065708][ T5920] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 110.075245][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.093802][ T5920] usb 4-1: config 0 descriptor?? [ 110.107513][ T5920] hub 4-1:0.0: USB hub found [ 110.202455][ T49] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 110.226689][ T49] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 110.285145][ T49] usb 3-1: USB disconnect, device number 7 [ 110.332140][ T5920] hub 4-1:0.0: 1 port detected [ 110.857527][ T6725] netlink: 51 bytes leftover after parsing attributes in process `syz.1.329'. [ 110.970471][ T49] hub 4-1:0.0: activate --> -90 [ 111.139241][ T5920] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.278254][ T6745] netlink: 'syz.4.338': attribute type 12 has an invalid length. [ 111.287387][ T6745] netlink: 'syz.4.338': attribute type 29 has an invalid length. [ 111.295182][ T6745] netlink: 148 bytes leftover after parsing attributes in process `syz.4.338'. [ 111.308544][ T5920] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 111.320430][ T6745] netlink: 'syz.4.338': attribute type 2 has an invalid length. [ 111.328648][ T5920] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 111.343874][ T6745] netlink: 'syz.4.338': attribute type 3 has an invalid length. [ 111.366267][ T5920] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 111.383859][ T24] usb 4-1: USB disconnect, device number 7 [ 111.390199][ T49] usb 4-1-port1: config error [ 111.396026][ T6745] netlink: 15 bytes leftover after parsing attributes in process `syz.4.338'. [ 111.415965][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.450698][ T6729] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.472404][ T5920] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 111.734560][ T5920] usb 1-1: USB disconnect, device number 6 [ 111.748495][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 111.760274][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 112.043088][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 112.174635][ T6770] bond1: entered promiscuous mode [ 112.180904][ T6770] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.202838][ T6772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.210070][ T6772] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 112.221324][ T6772] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 112.367981][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 112.555959][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 112.570698][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.591538][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 112.614015][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 112.626540][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 112.649088][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 112.671553][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.702952][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 112.728231][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 112.742714][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 112.759606][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 112.777504][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 112.791158][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 113.125978][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 113.288211][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 113.310979][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.345663][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.364881][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 113.385296][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.410845][ T9] usb 1-1: config 0 descriptor?? [ 113.841554][ T9] ft260 0003:0403:6030.0006: unknown main item tag 0x7 [ 114.039945][ T9] ft260 0003:0403:6030.0006: chip code: 6424 8183 [ 114.240991][ T9] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 114.643007][ T9] ft260 0003:0403:6030.0006: failed to retrieve status: -71 [ 114.653030][ T9] ft260 0003:0403:6030.0006: failed to reset I2C controller: -71 [ 114.690933][ T9] usb 1-1: USB disconnect, device number 7 [ 115.136164][ T5915] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 115.298324][ T5915] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.311323][ T5915] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.325498][ T5915] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.342865][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.579049][ T5915] usb 2-1: GET_CAPABILITIES returned 0 [ 115.589116][ T5915] usbtmc 2-1:16.0: can't read capabilities [ 115.852541][ T5908] usb 2-1: USB disconnect, device number 8 [ 116.453998][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880549db400: rx timeout, send abort [ 116.463582][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880549db400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 116.507918][ T5881] usb 3-1: USB disconnect, device number 8 [ 116.516308][ T6818] cdc_wdm 3-1:1.0: Error autopm - -16 [ 116.904358][ T6869] netlink: 68 bytes leftover after parsing attributes in process `syz.4.387'. [ 117.536825][ T5908] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 117.763319][ T5908] usb 2-1: config 0 has no interfaces? [ 117.774727][ T5908] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 117.792999][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.821718][ T5908] usb 2-1: Product: syz [ 117.835933][ T5908] usb 2-1: Manufacturer: syz [ 117.853573][ T5908] usb 2-1: SerialNumber: syz [ 117.884952][ T5908] r8152-cfgselector 2-1: Unknown version 0x0000 [ 117.897095][ T5908] r8152-cfgselector 2-1: config 0 descriptor?? [ 118.129999][ T5881] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 120.067651][ T6923] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 120.100410][ T6923] netlink: 'syz.0.409': attribute type 2 has an invalid length. [ 120.167228][ T6923] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 120.215943][ T6923] netlink: 'syz.0.409': attribute type 2 has an invalid length. [ 120.254443][ T6925] vivid-003: disconnect [ 120.408881][ T6929] loop6: detected capacity change from 0 to 7 [ 120.425460][ T5880] Dev loop6: unable to read RDB block 7 [ 120.434947][ T5880] loop6: AHDI p1 p2 p3 [ 120.443974][ T5880] loop6: partition table partially beyond EOD, truncated [ 120.470998][ T5880] loop6: p1 start 4217409618 is beyond EOD, truncated [ 120.501141][ T5880] loop6: p2 size 108 extends beyond EOD, truncated [ 120.543263][ T6929] Dev loop6: unable to read RDB block 7 [ 120.557183][ T6929] loop6: AHDI p1 p2 p3 [ 120.566220][ T6929] loop6: partition table partially beyond EOD, truncated [ 120.584353][ T6929] loop6: p1 start 4217409618 is beyond EOD, truncated [ 120.614175][ T6929] loop6: p2 size 108 extends beyond EOD, truncated [ 120.629123][ T6924] vivid-003: reconnect [ 120.763388][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 120.766519][ T6934] sctp: [Deprecated]: syz.4.414 (pid 6934) Use of int in max_burst socket option. [ 120.766519][ T6934] Use struct sctp_assoc_value instead [ 120.920976][ T30] audit: type=1804 audit(1761596787.328:3): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.416" name="/newroot/86/file1" dev="tmpfs" ino=464 res=1 errno=0 [ 120.949222][ T5880] udevd[5880]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 123.586000][ T49] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 123.728581][ T6995] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 123.757753][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.768973][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 111, setting to 64 [ 123.797280][ T49] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 123.817652][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.838586][ T49] usb 2-1: config 0 descriptor?? [ 123.844284][ T6987] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.985904][ T49] rc_core: IR keymap rc-xbox-dvd not found [ 123.995166][ T49] Registered IR keymap rc-empty [ 124.065278][ T49] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 124.104356][ T49] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 124.158864][ T49] usb 2-1: USB disconnect, device number 10 [ 124.164896][ C1] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 124.339167][ T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 124.501012][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 124.533378][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 124.555319][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 124.576145][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.596135][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.635976][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.681914][ T24] usb 4-1: config 0 descriptor?? [ 124.967216][ T5908] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.141093][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.172973][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.183204][ T24] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 125.205951][ T5908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.270615][ T5908] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.296371][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.317479][ T5908] usb 5-1: config 0 descriptor?? [ 125.471170][ T6890] Set syz1 is full, maxelem 65536 reached [ 125.763117][ T5908] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 126.073943][ T7030] loop4: detected capacity change from 0 to 7 [ 126.105636][ T7030] Dev loop4: unable to read RDB block 7 [ 126.131730][ T7030] loop4: unable to read partition table [ 126.155701][ T7030] loop4: partition table beyond EOD, truncated [ 126.174869][ T7030] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.514324][ T24] usb 5-1: USB disconnect, device number 11 [ 126.716188][ T5881] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.897534][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 126.907312][ T5881] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 126.916679][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 126.924827][ T5881] usb 1-1: Product: syz [ 126.929960][ T5881] usb 1-1: Manufacturer: syz [ 126.934569][ T5881] usb 1-1: SerialNumber: syz [ 126.944220][ T5881] usb 1-1: config 0 descriptor?? [ 127.005917][ T5915] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 127.120521][ T7054] syzkaller1: entered promiscuous mode [ 127.126230][ T7054] syzkaller1: entered allmulticast mode [ 127.156109][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 127.166045][ T5915] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 127.184695][ T5915] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.202375][ T5915] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.212723][ T5915] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.223965][ T5915] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.252586][ T5915] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 127.278516][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.306227][ T5920] usb 4-1: USB disconnect, device number 8 [ 127.346002][ T5908] usb 1-1: USB disconnect, device number 8 [ 127.413552][ T7058] input: syz1 as /devices/virtual/input/input12 [ 127.587879][ T5915] usb 2-1: GET_CAPABILITIES returned 0 [ 127.593575][ T5915] usbtmc 2-1:16.0: can't read capabilities [ 127.924971][ T49] usb 2-1: USB disconnect, device number 11 [ 127.939986][ T7048] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 128.406675][ T5915] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 128.577963][ T5915] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 128.587347][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.606257][ T5915] usb 5-1: config 0 descriptor?? [ 129.443981][ T7105] netlink: 56 bytes leftover after parsing attributes in process `syz.0.478'. [ 129.464808][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 129.834799][ T5915] pegasus 5-1:0.0: can't reset MAC [ 129.846509][ T5915] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 129.875764][ T5915] usb 5-1: USB disconnect, device number 12 [ 129.943054][ T7116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.483'. [ 129.976364][ T7116] netlink: 'syz.0.483': attribute type 7 has an invalid length. [ 129.996093][ T7116] netlink: 'syz.0.483': attribute type 8 has an invalid length. [ 130.025985][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 130.154224][ T7118] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.456928][ T5908] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 130.630364][ T5908] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 130.646032][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.654088][ T5908] usb 1-1: Product: syz [ 130.685919][ T5908] usb 1-1: Manufacturer: syz [ 130.690559][ T5908] usb 1-1: SerialNumber: syz [ 130.735025][ T5908] usb 1-1: config 0 descriptor?? [ 130.771160][ T5908] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 131.095930][ T49] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 131.235925][ T5920] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 131.271133][ T49] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 131.280309][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.288488][ T49] usb 5-1: Product: syz [ 131.292704][ T49] usb 5-1: Manufacturer: syz [ 131.298184][ T49] usb 5-1: SerialNumber: syz [ 131.306889][ T49] usb 5-1: config 0 descriptor?? [ 131.396016][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 131.405950][ T5920] usb 3-1: config 0 has no interfaces? [ 131.411515][ T5920] usb 3-1: New USB device found, idVendor=2801, idProduct=0201, bcdDevice=2a.d5 [ 131.420806][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.434355][ T5920] usb 3-1: config 0 descriptor?? [ 131.732153][ T49] usb 5-1: Firmware: major: 192, minor: 178, hardware type: UNKNOWN (61) [ 131.743495][ T5915] IPVS: starting estimator thread 0... [ 131.758638][ T5915] usb 3-1: USB disconnect, device number 9 [ 131.783798][ T5908] gspca_sunplus: reg_r err -71 [ 131.796823][ T5908] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 131.816780][ T5908] usb 1-1: USB disconnect, device number 9 [ 131.845946][ T7143] IPVS: using max 28 ests per chain, 67200 per kthread [ 131.933795][ T49] usb 5-1: no permanent extended address found, random address set [ 131.942267][ T49] usb 5-1: atusb_probe: initialization failed, error = -524 [ 131.952358][ T49] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 132.025944][ T5875] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 132.161247][ T49] usb 5-1: USB disconnect, device number 13 [ 132.179134][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.193284][ T5875] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 132.217851][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.230639][ T5875] usb 2-1: config 0 descriptor?? [ 132.453859][ T5875] usbhid 2-1:0.0: can't add hid device: -71 [ 132.476077][ T5875] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 132.513131][ T30] audit: type=1326 audit(1761596798.918:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7158 comm="syz.3.502" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd539 code=0x0 [ 132.555046][ T5875] usb 2-1: USB disconnect, device number 12 [ 132.626157][ T1165] IPVS: stop unused estimator thread 0... [ 132.775968][ T49] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 132.899480][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.906001][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.947910][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.960042][ T49] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.971359][ T49] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 132.980957][ T5875] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 132.988813][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.003996][ T49] usb 1-1: config 0 descriptor?? [ 133.085992][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 133.146017][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 133.153446][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.168972][ T5875] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 133.180973][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.192980][ T5875] usb 2-1: config 0 descriptor?? [ 133.248094][ T24] usb 5-1: config 0 has no interfaces? [ 133.254034][ T24] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 133.264222][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.279396][ T24] usb 5-1: config 0 descriptor?? [ 133.430573][ T49] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 133.438132][ T49] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 133.452641][ T49] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0009/input/input13 [ 133.552464][ T49] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 133.661236][ T5875] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 133.706253][ T5908] usb 1-1: USB disconnect, device number 10 [ 133.794878][ T5915] usb 5-1: USB disconnect, device number 14 [ 133.807342][ C1] ================================================================== [ 133.815536][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x106a/0x1240 [ 133.823577][ C1] Read of size 1 at addr ffff888054b1bfff by task syz.2.506/7174 [ 133.831305][ C1] [ 133.833659][ C1] CPU: 1 UID: 0 PID: 7174 Comm: syz.2.506 Not tainted syzkaller #0 PREEMPT(full) [ 133.833687][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 133.833709][ C1] Call Trace: [ 133.833719][ C1] [ 133.833729][ C1] dump_stack_lvl+0x189/0x250 [ 133.833765][ C1] ? __kasan_check_byte+0x12/0x40 [ 133.833788][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.833817][ C1] ? lock_release+0x4b/0x3e0 [ 133.833840][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 133.833872][ C1] print_report+0xca/0x240 [ 133.833899][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 133.833933][ C1] kasan_report+0x118/0x150 [ 133.833955][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 133.833993][ C1] mcp2221_raw_event+0x106a/0x1240 [ 133.834029][ C1] ? down_trylock+0x50/0xb0 [ 133.834062][ C1] hid_input_report+0x40a/0x520 [ 133.834091][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 133.834126][ C1] hid_irq_in+0x47e/0x6d0 [ 133.834149][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 133.834178][ C1] dummy_timer+0x85f/0x44c0 [ 133.834226][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 133.834251][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 133.834274][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 133.834297][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 133.834322][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 133.834372][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 133.834397][ C1] ? read_tsc+0x9/0x20 [ 133.834429][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 133.834457][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 133.834486][ C1] handle_softirqs+0x286/0x870 [ 133.834512][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 133.834538][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 133.834574][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 133.834608][ C1] __irq_exit_rcu+0xca/0x1f0 [ 133.834632][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 133.834660][ C1] irq_exit_rcu+0x9/0x30 [ 133.834681][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 133.834713][ C1] [ 133.834720][ C1] [ 133.834728][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 133.834755][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 133.834784][ C1] Code: 74 05 e8 5b 1c 7f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 4a 47 f6 65 8b 05 dc 78 25 07 85 c0 74 40 48 c7 04 24 0e 36 [ 133.834802][ C1] RSP: 0018:ffffc9001ad1ef60 EFLAGS: 00000206 [ 133.834823][ C1] RAX: ae15d739459cf300 RBX: 0000000000000a02 RCX: ae15d739459cf300 [ 133.834840][ C1] RDX: 0000000000000000 RSI: ffffffff8d70bf1d RDI: 0000000000000001 [ 133.834855][ C1] RBP: ffffc9001ad1eff8 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e [ 133.834873][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: dffffc0000000000 [ 133.834891][ C1] R13: ffff88806a1e5000 R14: ffffffff99982590 R15: 1ffff920035a3dec [ 133.834917][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 133.834951][ C1] debug_check_no_obj_freed+0x451/0x470 [ 133.834986][ C1] ? __page_table_check_zero+0xba/0x530 [ 133.835020][ C1] ? __page_table_check_zero+0xba/0x530 [ 133.835056][ C1] __free_frozen_pages+0x4dd/0xd30 [ 133.835094][ C1] __folio_put+0x21b/0x2c0 [ 133.835117][ C1] ? __pfx___folio_put+0x10/0x10 [ 133.835141][ C1] ? folio_unlock+0x101/0x160 [ 133.835175][ C1] hpage_collapse_scan_file+0x4731/0x4f70 [ 133.835206][ C1] ? hpage_collapse_scan_file+0x197/0x4f70 [ 133.835234][ C1] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 133.835259][ C1] ? mt_find+0x46f/0x5e0 [ 133.835289][ C1] ? mt_find+0x15c/0x5e0 [ 133.835333][ C1] ? __pfx_mt_find+0x10/0x10 [ 133.835357][ C1] ? shmem_huge_global_enabled+0x96/0x320 [ 133.835393][ C1] ? __pfx___up_read+0x10/0x10 [ 133.835418][ C1] ? madvise_collapse+0x4ac/0xaa0 [ 133.835440][ C1] madvise_collapse+0x4cb/0xaa0 [ 133.835466][ C1] madvise_vma_behavior+0xed6/0x3a10 [ 133.835489][ C1] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 133.835508][ C1] ? finish_task_switch+0x18b/0x950 [ 133.835543][ C1] ? finish_task_switch+0x266/0x950 [ 133.835576][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.835599][ C1] ? finish_task_switch+0x266/0x950 [ 133.835626][ C1] ? rcu_is_watching+0x15/0xb0 [ 133.835648][ C1] ? trace_sched_exit_tp+0x36/0x110 [ 133.835681][ C1] ? __schedule+0x17ae/0x4cc0 [ 133.835719][ C1] ? mas_prev_slot+0xb31/0xbb0 [ 133.835751][ C1] ? find_vma_prev+0xe3/0x150 [ 133.835780][ C1] ? __pfx_find_vma_prev+0x10/0x10 [ 133.835806][ C1] ? futex_unqueue+0x22/0x240 [ 133.835832][ C1] ? __futex_wait+0x34a/0x3d0 [ 133.835857][ C1] madvise_walk_vmas+0x51c/0xa30 [ 133.835884][ C1] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 133.835906][ C1] ? blk_start_plug+0x6f/0x1b0 [ 133.835941][ C1] madvise_do_behavior+0x38e/0x550 [ 133.835979][ C1] ? __pfx_madvise_do_behavior+0x10/0x10 [ 133.836014][ C1] ? down_read+0x1ad/0x2e0 [ 133.836044][ C1] do_madvise+0x1bc/0x270 [ 133.836076][ C1] ? __pfx_do_madvise+0x10/0x10 [ 133.836120][ C1] ? __se_sys_futex_time32+0x360/0x3e0 [ 133.836159][ C1] ? rcu_is_watching+0x15/0xb0 [ 133.836187][ C1] __ia32_sys_madvise+0xa7/0xc0 [ 133.836208][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 133.836241][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.836270][ C1] do_fast_syscall_32+0x34/0x80 [ 133.836299][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.836327][ C1] RIP: 0023:0xf709d539 [ 133.836356][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 133.836376][ C1] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000db [ 133.836401][ C1] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600003 [ 133.836418][ C1] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.836432][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.836445][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 133.836459][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.836480][ C1] [ 133.836488][ C1] [ 134.425735][ C1] Allocated by task 5844: [ 134.430048][ C1] kasan_save_track+0x3e/0x80 [ 134.434724][ C1] __kasan_kmalloc+0x93/0xb0 [ 134.439309][ C1] __kmalloc_noprof+0x411/0x7f0 [ 134.444240][ C1] fib6_info_alloc+0x30/0xf0 [ 134.448814][ C1] ip6_route_info_create+0x142/0x860 [ 134.454091][ C1] ip6_route_add+0x49/0x1b0 [ 134.458582][ C1] addrconf_add_linklocal+0x45f/0x6c0 [ 134.464004][ C1] addrconf_addr_gen+0x490/0x580 [ 134.468930][ C1] addrconf_init_auto_addrs+0x62d/0xa30 [ 134.474464][ C1] addrconf_notify+0xacc/0x1010 [ 134.479350][ C1] notifier_call_chain+0x1b6/0x3e0 [ 134.484451][ C1] __dev_notify_flags+0x18d/0x2e0 [ 134.489464][ C1] netif_change_flags+0xe8/0x1a0 [ 134.494399][ C1] do_setlink+0xc55/0x41c0 [ 134.498801][ C1] rtnl_newlink+0x1619/0x1c80 [ 134.503478][ C1] rtnetlink_rcv_msg+0x7cf/0xb70 [ 134.508413][ C1] netlink_rcv_skb+0x208/0x470 [ 134.513270][ C1] netlink_unicast+0x82f/0x9e0 [ 134.518033][ C1] netlink_sendmsg+0x805/0xb30 [ 134.522782][ C1] __sock_sendmsg+0x21c/0x270 [ 134.527460][ C1] __sys_sendto+0x3bd/0x520 [ 134.531963][ C1] __ia32_compat_sys_socketcall+0x71c/0x9c0 [ 134.537844][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 134.542948][ C1] do_fast_syscall_32+0x34/0x80 [ 134.547795][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.554118][ C1] [ 134.556457][ C1] The buggy address belongs to the object at ffff888054b1bc00 [ 134.556457][ C1] which belongs to the cache kmalloc-512 of size 512 [ 134.570502][ C1] The buggy address is located 719 bytes to the right of [ 134.570502][ C1] allocated 304-byte region [ffff888054b1bc00, ffff888054b1bd30) [ 134.585329][ C1] [ 134.587646][ C1] The buggy address belongs to the physical page: [ 134.594071][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888054b19800 pfn:0x54b18 [ 134.604123][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 134.612611][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 134.621116][ C1] page_type: f5(slab) [ 134.625105][ C1] raw: 00fff00000000240 ffff88801a026c80 ffffea000150fa10 ffffea0001518e10 [ 134.633680][ C1] raw: ffff888054b19800 000000000010000c 00000000f5000000 0000000000000000 [ 134.642256][ C1] head: 00fff00000000240 ffff88801a026c80 ffffea000150fa10 ffffea0001518e10 [ 134.650913][ C1] head: ffff888054b19800 000000000010000c 00000000f5000000 0000000000000000 [ 134.659662][ C1] head: 00fff00000000002 ffffea000152c601 00000000ffffffff 00000000ffffffff [ 134.668323][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 134.677060][ C1] page dumped because: kasan: bad access detected [ 134.683470][ C1] page_owner tracks the page as allocated [ 134.689191][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5844, tgid 5844 (syz-executor), ts 76323575824, free_ts 21743615571 [ 134.708983][ C1] post_alloc_hook+0x240/0x2a0 [ 134.713758][ C1] get_page_from_freelist+0x2365/0x2440 [ 134.719295][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 134.725094][ C1] alloc_pages_mpol+0x232/0x4a0 [ 134.729933][ C1] allocate_slab+0x96/0x350 [ 134.734424][ C1] ___slab_alloc+0xe94/0x18a0 [ 134.739089][ C1] __slab_alloc+0x65/0x100 [ 134.743492][ C1] __kmalloc_noprof+0x471/0x7f0 [ 134.748334][ C1] fib6_info_alloc+0x30/0xf0 [ 134.752911][ C1] ip6_route_info_create+0x142/0x860 [ 134.758294][ C1] addrconf_f6i_alloc+0x1d2/0x450 [ 134.763313][ C1] addrconf_permanent_addr+0x274/0x9d0 [ 134.768766][ C1] addrconf_notify+0x887/0x1010 [ 134.773609][ C1] notifier_call_chain+0x1b6/0x3e0 [ 134.778745][ C1] __dev_notify_flags+0x18d/0x2e0 [ 134.783759][ C1] netif_change_flags+0xe8/0x1a0 [ 134.789029][ C1] page last free pid 1 tgid 1 stack trace: [ 134.794823][ C1] __free_frozen_pages+0xbc4/0xd30 [ 134.799931][ C1] free_contig_range+0x1bd/0x4a0 [ 134.804856][ C1] destroy_args+0x69/0x660 [ 134.809283][ C1] debug_vm_pgtable+0x39f/0x3b0 [ 134.814124][ C1] do_one_initcall+0x236/0x820 [ 134.818882][ C1] do_initcall_level+0x104/0x190 [ 134.823830][ C1] do_initcalls+0x59/0xa0 [ 134.828156][ C1] kernel_init_freeable+0x334/0x4b0 [ 134.833348][ C1] kernel_init+0x1d/0x1d0 [ 134.837662][ C1] ret_from_fork+0x4bc/0x870 [ 134.842241][ C1] ret_from_fork_asm+0x1a/0x30 [ 134.847430][ C1] [ 134.849739][ C1] Memory state around the buggy address: [ 134.855361][ C1] ffff888054b1be80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.863509][ C1] ffff888054b1bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.871561][ C1] >ffff888054b1bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 134.879611][ C1] ^ [ 134.887571][ C1] ffff888054b1c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.895659][ C1] ffff888054b1c080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 134.903714][ C1] ================================================================== [ 134.911892][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 134.919080][ C1] CPU: 1 UID: 0 PID: 7174 Comm: syz.2.506 Not tainted syzkaller #0 PREEMPT(full) [ 134.928283][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 134.938329][ C1] Call Trace: [ 134.941615][ C1] [ 134.944447][ C1] dump_stack_lvl+0x99/0x250 [ 134.949036][ C1] ? __asan_memcpy+0x40/0x70 [ 134.953618][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.958810][ C1] ? __pfx__printk+0x10/0x10 [ 134.963400][ C1] vpanic+0x237/0x6d0 [ 134.967387][ C1] ? __pfx_vpanic+0x10/0x10 [ 134.971890][ C1] panic+0xb9/0xc0 [ 134.975614][ C1] ? __pfx_panic+0x10/0x10 [ 134.980035][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 134.985923][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 134.991206][ C1] check_panic_on_warn+0x89/0xb0 [ 134.996138][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 135.001417][ C1] end_report+0x78/0x160 [ 135.005649][ C1] kasan_report+0x129/0x150 [ 135.010154][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 135.015449][ C1] mcp2221_raw_event+0x106a/0x1240 [ 135.020559][ C1] ? down_trylock+0x50/0xb0 [ 135.025062][ C1] hid_input_report+0x40a/0x520 [ 135.029935][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 135.035609][ C1] hid_irq_in+0x47e/0x6d0 [ 135.039966][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 135.045427][ C1] dummy_timer+0x85f/0x44c0 [ 135.050047][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 135.054979][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 135.059910][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 135.064845][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 135.070045][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 135.076033][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 135.081861][ C1] ? read_tsc+0x9/0x20 [ 135.085929][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 135.091817][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 135.096922][ C1] handle_softirqs+0x286/0x870 [ 135.101687][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 135.106453][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 135.111756][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 135.116963][ C1] __irq_exit_rcu+0xca/0x1f0 [ 135.121562][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 135.126783][ C1] irq_exit_rcu+0x9/0x30 [ 135.131030][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 135.136662][ C1] [ 135.139583][ C1] [ 135.142603][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 135.148586][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 135.155204][ C1] Code: 74 05 e8 5b 1c 7f f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 4a 47 f6 65 8b 05 dc 78 25 07 85 c0 74 40 48 c7 04 24 0e 36 [ 135.175190][ C1] RSP: 0018:ffffc9001ad1ef60 EFLAGS: 00000206 [ 135.181496][ C1] RAX: ae15d739459cf300 RBX: 0000000000000a02 RCX: ae15d739459cf300 [ 135.189792][ C1] RDX: 0000000000000000 RSI: ffffffff8d70bf1d RDI: 0000000000000001 [ 135.197943][ C1] RBP: ffffc9001ad1eff8 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e [ 135.206096][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: dffffc0000000000 [ 135.214070][ C1] R13: ffff88806a1e5000 R14: ffffffff99982590 R15: 1ffff920035a3dec [ 135.222074][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 135.228419][ C1] debug_check_no_obj_freed+0x451/0x470 [ 135.234061][ C1] ? __page_table_check_zero+0xba/0x530 [ 135.239626][ C1] ? __page_table_check_zero+0xba/0x530 [ 135.245224][ C1] __free_frozen_pages+0x4dd/0xd30 [ 135.250342][ C1] __folio_put+0x21b/0x2c0 [ 135.254751][ C1] ? __pfx___folio_put+0x10/0x10 [ 135.259689][ C1] ? folio_unlock+0x101/0x160 [ 135.264387][ C1] hpage_collapse_scan_file+0x4731/0x4f70 [ 135.270156][ C1] ? hpage_collapse_scan_file+0x197/0x4f70 [ 135.275980][ C1] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 135.282047][ C1] ? mt_find+0x46f/0x5e0 [ 135.286295][ C1] ? mt_find+0x15c/0x5e0 [ 135.290529][ C1] ? __pfx_mt_find+0x10/0x10 [ 135.295114][ C1] ? shmem_huge_global_enabled+0x96/0x320 [ 135.300844][ C1] ? __pfx___up_read+0x10/0x10 [ 135.305614][ C1] ? madvise_collapse+0x4ac/0xaa0 [ 135.310653][ C1] madvise_collapse+0x4cb/0xaa0 [ 135.315537][ C1] madvise_vma_behavior+0xed6/0x3a10 [ 135.320844][ C1] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 135.326579][ C1] ? finish_task_switch+0x18b/0x950 [ 135.331799][ C1] ? finish_task_switch+0x266/0x950 [ 135.337029][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.342234][ C1] ? finish_task_switch+0x266/0x950 [ 135.347446][ C1] ? rcu_is_watching+0x15/0xb0 [ 135.352203][ C1] ? trace_sched_exit_tp+0x36/0x110 [ 135.357513][ C1] ? __schedule+0x17ae/0x4cc0 [ 135.362278][ C1] ? mas_prev_slot+0xb31/0xbb0 [ 135.367039][ C1] ? find_vma_prev+0xe3/0x150 [ 135.371707][ C1] ? __pfx_find_vma_prev+0x10/0x10 [ 135.376806][ C1] ? futex_unqueue+0x22/0x240 [ 135.381486][ C1] ? __futex_wait+0x34a/0x3d0 [ 135.386238][ C1] madvise_walk_vmas+0x51c/0xa30 [ 135.391192][ C1] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 135.396643][ C1] ? blk_start_plug+0x6f/0x1b0 [ 135.401444][ C1] madvise_do_behavior+0x38e/0x550 [ 135.406578][ C1] ? __pfx_madvise_do_behavior+0x10/0x10 [ 135.412235][ C1] ? down_read+0x1ad/0x2e0 [ 135.416653][ C1] do_madvise+0x1bc/0x270 [ 135.421079][ C1] ? __pfx_do_madvise+0x10/0x10 [ 135.426023][ C1] ? __se_sys_futex_time32+0x360/0x3e0 [ 135.431511][ C1] ? rcu_is_watching+0x15/0xb0 [ 135.436268][ C1] __ia32_sys_madvise+0xa7/0xc0 [ 135.441109][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 135.446215][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.451406][ C1] do_fast_syscall_32+0x34/0x80 [ 135.456255][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.462597][ C1] RIP: 0023:0xf709d539 [ 135.466692][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 135.486388][ C1] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000db [ 135.494796][ C1] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600003 [ 135.502788][ C1] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.510766][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.518724][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 135.526683][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.534692][ C1] [ 135.538023][ C1] Kernel Offset: disabled [ 135.542346][ C1] Rebooting in 86400 seconds..