last executing test programs: 2m56.228382217s ago: executing program 4 (id=369): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)={0x0, 0x0, 0x2, "e92d"}, 0xa) 2m55.883260975s ago: executing program 4 (id=376): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trrm'], 0xa) 2m55.647367828s ago: executing program 4 (id=381): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000400000000800000001"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000140), &(0x7f0000000240)=@udp6=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000200)="f416", 0x0}, 0x20) 2m55.453188294s ago: executing program 4 (id=386): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file2\x00', 0x2) 2m55.267062115s ago: executing program 4 (id=389): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m55.059714516s ago: executing program 4 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 2m45.55913845s ago: executing program 0 (id=472): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000005c0)=[{{&(0x7f0000003080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2c000000000000001701000002", @ANYRES32=r0], 0x30, 0x840}}], 0x2, 0x4010) 2m45.368953022s ago: executing program 0 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x6e04}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x0, 0x0) 2m45.136685976s ago: executing program 0 (id=478): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) 2m44.964635004s ago: executing program 0 (id=481): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$cgroup2(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0xa00001, &(0x7f0000000300)={[], [{@smackfsdef={'smackfsdef', 0x3d, '@\xe8%*@\xfb\x8a-'}}]}) 2m44.697666864s ago: executing program 0 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 2m44.279544732s ago: executing program 0 (id=490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}}, 0x0, 0x0, 0x42, 0x0, "2c26d54299b76b84ba05162b9c7dcdd7aadee63b2b0891ccc3327c19e4dea57106a990a3c1f61096802830f93bd21c6ae6f595006e259e32eeeab23edc5358b7af04ae1cff2717b10bb3f54e2f05c1b2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x2, 0x0, 0x15, 0x0, "598ae7732e1e01bd124d7e8050b93adc9cb9750e8a2f49c5d1c23b9e3d2da68e96b72b74ee2bf69380a09be4758a9bae36a3a4c787d1ed4c8d252f5cfe3dbbc953336a19efb30bb00f43bcb2f201c655"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7fffffff, @loopback, 0x9}, 0x1c) 2m43.852638022s ago: executing program 32 (id=490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}}, 0x0, 0x0, 0x42, 0x0, "2c26d54299b76b84ba05162b9c7dcdd7aadee63b2b0891ccc3327c19e4dea57106a990a3c1f61096802830f93bd21c6ae6f595006e259e32eeeab23edc5358b7af04ae1cff2717b10bb3f54e2f05c1b2"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @loopback}}}, 0x2, 0x0, 0x15, 0x0, "598ae7732e1e01bd124d7e8050b93adc9cb9750e8a2f49c5d1c23b9e3d2da68e96b72b74ee2bf69380a09be4758a9bae36a3a4c787d1ed4c8d252f5cfe3dbbc953336a19efb30bb00f43bcb2f201c655"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7fffffff, @loopback, 0x9}, 0x1c) 2m39.838011187s ago: executing program 33 (id=392): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 26.655627787s ago: executing program 6 (id=2067): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.611040472s ago: executing program 6 (id=2069): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000380)=""/141, 0x18) 26.513487782s ago: executing program 6 (id=2072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x80, 0x0, 0x2, 0x0, 0xfe, 0x2}, [@RTA_PREFSRC={0x8, 0x7, @multicast1}, @RTA_OIF={0x8, 0x4, r2}]}, 0x2c}, 0x1, 0xffffff7f, 0x0, 0x1}, 0x4040000) 26.383023238s ago: executing program 6 (id=2073): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 26.312480694s ago: executing program 6 (id=2075): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc, 0x0, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r1, 0x6}, &(0x7f0000000080)=0x8) 26.026440924s ago: executing program 6 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 25.708331054s ago: executing program 34 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 4.731803023s ago: executing program 7 (id=2398): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a"], 0xf0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4.391800495s ago: executing program 7 (id=2401): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000600)={0x0, 0x1f, 0x3, "42e815"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.019454653s ago: executing program 1 (id=2416): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@local, 0x408, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x10000010000, 0x6, 0xfffffffffffffffe, 0x9, 0x7cc, 0x10000000000000}, {0x0, 0x1000000000000009, 0x0, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x3, 0x40, 0xfffffffc}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 2.923115198s ago: executing program 1 (id=2417): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x3, 0x0, 0x0, 0x414d6714bf78e155}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c) 2.767749993s ago: executing program 1 (id=2418): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={r2, 0xfffffffe, 0x10}, &(0x7f0000000080)=0xc) 1.914397976s ago: executing program 1 (id=2424): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="800021271e00000000000000ffffff000000", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000350000000e0001006e657464657673696d0000000f"], 0x3c}}, 0x24004040) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 1.489492226s ago: executing program 5 (id=2429): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r2) 1.310827447s ago: executing program 2 (id=2431): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500090000000000050008000000000008000500", @ANYRES32=r0], 0x4c}}, 0x0) 1.302756895s ago: executing program 7 (id=2432): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r1, &(0x7f0000000140), 0x18) 1.174969636s ago: executing program 7 (id=2434): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/193, 0xc1}], 0x1, 0x0, 0x0) 1.149392192s ago: executing program 3 (id=2435): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 1.090840233s ago: executing program 2 (id=2436): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000080)=0x2000000, &(0x7f00000005c0)='%pi6 \x00'}, 0x20) 1.043988904s ago: executing program 5 (id=2437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 891.495719ms ago: executing program 2 (id=2438): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b7030000200000007910300000000000070000000100000095000000000000001cc56fbad4e5756058a081283654fcf115029232109ea547f4b0410749548298a8cd7890378780df4c4971c84e179ab11776f5aeb9a95f37c063b126f28dee87354090ab8c3587d88e940857236bcf8e48257f60fe82b47dbdd05670ab671007f819798539cb7eadfe9772113755ab5461d067e14d881a9ea0c2c66e7b80693b07e80f7b318a"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000580)=r0, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettaction={0x14, 0x32, 0x101}, 0x14}}, 0x0) 853.966673ms ago: executing program 5 (id=2439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0x3}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000840)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0x9}]}}}}}}}}, 0x0) 745.329381ms ago: executing program 3 (id=2440): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={[&(0x7f00000001c0)='-^{\x00']}, 0x0) 667.734321ms ago: executing program 5 (id=2441): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x40}], 0x1}], 0x1, 0x0) 652.435651ms ago: executing program 2 (id=2442): syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f"], 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x24, 0x2004, 0x820000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4}}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 584.463494ms ago: executing program 3 (id=2443): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r1}) close(r2) 516.15918ms ago: executing program 5 (id=2444): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7fffffff}) 383.692934ms ago: executing program 1 (id=2445): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x0, 0x82, 0x1000004f}, 0x2c) 357.738158ms ago: executing program 3 (id=2446): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000540)={0x0, 0x1, &(0x7f0000000440)=[r1], &(0x7f0000000580)=[0xe], &(0x7f0000000580), &(0x7f00000005c0)}) 357.045599ms ago: executing program 2 (id=2447): recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x8}], 0x1, 0x2, 0x0) r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x3c49, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 315.269013ms ago: executing program 5 (id=2448): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0x6, 0x10}, 0xc) 216.939936ms ago: executing program 3 (id=2449): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0xf8, r1, 0x1, 0x5, 0x6, @multicast}, 0x14) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) 163.637302ms ago: executing program 2 (id=2450): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x48395, 0x200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001404000000120800030043000040a8002b", 0x33}], 0x1}, 0x20000880) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 138.998105ms ago: executing program 7 (id=2451): r0 = timerfd_create(0x0, 0x80000) timerfd_settime(r0, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x0, 0x1c9c380}, {r1, r2+60000000}}, 0x0) 76.457929ms ago: executing program 1 (id=2452): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x1, 0x130, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x20000000) 52.355668ms ago: executing program 3 (id=2453): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) 0s ago: executing program 7 (id=2454): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdir(0x0, 0x0) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) fdatasync(r0) kernel console output (not intermixed with test programs): syz [ 161.110014][ T5825] usb 2-1: Manufacturer: syz [ 161.123876][ T5825] usb 2-1: SerialNumber: syz [ 161.144072][ T918] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 161.147000][ T7244] veth0_macvtap: entered promiscuous mode [ 161.164056][ T5825] usb 2-1: config 0 descriptor?? [ 161.179488][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.199405][ T7244] veth1_macvtap: entered promiscuous mode [ 161.211773][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.316045][ T7244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.397309][ T7244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.442059][ T7244] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.461508][ T7244] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.476727][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 161.487899][ T918] usb 4-1: USB disconnect, device number 8 [ 161.491970][ T7244] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.515022][ T918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 161.562850][ T7571] netlink: 'syz.1.628': attribute type 13 has an invalid length. [ 161.563427][ T7244] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.592810][ T918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 161.625325][ T7571] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 161.669435][ T918] quatech2 4-1:0.51: device disconnected [ 161.710978][ T5825] usb 2-1: probing VID:PID(2201:012C) [ 161.734200][ T5825] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 161.811433][ T5825] vub300 2-1:0.239: probe with driver vub300 failed with error -22 [ 161.854779][ T5825] usb 2-1: USB disconnect, device number 7 [ 161.959373][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.994396][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.123038][ T4586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.143844][ T4586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.320198][ T7601] loop6: detected capacity change from 0 to 63 [ 162.476335][ T7603] support for the xor transformation has been removed. [ 162.547398][ T7215] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.596433][ T7215] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.645062][ T7215] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.700215][ T7215] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.719262][ T7215] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.767721][ T7215] Buffer I/O error on dev loop6, logical block 0, async page read [ 162.808830][ T7215] Buffer I/O error on dev loop6, logical block 3, async page read [ 165.030030][ T7689] netlink: 432 bytes leftover after parsing attributes in process `syz.6.665'. [ 165.145262][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 165.904873][ T5918] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 166.070313][ T5918] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 166.097045][ T5918] usb 7-1: config 0 has no interface number 0 [ 166.118060][ T5918] usb 7-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 166.136376][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.179186][ T5918] usb 7-1: Product: syz [ 166.192098][ T5918] usb 7-1: Manufacturer: syz [ 166.203986][ T5918] usb 7-1: SerialNumber: syz [ 166.238423][ T5918] usb 7-1: config 0 descriptor?? [ 166.631153][ T7709] netlink: 'syz.6.673': attribute type 13 has an invalid length. [ 166.700611][ T7709] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 166.944714][ T5918] usb 7-1: probing VID:PID(2201:012C) [ 166.972914][ T5918] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 167.022711][ T5918] vub300 7-1:0.239: probe with driver vub300 failed with error -22 [ 167.064047][ T5918] usb 7-1: USB disconnect, device number 2 [ 167.504775][ T5825] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 167.681735][ T5825] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 167.708349][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.750941][ T5825] usb 6-1: config 0 descriptor?? [ 167.938167][ T7783] block nbd0: server does not support multiple connections per device. [ 167.980265][ T7783] block nbd0: shutting down sockets [ 168.024056][ T5825] kaweth 6-1:0.0: Firmware present in device. [ 168.209994][ T5825] kaweth 6-1:0.0: Statistics collection: 0 [ 168.231250][ T5825] kaweth 6-1:0.0: Multicast filter limit: 0 [ 168.247809][ T5825] kaweth 6-1:0.0: MTU: 0 [ 168.252142][ T5825] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 168.554976][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.580866][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.607469][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.615572][ T5825] kaweth 6-1:0.0: Error setting SOFS wait [ 168.625841][ T5825] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 168.642704][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.677102][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.705417][ T5825] usb 6-1: USB disconnect, device number 2 [ 168.723246][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.764385][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.771937][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.826491][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.834159][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.848090][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.868178][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.924730][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.932198][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 168.987541][ T10] hid-generic 009C:0008:0003.0008: unknown main item tag 0x0 [ 169.032462][ T10] hid-generic 009C:0008:0003.0008: hidraw0: HID v0.05 Device [syz1] on syz0 [ 169.333800][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.5.710'. [ 169.954394][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 170.134536][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 170.166831][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.199733][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.240477][ T10] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 170.245004][ T7852] tun0: tun_chr_ioctl cmd 1074025678 [ 170.276767][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.284868][ T7852] tun0: group set to 0 [ 170.309167][ T10] usb 7-1: config 0 descriptor?? [ 170.421404][ T7857] netlink: 164 bytes leftover after parsing attributes in process `syz.3.722'. [ 170.520169][ T7860] netlink: 'syz.2.723': attribute type 9 has an invalid length. [ 170.564713][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 170.592230][ T7860] hsr0: entered promiscuous mode [ 170.619557][ T7860] macvlan2: entered promiscuous mode [ 170.643042][ T7860] macvlan2: entered allmulticast mode [ 170.664862][ T7860] hsr0: entered allmulticast mode [ 170.681952][ T7860] hsr_slave_0: entered allmulticast mode [ 170.692751][ T7860] hsr_slave_1: entered allmulticast mode [ 170.782892][ T10] corsair 0003:1B1C:1B02.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 170.855635][ T5892] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 171.074671][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 171.087940][ T5892] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 171.102194][ T5892] usb 6-1: config 0 has no interface number 0 [ 171.119604][ T5892] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.184910][ T5892] usb 6-1: config 0 interface 85 has no altsetting 0 [ 171.198825][ T918] usb 7-1: USB disconnect, device number 3 [ 171.216796][ T5892] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 171.230387][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.269000][ T5892] usb 6-1: Product: syz [ 171.273218][ T5892] usb 6-1: Manufacturer: syz [ 171.313483][ T5892] usb 6-1: SerialNumber: syz [ 171.355011][ T5892] usb 6-1: config 0 descriptor?? [ 171.764401][ T918] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 171.950084][ T918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.973124][ T918] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 172.003506][ T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.031537][ T7905] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 172.038133][ T918] usb 4-1: config 0 descriptor?? [ 172.156293][ T7905] team0: Port device batadv1 added [ 172.173285][ T5892] appletouch 6-1:0.85: Geyser mode initialized. [ 172.209800][ T5892] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input9 [ 172.262362][ C1] appletouch 6-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 172.487286][ T5918] usb 6-1: USB disconnect, device number 3 [ 172.569273][ T7924] input: syz1 as /devices/virtual/input/input10 [ 172.571417][ T5918] appletouch 6-1:0.85: input: appletouch disconnected [ 172.913932][ T918] video4linux radio48: keene_cmd_main failed (-71) [ 172.941314][ T918] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 172.985155][ T918] usb 4-1: USB disconnect, device number 9 [ 173.603538][ T7951] ptrace attach of "./syz-executor exec"[5832] was attempted by ""[7951] [ 174.418498][ T7979] cifs: Unknown parameter 'mode' [ 174.606907][ T5825] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 174.827151][ T5825] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 174.855129][ T5825] usb 6-1: config 0 has no interface number 0 [ 174.868044][ T5825] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 174.901652][ T5825] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 174.922647][ T5825] usb 6-1: config 0 interface 255 has no altsetting 0 [ 174.967819][ T5825] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 174.999551][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.039440][ T5825] usb 6-1: config 0 descriptor?? [ 175.060822][ T5825] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 175.264563][ T5892] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.283583][ T5825] usb 6-1: USB disconnect, device number 4 [ 175.450204][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.481558][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.512425][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.550875][ T5892] usb 4-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 175.559227][ T8018] team0: No ports can be present during mode change [ 175.566859][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.600278][ T5892] usb 4-1: config 0 descriptor?? [ 176.039554][ T5892] hid-udraw 0003:20D6:CB17.000A: unknown main item tag 0x0 [ 176.105076][ T5892] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.000A/input/input13 [ 176.238328][ T5892] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.000A/input/input14 [ 176.457122][ T5892] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.000A/input/input15 [ 176.675710][ T5918] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 176.726820][ T5892] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:20D6:CB17.000A/input/input16 [ 176.834893][ T5892] hid-udraw 0003:20D6:CB17.000A: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.3-1/input0 [ 176.854911][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 176.884091][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 176.900055][ T5892] usb 4-1: USB disconnect, device number 10 [ 176.951011][ T5918] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 177.010292][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.086271][ T5918] usb 2-1: config 0 descriptor?? [ 177.139927][ T5918] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 177.180687][ T8050] fido_id[8050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 177.366814][ T5179] bcm5974 2-1:0.0: could not read from device [ 177.387017][ T5918] usb 2-1: USB disconnect, device number 8 [ 177.425570][ T5825] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 177.445317][ T5179] bcm5974 2-1:0.0: could not read from device [ 177.493705][ T5179] bcm5974 2-1:0.0: could not read from device [ 177.634648][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 177.671166][ T5825] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 177.689792][ T5825] usb 3-1: config 0 has no interface number 0 [ 177.704878][ T5825] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.751563][ T5825] usb 3-1: config 0 interface 85 has no altsetting 0 [ 177.782331][ T5825] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 177.830003][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.848679][ T5825] usb 3-1: Product: syz [ 177.852919][ T5825] usb 3-1: Manufacturer: syz [ 177.873444][ T5825] usb 3-1: SerialNumber: syz [ 177.927503][ T5825] usb 3-1: config 0 descriptor?? [ 178.582670][ T5825] appletouch 3-1:0.85: Geyser mode initialized. [ 178.613217][ T5825] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input18 [ 178.840380][ T10] usb 3-1: USB disconnect, device number 9 [ 178.864777][ T5918] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 179.022947][ T10] appletouch 3-1:0.85: input: appletouch disconnected [ 179.026058][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 179.070155][ T5918] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 179.101680][ T5918] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 179.152648][ T5918] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.202784][ T5918] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 179.233524][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.307906][ T5918] usbtmc 2-1:16.0: bulk endpoints not found [ 179.580489][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.625268][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.712981][ T24] usb 2-1: USB disconnect, device number 9 [ 179.824787][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 179.874456][ T918] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 180.014919][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 180.031759][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.049021][ T918] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 180.058606][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.058652][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 180.101907][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.110225][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.135871][ T10] usb 6-1: config 0 descriptor?? [ 180.140745][ T918] usb 3-1: Product: syz [ 180.145227][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 180.171906][ T918] usb 3-1: Manufacturer: syz [ 180.192449][ T918] usb 3-1: SerialNumber: syz [ 180.216474][ T918] usb 3-1: config 0 descriptor?? [ 180.302212][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 180.333095][ T24] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 180.370652][ T24] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x85 has invalid wMaxPacketSize 0 [ 180.393308][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.411649][ T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 180.452099][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.472290][ T24] usb 2-1: Product: syz [ 180.485079][ T24] usb 2-1: Manufacturer: syz [ 180.500019][ T24] usb 2-1: SerialNumber: syz [ 180.521852][ T24] usb 2-1: config 0 descriptor?? [ 180.546969][ T24] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 180.578718][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 180.580888][ T10] logitech 0003:046D:C24F.000B: unbalanced collection at end of report description [ 180.605154][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 180.633859][ T10] logitech 0003:046D:C24F.000B: parse failed [ 180.634061][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 180.664541][ T10] logitech 0003:046D:C24F.000B: probe with driver logitech failed with error -22 [ 180.669606][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 180.708788][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 180.739601][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 180.804898][ T24] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 180.853676][ T5892] usb 6-1: USB disconnect, device number 5 [ 180.856500][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 180.899118][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 180.917446][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 180.936518][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 180.955807][ T24] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 180.978870][ T24] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 181.028664][ T24] usb 2-1: USB disconnect, device number 10 [ 181.079044][ T918] usb 3-1: Firmware version (0.0) predates our first public release. [ 181.112337][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 181.132809][ T918] usb 3-1: Please update to version 0.2 or newer [ 181.174219][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 181.226036][ T24] keyspan 2-1:0.0: device disconnected [ 181.252930][ T918] usb 3-1: USB disconnect, device number 10 [ 182.124565][ T918] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 182.274400][ T918] usb 3-1: Using ep0 maxpacket: 16 [ 182.289998][ T918] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 182.310293][ T918] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 182.325090][ T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.330436][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 182.353935][ T918] usb 3-1: Product: syz [ 182.369084][ T918] usb 3-1: Manufacturer: syz [ 182.391013][ T918] usb 3-1: SerialNumber: syz [ 182.417710][ T918] usb 3-1: config 0 descriptor?? [ 182.447378][ T918] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 182.485069][ T918] usb 3-1: Detected FT232R [ 182.517742][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 182.547103][ T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 182.566015][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.633547][ T10] usb 6-1: config 0 descriptor?? [ 182.683901][ T918] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 182.874790][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 182.902878][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 182.939031][ T918] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 182.957152][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 182.974831][ T10] usb 6-1: media controller created [ 183.068315][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.120990][ T918] usb 3-1: USB disconnect, device number 11 [ 183.170707][ T10] az6027: usb out operation failed. (-71) [ 183.214727][ T918] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 183.215542][ T10] az6027: usb out operation failed. (-71) [ 183.249712][ T918] ftdi_sio 3-1:0.0: device disconnected [ 183.261079][ T10] stb0899_attach: Driver disabled by Kconfig [ 183.306017][ T10] az6027: no front-end attached [ 183.306017][ T10] [ 183.319902][ T10] az6027: usb out operation failed. (-71) [ 183.348951][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 183.378303][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 183.433527][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 183.467893][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 183.525236][ T10] usb 6-1: USB disconnect, device number 6 [ 183.784909][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 184.077249][ T8214] netlink: 140 bytes leftover after parsing attributes in process `syz.1.837'. [ 184.789479][ T918] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 184.960564][ T918] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.002470][ T918] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.053441][ T918] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.074372][ T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.124981][ T8230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 185.169810][ T918] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.421852][ T918] usb 4-1: USB disconnect, device number 11 [ 185.545451][ T8252] netlink: 'syz.5.849': attribute type 58 has an invalid length. [ 185.587069][ T8252] netlink: 20 bytes leftover after parsing attributes in process `syz.5.849'. [ 186.616024][ T5825] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 186.772828][ T8292] can0: slcan on ttyS3. [ 186.807069][ T5825] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.841157][ T5825] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.906141][ T5825] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.940441][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.977091][ T5825] usb 4-1: SerialNumber: syz [ 186.999556][ T8292] can0 (unregistered): slcan off ttyS3. [ 187.406928][ T5825] usb 4-1: 0:2 : does not exist [ 187.452142][ T5825] usb 4-1: USB disconnect, device number 12 [ 187.554780][ T918] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 187.567551][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.775200][ T918] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.785516][ T918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 187.806250][ T918] usb 2-1: New USB device found, idVendor=0e41, idProduct=4156, bcdDevice=15.eb [ 187.825059][ T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.853367][ T918] usb 2-1: Product: syz [ 187.894444][ T918] usb 2-1: Manufacturer: syz [ 187.899132][ T918] usb 2-1: SerialNumber: syz [ 187.935378][ T918] usb 2-1: config 0 descriptor?? [ 188.352283][ T8333] hsr0: entered promiscuous mode [ 188.375980][ T918] snd_usb_podhd 2-1:0.0: Line 6 POD HDDESKTOP found [ 188.387708][ T8333] macvtap1: entered promiscuous mode [ 188.406449][ T8333] macvtap1: entered allmulticast mode [ 188.424569][ T8333] hsr0: entered allmulticast mode [ 188.436330][ T8333] hsr_slave_0: entered allmulticast mode [ 188.451308][ T8333] hsr_slave_1: entered allmulticast mode [ 188.488952][ T8333] hsr0: left allmulticast mode [ 188.501733][ T8333] hsr_slave_0: left allmulticast mode [ 188.527281][ T8333] hsr_slave_1: left allmulticast mode [ 188.575576][ T918] snd_usb_podhd 2-1:0.0: endpoint not available, using fallback values [ 188.596693][ T918] snd_usb_podhd 2-1:0.0: invalid control EP [ 188.623898][ T918] snd_usb_podhd 2-1:0.0: cannot start listening: -22 [ 188.637232][ T918] snd_usb_podhd 2-1:0.0: Line 6 POD HDDESKTOP now disconnected [ 188.647740][ T918] snd_usb_podhd 2-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 188.781473][ T5918] usb 2-1: USB disconnect, device number 11 [ 189.236976][ T8363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.884'. [ 189.264939][ T8363] netlink: 16 bytes leftover after parsing attributes in process `syz.3.884'. [ 189.325794][ T8364] block device autoloading is deprecated and will be removed. [ 189.360339][ T8364] syz.2.885: attempt to access beyond end of device [ 189.360339][ T8364] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 190.404665][ T8412] netlink: 88 bytes leftover after parsing attributes in process `syz.3.902'. [ 190.626139][ T8419] tap0: tun_chr_ioctl cmd 1074812118 [ 191.046703][ T8434] Bluetooth: MGMT ver 1.23 [ 191.405429][ T5918] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 191.570290][ T5918] usb 3-1: Using ep0 maxpacket: 32 [ 191.592188][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.638217][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.661671][ T5918] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 191.700637][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.740318][ T5918] usb 3-1: config 0 descriptor?? [ 191.771523][ T5918] hub 3-1:0.0: USB hub found [ 191.969716][ T5918] hub 3-1:0.0: 1 port detected [ 192.382522][ T5918] usb 3-1: USB disconnect, device number 12 [ 192.621045][ T8481] autofs4:pid:8481:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189379) [ 192.636612][ T8481] autofs4:pid:8481:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 192.654515][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 192.852558][ T10] usb 4-1: config 241 has an invalid interface number: 0 but max is -1 [ 192.863488][ T10] usb 4-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 192.898132][ T10] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 192.938220][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.997502][ T10] usbhid 4-1:241.0: couldn't find an input interrupt endpoint [ 193.135298][ T5918] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 193.201704][ T9] usb 4-1: USB disconnect, device number 13 [ 193.345144][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.386423][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.419063][ T5918] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 193.438994][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.493044][ T5918] usb 2-1: config 0 descriptor?? [ 193.930428][ T5918] elo 0003:04E7:0030.000C: item fetching failed at offset 5/7 [ 193.955917][ T5918] elo 0003:04E7:0030.000C: parse failed [ 193.961655][ T5918] elo 0003:04E7:0030.000C: probe with driver elo failed with error -22 [ 194.175140][ T9] usb 2-1: USB disconnect, device number 12 [ 194.379754][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.936154][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 195.144907][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 195.173798][ T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 195.203417][ T9] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 195.222006][ T9] usb 7-1: Product: syz [ 195.236674][ T9] usb 7-1: Manufacturer: syz [ 195.251584][ T9] usb 7-1: SerialNumber: syz [ 195.268584][ T9] usb 7-1: config 0 descriptor?? [ 195.293573][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 195.355030][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 195.527916][ T10] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 195.580703][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 195.603301][ T10] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 195.650125][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.691409][ T9] gspca_zc3xx: reg_r err -71 [ 195.705846][ T10] usb 6-1: config 0 descriptor?? [ 195.724084][ T9] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 195.845013][ T9] usb 7-1: USB disconnect, device number 4 [ 196.275331][ T10] hid-thrustmaster 0003:044F:B65D.000D: hidraw0: USB HID v1.03 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0 [ 196.385449][ T10] hid-thrustmaster 0003:044F:B65D.000D: Wrong number of endpoints? [ 196.432045][ C0] hid-thrustmaster 0003:044F:B65D.000D: Unknown packet type 0x0, unable to proceed further with wheel init [ 196.662050][ T5870] usb 6-1: USB disconnect, device number 7 [ 197.389448][ T8652] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 197.603274][ C0] hrtimer: interrupt took 23374 ns [ 198.245013][ T8684] ipvlan2: entered promiscuous mode [ 198.267004][ T8684] ipvlan2: entered allmulticast mode [ 198.294522][ T8684] macvlan1: entered allmulticast mode [ 198.341322][ T8684] veth1_vlan: entered allmulticast mode [ 198.635072][ T5825] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 198.839966][ T5825] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.871317][ T5825] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.932968][ T5825] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.983746][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.023572][ T8690] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 199.089231][ T5825] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 199.387381][ T5825] usb 4-1: USB disconnect, device number 14 [ 199.804906][ T5870] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 199.966773][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 199.987041][ T5870] usb 6-1: config 0 has no interfaces? [ 199.993382][ T5870] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 200.048639][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.081313][ T5870] usb 6-1: config 0 descriptor?? [ 200.372137][ T918] usb 6-1: USB disconnect, device number 8 [ 201.691916][ T8800] random: crng reseeded on system resumption [ 202.294923][ T8828] netlink: 'syz.5.1034': attribute type 1 has an invalid length. [ 202.350447][ T8828] netlink: 212 bytes leftover after parsing attributes in process `syz.5.1034'. [ 202.414499][ T8828] netlink: 'syz.5.1034': attribute type 1 has an invalid length. [ 202.545648][ T8839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1038'. [ 202.720935][ T5892] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 202.893955][ T8850] netlink: 'syz.3.1042': attribute type 4 has an invalid length. [ 202.905124][ T5892] usb 3-1: Using ep0 maxpacket: 8 [ 202.932209][ T5892] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 202.948158][ T5892] usb 3-1: config 179 has no interface number 0 [ 202.978371][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1043'. [ 202.990986][ T5892] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 203.027265][ T5892] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 203.067280][ T5892] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 203.106090][ T5892] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 203.168486][ T5892] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 203.216101][ T5825] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 203.229707][ T5892] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 203.248067][ T8860] pim6reg: entered allmulticast mode [ 203.266430][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.290717][ T8834] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.333271][ T8867] pim6reg: left allmulticast mode [ 203.395285][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 203.418381][ T5825] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 203.427670][ T5825] usb 6-1: config 0 has no interface number 0 [ 203.447889][ T5825] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 203.464422][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.501233][ T5825] usb 6-1: Product: syz [ 203.524762][ T5825] usb 6-1: Manufacturer: syz [ 203.529541][ T5825] usb 6-1: SerialNumber: syz [ 203.565424][ T5825] usb 6-1: config 0 descriptor?? [ 203.609767][ T5825] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.813029][ T918] usb 3-1: USB disconnect, device number 13 [ 203.813028][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 203.813076][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 203.838635][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.852778][ T5825] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 203.896343][ T5825] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 203.919981][ T8874] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1049'. [ 204.002557][ T8878] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.289604][ T8885] netlink: 'syz.3.1054': attribute type 8 has an invalid length. [ 204.306190][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 204.307616][ T918] usb 6-1: USB disconnect, device number 9 [ 204.324734][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1054'. [ 204.346430][ T8885] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.354337][ T8885] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.393704][ T8885] bridge0: entered allmulticast mode [ 204.394206][ T918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 204.488723][ T918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 204.541897][ T918] quatech2 6-1:0.51: device disconnected [ 204.751340][ T8893] block device autoloading is deprecated and will be removed. [ 205.115527][ T5918] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 205.274741][ T918] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 205.307349][ T5918] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 205.336567][ T5918] usb 4-1: config 0 has no interface number 0 [ 205.354876][ T5918] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 205.395256][ T5918] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 205.437142][ T5918] usb 4-1: config 0 interface 255 has no altsetting 0 [ 205.461256][ T5918] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 205.472110][ T918] usb 7-1: Using ep0 maxpacket: 16 [ 205.504614][ T918] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.514817][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.527670][ T918] usb 7-1: config 0 has no interface number 0 [ 205.553445][ T918] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.576065][ T5918] usb 4-1: config 0 descriptor?? [ 205.605420][ T5918] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 205.627715][ T918] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.659021][ T918] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 205.684439][ T918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.711947][ T918] usb 7-1: config 0 descriptor?? [ 205.813950][ T5918] usb 4-1: USB disconnect, device number 15 [ 205.980831][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 206.349997][ T918] uclogic 0003:28BD:0071.000E: pen parameters not found [ 206.385127][ T918] uclogic 0003:28BD:0071.000E: interface is invalid, ignoring [ 206.619544][ T5892] usb 7-1: USB disconnect, device number 5 [ 206.923797][ T8972] rtc_cmos 00:00: Alarms can be up to one day in the future [ 207.220673][ T5918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 207.247972][ T5918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 207.280796][ T5918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 207.289265][ T5918] rtc_cmos 00:00: Alarms can be up to one day in the future [ 207.304760][ T5918] rtc rtc0: __rtc_set_alarm: err=-22 [ 207.305321][ T5892] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 207.498276][ T5892] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.523227][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.570752][ T5892] usb 4-1: config 0 descriptor?? [ 207.640910][ T5892] cp210x 4-1:0.0: cp210x converter detected [ 207.843212][ T9005] loop8: detected capacity change from 0 to 1 [ 207.904121][ T9005] Dev loop8: unable to read RDB block 1 [ 207.948175][ T9005] loop8: unable to read partition table [ 207.979286][ T9005] loop8: partition table beyond EOD, truncated [ 207.991203][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1094'. [ 208.016580][ T9005] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 208.037291][ T5892] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 208.076030][ T5892] usb 4-1: cp210x converter now attached to ttyUSB0 [ 208.293148][ T9] usb 4-1: USB disconnect, device number 16 [ 208.335779][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.530317][ T9] cp210x 4-1:0.0: device disconnected [ 208.582345][ T9026] ALSA: mixer_oss: invalid OSS volume '' [ 208.606737][ T9026] ALSA: mixer_oss: invalid OSS volume '' [ 208.635605][ T9026] ALSA: mixer_oss: invalid OSS volume '' [ 208.661057][ T9026] ALSA: mixer_oss: invalid OSS volume '' [ 208.794444][ T5892] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 209.004730][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 209.050754][ T5892] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 209.080317][ T5892] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 209.102007][ T5892] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 209.174756][ T5892] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 209.192290][ T5892] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 209.213472][ T5892] usb 6-1: config 0 interface 0 has no altsetting 0 [ 209.235101][ T5892] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 209.275212][ T5892] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 209.283729][ T5892] usb 6-1: Product: syz [ 209.322381][ T5892] usb 6-1: Manufacturer: syz [ 209.334444][ T5892] usb 6-1: SerialNumber: syz [ 209.355878][ T5892] usb 6-1: config 0 descriptor?? [ 209.374169][ T5892] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 209.431871][ T5892] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 209.621893][ T5918] usb 6-1: USB disconnect, device number 10 [ 209.662482][ T5918] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 210.336872][ T8604] Bluetooth: hci5: Frame reassembly failed (-84) [ 210.357739][ T9083] Bluetooth: hci5: Frame reassembly failed (-84) [ 211.115536][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 211.714400][ T5918] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 211.815720][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 211.824845][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 211.832762][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 211.875436][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 211.891068][ T5918] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 211.909784][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.933969][ T5918] usb 6-1: config 0 has no interface number 0 [ 211.958011][ T5918] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 211.983949][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.993641][ T5918] usb 6-1: Product: syz [ 211.999758][ T5918] usb 6-1: Manufacturer: syz [ 212.014416][ T5918] usb 6-1: SerialNumber: syz [ 212.026869][ T5918] usb 6-1: config 0 descriptor?? [ 212.050469][ T5918] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 212.071883][ T5918] usb 6-1: No valid video chain found. [ 212.244985][ T5918] usb 6-1: USB disconnect, device number 11 [ 212.368466][ T9146] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.381337][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 212.770697][ T9161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.356405][ T9184] macvlan2: entered promiscuous mode [ 213.400486][ T9184] bridge0: entered promiscuous mode [ 214.348009][ T9213] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.444393][ T5892] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 214.548746][ T9213] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.653299][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.682622][ T5892] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 214.738154][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.757289][ T9213] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.799954][ T5892] usb 2-1: config 0 descriptor?? [ 215.007359][ T9213] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.236078][ T5892] logitech 0003:046D:C50C.000F: unbalanced collection at end of report description [ 215.303009][ T5892] logitech 0003:046D:C50C.000F: parse failed [ 215.318519][ T5892] logitech 0003:046D:C50C.000F: probe with driver logitech failed with error -22 [ 215.404083][ T9213] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.483822][ T5892] usb 2-1: USB disconnect, device number 13 [ 215.510131][ T9213] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.581996][ T9213] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.650808][ T9213] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.518082][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1177'. [ 216.767403][ T9277] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 216.794158][ T9280] sctp: [Deprecated]: syz.2.1179 (pid 9280) Use of int in max_burst socket option deprecated. [ 216.794158][ T9280] Use struct sctp_assoc_value instead [ 217.740692][ T9313] loop7: detected capacity change from 0 to 2 [ 217.799828][ T9313] Dev loop7: unable to read RDB block 2 [ 217.809525][ T9313] loop7: unable to read partition table [ 217.840493][ T9313] loop7: partition table beyond EOD, truncated [ 217.895013][ T9313] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 217.895013][ T9313] ) failed (rc=-5) [ 218.732093][ T9348] sp0: Synchronizing with TNC [ 218.920885][ T9357] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 219.227851][ T9372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.725350][ T5892] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 219.909236][ T5892] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 219.951233][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.005451][ T5892] usb 2-1: config 0 descriptor?? [ 220.447640][ T5892] ath6kl: Failed to submit usb control message: -71 [ 220.474386][ T5892] ath6kl: unable to send the bmi data to the device: -71 [ 220.491777][ T5892] ath6kl: Unable to send get target info: -71 [ 220.514747][ T5892] ath6kl: Failed to init ath6kl core: -71 [ 220.612294][ T5892] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 220.656189][ T5892] usb 2-1: USB disconnect, device number 14 [ 221.561593][ T9425] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 221.579514][ T9425] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 221.626484][ T9428] netlink: 'syz.5.1233': attribute type 14 has an invalid length. [ 221.877561][ T9438] macvlan0: entered promiscuous mode [ 221.898034][ T9438] netlink: 'syz.5.1238': attribute type 1 has an invalid length. [ 221.914364][ T9438] netlink: 'syz.5.1238': attribute type 2 has an invalid length. [ 222.125817][ T9445] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1242'. [ 222.365740][ T9455] netlink: 120 bytes leftover after parsing attributes in process `syz.5.1246'. [ 222.679033][ T30] audit: type=1326 audit(1749011848.401:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9461 comm="syz.6.1250" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa77578e969 code=0x0 [ 222.845140][ T5918] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 222.860538][ T9471] openvswitch: netlink: Multiple metadata blocks provided [ 223.014663][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 223.028044][ T5918] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 177, changing to 11 [ 223.116355][ T5918] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.145181][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.153249][ T5918] usb 6-1: Product: syz [ 223.165329][ T5918] usb 6-1: Manufacturer: syz [ 223.183186][ T5918] usb 6-1: SerialNumber: syz [ 223.323416][ T9481] ipvlan2: entered promiscuous mode [ 223.331556][ T9481] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 223.340340][ T9481] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 224.045312][ T5918] cdc_ncm 6-1:1.0: SET_CRC_MODE failed [ 224.067567][ T5918] cdc_ncm 6-1:1.0: bind() failure [ 224.089966][ T5918] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 224.107597][ T5918] cdc_ncm 6-1:1.1: bind() failure [ 224.130263][ T5918] usb 6-1: USB disconnect, device number 12 [ 224.174404][ T918] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 224.254899][ T5892] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 224.334703][ T918] usb 7-1: Using ep0 maxpacket: 32 [ 224.343197][ T918] usb 7-1: config 0 interface 0 has no altsetting 0 [ 224.360026][ T918] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 224.373878][ T918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.398655][ T918] usb 7-1: Product: syz [ 224.402969][ T918] usb 7-1: Manufacturer: syz [ 224.420788][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 224.424501][ T918] usb 7-1: SerialNumber: syz [ 224.440840][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 224.461424][ T918] usb 7-1: config 0 descriptor?? [ 224.466680][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 224.466711][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 224.469987][ T5892] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 224.544577][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.562978][ T5892] usb 3-1: Product: syz [ 224.573109][ T5892] usb 3-1: Manufacturer: syz [ 224.584985][ T5892] usb 3-1: SerialNumber: syz [ 224.601372][ T5892] usb 3-1: config 0 descriptor?? [ 224.627725][ T5892] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 224.846203][ T5892] scsi host1: usb-storage 3-1:0.0 [ 224.895733][ T918] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 225.062234][ T5870] usb 3-1: USB disconnect, device number 14 [ 225.347328][ T918] usb 7-1: USB disconnect, device number 6 [ 225.436036][ T5870] kernel write not supported for file /270/loginuid (pid: 5870 comm: kworker/1:4) [ 226.264817][ T918] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 226.297592][ T9569] syz.2.1297 uses obsolete (PF_INET,SOCK_PACKET) [ 226.436581][ T918] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.472145][ T918] usb 7-1: config 0 has no interfaces? [ 226.491119][ T918] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 226.520970][ T918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.523372][ T30] audit: type=1326 audit(1749011852.241:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9573 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc0f8e969 code=0x7ffc0000 [ 226.553527][ T918] usb 7-1: config 0 descriptor?? [ 226.594769][ T918] usb 7-1: can't set config #0, error -71 [ 226.620457][ T918] usb 7-1: USB disconnect, device number 7 [ 226.665744][ T30] audit: type=1326 audit(1749011852.241:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9573 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc0f8e969 code=0x7ffc0000 [ 226.750207][ T30] audit: type=1326 audit(1749011852.291:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9573 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bc0f8e969 code=0x7ffc0000 [ 226.800152][ T30] audit: type=1326 audit(1749011852.291:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9573 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc0f8e969 code=0x7ffc0000 [ 226.827092][ T30] audit: type=1326 audit(1749011852.291:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9573 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc0f8e969 code=0x7ffc0000 [ 226.853418][ T30] audit: type=1326 audit(1749011852.301:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9573 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bc0f8e969 code=0x7ffc0000 [ 226.887882][ T30] audit: type=1326 audit(1749011852.301:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9573 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bc0f8e969 code=0x7ffc0000 [ 226.921147][ T30] audit: type=1326 audit(1749011852.301:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9573 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4bc0f85927 code=0x7ffc0000 [ 226.947072][ T30] audit: type=1326 audit(1749011852.301:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9573 comm="syz.3.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4bc0f2ab39 code=0x7ffc0000 [ 227.752838][ T9614] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 227.882202][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 228.671257][ T9658] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1339'. [ 229.376446][ T9676] vivid-000: disconnect [ 229.396619][ T9675] vivid-000: reconnect [ 230.289484][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 230.289567][ T30] audit: type=1326 audit(1749011856.001:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9718 comm="syz.6.1369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa77578e969 code=0x0 [ 230.705787][ T9742] input: syz0 as /devices/virtual/input/input20 [ 230.855112][ T5870] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 230.981013][ T5825] kernel write not supported for file /640/loginuid (pid: 5825 comm: kworker/0:3) [ 231.026766][ T5870] usb 6-1: config index 0 descriptor too short (expected 69, got 36) [ 231.048566][ T5870] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.079820][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 231.145538][ T5870] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 231.155204][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.163236][ T5870] usb 6-1: Product: syz [ 231.192148][ T5870] usb 6-1: Manufacturer: syz [ 231.199851][ T5892] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.204393][ T5870] usb 6-1: SerialNumber: syz [ 231.231269][ T5870] usb 6-1: config 0 descriptor?? [ 231.281866][ T5870] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 231.384977][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 231.405103][ T5892] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 231.420135][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.449602][ T5892] usb 3-1: config 0 descriptor?? [ 231.472189][ T5892] gspca_main: sunplus-2.14.0 probing 041e:400b [ 231.716227][ T9769] program syz.1.1393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.975092][ T5918] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 232.100496][ T5870] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 232.107856][ T5870] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 232.119777][ T5870] usb 6-1: USB disconnect, device number 13 [ 232.134782][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 232.156398][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.168218][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.180256][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.213012][ T5918] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.222361][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.243098][ T5918] usb 4-1: config 0 descriptor?? [ 232.293363][ T5892] gspca_sunplus: reg_r err -71 [ 232.305319][ T5892] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 232.319840][ T5892] usb 3-1: USB disconnect, device number 15 [ 232.669890][ T5918] microsoft 0003:045E:07DA.0010: unknown main item tag 0x6 [ 232.689701][ T5918] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 232.700686][ T5918] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 232.710306][ T5918] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 232.718272][ T5918] microsoft 0003:045E:07DA.0010: report is too long [ 232.726310][ T5918] microsoft 0003:045E:07DA.0010: item 0 4 0 9 parsing failed [ 232.735160][ T5918] microsoft 0003:045E:07DA.0010: parse failed [ 232.747064][ T9793] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1405'. [ 232.757133][ T5918] microsoft 0003:045E:07DA.0010: probe with driver microsoft failed with error -22 [ 232.774498][ T9793] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 232.897157][ T5918] usb 4-1: USB disconnect, device number 17 [ 233.693655][ T9836] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1425'. [ 234.096942][ T30] audit: type=1400 audit(1749011859.821:45): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=9858 comm="syz.1.1436" name="308" dev="tmpfs" ino=1594 [ 234.234556][ T9867] syz.1.1440: attempt to access beyond end of device [ 234.234556][ T9867] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 234.262657][ T9867] syz.1.1440: attempt to access beyond end of device [ 234.262657][ T9867] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 234.690366][ T9890] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 234.690366][ T9890] The task syz.6.1446 (9890) triggered the difference, watch for misbehavior. [ 234.815878][ T9896] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1452'. [ 235.204710][ T5918] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 235.370412][ T5918] usb 6-1: config 0 has an invalid interface number: 230 but max is 0 [ 235.383284][ T9917] kvm: kvm [9916]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010005) = 0xaf [ 235.403470][ T5918] usb 6-1: config 0 has no interface number 0 [ 235.414905][ T5918] usb 6-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=83.43 [ 235.433000][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.456388][ T5918] usb 6-1: Product: syz [ 235.460625][ T5918] usb 6-1: Manufacturer: syz [ 235.471738][ T5918] usb 6-1: SerialNumber: syz [ 235.481621][ T5918] usb 6-1: config 0 descriptor?? [ 235.489788][ T5918] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 235.718217][ T5892] usb 6-1: USB disconnect, device number 14 [ 236.655823][ T9961] kvm_intel: kvm [9960]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 237.444063][ T9999] netlink: 'syz.1.1501': attribute type 1 has an invalid length. [ 237.463650][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1502'. [ 237.514688][ T5892] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 237.684489][ T5892] usb 7-1: Using ep0 maxpacket: 16 [ 237.705398][ T5892] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 237.723898][ T5892] usb 7-1: config 0 has no interface number 0 [ 237.744217][ T5892] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 237.772269][ T5892] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 237.801434][ T5892] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 237.827915][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.843553][ T5892] usb 7-1: Product: syz [ 237.848435][ T5892] usb 7-1: Manufacturer: syz [ 237.872670][ T5892] usb 7-1: SerialNumber: syz [ 237.900273][ T5892] usb 7-1: config 0 descriptor?? [ 237.919379][ T9996] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 237.937656][ T9996] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 238.107261][T10022] netlink: 'syz.3.1511': attribute type 25 has an invalid length. [ 238.127535][T10022] netlink: 'syz.3.1511': attribute type 8 has an invalid length. [ 238.167861][ T9996] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 238.180918][ T9996] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 238.614055][ T5892] asix 7-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 238.659477][ T5892] asix 7-1:0.251: probe with driver asix failed with error -524 [ 238.842669][ T5918] usb 7-1: USB disconnect, device number 8 [ 239.364992][ T5825] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 239.531387][ T5825] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 239.545218][ T5825] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 239.574424][ T5825] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 239.633273][ T5825] usb 3-1: config 220 has no interface number 2 [ 239.670409][ T5825] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 239.725596][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1535'. [ 239.744920][ T5825] usb 3-1: config 220 interface 0 has no altsetting 0 [ 239.751757][ T5825] usb 3-1: config 220 interface 76 has no altsetting 0 [ 239.793300][ T5825] usb 3-1: config 220 interface 1 has no altsetting 0 [ 239.828750][ T5825] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 239.845049][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.853112][ T5825] usb 3-1: Product: syz [ 239.880739][ T5825] usb 3-1: Manufacturer: syz [ 239.890674][ T5825] usb 3-1: SerialNumber: syz [ 240.145438][ T5825] usb 3-1: selecting invalid altsetting 0 [ 240.183184][ T5825] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 240.218110][ T5825] usb 3-1: No valid video chain found. [ 240.271178][ T5825] usb 3-1: selecting invalid altsetting 0 [ 240.307533][ T5825] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 240.354798][ T5825] usb 3-1: USB disconnect, device number 16 [ 240.627067][T10089] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1542'. [ 240.867378][T10098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.637189][ T5918] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 241.804760][ T5918] usb 2-1: Using ep0 maxpacket: 32 [ 241.820678][ T5918] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 241.820707][T10146] netlink: 'syz.3.1568': attribute type 10 has an invalid length. [ 241.852112][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.859712][T10146] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1568'. [ 241.885432][T10146] team0: entered promiscuous mode [ 241.889829][ T5918] usb 2-1: config 0 descriptor?? [ 241.892316][T10146] team_slave_0: entered promiscuous mode [ 241.915608][T10146] team_slave_1: entered promiscuous mode [ 241.931452][T10146] team0: entered allmulticast mode [ 241.938141][T10146] team_slave_0: entered allmulticast mode [ 241.943950][T10146] team_slave_1: entered allmulticast mode [ 241.976198][T10146] bridge0: port 3(team0) entered blocking state [ 242.010036][T10146] bridge0: port 3(team0) entered disabled state [ 242.123392][ T5918] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 242.161375][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.188524][ T5918] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 242.214361][ T5918] usb 2-1: media controller created [ 242.278955][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.297366][T10161] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1575'. [ 242.345490][ T5918] az6027: usb out operation failed. (-71) [ 242.366373][ T5918] az6027: usb out operation failed. (-71) [ 242.372173][ T5918] stb0899_attach: Driver disabled by Kconfig [ 242.406941][ T5918] az6027: no front-end attached [ 242.406941][ T5918] [ 242.421712][ T5918] az6027: usb out operation failed. (-71) [ 242.442669][ T5918] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 242.463936][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 242.482073][ T5918] dvb-usb: schedule remote query interval to 400 msecs. [ 242.491605][ T5918] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 242.512041][ T5918] usb 2-1: USB disconnect, device number 15 [ 242.558763][T10170] loop2: detected capacity change from 0 to 7 [ 242.596600][T10170] Dev loop2: unable to read RDB block 7 [ 242.609952][T10170] loop2: unable to read partition table [ 242.616689][T10170] loop2: partition table beyond EOD, truncated [ 242.623020][T10170] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 242.638087][ T5918] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 243.008394][T10181] cgroup: fork rejected by pids controller in /syz3 [ 243.701254][ T5825] kernel write not supported for file /uhid (pid: 5825 comm: kworker/0:3) [ 243.966292][ T30] audit: type=1326 audit(1749011869.691:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11073 comm="syz.6.1600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa77578e969 code=0x0 [ 244.234650][T11079] kernel read not supported for file /eth0 (pid: 11079 comm: syz.3.1604) [ 244.248074][ T30] audit: type=1800 audit(1749011869.961:47): pid=11079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1604" name="eth0" dev="mqueue" ino=27314 res=0 errno=0 [ 244.342716][T11083] input: syz0 as /devices/virtual/input/input22 [ 244.521103][T11090] pimreg: entered allmulticast mode [ 244.535141][T11090] pimreg: left allmulticast mode [ 244.649332][T11095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1610'. [ 245.031444][T11114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1620'. [ 245.072796][T11114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1620'. [ 245.157849][T11118] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1622'. [ 245.756590][T11141] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1632'. [ 246.375961][T11165] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1644'. [ 246.599827][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1647'. [ 246.783109][T11180] loop2: detected capacity change from 0 to 7 [ 246.827188][T11180] Dev loop2: unable to read RDB block 7 [ 246.833432][T11180] loop2: unable to read partition table [ 246.833662][T11180] loop2: partition table beyond EOD, truncated [ 246.833694][T11180] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 246.972283][T11189] macsec1: entered promiscuous mode [ 246.995253][T11189] macvlan1: entered promiscuous mode [ 247.034016][T11189] macvlan1: left promiscuous mode [ 251.594387][ T918] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 251.756634][ T918] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 251.770341][ T918] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.789481][ T918] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.808671][T11332] batadv_slave_0: entered promiscuous mode [ 251.815312][ T5825] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 251.816713][ T918] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 251.842313][T11332] batadv_slave_0: left promiscuous mode [ 251.853799][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.890630][ T918] usb 2-1: config 0 descriptor?? [ 251.902406][T11316] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 251.944856][ T5892] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 251.975381][ T5825] usb 4-1: Using ep0 maxpacket: 8 [ 251.994460][ T5825] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 252.010788][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.025125][ T5825] usb 4-1: Product: syz [ 252.031067][ T5825] usb 4-1: Manufacturer: syz [ 252.039638][ T5825] usb 4-1: SerialNumber: syz [ 252.068402][ T5825] usb 4-1: config 0 descriptor?? [ 252.081132][ T5825] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 252.116768][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.141815][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.172863][ T5892] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 252.192279][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.215651][ T5892] usb 3-1: config 0 descriptor?? [ 252.353804][ T918] logitech 0003:046D:C623.0011: item fetching failed at offset 0/4 [ 252.363258][ T918] logitech 0003:046D:C623.0011: parse failed [ 252.380615][ T918] logitech 0003:046D:C623.0011: probe with driver logitech failed with error -22 [ 252.555781][ T918] usb 2-1: USB disconnect, device number 16 [ 252.708967][ T5825] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 252.724840][ T5892] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 252.747281][ T5825] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 252.755283][ T5892] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 252.768947][ T5825] usb 4-1: USB disconnect, device number 18 [ 252.900789][ T5892] cp2112 0003:10C4:EA90.0012: Part Number: 0x82 Device Version: 0xFE [ 253.096267][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1720'. [ 253.111578][ T5892] cp2112 0003:10C4:EA90.0012: error requesting SMBus config [ 253.131925][ T5892] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -71 [ 253.165725][ T5892] usb 3-1: USB disconnect, device number 17 [ 253.724716][ T5892] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 253.894931][ T5892] usb 7-1: Using ep0 maxpacket: 32 [ 253.903686][ T5892] usb 7-1: config 0 interface 0 has no altsetting 0 [ 253.950436][T11381] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 253.959230][ T5892] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 253.969773][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.988198][ T5892] usb 7-1: Product: syz [ 253.992416][ T5892] usb 7-1: Manufacturer: syz [ 254.013368][ T5892] usb 7-1: SerialNumber: syz [ 254.014776][T11382] tap0: tun_chr_ioctl cmd 1074025677 [ 254.041424][ T5892] usb 7-1: config 0 descriptor?? [ 254.045700][T11382] tap0: linktype set to 825 [ 254.488502][ T5892] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 254.950099][ T5892] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 254.990191][ T5892] usb 7-1: USB disconnect, device number 9 [ 255.590683][T11429] netem: incorrect ge model size [ 255.604880][T11429] netem: change failed [ 255.614337][ T5918] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 255.797061][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.822000][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.824125][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.834351][ T5918] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 255.886391][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.918078][ T5918] usb 6-1: config 0 descriptor?? [ 256.348443][ T5918] pyra 0003:1E7D:2CF6.0013: unexpected long global item [ 256.356846][ T5918] pyra 0003:1E7D:2CF6.0013: parse failed [ 256.372266][ T5918] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -22 [ 256.557845][ T5918] usb 6-1: USB disconnect, device number 15 [ 256.834603][ T5870] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 256.963604][T11471] rtc_cmos 00:00: Alarms can be up to one day in the future [ 256.983573][T11470] rtc_cmos 00:00: Alarms can be up to one day in the future [ 256.998077][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 257.015963][ T5870] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 257.031555][ T5870] usb 4-1: config 0 has no interface number 0 [ 257.047141][ T5870] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 257.075806][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.094200][ T5870] usb 4-1: Product: syz [ 257.098609][ T5870] usb 4-1: Manufacturer: syz [ 257.103240][ T5870] usb 4-1: SerialNumber: syz [ 257.129660][ T5870] usb 4-1: config 0 descriptor?? [ 257.144755][ T5870] smsc95xx v2.0.0 [ 257.148457][ T5870] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 257.183875][ T5870] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 257.215391][ T5870] rtc_cmos 00:00: Alarms can be up to one day in the future [ 257.233406][ T5870] rtc_cmos 00:00: Alarms can be up to one day in the future [ 257.243903][ T5870] rtc_cmos 00:00: Alarms can be up to one day in the future [ 257.262076][ T5870] rtc_cmos 00:00: Alarms can be up to one day in the future [ 257.280903][ T5870] rtc rtc0: __rtc_set_alarm: err=-22 [ 257.284597][ T5825] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 257.393992][ T5870] usb 4-1: USB disconnect, device number 19 [ 257.460989][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 257.475491][ T5825] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 257.494954][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 257.513555][ T5825] usb 2-1: SerialNumber: syz [ 257.528134][ T5825] usb 2-1: config 0 descriptor?? [ 257.536601][ T5825] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 257.546303][ T5825] usb 2-1: Detected FT232A [ 257.552540][ T5825] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 257.755947][ T5825] usb 2-1: USB disconnect, device number 17 [ 257.771539][ T5825] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 257.790432][ T5825] ftdi_sio 2-1:0.0: device disconnected [ 257.978780][T11499] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1784'. [ 257.989644][T11499] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1784'. [ 258.021389][T11499] netlink: 81 bytes leftover after parsing attributes in process `syz.2.1784'. [ 258.255820][T11511] team0: Device gtp0 is of different type [ 258.407533][T11519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1794'. [ 259.119843][T11545] input: syz0 as /devices/virtual/input/input23 [ 259.388953][T11551] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1808'. [ 260.912682][T11595] cgroup: fork rejected by pids controller in /syz1 [ 261.025691][T11611] block nbd6: shutting down sockets [ 261.745041][T12272] mkiss: ax0: crc mode is auto. [ 262.039181][T12308] syz.1.1844 (12308) used greatest stack depth: 17464 bytes left [ 262.905662][T12329] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1853'. [ 263.604871][ T918] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 263.799907][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.811254][ T918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.837945][ T918] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 263.858350][ T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.886096][ T918] usb 2-1: config 0 descriptor?? [ 263.931907][ T8611] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.032857][ T8611] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.128509][ T8611] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.240968][ T8611] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.332300][ T918] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 264.364866][ T918] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 264.379087][ T918] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 264.393078][ T918] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 264.424542][ T918] playstation 0003:054C:0DF2.0014: unknown main item tag 0x0 [ 264.444875][ T918] playstation 0003:054C:0DF2.0014: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 264.528428][ T8611] bridge_slave_1: left allmulticast mode [ 264.539247][ T918] playstation 0003:054C:0DF2.0014: Invalid reportID received, expected 9 got 0 [ 264.559659][ T8611] bridge_slave_1: left promiscuous mode [ 264.568145][ T918] playstation 0003:054C:0DF2.0014: Failed to retrieve DualSense pairing info: -22 [ 264.590552][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.625467][ T918] playstation 0003:054C:0DF2.0014: Failed to get MAC address from DualSense [ 264.646076][ T918] playstation 0003:054C:0DF2.0014: Failed to create dualsense. [ 264.655588][ T8611] bridge_slave_0: left allmulticast mode [ 264.661272][ T8611] bridge_slave_0: left promiscuous mode [ 264.674759][ T8611] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.685643][ T918] playstation 0003:054C:0DF2.0014: probe with driver playstation failed with error -22 [ 264.784705][ T5825] usb 2-1: USB disconnect, device number 18 [ 264.837136][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.855058][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.865421][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.873442][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.883307][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.944717][ T5869] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 265.106418][ T5869] usb 7-1: Using ep0 maxpacket: 16 [ 265.122745][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.146131][ T5869] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17768, setting to 1024 [ 265.158035][ T5869] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.175433][ T5869] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 265.186866][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.198039][ T5869] usb 7-1: config 0 descriptor?? [ 265.209594][T12386] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 265.224573][ T5869] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input24 [ 265.264768][ T8611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.280732][ T8611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.291103][ T8611] bond0 (unregistering): Released all slaves [ 265.543488][ T5825] usb 7-1: USB disconnect, device number 10 [ 265.766130][ T5892] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 265.779867][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1889'. [ 265.893880][ T8611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.910930][ T8611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.925381][ T8611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.928315][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 265.943039][ T8611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.950702][ T5892] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 265.950728][ T5892] usb 4-1: config 0 has no interface number 0 [ 265.950769][ T5892] usb 4-1: config 0 interface 12 has no altsetting 0 [ 265.954896][ T5892] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 265.982924][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.991669][ T5892] usb 4-1: Product: syz [ 265.995999][ T5892] usb 4-1: Manufacturer: syz [ 266.000700][ T5892] usb 4-1: SerialNumber: syz [ 266.015311][ T5892] usb 4-1: config 0 descriptor?? [ 266.021475][ T8611] hsr0: left allmulticast mode [ 266.027325][ T8611] veth1_macvtap: left promiscuous mode [ 266.032903][ T8611] veth0_macvtap: left promiscuous mode [ 266.039379][ T8611] veth1_vlan: left promiscuous mode [ 266.045527][ T8611] veth0_vlan: left promiscuous mode [ 266.151940][T12416] netlink: 'syz.1.1894': attribute type 13 has an invalid length. [ 266.162008][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1895'. [ 266.261662][ T8611] team0 (unregistering): Port device batadv1 removed [ 266.660906][ T8611] team0 (unregistering): Port device team_slave_1 removed [ 266.662929][ T5892] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 266.682122][ T5892] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 266.689806][ T5892] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 266.705637][ T5892] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 266.719830][ T5892] usb 4-1: USB disconnect, device number 20 [ 266.727813][ T8611] team0 (unregistering): Port device team_slave_0 removed [ 266.936837][ T5833] Bluetooth: hci2: command tx timeout [ 267.480527][T12416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.495069][T12416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.577614][T12416] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.588278][T12416] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.597277][T12416] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.606427][T12416] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.710324][T12391] chnl_net:caif_netlink_parms(): no params data found [ 268.109416][T12391] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.118222][T12391] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.126172][T12391] bridge_slave_0: entered allmulticast mode [ 268.134380][T12391] bridge_slave_0: entered promiscuous mode [ 268.136591][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 268.144804][T12391] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.153611][T12391] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.175730][T12391] bridge_slave_1: entered allmulticast mode [ 268.190855][T12391] bridge_slave_1: entered promiscuous mode [ 268.262064][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'. [ 268.297739][T12454] tap0: tun_chr_ioctl cmd 1074025677 [ 268.303271][T12454] tap0: linktype set to 270 [ 268.375554][T12391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.433391][T12391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.625830][T12391] team0: Port device team_slave_0 added [ 268.660491][T12391] team0: Port device team_slave_1 added [ 269.024820][ T5824] Bluetooth: hci2: command tx timeout [ 269.048757][T12391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.070734][T12391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.104826][T12391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.118826][T12391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.126097][T12391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.154535][T12391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.409674][T12391] hsr_slave_0: entered promiscuous mode [ 269.431610][T12391] hsr_slave_1: entered promiscuous mode [ 269.442971][T12391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.460815][T12391] Cannot create hsr debugfs directory [ 270.332823][T12391] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 270.372633][T12391] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 270.418272][T12391] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.462057][T12391] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.658798][T12391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.727528][T12391] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.763132][ T8604] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.770319][ T8604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.877470][ T8611] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.884736][ T8611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.081208][T12536] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1943'. [ 271.094476][ T5824] Bluetooth: hci2: command tx timeout [ 271.124821][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1943'. [ 271.620619][T12391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.742560][T12556] loop6: detected capacity change from 0 to 524287999 [ 271.748821][T12391] veth0_vlan: entered promiscuous mode [ 271.799554][T12391] veth1_vlan: entered promiscuous mode [ 271.895559][T12391] veth0_macvtap: entered promiscuous mode [ 271.919856][T12391] veth1_macvtap: entered promiscuous mode [ 271.974007][T12391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.001703][T12560] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1953'. [ 272.004524][ T5870] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 272.023321][T12391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.061088][T12391] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.070913][T12391] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.091033][T12391] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.103084][T12391] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.204344][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 272.221811][ T5870] usb 4-1: config 0 has no interfaces? [ 272.238934][ T5870] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.251405][T12562] netlink: 'syz.1.1954': attribute type 1 has an invalid length. [ 272.262276][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.272892][ T5870] usb 4-1: Product: syz [ 272.277720][ T5870] usb 4-1: Manufacturer: syz [ 272.281231][T12562] netlink: 'syz.1.1954': attribute type 2 has an invalid length. [ 272.282479][ T5870] usb 4-1: SerialNumber: syz [ 272.313934][ T5870] usb 4-1: config 0 descriptor?? [ 272.352750][ T8611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.375811][ T8611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.427320][ T8611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.449446][ T8611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.582276][ T5870] usb 4-1: USB disconnect, device number 21 [ 272.834971][ T5918] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 272.956542][T12594] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1969'. [ 272.996856][ T5918] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 273.006352][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.028395][ T5918] usb 3-1: config 0 descriptor?? [ 273.051561][ T5918] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 273.185044][ T5824] Bluetooth: hci2: command tx timeout [ 273.259730][ T5918] gp8psk: usb in 128 operation failed. [ 273.269437][ T5918] gp8psk: usb in 137 operation failed. [ 273.275672][ T5918] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 273.286947][ T5918] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 273.295878][ T5918] usb 3-1: media controller created [ 273.348227][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.414914][ T5918] gp8psk_fe: Frontend attached [ 273.420090][ T5918] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 273.456408][ T5918] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 273.611809][ T5918] gp8psk: usb in 138 operation failed. [ 273.634117][ T5918] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 273.665690][ T5918] gp8psk: found Genpix USB device pID = 203 (hex) [ 273.694768][ T5918] usb 3-1: USB disconnect, device number 18 [ 273.935335][ T5918] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 274.220960][T12633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1988'. [ 274.393363][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'. [ 274.434453][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1991'. [ 274.492008][T12645] nbd: socks must be embedded in a SOCK_ITEM attr [ 274.876366][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 274.898956][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1999'. [ 275.004715][ T5869] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 275.178155][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 275.192667][ T5869] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.c0 [ 275.209288][ T5869] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.231709][ T5869] usb 7-1: config 0 descriptor?? [ 275.371023][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2009'. [ 275.452711][ T5869] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 275.471101][ T5869] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.482548][ T5869] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 275.494704][ T5918] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 275.526372][ T5869] usb 7-1: media controller created [ 275.564810][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.656213][ T5869] az6027: usb out operation failed. (-71) [ 275.662480][ T5869] az6027: usb out operation failed. (-71) [ 275.687275][ T5869] stb0899_attach: Driver disabled by Kconfig [ 275.705180][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.794372][ T5869] az6027: no front-end attached [ 275.794372][ T5869] [ 275.802977][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.824380][ T5869] az6027: usb out operation failed. (-71) [ 275.830197][ T5869] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 275.837791][ T5918] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 275.858555][ T5869] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input25 [ 275.870232][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.905255][ T5918] usb 4-1: config 0 descriptor?? [ 275.910814][ T5869] dvb-usb: schedule remote query interval to 400 msecs. [ 275.941009][ T5869] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 275.961850][ T5869] usb 7-1: USB disconnect, device number 11 [ 276.061891][ T5869] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 276.347274][ T5918] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 276.371594][ T5918] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 276.390025][ T5918] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 276.412317][ T5918] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 276.435936][ T5918] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 276.442893][ T5918] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 276.476754][ T5918] arvo 0003:1E7D:30D4.0015: unknown main item tag 0x0 [ 276.505082][ T5918] arvo 0003:1E7D:30D4.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 276.777481][ T5918] usb 4-1: USB disconnect, device number 22 [ 276.974429][ T5892] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 276.994536][ T5825] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 277.141980][ T5892] usb 6-1: Using ep0 maxpacket: 32 [ 277.151294][T12730] netlink: 'syz.1.2033': attribute type 4 has an invalid length. [ 277.154817][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.179203][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.189430][ T5892] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 277.199492][ T5825] usb 7-1: Using ep0 maxpacket: 32 [ 277.206497][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.217815][ T5825] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 277.239887][ T5825] usb 7-1: config 0 has no interface number 0 [ 277.248805][ T5892] usb 6-1: config 0 descriptor?? [ 277.269095][ T5825] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 277.279259][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.287489][ T5825] usb 7-1: Product: syz [ 277.291928][ T5825] usb 7-1: Manufacturer: syz [ 277.297245][ T5825] usb 7-1: SerialNumber: syz [ 277.306002][ T5825] usb 7-1: config 0 descriptor?? [ 277.331455][ T5825] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 277.556868][ T5825] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 277.566392][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 277.583002][ T5825] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 277.681617][ T5892] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 277.724377][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 277.747204][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 277.777603][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 277.795835][T12715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.809587][ T9] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 277.824725][T12715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.832926][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 277.846676][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 277.856265][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.867611][ T9] usb 2-1: Product: syz [ 277.885743][ T9] usb 2-1: Manufacturer: syz [ 277.895264][ T9] usb 2-1: SerialNumber: syz [ 277.904490][ T9] usb 2-1: config 0 descriptor?? [ 277.910618][T12734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 277.947796][ T5825] usb 6-1: USB disconnect, device number 16 [ 278.043652][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 278.053179][ T5892] usb 7-1: USB disconnect, device number 12 [ 278.071213][ T5892] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 278.087799][ T5892] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 278.101026][ T5892] quatech2 7-1:0.51: device disconnected [ 278.135802][T12734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 278.148784][T12761] netlink: 'syz.2.2048': attribute type 2 has an invalid length. [ 278.149173][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input26 [ 278.410592][ T5869] usb 2-1: USB disconnect, device number 19 [ 278.464750][ T5918] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 278.626219][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 278.641399][T12775] can0: slcan on ttyS3. [ 278.656523][ T5918] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 278.674552][ T5918] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 278.695689][ T5918] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 278.716475][ T5918] usb 4-1: config 1 has no interface number 0 [ 278.724451][ T5918] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.724511][T12775] can0 (unregistered): slcan off ttyS3. [ 278.741358][ T5918] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 278.760658][ T5918] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 278.812134][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.837462][ T5918] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 279.059944][ T5918] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 279.521334][ T5892] usb 4-1: USB disconnect, device number 23 [ 279.545883][ T5892] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 279.661671][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 280.417002][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.505252][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.638253][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.767303][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.075121][ T12] bridge_slave_1: left allmulticast mode [ 281.080873][ T12] bridge_slave_1: left promiscuous mode [ 281.102983][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.127111][ T12] bridge_slave_0: left allmulticast mode [ 281.132856][ T12] bridge_slave_0: left promiscuous mode [ 281.162227][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.346371][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.359246][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.368063][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.379257][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.388197][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.521404][ T918] IPVS: starting estimator thread 0... [ 281.629187][T12860] IPVS: using max 24 ests per chain, 57600 per kthread [ 282.135312][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.148358][T12876] sctp: [Deprecated]: syz.3.2102 (pid 12876) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.148358][T12876] Use struct sctp_sack_info instead [ 282.170034][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.181378][ T12] bond0 (unregistering): Released all slaves [ 282.362043][T12880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2103'. [ 282.546675][T12888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.852479][ T12] hsr_slave_0: left promiscuous mode [ 282.861586][ T12] hsr_slave_1: left promiscuous mode [ 282.868036][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.876424][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.888612][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.896337][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.955335][ T12] veth1_macvtap: left promiscuous mode [ 282.964999][ T12] veth0_macvtap: left promiscuous mode [ 282.974180][ T12] veth1_vlan: left promiscuous mode [ 282.983396][ T12] veth0_vlan: left promiscuous mode [ 283.044453][ T30] audit: type=1326 audit(1749011908.751:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4bc0f85927 code=0x7ffc0000 [ 283.108930][ T30] audit: type=1326 audit(1749011908.771:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4bc0f2ab39 code=0x7ffc0000 [ 283.130399][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.203584][ T30] audit: type=1326 audit(1749011908.771:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4bc0f85927 code=0x7ffc0000 [ 283.253227][ T30] audit: type=1326 audit(1749011908.771:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4bc0f2ab39 code=0x7ffc0000 [ 283.279001][ T30] audit: type=1326 audit(1749011908.771:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4bc0f85927 code=0x7ffc0000 [ 283.361610][ T30] audit: type=1326 audit(1749011908.771:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4bc0f2ab39 code=0x7ffc0000 [ 283.407200][ T30] audit: type=1326 audit(1749011908.771:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4bc0f85927 code=0x7ffc0000 [ 283.428616][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.438283][ T5824] Bluetooth: hci4: command tx timeout [ 283.450309][ T30] audit: type=1326 audit(1749011908.771:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4bc0f2ab39 code=0x7ffc0000 [ 283.473048][ T30] audit: type=1326 audit(1749011908.771:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4bc0f85927 code=0x7ffc0000 [ 283.494455][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.502366][ T30] audit: type=1326 audit(1749011908.771:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12905 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4bc0f2ab39 code=0x7ffc0000 [ 283.943219][T12925] netlink: 'syz.5.2125': attribute type 8 has an invalid length. [ 283.952971][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2125'. [ 284.220398][ T12] team0 (unregistering): Port device team_slave_1 removed [ 284.286319][ T12] team0 (unregistering): Port device team_slave_0 removed [ 285.160409][T12853] chnl_net:caif_netlink_parms(): no params data found [ 285.504877][ T5824] Bluetooth: hci4: command tx timeout [ 285.763802][T12853] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.783511][T12853] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.814008][T12853] bridge_slave_0: entered allmulticast mode [ 285.843483][T12853] bridge_slave_0: entered promiscuous mode [ 285.859225][T12853] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.877114][T12853] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.924484][ T5825] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 285.924615][T12853] bridge_slave_1: entered allmulticast mode [ 285.975177][T12853] bridge_slave_1: entered promiscuous mode [ 286.107639][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 286.117691][T12853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.141955][T12994] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.148997][T13001] netlink: 'syz.2.2154': attribute type 9 has an invalid length. [ 286.150810][T12994] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.167548][T12994] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.176386][T12994] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.201944][T12853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.204369][ T5825] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 286.241714][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 286.245734][T13001] bond_slave_0: entered promiscuous mode [ 286.257889][T13001] bond_slave_1: entered promiscuous mode [ 286.262075][ T5825] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 286.293959][T13001] macvlan2: entered promiscuous mode [ 286.303803][ T5825] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 286.315053][T13001] bond0: entered promiscuous mode [ 286.315629][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.337008][T13001] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 286.354411][ T5825] usb 6-1: Product: syz [ 286.362004][ T5825] usb 6-1: Manufacturer: syz [ 286.374880][ T5825] usb 6-1: SerialNumber: syz [ 286.392667][ T5825] usb 6-1: config 0 descriptor?? [ 286.410554][ T5825] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 286.555871][T12853] team0: Port device team_slave_0 added [ 286.573317][T12853] team0: Port device team_slave_1 added [ 286.634376][ T5892] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 286.659991][T13011] netlink: 'syz.3.2157': attribute type 10 has an invalid length. [ 286.680840][T12853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.701747][T12853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.728183][ T5825] ums-isd200 6-1:0.0: probe with driver ums-isd200 failed with error -22 [ 286.756453][T12853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.769253][T13011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.793443][T13011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.816578][T13011] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 286.836592][ T5892] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 286.848759][T12853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.866229][T12853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.894375][ T5892] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 286.915686][ T5918] usb 6-1: USB disconnect, device number 17 [ 286.924064][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0 [ 286.932534][ T5892] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 286.950352][T12853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.964407][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.983650][ T5892] usb 2-1: config 0 descriptor?? [ 286.989982][T13007] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 286.991342][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'. [ 287.021942][T13023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2160'. [ 287.210713][T12853] hsr_slave_0: entered promiscuous mode [ 287.230067][T12853] hsr_slave_1: entered promiscuous mode [ 287.240938][T12853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.248820][T12853] Cannot create hsr debugfs directory [ 287.429554][ T5825] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 287.440968][ T5892] holtek_mouse 0003:04D9:A067.0017: unknown main item tag 0x0 [ 287.485009][ T5892] holtek_mouse 0003:04D9:A067.0017: unknown main item tag 0x0 [ 287.492562][ T5892] holtek_mouse 0003:04D9:A067.0017: unknown main item tag 0x0 [ 287.524898][ T5892] holtek_mouse 0003:04D9:A067.0017: unknown main item tag 0x0 [ 287.554722][ T5892] holtek_mouse 0003:04D9:A067.0017: unknown main item tag 0x0 [ 287.569017][ T5892] holtek_mouse 0003:04D9:A067.0017: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input0 [ 287.585987][ T5824] Bluetooth: hci4: command tx timeout [ 287.647341][ T5825] usb 4-1: Using ep0 maxpacket: 16 [ 287.681988][ T5825] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.718742][ T5892] usb 2-1: USB disconnect, device number 20 [ 287.734561][ T5825] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.753823][ T5825] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 287.772370][ T5825] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 287.783072][ T5825] usb 4-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 287.792390][T12853] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 287.799725][ T5825] usb 4-1: config 7 interface 0 has no altsetting 0 [ 287.839527][ T5825] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 287.843438][T12853] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 287.853188][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.881291][T12853] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 287.898214][T12853] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 288.088675][T12853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.118121][T12853] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.142126][ T8611] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.149357][ T8611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.169896][T13042] team0: Device gtp0 is of different type [ 288.212954][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.220225][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.342031][ T5825] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.0018/input/input28 [ 288.371313][ T5825] kye 0003:0458:5010.0018: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 288.508316][ T5825] usb 4-1: USB disconnect, device number 24 [ 288.612513][T13051] sctp: [Deprecated]: syz.1.2170 (pid 13051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.612513][T13051] Use struct sctp_sack_info instead [ 288.892265][T12853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.601610][T13082] binder: 13081:13082 ioctl c018620c 200000000640 returned -22 [ 289.665345][ T5824] Bluetooth: hci4: command tx timeout [ 289.673111][T12853] veth0_vlan: entered promiscuous mode [ 289.694193][T12853] veth1_vlan: entered promiscuous mode [ 289.734598][T12853] veth0_macvtap: entered promiscuous mode [ 289.749391][T12853] veth1_macvtap: entered promiscuous mode [ 289.863141][T12853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.909160][T12853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.932220][T12853] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.977937][T12853] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.007188][T12853] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.033627][T12853] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.289846][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.328454][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.410001][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.434673][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.479775][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2215'. [ 291.524458][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 291.691363][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.718980][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.756117][ T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.787721][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.808287][ T24] usb 6-1: SerialNumber: syz [ 292.053432][ T24] usb 6-1: 0:2 : does not exist [ 292.101144][ T24] usb 6-1: USB disconnect, device number 18 [ 292.180325][T13182] omfs: Invalid superblock (0) [ 292.212137][ T30] kauditd_printk_skb: 100 callbacks suppressed [ 292.212157][ T30] audit: type=1800 audit(1749011917.931:158): pid=13184 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2229" name="[kvm-gmem]" dev="anon_inodefs" ino=34528 res=0 errno=0 [ 292.586230][T13201] gretap0: entered promiscuous mode [ 292.611066][T13201] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2237'. [ 294.051419][T13265] loop2: detected capacity change from 0 to 7 [ 294.192528][T13265] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 294.204806][T13265] loop2: p1 start 842467890 is beyond EOD, truncated [ 294.227481][T13265] loop2: p2 start 171063094 is beyond EOD, truncated [ 294.251075][T13265] loop2: p3 start 926299703 is beyond EOD, truncated [ 294.268040][T13265] loop2: p4 start 909587512 is beyond EOD, truncated [ 294.298628][T13265] loop2: p5 start 876098103 is beyond EOD, truncated [ 294.327319][T13265] loop2: p6 start 842467890 is beyond EOD, truncated [ 294.334087][T13265] loop2: p7 start 171063094 is beyond EOD, truncated [ 294.360697][T13265] loop2: p8 start 926299703 is beyond EOD, truncated [ 294.381399][T13265] loop2: p9 start 909587512 is beyond EOD, truncated [ 294.407664][T13265] loop2: p10 start 876098103 is beyond EOD, truncated [ 294.418102][T13265] loop2: p11 start 842467890 is beyond EOD, truncated [ 294.425027][T13265] loop2: p12 start 171063094 is beyond EOD, truncated [ 295.802563][T13333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.975922][T13336] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2298'. [ 297.281560][T13386] tun0: tun_chr_ioctl cmd 2148553947 [ 297.580414][T13398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'. [ 298.777427][T13448] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2347'. [ 298.877699][ T5825] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 299.047925][ T5825] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 299.070421][ T5825] usb 6-1: config 0 interface 0 has no altsetting 0 [ 299.109434][ T5825] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 299.124360][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.138899][T13463] vlan3: entered promiscuous mode [ 299.150908][ T5825] usb 6-1: Product: syz [ 299.159828][ T5825] usb 6-1: Manufacturer: syz [ 299.183787][ T5825] usb 6-1: SerialNumber: syz [ 299.213200][ T5825] usb 6-1: config 0 descriptor?? [ 299.255452][ T5825] usb 6-1: selecting invalid altsetting 0 [ 299.467181][ T5825] usb 6-1: USB disconnect, device number 19 [ 299.806719][T13486] netlink: 'syz.2.2365': attribute type 2 has an invalid length. [ 299.817493][T13486] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2365'. [ 300.253998][ T30] audit: type=1326 audit(1749016020.963:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13507 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219898e969 code=0x7ffc0000 [ 300.314753][ T30] audit: type=1326 audit(1749016020.963:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13507 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219898e969 code=0x7ffc0000 [ 300.367682][ T30] audit: type=1326 audit(1749016021.003:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13507 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f219898e969 code=0x7ffc0000 [ 300.424391][ T30] audit: type=1326 audit(1749016021.003:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13507 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219898e969 code=0x7ffc0000 [ 300.465989][ T30] audit: type=1326 audit(1749016021.003:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13507 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219898e969 code=0x7ffc0000 [ 300.502787][ T30] audit: type=1326 audit(1749016021.013:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13507 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f219898e969 code=0x7ffc0000 [ 300.527223][ T30] audit: type=1326 audit(1749016021.013:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13507 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f219898e969 code=0x7ffc0000 [ 300.551805][ T30] audit: type=1326 audit(1749016021.013:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13507 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2198985927 code=0x7ffc0000 [ 300.573860][ T30] audit: type=1326 audit(1749016021.013:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13507 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f219892ab39 code=0x7ffc0000 [ 300.634899][ T30] audit: type=1326 audit(1749016021.013:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13507 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2198985927 code=0x7ffc0000 [ 300.684826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 300.714437][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 300.722729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 300.816048][T13525] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 301.089072][T13513] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 301.354469][ T5893] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 301.524490][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 301.542623][ T5893] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 301.559740][T13556] loop2: detected capacity change from 0 to 7 [ 301.562569][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.604004][ T5893] pvrusb2: Hardware description: Terratec Grabster AV400 [ 301.604525][T13556] Dev loop2: unable to read RDB block 7 [ 301.615394][ T5893] pvrusb2: ********** [ 301.627091][T13556] loop2: unable to read partition table [ 301.637409][T13556] loop2: partition table beyond EOD, truncated [ 301.638099][ T5893] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 301.653826][T13556] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 301.663359][ T5893] pvrusb2: Important functionality might not be entirely working. [ 301.663374][ T5893] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 301.663388][ T5893] pvrusb2: ********** [ 301.811545][ T2348] pvrusb2: Invalid write control endpoint [ 301.898673][ T2348] pvrusb2: Invalid write control endpoint [ 301.905970][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 301.917336][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 301.951030][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 301.969968][ T2348] pvrusb2: Device being rendered inoperable [ 301.981564][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 301.991772][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 302.001144][ T2348] pvrusb2: Attached sub-driver cx25840 [ 302.006754][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 302.032597][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 302.042994][T13536] pvrusb2: Attempted to execute control transfer when device not ok [ 302.055872][ T5825] usb 2-1: USB disconnect, device number 21 [ 302.514585][T13575] kvm: kvm [13574]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xaf [ 302.989952][T13582] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 303.412654][ T5869] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 303.578065][ T5869] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 303.595004][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.615661][ T5869] usb 3-1: config 0 descriptor?? [ 303.629005][ T5869] cp210x 3-1:0.0: cp210x converter detected [ 304.038319][ T5869] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 304.052062][ T5869] usb 3-1: cp210x converter now attached to ttyUSB0 [ 304.251691][ T5869] usb 3-1: USB disconnect, device number 19 [ 304.266998][ T5869] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 304.280380][ T5869] cp210x 3-1:0.0: device disconnected [ 304.614461][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 304.788637][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 304.801405][ T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 304.815482][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 304.828928][ T24] usb 2-1: config 220 has no interface number 2 [ 304.843861][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 304.862756][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 304.871677][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 304.879357][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 304.901801][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 304.916712][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.945011][ T24] usb 2-1: Product: syz [ 304.953778][ T24] usb 2-1: Manufacturer: syz [ 304.966491][ T24] usb 2-1: SerialNumber: syz [ 305.210559][ T24] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 305.231874][ T24] usb 2-1: No valid video chain found. [ 305.252156][ T24] usb 2-1: selecting invalid altsetting 0 [ 305.278023][ T24] usb 2-1: selecting invalid altsetting 0 [ 305.295147][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 305.323164][ T24] usb 2-1: USB disconnect, device number 22 [ 305.478142][T13651] tc_dump_action: action bad kind [ 306.065884][ T5825] IPVS: starting estimator thread 0... [ 306.081730][T13669] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 306.148123][T13678] C: renamed from team_slave_0 (while UP) [ 306.177992][T13678] netlink: 'syz.2.2450': attribute type 4 has an invalid length. [ 306.194725][T13673] IPVS: using max 27 ests per chain, 64800 per kthread [ 306.245298][T13678] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2450'. [ 306.259779][T13678] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 337.756135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.304223][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 411.311247][ C1] rcu: 0-...!: (1 GPs behind) idle=a0e4/1/0x4000000000000000 softirq=57985/57986 fqs=1 [ 411.322061][ C1] rcu: (detected by 1, t=10506 jiffies, g=48597, q=320 ncpus=2) [ 411.329832][ C1] Sending NMI from CPU 1 to CPUs 0: [ 411.329874][ C0] NMI backtrace for cpu 0 [ 411.329907][ C0] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 411.329928][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.329939][ C0] RIP: 0010:kasan_check_range+0x89/0x2c0 [ 411.329981][ C0] Code: ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 <4d> 85 e4 0f 84 41 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 [ 411.329997][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00000083 [ 411.330013][ C0] RAX: 00000000ffffff01 RBX: dffffc0000000001 RCX: ffffffff819ec921 [ 411.330026][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000007b80 [ 411.330037][ C0] RBP: ffffc90000007bf0 R08: ffffc90000007b83 R09: 1ffff92000000f70 [ 411.330050][ C0] R10: dffffc0000000000 R11: fffff52000000f70 R12: 0000000000000001 [ 411.330062][ C0] R13: ffffffff99c63fa0 R14: fffff52000000f71 R15: 1ffff92000000f70 [ 411.330075][ C0] FS: 000055555d930500(0000) GS:ffff888125c90000(0000) knlGS:0000000000000000 [ 411.330090][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.330101][ C0] CR2: 00007f4bc117d2d8 CR3: 000000005aa40000 CR4: 00000000003526f0 [ 411.330116][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.330126][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 411.330137][ C0] Call Trace: [ 411.330148][ C0] [ 411.330160][ C0] do_raw_spin_lock+0x121/0x290 [ 411.330182][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 411.330206][ C0] _raw_spin_lock_irqsave+0xb3/0xf0 [ 411.330230][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 411.330258][ C0] debug_object_deactivate+0x9a/0x250 [ 411.330293][ C0] debug_deactivate+0x1d/0x200 [ 411.330321][ C0] __hrtimer_run_queues+0x2b0/0xc60 [ 411.330356][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 411.330380][ C0] ? read_tsc+0x9/0x20 [ 411.330404][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 411.330443][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 411.330471][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 411.330494][ C0] [ 411.330500][ C0] [ 411.330507][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 411.330525][ C0] RIP: 0010:check_preemption_disabled+0x17/0x120 [ 411.330552][ C0] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 48 83 ec 10 65 48 8b 05 fe 5d 3b 07 48 89 44 24 08 <65> 8b 05 06 5e 3b 07 65 8b 0d fb 5d 3b 07 f7 c1 ff ff ff 7f 74 23 [ 411.330567][ C0] RSP: 0018:ffffc900048a7718 EFLAGS: 00000286 [ 411.330581][ C0] RAX: 7797fbe1da5f2c00 RBX: ffffffff903d0a01 RCX: 7797fbe1da5f2c00 [ 411.330593][ C0] RDX: ffffc900048a7801 RSI: ffffffff8be19e60 RDI: ffffffff8be19e20 [ 411.330606][ C0] RBP: dffffc0000000000 R08: ffffc900048a7df0 R09: 0000000000000000 [ 411.330618][ C0] R10: ffffc900048a78f8 R11: fffff52000914f21 R12: ffffc900048a7e00 [ 411.330630][ C0] R13: ffffffff81728e15 R14: ffffffff8e13f060 R15: ffffffff81728e15 [ 411.330643][ C0] ? unwind_next_frame+0xa5/0x2390 [ 411.330668][ C0] ? unwind_next_frame+0xa5/0x2390 [ 411.330701][ C0] ? unwind_next_frame+0xa5/0x2390 [ 411.330725][ C0] rcu_is_watching+0x15/0xb0 [ 411.330751][ C0] ? unwind_next_frame+0xa5/0x2390 [ 411.330774][ C0] lock_release+0x4b/0x3e0 [ 411.330796][ C0] ? deref_stack_reg+0x19f/0x230 [ 411.330822][ C0] ? unwind_next_frame+0xa5/0x2390 [ 411.330846][ C0] unwind_next_frame+0x19a9/0x2390 [ 411.330874][ C0] ? unwind_next_frame+0xa5/0x2390 [ 411.330899][ C0] ? __fput+0x44c/0xa70 [ 411.330916][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 411.330934][ C0] arch_stack_walk+0x11c/0x150 [ 411.330964][ C0] ? fput_close_sync+0x119/0x200 [ 411.330981][ C0] stack_trace_save+0x9c/0xe0 [ 411.330998][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 411.331019][ C0] ? __lock_acquire+0xab9/0xd20 [ 411.331043][ C0] kasan_save_track+0x3e/0x80 [ 411.331061][ C0] ? kasan_save_track+0x3e/0x80 [ 411.331079][ C0] ? kasan_save_free_info+0x46/0x50 [ 411.331104][ C0] ? __kasan_slab_free+0x62/0x70 [ 411.331123][ C0] ? kfree+0x18e/0x440 [ 411.331140][ C0] ? security_sk_free+0xa4/0x1b0 [ 411.331162][ C0] ? __sk_destruct+0x49b/0x660 [ 411.331182][ C0] ? inet_release+0x184/0x210 [ 411.331204][ C0] ? sock_close+0xc0/0x240 [ 411.331226][ C0] ? __fput+0x44c/0xa70 [ 411.331265][ C0] kasan_save_free_info+0x46/0x50 [ 411.331297][ C0] __kasan_slab_free+0x62/0x70 [ 411.331317][ C0] ? security_sk_free+0xa4/0x1b0 [ 411.331339][ C0] kfree+0x18e/0x440 [ 411.331357][ C0] ? percpu_ref_put+0x1e/0x230 [ 411.331378][ C0] security_sk_free+0xa4/0x1b0 [ 411.331401][ C0] __sk_destruct+0x49b/0x660 [ 411.331423][ C0] inet_release+0x184/0x210 [ 411.331449][ C0] sock_close+0xc0/0x240 [ 411.331472][ C0] ? __pfx_sock_close+0x10/0x10 [ 411.331495][ C0] __fput+0x44c/0xa70 [ 411.331516][ C0] fput_close_sync+0x119/0x200 [ 411.331534][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 411.331556][ C0] __x64_sys_close+0x7f/0x110 [ 411.331574][ C0] do_syscall_64+0xfa/0x3b0 [ 411.331599][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.331622][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.331639][ C0] ? clear_bhb_loop+0x60/0xb0 [ 411.331659][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.331676][ C0] RIP: 0033:0x7f4bc0f8d5ca [ 411.331695][ C0] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 411.331710][ C0] RSP: 002b:00007ffcede2c4e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 411.331726][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f4bc0f8d5ca [ 411.331738][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 411.331747][ C0] RBP: 00007ffcede2c53c R08: 00007ffcede2be3c R09: 00007ffcede2c247 [ 411.331759][ C0] R10: 00007ffcede2bec0 R11: 0000000000000293 R12: 0000000000000200 [ 411.331770][ C0] R13: 00000000000927c0 R14: 000000000004abbc R15: 00007ffcede2c590 [ 411.331790][ C0] [ 411.331861][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g48597 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 411.937560][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 411.947559][ C1] rcu: RCU grace-period kthread stack dump: [ 411.953559][ C1] task:rcu_preempt state:R running task stack:27192 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 411.967103][ C1] Call Trace: [ 411.970408][ C1] [ 411.973372][ C1] __schedule+0x16a2/0x4cb0 [ 411.977924][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 411.983158][ C1] ? schedule+0x165/0x360 [ 411.987526][ C1] ? __lock_acquire+0xab9/0xd20 [ 411.992413][ C1] ? __pfx___schedule+0x10/0x10 [ 411.997313][ C1] ? schedule+0x91/0x360 [ 412.001596][ C1] schedule+0x165/0x360 [ 412.005820][ C1] schedule_timeout+0x12b/0x270 [ 412.010710][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 412.016127][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 412.022096][ C1] ? __pfx_process_timeout+0x10/0x10 [ 412.027466][ C1] ? prepare_to_swait_event+0x341/0x380 [ 412.033064][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 412.037971][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 412.043905][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 412.049241][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 412.054567][ C1] ? finish_swait+0xcd/0x1f0 [ 412.059192][ C1] rcu_gp_kthread+0x99/0x390 [ 412.063837][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 412.069083][ C1] ? __kthread_parkme+0x7b/0x200 [ 412.074062][ C1] ? __kthread_parkme+0x1a1/0x200 [ 412.079220][ C1] kthread+0x711/0x8a0 [ 412.083321][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 412.088583][ C1] ? __pfx_kthread+0x10/0x10 [ 412.093217][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.098457][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.103706][ C1] ? __pfx_kthread+0x10/0x10 [ 412.108333][ C1] ret_from_fork+0x3f9/0x770 [ 412.112973][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 412.118215][ C1] ? __switch_to_asm+0x39/0x70 [ 412.123009][ C1] ? __switch_to_asm+0x33/0x70 [ 412.127794][ C1] ? __pfx_kthread+0x10/0x10 [ 412.132405][ C1] ret_from_fork_asm+0x1a/0x30 [ 412.137293][ C1] [ 412.140330][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 412.146761][ C1] CPU: 1 UID: 0 PID: 13678 Comm: syz.2.2450 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 412.158849][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.169045][ C1] RIP: 0010:smp_call_function_many_cond+0xf6e/0x12d0 [ 412.175757][ C1] Code: 89 ee 83 e6 01 31 ff e8 50 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 fb 73 0b 00 eb 37 f3 90 43 0f b6 04 2c <84> c0 75 10 41 f7 07 01 00 00 00 74 1e e8 e0 73 0b 00 eb e5 44 89 [ 412.195466][ C1] RSP: 0018:ffffc9000c63f360 EFLAGS: 00000293 [ 412.201551][ C1] RAX: 0000000000000000 RBX: ffff8880b873c9c0 RCX: ffff888077299e00 [ 412.209631][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 412.217722][ C1] RBP: ffffc9000c63f4c0 R08: ffffffff8f9fcbf7 R09: 1ffffffff1f3f97e [ 412.225720][ C1] R10: dffffc0000000000 R11: fffffbfff1f3f97f R12: 1ffff110170c868d [ 412.233721][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8643468 [ 412.241726][ C1] FS: 0000000000000000(0000) GS:ffff888125d90000(0000) knlGS:0000000000000000 [ 412.250680][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.257291][ C1] CR2: 0000001b31b15ff8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 412.265287][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.273281][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.281290][ C1] Call Trace: [ 412.284595][ C1] [ 412.287565][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 412.293935][ C1] ? do_raw_spin_lock+0x121/0x290 [ 412.298996][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 412.304402][ C1] ? rcu_is_watching+0x15/0xb0 [ 412.309216][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 412.314704][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 412.319861][ C1] flush_tlb_mm_range+0x6b1/0x12c0 [ 412.325017][ C1] ? do_raw_spin_lock+0x121/0x290 [ 412.330078][ C1] ? free_pgd_range+0x144b/0x14c0 [ 412.335148][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 412.340742][ C1] tlb_flush_mmu+0x1a7/0x680 [ 412.345385][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 412.350019][ C1] ? free_pgd_range+0x144b/0x14c0 [ 412.355085][ C1] free_ldt_pgtables+0x17b/0x320 [ 412.360065][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 412.365590][ C1] ? down_read+0x1ad/0x2e0 [ 412.370125][ C1] exit_mmap+0x17c/0xb50 [ 412.374400][ C1] ? uprobe_clear_state+0x20f/0x290 [ 412.379638][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 412.384429][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 412.390116][ C1] ? __pfx_exit_aio+0x10/0x10 [ 412.394846][ C1] ? uprobe_clear_state+0x274/0x290 [ 412.400084][ C1] ? mm_update_next_owner+0xa7/0x870 [ 412.406644][ C1] __mmput+0x118/0x420 [ 412.412886][ C1] exit_mm+0x1da/0x2c0 [ 412.417217][ C1] ? __pfx_exit_mm+0x10/0x10 [ 412.422133][ C1] ? rcu_is_watching+0x15/0xb0 [ 412.427773][ C1] do_exit+0x640/0x22e0 [ 412.432656][ C1] ? do_raw_spin_lock+0x121/0x290 [ 412.439487][ C1] ? __pfx_do_exit+0x10/0x10 [ 412.446233][ C1] do_group_exit+0x21c/0x2d0 [ 412.451074][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.457218][ C1] get_signal+0x125e/0x1310 [ 412.462674][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 412.468282][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 412.474513][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 412.480074][ C1] exit_to_user_mode_loop+0x75/0x110 [ 412.485408][ C1] do_syscall_64+0x2bd/0x3b0 [ 412.490028][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.495261][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.501359][ C1] ? clear_bhb_loop+0x60/0xb0 [ 412.506072][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.511994][ C1] RIP: 0033:0x7ff20bd8e969 [ 412.516430][ C1] Code: Unable to access opcode bytes at 0x7ff20bd8e93f. [ 412.523468][ C1] RSP: 002b:00007ff20cb4b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 412.531917][ C1] RAX: fffffffffffffe00 RBX: 00007ff20bfb5fa8 RCX: 00007ff20bd8e969 [ 412.539921][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff20bfb5fa8 [ 412.547937][ C1] RBP: 00007ff20bfb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 412.555944][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff20bfb5fac [ 412.563937][ C1] R13: 0000000000000000 R14: 00007ffe6b31bf20 R15: 00007ffe6b31c008 [ 412.572000][ C1]