last executing test programs: 6.173612107s ago: executing program 0 (id=6160): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000280)="935a") rseq(0x0, 0x0, 0x1, 0x0) 5.812760244s ago: executing program 4 (id=6165): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x1e7ef091}, &(0x7f0000000240)=0x8) 5.443140864s ago: executing program 4 (id=6169): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x0, 0x4, "00769a7d82000100000014955959153000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 5.278668652s ago: executing program 4 (id=6171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd490328fdc10020000000600000000004730081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef) 4.835499182s ago: executing program 4 (id=6174): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 4.834544411s ago: executing program 3 (id=6175): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c", 0xf}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) 4.70438454s ago: executing program 4 (id=6176): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) 4.348118197s ago: executing program 4 (id=6177): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="490900000000000000001500000004002b8008000300", @ANYRES32=r3, @ANYBLOB="08002a0000000000050029"], 0x58}}, 0x0) 3.946996606s ago: executing program 32 (id=6177): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="490900000000000000001500000004002b8008000300", @ANYRES32=r3, @ANYBLOB="08002a0000000000050029"], 0x58}}, 0x0) 3.93920102s ago: executing program 0 (id=6179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) 3.786617018s ago: executing program 0 (id=6182): r0 = open(&(0x7f0000000480)='./file0\x00', 0x40, 0x11) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x0) 3.525020313s ago: executing program 0 (id=6184): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x10e00, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r2, 0x6}, 0x8) 3.210901858s ago: executing program 0 (id=6187): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x1}) 2.885219615s ago: executing program 1 (id=6190): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000280)='A', 0x1}], 0x1}}], 0x37, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x1, 0x2, 0x100, 0x80, 0x8000, 0x7, r1}, 0x20) 2.723770047s ago: executing program 2 (id=6191): syz_clone(0xa040400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)="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") r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) 2.723304608s ago: executing program 1 (id=6192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900ea0073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xffffffff}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.542329356s ago: executing program 1 (id=6193): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) pselect6(0x40, &(0x7f0000000080)={0x3, 0x5, 0xf, 0x5, 0x1000, 0x7, 0x0, 0x80}, &(0x7f00000000c0)={0x38, 0xd, 0xffff, 0x7, 0x3ff, 0x9, 0x2b27a4b1, 0x1}, 0x0, 0x0, 0x0) 2.487116882s ago: executing program 2 (id=6194): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}, 0x40) 2.361883714s ago: executing program 1 (id=6195): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f00000005c0)={{0x2, 0xffffffff, 0x5, 0xffff1ed7, 0x0, 0xe}, 0xc2, [0x3, 0x3, 0x80, 0x6, 0x1, 0x8, 0x8, 0xb46f, 0x5, 0x5, 0x0, 0x4, 0x3, 0x7, 0x8, 0x1, 0x1, 0x7fff, 0x1, 0x7fff, 0x708e, 0x2, 0x4b, 0x9, 0x80000001, 0x697d, 0x4, 0x1, 0x4, 0x4, 0x1, 0x9, 0x2, 0x7fffffff, 0x7, 0xc, 0x7, 0x2, 0x0, 0x0, 0x9, 0xa, 0x3, 0x4, 0xff, 0x34bb8b36, 0x3, 0x0, 0x20, 0x1f, 0x2, 0x3, 0xfffffffa, 0x369, 0x4, 0x0, 0x1, 0xec02, 0x3ff, 0xe1bd, 0x1, 0x3, 0x5, 0x8, 0x80000001, 0x1, 0x1, 0x1, 0x327, 0x40, 0x2, 0x9, 0x1c0, 0x870b, 0x8000, 0x4, 0x7, 0x2, 0x101, 0xffff, 0xfc4, 0x3, 0x1, 0x6, 0x3, 0xf, 0x4, 0x8, 0xf, 0x200, 0x6, 0x9, 0xff, 0x2, 0x2, 0x9, 0x141, 0x2, 0xfffffffb, 0x2, 0x5e, 0xfff, 0x6, 0x0, 0x3, 0x48, 0x7, 0x4, 0xfffffff2, 0x2e2f, 0x0, 0x7, 0x3, 0x3, 0x4, 0x8, 0x6, 0x0, 0x80, 0x4, 0x6db8, 0x1000, 0xc97, 0x0, 0x6, 0x1000, 0xffffffff, 0x0, 0x3, 0x401, 0x8001, 0x2, 0x101, 0x100, 0x7, 0x800, 0x2, 0x7, 0x200, 0x3ff, 0x7, 0x10001, 0x2, 0x55, 0x7fff, 0x6, 0x4, 0x2, 0x0, 0x5, 0x4, 0x12, 0x6, 0x2, 0x9, 0x9, 0x1, 0x80000000, 0x6, 0x6, 0x7, 0x401, 0x6, 0x10001, 0x7fff, 0xfffffff8, 0x0, 0x1319, 0x4, 0x9, 0x2, 0x10, 0x5, 0xfffffc01, 0x2, 0x10000, 0xdea7, 0x8, 0x6, 0x0, 0x33d, 0xfffffff1, 0x2, 0x4, 0xd7ed, 0x0, 0x3, 0x8b, 0x8, 0x5, 0xc63b, 0x0, 0xd, 0xff, 0x55ab, 0xd6f, 0x2, 0xa4, 0x10, 0x4, 0x80, 0x4d19a82f, 0x6, 0x80, 0x8, 0xdc, 0x7ff, 0x4, 0x0, 0x8f, 0x5, 0x3ff, 0x9, 0x0, 0x3, 0x36, 0xc, 0x59, 0x9, 0x3, 0x1, 0xce, 0x8, 0x0, 0x10000, 0x3, 0xfffffff2, 0x5, 0xb8, 0x1, 0x2, 0xa15, 0x6, 0xff, 0xfff, 0x6, 0x6, 0x1, 0x401, 0x9, 0x8, 0x4, 0x6, 0x4, 0x2, 0x4, 0xd8e, 0x9, 0x1, 0x3, 0x4, 0x3, 0x80, 0x5, 0x7, 0x4, 0x7, 0x5f4, 0x6, 0x9, 0x0, 0x9, 0xff, 0xc, 0x3, 0xffff, 0xff, 0x5, 0x3, 0x0, 0xa, 0xe10, 0xabf1, 0x4, 0x8, 0x200, 0x0, 0x10, 0x1, 0x1, 0x8, 0x2, 0x5, 0xd, 0xc5, 0x5, 0xfffffc7b, 0x4, 0x4, 0x2, 0x1, 0xfffffff8, 0x2, 0x5, 0x4, 0x9, 0x2, 0x2, 0x6, 0x8, 0x5, 0x2, 0xf, 0x0, 0x8, 0x3ff, 0x1, 0x1992, 0x4, 0x5, 0x3, 0x81, 0x3, 0x8, 0x40, 0x1, 0x800, 0x544, 0x2ad, 0x8, 0x4, 0x32, 0x4, 0xbaa, 0x5, 0xffffffff, 0x426, 0x2e, 0x0, 0x9, 0x1, 0x6, 0x1ded0885, 0x2, 0x2, 0x9, 0x1, 0x7, 0x7, 0x0, 0xfff, 0x4, 0xfffffc01, 0x6d1b, 0x7, 0x3, 0x4, 0x5bc, 0x3, 0x1, 0xe21, 0x9, 0x0, 0xfffffffe, 0x6, 0x7fff, 0x0, 0x1ff, 0x3, 0x267a, 0x10000, 0x5, 0x9, 0x7ff, 0x5, 0x6, 0x80000000, 0xfffffff8, 0x24534688, 0x1, 0xc1, 0x9, 0x9, 0x2, 0xaf, 0x0, 0x7, 0x2, 0x0, 0x10, 0x301d, 0xff, 0x18f, 0x7ff, 0x6, 0x3ff, 0x1, 0x7fff, 0xfffff001, 0xfffffff7, 0x8f9, 0x8, 0x4, 0x6, 0x5, 0x742d, 0x2, 0x1, 0xfffffff9, 0xa00000, 0x0, 0x1ff, 0x7, 0x6, 0x5, 0x1, 0x8, 0x401, 0x8, 0x5, 0x400, 0x1000, 0x9b3c, 0xfffffffd, 0x4, 0x7, 0x1, 0x3, 0xa, 0xc, 0x1, 0x1, 0x0, 0x27, 0x3, 0x0, 0x0, 0x3, 0x7, 0xd, 0x5, 0x1000, 0x5, 0x2, 0x3, 0xffffff80, 0x4, 0x9, 0x1, 0xef, 0x2, 0x2, 0xe4e, 0x1, 0x4, 0x5b, 0x80000000, 0x6, 0x2, 0x3c87, 0xde3, 0xe4d, 0x8, 0x3, 0x9, 0x5, 0x21, 0x1, 0x62, 0x400, 0x10, 0x1, 0xffffffff, 0x2, 0x3, 0x9, 0x7ff, 0x6, 0x6, 0x0, 0x8, 0x4, 0x0, 0x0, 0xfffffff3, 0x1, 0xe4, 0x3, 0x8, 0x1, 0x9, 0x4, 0xff, 0x7f, 0x0, 0x0, 0xb2, 0x7, 0xc, 0xc1, 0x2, 0x284, 0xfffffff5, 0xf, 0x8001, 0x9, 0xa, 0xdb6, 0x84, 0x9956, 0xa7d, 0x7f, 0x100, 0x6, 0xa, 0x40, 0x5, 0x2, 0x0, 0xdb3b, 0x8, 0x5, 0x0, 0x4, 0x7, 0x5, 0x100, 0x0, 0x10, 0x8000, 0xe9d6, 0x2, 0x0, 0x0, 0x2, 0x7f, 0x111, 0xfffffffc, 0x4, 0x1000, 0x4, 0x9, 0x7, 0x4f, 0x419fb4c4, 0xe8, 0x7, 0x73997e99, 0x4, 0x7, 0x9, 0x88, 0x1, 0x9, 0x8, 0x9, 0x7, 0x3, 0x3, 0x200, 0x9, 0x0, 0xd, 0x4, 0x7fff, 0x400, 0x2, 0x1, 0x4, 0x1, 0xa07b, 0x9, 0x40, 0x1ff, 0x6, 0x25cc, 0x4, 0xffff, 0x5, 0x8, 0x4, 0xb, 0x7fffffff, 0xfffffff8, 0x9, 0x7fffffff, 0x3, 0x5, 0x2, 0x1, 0x9da, 0x0, 0xffffffff, 0x100, 0x9, 0x6, 0xfffffff7, 0x7, 0x3, 0x7, 0x0, 0x85, 0x3, 0xb32c, 0x10000, 0xffffffff, 0x7, 0x9, 0x5, 0x8000, 0x800, 0x7ff, 0xb36, 0x80, 0xc, 0x3, 0xfff, 0xae71, 0x2, 0x0, 0x7, 0x81, 0x58c8245c, 0x5d, 0xf, 0x9, 0x1, 0x80, 0xe9, 0x8, 0x4, 0x8, 0x6, 0x5, 0x2, 0xf4000000, 0xe8cb, 0x9, 0x4, 0x5, 0x1, 0x8001, 0x2, 0x7fffffff, 0x2, 0x0, 0x91, 0x1, 0x0, 0x1eb6, 0xb, 0x1, 0x2, 0x2, 0x800, 0x8, 0x6, 0x101, 0x3, 0x4, 0x4000, 0x3, 0x0, 0x1, 0xc8, 0x1, 0x2400000, 0x5, 0x0, 0x7, 0xffffffff, 0x5, 0xa2, 0xfffffff9, 0x6, 0x7, 0x1, 0xffff0843, 0xc0f, 0xfff, 0x7, 0x4, 0x7ff, 0x3b2c, 0x5, 0x2, 0x3, 0x9, 0x6, 0x802, 0x1, 0x8, 0x4, 0x4, 0x9, 0x2, 0x5, 0x1, 0x1, 0xffffffff, 0x0, 0x1, 0xda8, 0xa, 0x4, 0xff, 0x1, 0x9, 0x9, 0x9, 0x5, 0xfffffff9, 0x7, 0x4, 0x8, 0x1, 0x7, 0x1, 0xff, 0x5, 0x5, 0xb, 0x8, 0x81, 0xcd0b, 0x0, 0xbedf, 0x9, 0x9, 0x0, 0x5, 0x5, 0x10, 0xf, 0x4, 0x4, 0x6, 0x6, 0x4, 0xf, 0x7, 0x4, 0x6, 0x0, 0x1, 0xa, 0x2, 0xffffff00, 0xc, 0x9, 0x7, 0xfe, 0x0, 0xfffff2c7, 0x8, 0x1, 0x9, 0x1000, 0xffff, 0x3, 0xb, 0xe34, 0x800, 0x10001, 0x63b0000, 0x9, 0x10000, 0x5, 0xb, 0x0, 0x8, 0x4, 0x100, 0x9, 0x9, 0x807, 0x3a7c, 0x1, 0x6, 0x4, 0xffffff09, 0x8, 0x7, 0x0, 0xc, 0x3, 0x5, 0xfffffff9, 0x70000000, 0x3, 0x7ff, 0x71, 0xcb, 0xffffffff, 0x80000001, 0x9, 0xff, 0xcb12, 0x9, 0xfffffff7, 0x6, 0x733e, 0x3, 0x7, 0xffff, 0x4, 0x83, 0x0, 0x2, 0x63d, 0x10001, 0x6, 0x6, 0x3, 0x3, 0x81, 0x1ff, 0x4, 0x80000000, 0x3, 0x8, 0x8, 0x1, 0x8, 0x3, 0x9, 0x100, 0x3, 0xbf, 0x0, 0x3, 0x8b4, 0x0, 0x0, 0xa4b, 0x400, 0x2, 0x69, 0x2, 0x8, 0xd9, 0x688a, 0x6, 0xffffffa0, 0x3, 0x3, 0x5, 0x3, 0x4, 0xfff, 0x0, 0x10, 0x9, 0x10, 0x9, 0xe508, 0x2, 0x9, 0xf7b, 0xfffff13a, 0x4, 0x6, 0x9, 0x4daf, 0x6, 0x941e, 0x3, 0x0, 0x2d2c4d43, 0x5, 0x5, 0xe, 0x8dd, 0xab, 0x5, 0x1, 0x200, 0x5, 0x5, 0xfffffffb, 0x2, 0x5, 0x8, 0x8, 0x7, 0xf, 0x2, 0x10000, 0x401, 0x9, 0x6, 0x0, 0x3, 0xa306, 0x1, 0x75a, 0x7, 0x93, 0xd, 0x20000000, 0x5, 0x20de, 0x1ff, 0x5, 0x81, 0xd, 0x2113, 0x4, 0x0, 0x1, 0x5, 0x1, 0x7, 0x1317, 0x8000, 0x7, 0xec, 0x5, 0x9, 0x2, 0x9, 0x0, 0x5, 0x8, 0x0, 0x6, 0x4, 0x4, 0x6, 0x2, 0x81, 0xd, 0x6, 0xfffffffb, 0x4, 0xa0000000, 0x7, 0xfffffffd, 0x9, 0x0, 0x5d77b0f2, 0x9, 0x9dae, 0xcab, 0x8, 0x6, 0x2, 0x52e8db50, 0x400, 0x6, 0xfffffffc, 0x0, 0x3ff, 0xffff, 0x0, 0xa59, 0x5, 0x5a, 0x2, 0x54, 0x5, 0x7f, 0x3, 0x3, 0x10001, 0x4, 0x8000, 0x5, 0x8, 0x1, 0x5, 0x1, 0xfa9, 0xfffffb47, 0x1, 0x0, 0x3, 0x5, 0x8000, 0x0, 0x80000001, 0x7ff00, 0x9, 0x20000, 0x80000000, 0x0, 0x81, 0x97, 0xbcf0, 0x4, 0x9, 0x5, 0x400, 0x7, 0x8, 0x60000, 0x54e, 0xe, 0x554b, 0x0, 0xd, 0x6, 0x2, 0x0, 0x10000, 0x6b, 0x100, 0xffff, 0xa27, 0x7, 0xb, 0xb4, 0x7fffffff, 0x7, 0x1000, 0x10000, 0x9, 0xff, 0x9, 0x1, 0x6, 0x9, 0xfffffe01, 0xffff8000, 0x5, 0xfffffffb, 0x2, 0x93, 0x3, 0x7, 0x1, 0x80000001, 0x5]}) 2.166377804s ago: executing program 2 (id=6196): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/29, 0x1d) getdents64(r1, 0xfffffffffffffffe, 0x29) 2.087143757s ago: executing program 2 (id=6197): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) io_setup(0x5, &(0x7f0000000e80)=0x0) syz_io_uring_setup(0x4, &(0x7f0000000580), &(0x7f0000000080), 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000080)="8c", 0x1}]) 1.906406291s ago: executing program 2 (id=6198): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.424342884s ago: executing program 3 (id=6199): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x10, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="10031400e0", 0x538, 0x0, &(0x7f0000000140)={0x11, 0x18, r2}, 0x14) 1.255831988s ago: executing program 3 (id=6200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfe, 0xfc}, {0x3000, 0x8000000, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3c, 0x0, 0xff}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9}, {0xdddd1000, 0x5000, 0xf, 0xfe, 0x8, 0x6}, {0xeeee8000, 0x4, 0x0, 0x0, 0x0, 0x8b, 0x8, 0x0, 0x24, 0x4, 0x6}, {0x80a0000}, {0xdddd1000, 0x8}, 0xddf8ffdb, 0x0, 0x8080000, 0x2b, 0x0, 0x3001, 0x0, [0x0, 0x0, 0x4]}) 1.011224996s ago: executing program 3 (id=6201): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x42, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000006480)) 998.107808ms ago: executing program 2 (id=6202): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x6, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000540)={0x40, 0x30, 0x10, "a628aa651d0a0b16b443af0d49c18e6c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 671.611647ms ago: executing program 3 (id=6203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 520.433375ms ago: executing program 3 (id=6204): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) 151.740087ms ago: executing program 1 (id=6205): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) close(r1) 125.87469ms ago: executing program 0 (id=6206): r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=6207): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x2c, r0, 0x1, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb6}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) kernel console output (not intermixed with test programs): SB device number 48 using dummy_hcd [ 459.693596][ T9] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 459.698289][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 459.713515][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 459.721283][ T43] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 459.724743][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 459.737449][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.741666][ T9] usb 5-1: media controller created [ 459.753735][ T43] usb 2-1: Product: syz [ 459.759394][ T43] usb 2-1: Manufacturer: syz [ 459.764192][ T43] usb 2-1: SerialNumber: syz [ 459.779656][ T43] usb 2-1: config 0 descriptor?? [ 459.779987][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.795101][ T43] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 459.971742][ T9] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 460.004735][ T43] gp8psk: usb in 128 operation failed. [ 460.025388][ T43] gp8psk: usb in 137 operation failed. [ 460.039581][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 460.061055][ T43] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 460.091092][ T43] usb 2-1: media controller created [ 460.188595][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.279255][ T43] gp8psk_fe: Frontend revision 1 attached [ 460.285141][ T43] usb 2-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 460.303354][ T43] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 460.481021][ T43] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 460.501029][ T43] gp8psk: found Genpix USB device pID = 201 (hex) [ 460.796586][ T5931] usb 2-1: USB disconnect, device number 48 [ 461.036066][ T9] usb 5-1: USB disconnect, device number 37 [ 461.050002][ T5931] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 461.089471][T16651] syzkaller1: entered promiscuous mode [ 461.096207][T16651] syzkaller1: entered allmulticast mode [ 461.457550][T16665] netlink: 'syz.1.4772': attribute type 29 has an invalid length. [ 461.468307][T16665] netlink: 'syz.1.4772': attribute type 29 has an invalid length. [ 461.485880][T16665] netlink: 508 bytes leftover after parsing attributes in process `syz.1.4772'. [ 461.498308][ T5931] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 461.664390][ T5931] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.682642][ T5931] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 461.694994][ T5931] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 461.729892][ T5931] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 461.741036][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.774090][T16658] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 461.786005][ T5931] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 461.899824][T16675] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 462.253054][ T9] usb 4-1: USB disconnect, device number 41 [ 462.690426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 463.342184][ T30] kauditd_printk_skb: 5548 callbacks suppressed [ 463.342236][ T30] audit: type=1400 audit(1755741173.538:61072): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6584 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 463.398239][ T30] audit: type=1400 audit(1755741173.538:61073): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6584 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 463.401739][ T6584] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.427899][ T30] audit: type=1400 audit(1755741173.538:61074): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6584 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 463.448206][ T6584] audit: audit_lost=1485 audit_rate_limit=0 audit_backlog_limit=64 [ 463.448233][ T6584] audit: backlog limit exceeded [ 463.448508][ T6584] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.472653][T10668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 463.480070][T10668] audit: audit_lost=1486 audit_rate_limit=0 audit_backlog_limit=64 [ 463.480194][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 465.199806][ T5912] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 465.368391][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 465.382160][ T5912] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 465.393139][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.401229][ T5912] usb 5-1: Product: syz [ 465.405516][ T5912] usb 5-1: Manufacturer: syz [ 465.410301][ T5912] usb 5-1: SerialNumber: syz [ 465.417895][ T5912] usb 5-1: config 0 descriptor?? [ 465.426880][ T5912] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 465.656711][ T5912] gp8psk: usb in 128 operation failed. [ 465.676502][ T5912] gp8psk: usb in 137 operation failed. [ 465.686614][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 465.720605][ T5912] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 465.747034][ T5912] usb 5-1: media controller created [ 465.835446][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 465.898770][ T5912] gp8psk_fe: Frontend revision 1 attached [ 465.908543][ T5912] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 465.917312][ T5912] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 465.975345][T16789] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b22122226fe65c239a) [ 466.045874][ T5912] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 466.064907][ T5912] gp8psk: found Genpix USB device pID = 201 (hex) [ 466.316517][ T5912] usb 5-1: USB disconnect, device number 38 [ 466.534508][ T5912] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 467.719128][T16844] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4850'. [ 467.833806][T16847] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4851'. [ 468.119748][ T5912] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 468.308242][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 468.318431][ T5912] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 468.338102][ T5912] usb 5-1: config 0 has no interface number 0 [ 468.346706][ T5912] usb 5-1: config 0 interface 184 has no altsetting 0 [ 468.358554][ T30] kauditd_printk_skb: 8745 callbacks suppressed [ 468.358574][ T30] audit: type=1400 audit(1755741178.558:68171): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15208 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 468.407141][ T30] audit: type=1400 audit(1755741178.558:68172): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15208 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 468.413217][T16873] audit: audit_backlog=65 > audit_backlog_limit=64 [ 468.427329][T16851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 468.440685][ T30] audit: type=1400 audit(1755741178.558:68173): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=rw pid=15208 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 [ 468.461827][T16851] audit: audit_lost=2037 audit_rate_limit=0 audit_backlog_limit=64 [ 468.470342][T16851] audit: backlog limit exceeded [ 468.475542][ T30] audit: type=1400 audit(1755741178.558:68174): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=15208 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 [ 468.495546][T16873] audit: audit_lost=2038 audit_rate_limit=0 audit_backlog_limit=64 [ 468.505302][T16851] audit: audit_backlog=65 > audit_backlog_limit=64 [ 468.518736][ T5912] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 468.532143][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.554491][ T5912] usb 5-1: Product: syz [ 468.568261][ T5912] usb 5-1: Manufacturer: syz [ 468.578304][ T5912] usb 5-1: SerialNumber: syz [ 468.597108][ T5912] usb 5-1: config 0 descriptor?? [ 468.623870][ T5912] smsc75xx v1.0.0 [ 469.126474][T16895] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4872'. [ 469.234511][ T5912] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 469.257158][ T5912] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 469.512745][ T5912] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 469.538218][ T5912] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 469.558809][ T5912] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 469.576611][ T5912] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 469.611879][ T5912] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 469.642105][ T5912] usb 5-1: USB disconnect, device number 39 [ 469.772476][T16917] all (unregistering): Released all slaves [ 470.668365][ T2150] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 470.848819][ T2150] usb 2-1: Using ep0 maxpacket: 8 [ 470.887417][ T2150] usb 2-1: unable to get BOS descriptor or descriptor too short [ 470.927076][ T2150] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 470.951302][ T2150] usb 2-1: config 4 has an invalid descriptor of length 32, skipping remainder of the config [ 470.962844][ T2150] usb 2-1: config 4 has no interface number 0 [ 470.976853][ T2150] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 470.987473][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.000121][ T2150] usb 2-1: Product: syz [ 471.004337][ T2150] usb 2-1: Manufacturer: syz [ 471.027838][ T2150] usb 2-1: SerialNumber: syz [ 471.291500][ T2150] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 471.314621][ T2150] usb 2-1: No valid video chain found. [ 471.342915][ T2150] usb 2-1: USB disconnect, device number 49 [ 471.400303][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.431395][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.450268][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.472619][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.482578][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.528042][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.551745][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.573137][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.603958][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.633863][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.662983][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.693352][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.713610][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.744153][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.768422][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.786122][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.806385][ T5931] hid-generic 0002:0004:0009.0035: unknown main item tag 0x0 [ 471.878794][ T5931] hid-generic 0002:0004:0009.0035: hidraw0: HID v0.04 Device [syz0] on syz0 [ 472.006063][T16977] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 472.186135][T17006] loop6: detected capacity change from 0 to 2098 [ 473.373143][ T30] kauditd_printk_skb: 6693 callbacks suppressed [ 473.373164][ T30] audit: type=1400 audit(1755741183.578:74212): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17045 comm="syz.3.4923" path="/dev/net/tun" dev="devtmpfs" ino=708 [ 473.393905][T15208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 473.417097][ T30] audit: type=1400 audit(1755741183.578:74213): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=17048 comm="syz.1.4922" saddr=9e9a:ce5f:fb2e:9fc6:3dd:2821:0:2 daddr=ff02::1 netif=wpan0 [ 473.443976][T15208] audit: audit_lost=2258 audit_rate_limit=0 audit_backlog_limit=64 [ 473.453160][T15208] audit: backlog limit exceeded [ 473.453810][ T30] audit: type=1400 audit(1755741183.558:74184): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=5845 comm="syz-executor" name="1008" dev="tmpfs" ino=5142 [ 473.454245][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 473.477918][T15208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 473.483697][ C0] audit: audit_lost=2259 audit_rate_limit=0 audit_backlog_limit=64 [ 473.483719][ C0] audit: backlog limit exceeded [ 473.663713][T17058] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34 [ 474.809063][ T43] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 474.978323][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 475.001328][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.016904][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.047517][ T43] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 475.064222][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.093034][ T43] usb 2-1: config 0 descriptor?? [ 475.163813][T17109] atomic_op ffff888070784198 conn xmit_atomic 0000000000000000 [ 475.546853][ T43] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0036/input/input67 [ 475.663075][ T43] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.0036/input/input68 [ 475.692057][T17120] syzkaller1: entered promiscuous mode [ 475.707020][T17120] syzkaller1: entered allmulticast mode [ 475.845229][ T43] kye 0003:0458:5012.0036: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 475.884718][ T43] usb 2-1: USB disconnect, device number 50 [ 476.144472][T17140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4964'. [ 476.388496][ T43] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 476.545723][ T43] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 476.557458][ T43] usb 5-1: config 0 has no interface number 0 [ 476.564718][ T43] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 476.582699][ T43] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.594572][ T43] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 476.607873][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.629985][ T43] usb 5-1: config 0 descriptor?? [ 476.708466][ T5931] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 476.880212][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.901702][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.928599][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.958752][ T5931] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 476.979013][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.997046][ T5931] usb 2-1: config 0 descriptor?? [ 477.088823][ T43] uclogic 0003:256C:006E.0037: interface is invalid, ignoring [ 477.318476][ T43] usb 5-1: USB disconnect, device number 40 [ 477.454072][ T5931] plantronics 0003:047F:FFFF.0038: reserved main item tag 0xd [ 477.480188][ T5931] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 477.796028][ T43] usb 2-1: USB disconnect, device number 51 [ 478.381314][ T30] kauditd_printk_skb: 7231 callbacks suppressed [ 478.381334][ T30] audit: type=1400 audit(1755741188.588:80978): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17183 comm="syz.3.4986" name="newroot" dev="tmpfs" ino=2 [ 478.426958][ T6584] audit: audit_backlog=65 > audit_backlog_limit=64 [ 478.438058][T17188] audit: audit_backlog=66 > audit_backlog_limit=64 [ 478.445963][ T6584] audit: audit_lost=2416 audit_rate_limit=0 audit_backlog_limit=64 [ 478.458413][T17188] audit: audit_lost=2417 audit_rate_limit=0 audit_backlog_limit=64 [ 478.466767][ T6584] audit: backlog limit exceeded [ 478.472466][ T30] audit: type=1400 audit(1755741188.588:80979): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=6032 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.1.91 dest=36758 netif=eth0 [ 478.489315][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 478.497861][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 478.508582][ C0] audit: audit_lost=2418 audit_rate_limit=0 audit_backlog_limit=64 [ 478.920215][T17201] Smack: duplicate mount options [ 479.544748][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 479.938336][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 480.102977][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 480.125948][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 480.142055][ T9] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 480.168535][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.180608][ T9] usb 1-1: Product: syz [ 480.184921][ T9] usb 1-1: Manufacturer: syz [ 480.189724][ T9] usb 1-1: SerialNumber: syz [ 480.198957][ T9] usb 1-1: config 0 descriptor?? [ 480.207324][T17223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 480.225738][T17223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 480.463981][T17223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 480.486299][T17223] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 480.908621][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 481.311982][ T9] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 481.335440][ T9] usb 1-1: USB disconnect, device number 45 [ 481.384430][T17274] tun0: tun_chr_ioctl cmd 1074025675 [ 481.390441][T17274] tun0: persist enabled [ 481.396223][T17274] tun0: tun_chr_ioctl cmd 1074025675 [ 481.426282][T17274] tun0: persist disabled [ 482.471228][ T43] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 482.634316][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.659095][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 482.680634][ T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 482.695804][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 482.715214][ T43] usb 2-1: SerialNumber: syz [ 482.840109][T17316] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5044'. [ 482.973630][ T43] usb 2-1: 0:2 : does not exist [ 483.005981][ T43] usb 2-1: USB disconnect, device number 52 [ 483.348279][ T5899] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 483.393433][ T30] kauditd_printk_skb: 8516 callbacks suppressed [ 483.393452][ T30] audit: type=1400 audit(1755741193.598:89216): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5845 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 483.424123][ T6032] audit: audit_backlog=66 > audit_backlog_limit=64 [ 483.424243][ T5845] audit: audit_backlog=66 > audit_backlog_limit=64 [ 483.431641][ T6032] audit: audit_lost=2512 audit_rate_limit=0 audit_backlog_limit=64 [ 483.437601][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 483.437620][ C0] audit: audit_lost=2513 audit_rate_limit=0 audit_backlog_limit=64 [ 483.437636][ C0] audit: backlog limit exceeded [ 483.438021][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 483.438038][ C0] audit: audit_lost=2514 audit_rate_limit=0 audit_backlog_limit=64 [ 483.438053][ C0] audit: backlog limit exceeded [ 483.527248][ T5899] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 483.537189][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.552431][ T5899] usb 3-1: Product: syz [ 483.556659][ T5899] usb 3-1: Manufacturer: syz [ 483.598344][ T5899] usb 3-1: SerialNumber: syz [ 483.621077][ T5899] usb 3-1: config 0 descriptor?? [ 483.639933][ T5899] ch341 3-1:0.0: ch341-uart converter detected [ 484.428396][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 484.603109][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 484.617325][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.647314][ T9] usb 4-1: config 0 descriptor?? [ 484.656702][ T5899] usb 3-1: failed to send control message: -71 [ 484.682831][ T5899] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 484.685192][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 484.697819][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 484.707659][ T5899] usb 3-1: USB disconnect, device number 43 [ 484.739954][ T5899] ch341 3-1:0.0: device disconnected [ 484.895170][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 484.926962][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 484.940857][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 484.952788][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 484.967209][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.988037][T17362] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 485.007454][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 485.198484][ T5912] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 485.359091][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 485.384289][ T5912] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 485.407175][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.418055][ T5912] usb 5-1: Product: syz [ 485.440706][ T5912] usb 5-1: Manufacturer: syz [ 485.445426][ T5912] usb 5-1: SerialNumber: syz [ 485.478743][ T5912] usb 5-1: config 0 descriptor?? [ 485.494523][ T5898] usb 2-1: USB disconnect, device number 53 [ 485.517419][ T5912] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 485.559633][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 485.592432][ T9] usb 4-1: USB disconnect, device number 42 [ 486.159625][T17389] trusted_key: syz.2.5076 sent an empty control message without MSG_MORE. [ 486.555144][ T5912] usb 5-1: USB disconnect, device number 41 [ 486.719517][T17403] rtc_cmos 00:00: Alarms can be up to one day in the future [ 487.552315][T17433] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5096'. [ 487.870863][T17444] syzkaller1: entered promiscuous mode [ 487.877272][T17444] syzkaller1: entered allmulticast mode [ 487.998400][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 488.178714][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 488.208633][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 488.245202][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.299911][ T9] usb 3-1: config 0 descriptor?? [ 488.313862][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 488.398313][ T30] kauditd_printk_skb: 6366 callbacks suppressed [ 488.398332][ T30] audit: type=1400 audit(1755741198.598:95220): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10668 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 488.437166][T10668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 488.437333][ T6032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 488.446585][T10668] audit: audit_lost=2636 audit_rate_limit=0 audit_backlog_limit=64 [ 488.452865][T17458] audit: audit_backlog=65 > audit_backlog_limit=64 [ 488.467013][ T30] audit: type=1400 audit(1755741198.598:95221): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10668 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 488.479737][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 488.487238][ T6032] audit: audit_lost=2637 audit_rate_limit=0 audit_backlog_limit=64 [ 488.493355][ C0] audit: audit_lost=2638 audit_rate_limit=0 audit_backlog_limit=64 [ 488.493374][ C0] audit: backlog limit exceeded [ 489.351821][ T9] gspca_sq930x: ucbus_write failed -71 [ 489.357614][ T9] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 489.373156][ T9] usb 3-1: USB disconnect, device number 44 [ 489.638248][ T5931] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 489.788445][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 489.814982][ T5931] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 489.827230][ T5931] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 489.842132][ T5931] usb 5-1: config 0 interface 0 has no altsetting 0 [ 489.859971][ T5931] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 489.873029][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.882095][ T5931] usb 5-1: Product: syz [ 489.886499][ T5931] usb 5-1: Manufacturer: syz [ 489.896069][ T5931] usb 5-1: SerialNumber: syz [ 489.906951][ T5931] usb 5-1: config 0 descriptor?? [ 490.360092][ T5931] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 490.994559][ T5931] usb 5-1: USB disconnect, device number 42 [ 491.198332][T17522] block nbd3: NBD_DISCONNECT [ 491.221035][T17521] block nbd3: Disconnected due to user request. [ 491.252603][T17521] block nbd3: shutting down sockets [ 491.254548][T17524] can0: slcan on ptm0. [ 491.369447][T17523] can0 (unregistered): slcan off ptm0. [ 491.837408][T17542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5144'. [ 491.968219][ T5898] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 492.132376][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.167297][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.196308][ T5898] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 492.205960][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 492.245583][ T5898] usb 2-1: SerialNumber: syz [ 492.478249][ T5931] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 492.503505][ T5898] usb 2-1: 0:2 : does not exist [ 492.598521][ T5898] usb 2-1: USB disconnect, device number 54 [ 492.661212][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 492.669374][ T5931] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 492.677518][ T5931] usb 5-1: config 0 has no interface number 0 [ 492.712437][ T5931] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 492.738407][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.746448][ T5931] usb 5-1: Product: syz [ 492.749021][T17558] block nbd0: server does not support multiple connections per device. [ 492.765587][ T5931] usb 5-1: Manufacturer: syz [ 492.780980][T17558] block nbd0: shutting down sockets [ 492.791386][ T5931] usb 5-1: SerialNumber: syz [ 492.800789][ T5931] usb 5-1: config 0 descriptor?? [ 492.827567][ T5931] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 493.055703][ T5931] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 493.103121][ T5931] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 493.359402][T17568] input: syz1 as /devices/virtual/input/input70 [ 493.409448][ T30] kauditd_printk_skb: 5365 callbacks suppressed [ 493.409469][ T30] audit: type=1400 audit(1755741203.618:100310): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17569 comm="syz.3.5155" name="newroot" dev="tmpfs" ino=2 [ 493.450378][ T6584] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.456951][ T6584] audit: audit_lost=2731 audit_rate_limit=0 audit_backlog_limit=64 [ 493.476280][T10668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.484027][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 493.484485][ T5912] usb 5-1: USB disconnect, device number 43 [ 493.493964][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.499022][ T6584] audit: backlog limit exceeded [ 493.509064][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.514296][T10668] audit: audit_lost=2732 audit_rate_limit=0 audit_backlog_limit=64 [ 493.515586][ C0] audit: audit_lost=2733 audit_rate_limit=0 audit_backlog_limit=64 [ 493.530041][T15208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 493.553953][ T5912] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 493.582191][ T5912] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 493.603932][ T5912] quatech2 5-1:0.51: device disconnected [ 494.309023][T17597] bond0: entered promiscuous mode [ 494.322884][T17597] bond_slave_0: entered promiscuous mode [ 494.353981][T17597] bond_slave_1: entered promiscuous mode [ 495.157183][T17631] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 495.428518][ T5912] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 495.588378][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 495.613132][ T5912] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 495.624113][ T5912] usb 3-1: config 0 has no interface number 0 [ 495.642061][ T5912] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 495.654345][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.664658][ T5912] usb 3-1: Product: syz [ 495.671973][ T5912] usb 3-1: Manufacturer: syz [ 495.676911][ T5912] usb 3-1: SerialNumber: syz [ 495.703195][ T5912] usb 3-1: config 0 descriptor?? [ 495.968212][ T5898] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 495.986160][ T5912] kaweth 3-1:0.235: Firmware present in device. [ 496.142177][ T5898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 496.154181][ T5898] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 496.165521][ T5912] kaweth 3-1:0.235: Statistics collection: 0 [ 496.175598][ T5912] kaweth 3-1:0.235: Multicast filter limit: 0 [ 496.189177][ T5912] kaweth 3-1:0.235: MTU: 0 [ 496.193693][ T5912] kaweth 3-1:0.235: Read MAC address 00:00:00:00:00:00 [ 496.207386][ T5898] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 496.228861][ T5898] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 496.255609][ T5898] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.265146][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.273237][ T5898] usb 4-1: Product: syz [ 496.277636][ T5898] usb 4-1: Manufacturer: syz [ 496.318639][ T5898] usb 4-1: SerialNumber: syz [ 496.359354][T17648] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 496.381401][ T5898] cdc_mbim 4-1:1.0: skipping garbage [ 496.614423][T17648] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 496.647244][T17648] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 496.792922][ T5912] kaweth 3-1:0.235: Error setting receive filter [ 496.807677][ T5912] kaweth 3-1:0.235: probe with driver kaweth failed with error -5 [ 496.844600][ T5912] usb 3-1: USB disconnect, device number 45 [ 496.948774][ T5899] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 497.127928][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.139536][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.150314][ T5899] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 497.159552][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.173272][ T5899] usb 2-1: config 0 descriptor?? [ 497.271579][T17648] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 497.289839][T17648] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 497.309409][ T5898] cdc_mbim 4-1:1.0: setting tx_max = 60 [ 497.323588][ T5898] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 497.348848][ T5898] wwan wwan0: port wwan0mbim0 attached [ 497.366013][T17685] loop2: detected capacity change from 0 to 7 [ 497.379078][ T5898] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, b2:b5:08:04:3a:b7 [ 497.401350][T17685] Dev loop2: unable to read RDB block 7 [ 497.408714][T17685] loop2: unable to read partition table [ 497.433839][T17685] loop2: partition table beyond EOD, truncated [ 497.443257][T17685] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 497.566836][ T5898] usb 4-1: USB disconnect, device number 43 [ 497.577145][ T5898] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 497.620725][ T5899] steelseries 0003:1038:12B6.0039: unknown main item tag 0x0 [ 497.676795][ T5899] steelseries 0003:1038:12B6.0039: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0 [ 497.741131][ T5898] wwan wwan0: port wwan0mbim0 disconnected [ 497.865278][T17702] syz_tun: left promiscuous mode [ 497.871606][T17702] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 497.998544][ T43] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 498.018366][ T5931] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 498.026266][ T5899] steelseries 0003:1038:12B6.0039: hid_hw_raw_request() failed with -71 [ 498.045414][ T5899] usb 2-1: USB disconnect, device number 55 [ 498.180800][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 498.194530][ T43] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 498.203571][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 498.209252][ T43] usb 5-1: config 1 has no interface number 0 [ 498.216936][ T43] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 498.237951][ T43] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 498.239173][ T5931] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 498.259366][ T43] usb 5-1: config 1 interface 105 has no altsetting 0 [ 498.270151][ T5931] usb 1-1: config 0 has no interface number 0 [ 498.276723][ T5931] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 498.291223][ T5931] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 498.301709][ T43] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 498.311734][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.321997][ T5931] usb 1-1: config 0 interface 41 has no altsetting 0 [ 498.328987][ T43] usb 5-1: Product: syz [ 498.333252][ T43] usb 5-1: Manufacturer: syz [ 498.343410][ T43] usb 5-1: SerialNumber: syz [ 498.357970][ T5931] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 498.368893][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.378651][ T5931] usb 1-1: Product: syz [ 498.383781][T17697] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 498.397725][ T5931] usb 1-1: Manufacturer: syz [ 498.402864][T17697] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 498.413499][ T5931] usb 1-1: SerialNumber: syz [ 498.430047][ T30] kauditd_printk_skb: 6693 callbacks suppressed [ 498.430066][ T30] audit: type=1400 audit(1755741208.638:106830): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=17696 comm="syz.4.5214" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 498.470608][T10668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.475100][ T5931] usb 1-1: config 0 descriptor?? [ 498.477472][ T30] audit: type=1400 audit(1755741208.638:106831): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=17696 comm="syz.4.5214" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 498.502359][T10668] audit: audit_lost=2792 audit_rate_limit=0 audit_backlog_limit=64 [ 498.504789][T17699] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.510888][T10668] audit: backlog limit exceeded [ 498.522494][T17699] audit: audit_lost=2793 audit_rate_limit=0 audit_backlog_limit=64 [ 498.522561][ T30] audit: type=1400 audit(1755741208.668:106832): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10668 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 498.552421][T15208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.554745][T10668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 498.561756][T17699] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 498.608533][T17699] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 498.862543][T17697] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 498.871868][T17697] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 498.901101][T17699] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 498.909429][T17699] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 499.158608][ T5898] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 499.321217][ T5931] Error reading MAC address [ 499.322012][ T5898] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.337807][T17699] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 499.346852][T17699] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 499.358614][ T5898] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.372752][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 499.383200][ T5898] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 499.397104][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.413427][ T5898] usb 3-1: config 0 descriptor?? [ 499.492530][ T43] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 499.519522][ T43] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 499.576353][ T5931] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 499.588005][ T43] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 499.607792][ T5931] usb 1-1: USB disconnect, device number 46 [ 499.616227][ T43] usb 5-1: USB disconnect, device number 44 [ 499.642080][ T43] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 499.720415][ T43] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 499.746748][ T43] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 499.756906][ T43] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 500.041512][ T5898] usb 3-1: string descriptor 0 read error: -22 [ 500.443279][ T5898] uclogic 0003:256C:006D.003A: failed retrieving string descriptor #100: -71 [ 500.460459][T17766] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 500.482409][ T5898] uclogic 0003:256C:006D.003A: failed retrieving pen parameters: -71 [ 500.497877][ T5898] uclogic 0003:256C:006D.003A: failed probing pen v1 parameters: -71 [ 500.528263][ T5898] uclogic 0003:256C:006D.003A: failed probing parameters: -71 [ 500.535923][ T5898] uclogic 0003:256C:006D.003A: probe with driver uclogic failed with error -71 [ 500.564722][ T5898] usb 3-1: USB disconnect, device number 46 [ 501.029809][ T5931] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 501.220437][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 501.233953][ T5931] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 501.244759][ T5931] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 501.264200][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 501.285367][ T5931] usb 1-1: config 1 has no interface number 0 [ 501.298805][ T5931] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.325023][ T5931] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 501.349648][ T5931] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 501.359406][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.382094][ T5931] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 501.398314][ T43] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 501.523261][T17806] input: syz1 as /devices/virtual/input/input71 [ 501.570984][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.601784][ T5931] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 501.609634][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 501.639774][ T43] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 501.659282][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 501.664119][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.674006][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.677701][ T43] usb 3-1: SerialNumber: syz [ 501.714680][T17811] netlink: 'syz.3.5264': attribute type 16 has an invalid length. [ 501.722872][T17811] netlink: 'syz.3.5264': attribute type 17 has an invalid length. [ 501.781301][T17811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.925417][ T43] usb 3-1: 0:2 : does not exist [ 501.989868][ T43] usb 3-1: USB disconnect, device number 47 [ 502.063737][ T5898] usb 1-1: USB disconnect, device number 47 [ 502.089945][ T5898] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 502.689579][T17824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5267'. [ 502.853072][T17829] xt_hashlimit: size too large, truncated to 1048576 [ 503.442732][ T30] kauditd_printk_skb: 6507 callbacks suppressed [ 503.442753][ T30] audit: type=1400 audit(1755741213.648:112993): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=10668 comm="syz-executor" name="682" dev="tmpfs" ino=3550 [ 503.472549][ T6032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 503.472642][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 503.486047][ C0] audit: audit_lost=2910 audit_rate_limit=0 audit_backlog_limit=64 [ 503.486552][ T6032] audit: audit_lost=2911 audit_rate_limit=0 audit_backlog_limit=64 [ 503.494098][ C0] audit: backlog limit exceeded [ 503.496788][T17848] audit: audit_backlog=65 > audit_backlog_limit=64 [ 503.506845][ T30] audit: type=1400 audit(1755741213.648:112994): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=10668 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3554 [ 503.530440][T17848] audit: audit_lost=2912 audit_rate_limit=0 audit_backlog_limit=64 [ 503.533899][ T6032] audit: backlog limit exceeded [ 503.831746][T17858] macvlan1: entered promiscuous mode [ 503.839730][T17858] ipvlan0: entered promiscuous mode [ 503.846923][T17858] ipvlan0: left promiscuous mode [ 503.852891][T17858] macvlan1: left promiscuous mode [ 504.541698][ T5898] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 504.709017][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 504.729652][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.758984][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.803935][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 504.848220][ T5898] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 504.878668][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.923380][ T5898] usb 2-1: config 0 descriptor?? [ 505.296156][ T5931] kernel write not supported for file /ppp (pid: 5931 comm: kworker/1:6) [ 505.385549][ T5898] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 505.404168][ T5898] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 505.425029][ T5898] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 505.447496][ T5898] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 505.471809][ T5898] shield 0003:0955:7214.003B: unknown main item tag 0x0 [ 505.485967][ T5898] input: HID 0955:7214 Haptics as /devices/virtual/input/input72 [ 505.591586][T17873] netlink: 'syz.1.5286': attribute type 2 has an invalid length. [ 505.602463][ T5898] shield 0003:0955:7214.003B: Registered Thunderstrike controller [ 505.614525][T17873] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5286'. [ 505.634038][ T5898] shield 0003:0955:7214.003B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 505.738480][ T10] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 505.750392][ T5898] usb 2-1: USB disconnect, device number 56 [ 505.765048][T17912] netlink: 'syz.2.5307': attribute type 10 has an invalid length. [ 505.778616][ T10] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 505.834444][T17912] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.862208][ T10] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 505.872997][T17912] bridge_slave_1: left allmulticast mode [ 505.893618][T17912] bridge_slave_1: left promiscuous mode [ 505.918722][ T10] shield 0003:0955:7214.003B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 505.926682][T17912] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.007507][T17912] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 506.308913][ T5931] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 506.377178][T17927] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 506.468311][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 506.483832][ T5931] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 506.511463][ T5931] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 506.525640][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.534356][ T5931] usb 5-1: Product: syz [ 506.543456][ T5931] usb 5-1: Manufacturer: syz [ 506.549522][ T5931] usb 5-1: SerialNumber: syz [ 506.553073][T17931] netlink: 'syz.0.5314': attribute type 1 has an invalid length. [ 506.557971][ T5931] usb 5-1: config 0 descriptor?? [ 506.571407][T17931] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5314'. [ 506.588955][T17917] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 506.624079][ T5931] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input73 [ 506.901020][ T5898] usb 5-1: USB disconnect, device number 45 [ 506.901189][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 507.713002][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5327'. [ 507.776286][T17960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5327'. [ 508.048386][ T43] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 508.234837][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 508.262773][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.298405][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 508.339757][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 508.388225][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.430184][ T43] usb 4-1: config 0 descriptor?? [ 508.480136][ T30] kauditd_printk_skb: 6899 callbacks suppressed [ 508.480156][ T30] audit: type=1400 audit(1755741218.688:119236): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17974 comm="syz.2.5335" name="206" dev="tmpfs" ino=1064 [ 508.480711][T17976] tmpfs: Too small a size for current use [ 508.506897][ T30] audit: type=1400 audit(1755741218.688:119237): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17974 comm="syz.2.5335" name="206" dev="tmpfs" ino=1064 [ 508.510582][ T30] audit: type=1400 audit(1755741218.718:119238): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5845 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 508.551656][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.573888][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 508.590801][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 508.597408][ C0] audit: audit_lost=3132 audit_rate_limit=0 audit_backlog_limit=64 [ 508.605379][ C0] audit: backlog limit exceeded [ 508.618263][ T5845] audit: audit_lost=3133 audit_rate_limit=0 audit_backlog_limit=64 [ 508.646875][T17952] audit: audit_backlog=65 > audit_backlog_limit=64 [ 508.654038][ T5845] audit: backlog limit exceeded [ 508.900934][T17952] raw-gadget.0 gadget.3: fail, usb_ep_set_halt returned -11 [ 508.934231][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 508.950132][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 508.994549][ T43] usb 4-1: USB disconnect, device number 44 [ 509.341391][ T5931] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 509.518388][ T5931] usb 5-1: Using ep0 maxpacket: 32 [ 509.558842][ T5931] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 509.577571][ T5931] usb 5-1: config 0 has no interface number 0 [ 509.603376][ T5931] usb 5-1: config 0 interface 12 has no altsetting 0 [ 509.637756][ T5931] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 509.678769][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.706786][ T5931] usb 5-1: Product: syz [ 509.715518][ T5931] usb 5-1: Manufacturer: syz [ 509.739385][ T5931] usb 5-1: SerialNumber: syz [ 509.777075][ T5931] usb 5-1: config 0 descriptor?? [ 509.919643][T18005] xt_hashlimit: size too large, truncated to 1048576 [ 509.987039][T18007] : renamed from vxcan1 (while UP) [ 510.627507][T18018] 9pnet: p9_errstr2errno: server reported unknown error  [ 510.817160][ T5931] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 510.829767][ T5931] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 510.867760][ T5931] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 510.875685][ T5931] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 510.927209][ T5931] usb 5-1: USB disconnect, device number 46 [ 511.147063][T18035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5358'. [ 511.247108][T18038] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5360'. [ 511.578304][ T5931] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 511.743856][ T5931] usb 1-1: Using ep0 maxpacket: 16 [ 511.766823][ T5931] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.798796][ T5931] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.831238][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 511.837945][ T5931] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 511.902094][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.939787][ T5931] usb 1-1: config 0 descriptor?? [ 512.329031][T18064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5370'. [ 512.378429][ T5931] lenovo 0003:17EF:6009.003C: unknown main item tag 0x0 [ 512.398656][ T5931] lenovo 0003:17EF:6009.003C: unknown main item tag 0x0 [ 512.433348][ T5931] lenovo 0003:17EF:6009.003C: unknown main item tag 0x0 [ 512.449363][ T5931] lenovo 0003:17EF:6009.003C: unknown main item tag 0x0 [ 512.493282][ T5931] lenovo 0003:17EF:6009.003C: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0 [ 512.586501][ T5931] usb 1-1: USB disconnect, device number 48 [ 512.986480][T18070] IPVS: Scheduler module ip_vs_sip not found [ 513.536958][ T30] kauditd_printk_skb: 4695 callbacks suppressed [ 513.536978][ T30] audit: type=1400 audit(1755741223.738:123794): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6032 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 513.542924][ T6032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.543476][ T30] audit: type=1400 audit(1755741223.738:123795): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6032 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 513.577507][ T6032] audit: audit_lost=3181 audit_rate_limit=0 audit_backlog_limit=64 [ 513.589607][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.603392][ C0] audit: audit_lost=3182 audit_rate_limit=0 audit_backlog_limit=64 [ 513.611514][ C0] audit: backlog limit exceeded [ 513.612357][ T6032] audit: backlog limit exceeded [ 513.617079][T18084] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.622086][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 513.721666][T18079] binder: 18078:18079 ioctl c0306201 200000001a80 returned -14 [ 514.045223][T18089] netlink: 'syz.1.5381': attribute type 4 has an invalid length. [ 514.054252][ T5899] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 514.069731][T18089] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5381'. [ 514.198874][ T5898] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 514.218229][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 514.231676][ T5899] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 514.248321][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 514.290343][ T5899] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 514.311716][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 514.323644][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 514.337815][ T5899] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 514.345905][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 514.364766][ T5899] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 514.386129][ T5898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.397009][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 514.418256][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 514.419746][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.450137][ T5899] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 514.458096][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 514.473825][T18100] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 514.478180][ T5899] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 514.495489][ T5898] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 514.511052][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 514.533713][ T5898] usb 1-1: SerialNumber: syz [ 514.535125][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 514.578238][ T5899] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 514.616884][ T5899] usb 5-1: string descriptor 0 read error: -22 [ 514.623627][ T5899] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 514.647679][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.679390][ T5899] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 514.775194][ T5898] usb 1-1: 0:2 : does not exist [ 514.831217][ T5898] usb 1-1: USB disconnect, device number 49 [ 514.974853][ T5931] usb 5-1: USB disconnect, device number 47 [ 515.188745][T18117] syzkaller1: entered promiscuous mode [ 515.204137][T18117] syzkaller1: entered allmulticast mode [ 515.243020][T18116] block nbd0: server does not support multiple connections per device. [ 515.260329][T18116] block nbd0: shutting down sockets [ 515.552487][T18122] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5396'. [ 516.121126][T18138] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.659594][T18162] loop8: detected capacity change from 0 to 8 [ 516.671705][T18162] Dev loop8: unable to read RDB block 8 [ 516.678611][T18162] loop8: unable to read partition table [ 516.688234][T18162] loop8: partition table beyond EOD, truncated [ 516.694576][T18162] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 516.786260][T18169] program syz.0.5416 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.828270][ T5931] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 516.865804][ T43] hid-generic 0000:0D17:0000.003D: unknown main item tag 0x0 [ 516.873803][ T43] hid-generic 0000:0D17:0000.003D: unknown main item tag 0x0 [ 516.893204][ T43] hid-generic 0000:0D17:0000.003D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 516.991509][ T5931] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 517.011285][ T5931] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 517.026546][ T5931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 517.035933][ T5931] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 517.047518][ T5931] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 517.062664][ T5931] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 517.077114][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 517.086258][ T5931] usb 5-1: Product: syz [ 517.096042][ T5931] usb 5-1: Manufacturer: syz [ 517.137751][ T5931] cdc_wdm 5-1:1.0: skipping garbage [ 517.147812][ T5931] cdc_wdm 5-1:1.0: skipping garbage [ 517.166219][ T5931] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 517.177905][ T5931] cdc_wdm 5-1:1.0: Unknown control protocol [ 517.289097][T18183] pim6reg1: entered promiscuous mode [ 517.300015][T18183] pim6reg1: entered allmulticast mode [ 517.389228][ T5931] usb 5-1: USB disconnect, device number 48 [ 517.950480][ T5898] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5898 comm: kworker/0:3) [ 518.462500][T18220] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 518.542392][ T30] kauditd_printk_skb: 7237 callbacks suppressed [ 518.542413][ T30] audit: type=1400 audit(1755741228.748:130468): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18223 comm="syz-executor" name="222" dev="tmpfs" ino=1148 [ 518.556178][ T6584] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.569961][T18224] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.579427][ T6584] audit: audit_lost=3372 audit_rate_limit=0 audit_backlog_limit=64 [ 518.589958][ T30] audit: type=1400 audit(1755741228.748:130469): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18223 comm="syz-executor" name="222" dev="tmpfs" ino=1148 [ 518.594890][ T6032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.610135][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.620423][ T6584] audit: backlog limit exceeded [ 518.622765][ C0] audit: audit_lost=3373 audit_rate_limit=0 audit_backlog_limit=64 [ 518.627791][ T6584] audit: audit_backlog=65 > audit_backlog_limit=64 [ 518.695942][T18224] input: syz0 as /devices/virtual/input/input74 [ 519.028629][T18238] syzkaller1: entered promiscuous mode [ 519.068241][T18238] syzkaller1: entered allmulticast mode [ 519.910420][T18266] binder: 18263:18266 ioctl c0306201 200000000100 returned -14 [ 520.378920][ T5898] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 520.562879][ T5898] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 520.583292][ T5898] usb 3-1: config 0 has no interface number 0 [ 520.599559][ T5898] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 520.623421][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.642065][ T5898] usb 3-1: Product: syz [ 520.646297][ T5898] usb 3-1: Manufacturer: syz [ 520.658543][ T5898] usb 3-1: SerialNumber: syz [ 520.683700][ T5898] usb 3-1: config 0 descriptor?? [ 520.704196][T18293] netlink: 'syz.4.5471': attribute type 13 has an invalid length. [ 520.727354][T18293] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.5471'. [ 520.985737][T18303] macsec3: entered promiscuous mode [ 520.994930][T18303] macsec3: entered allmulticast mode [ 521.008234][T18303] ip6gretap0: entered allmulticast mode [ 521.132124][ T5898] usb 3-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 521.298310][ T5931] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 521.351174][ T5898] usb 3-1: Firmware: build [ 521.461206][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 521.477156][ T5931] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 521.503952][ T5931] usb 4-1: config 179 has no interface number 0 [ 521.531741][ T5931] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 521.553677][ T5898] usb 3-1: failed to fetch extended address, random address set [ 521.567037][ T5931] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 521.569132][ T5898] usb 3-1: atusb_probe: initialization failed, error = -524 [ 521.586492][ T5898] atusb 3-1:0.128: probe with driver atusb failed with error -524 [ 521.609299][ T5898] usb 3-1: USB disconnect, device number 48 [ 521.625184][ T5931] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 521.676868][ T5931] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 521.714111][ T5931] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 521.733483][ T5931] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 521.743097][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.763617][T18306] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 522.041810][ T43] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input75 [ 522.234980][T18306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.259903][T18306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.510136][ T5898] usb 4-1: USB disconnect, device number 45 [ 522.510171][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 522.524799][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 523.381270][T18366] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5504'. [ 523.411077][ T43] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 523.548481][ T30] kauditd_printk_skb: 7272 callbacks suppressed [ 523.548502][ T30] audit: type=1400 audit(1755741233.748:137696): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=6584 comm="syz-executor" name="954" dev="tmpfs" ino=4908 [ 523.584183][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.584793][T10668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.595781][T18358] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.605868][T10668] audit: audit_lost=3390 audit_rate_limit=0 audit_backlog_limit=64 [ 523.616603][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.616628][ C0] audit: audit_lost=3391 audit_rate_limit=0 audit_backlog_limit=64 [ 523.616654][ C0] audit: backlog limit exceeded [ 523.619538][T18372] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.624264][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 523.633332][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.636933][ C0] audit: audit_lost=3392 audit_rate_limit=0 audit_backlog_limit=64 [ 523.711197][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 523.744050][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 523.768295][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.797799][ T43] usb 3-1: config 0 descriptor?? [ 524.199099][ T5898] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 524.253771][ T43] plantronics 0003:047F:FFFF.003E: reserved main item tag 0xd [ 524.294234][ T43] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 524.359614][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 524.375982][ T5898] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 524.399126][ T5898] usb 4-1: config 0 has no interface number 0 [ 524.410032][ T5898] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 524.431418][ T5898] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 524.453887][ T5898] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 524.473544][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 524.506169][ T5898] usb 4-1: Product: syz [ 524.519539][ T5898] usb 4-1: SerialNumber: syz [ 524.537513][ T5898] usb 4-1: config 0 descriptor?? [ 524.555084][ T5898] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 524.575559][ T5898] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input77 [ 524.596328][ T5912] usb 3-1: USB disconnect, device number 49 [ 524.802516][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 525.083427][T18407] loop2: detected capacity change from 0 to 7 [ 525.091363][T18407] Dev loop2: unable to read RDB block 7 [ 525.097315][T18407] loop2: AHDI p1 p2 [ 525.101853][T18407] loop2: partition table partially beyond EOD, truncated [ 525.109138][T18407] loop2: p1 start 1702258030 is beyond EOD, truncated [ 525.229239][ T5912] usb 4-1: USB disconnect, device number 46 [ 525.262772][ T5912] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 525.886391][ T5912] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 526.071249][ T5912] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 526.093420][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.148437][ T5912] usb 1-1: config 0 descriptor?? [ 526.175548][ T5912] cp210x 1-1:0.0: cp210x converter detected [ 526.590863][ T5912] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 526.819546][T18454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5542'. [ 526.849938][ T5912] usb 1-1: cp210x converter now attached to ttyUSB0 [ 527.042015][ T43] usb 1-1: USB disconnect, device number 50 [ 527.055520][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 527.106901][ T43] cp210x 1-1:0.0: device disconnected [ 528.104334][T18483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 528.562129][ T30] kauditd_printk_skb: 6174 callbacks suppressed [ 528.562150][ T30] audit: type=1400 audit(1755741238.768:143427): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18492 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 528.590728][T18492] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.597290][T18492] audit: audit_lost=3541 audit_rate_limit=0 audit_backlog_limit=64 [ 528.622750][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.629469][ C0] audit: audit_lost=3542 audit_rate_limit=0 audit_backlog_limit=64 [ 528.637404][ C0] audit: backlog limit exceeded [ 528.638285][T18492] audit: backlog limit exceeded [ 528.648891][ T30] audit: type=1400 audit(1755741238.768:143428): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=15208 comm="syz-executor" path="/235/binderfs" dev="tmpfs" ino=1220 [ 528.658847][T18493] audit: audit_backlog=65 > audit_backlog_limit=64 [ 528.669877][T18492] audit: audit_backlog=65 > audit_backlog_limit=64 [ 529.338905][ T5850] Bluetooth: hci3: command 0x040f tx timeout [ 530.904192][T18544] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 531.698276][ T43] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 531.880154][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.901390][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 531.918249][ T43] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 531.928399][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.936902][ T43] usb 4-1: Product: syz [ 531.959751][ T43] usb 4-1: Manufacturer: syz [ 531.978255][ T43] usb 4-1: SerialNumber: syz [ 531.990223][ T43] usb 4-1: config 0 descriptor?? [ 532.018471][ T43] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 532.046995][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 532.074347][ T43] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 532.100318][ T43] usb 4-1: media controller created [ 532.186736][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 532.264367][T18568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5592'. [ 532.301201][T18568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5592'. [ 532.302794][ T43] DVB: Unable to find symbol tda10046_attach() [ 532.324882][ T43] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 532.362723][ T43] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 532.438644][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 532.600990][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.621550][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 532.649475][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 532.667270][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 532.700135][ T10] usb 5-1: SerialNumber: syz [ 532.749108][T18585] syz_tun: entered allmulticast mode [ 532.772609][T18583] syz_tun: left allmulticast mode [ 532.953739][ T10] usb 5-1: 0:2 : does not exist [ 533.022037][ T10] usb 5-1: USB disconnect, device number 49 [ 533.182689][ T43] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 533.204344][ T43] usb 4-1: USB disconnect, device number 47 [ 533.295989][T18603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5607'. [ 533.595545][ T30] kauditd_printk_skb: 5824 callbacks suppressed [ 533.595564][ T30] audit: type=1400 audit(1755741243.798:148781): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15208 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 533.645260][T15208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.656188][ T6032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.662182][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.668561][ T6032] audit: audit_lost=3701 audit_rate_limit=0 audit_backlog_limit=64 [ 533.669320][ C0] audit: audit_lost=3702 audit_rate_limit=0 audit_backlog_limit=64 [ 533.677269][ T30] audit: type=1400 audit(1755741243.798:148782): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=16975 comm="kworker/u8:15" saddr=10.128.0.169 src=30008 daddr=10.128.1.91 dest=36758 netif=eth0 [ 533.685084][ C0] audit: backlog limit exceeded [ 533.687083][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 533.709052][ T43] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 533.713534][ C0] audit: audit_lost=3703 audit_rate_limit=0 audit_backlog_limit=64 [ 533.868388][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 533.878860][ T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.919640][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.944611][ T43] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 533.975807][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.997381][ T43] usb 1-1: Product: syz [ 534.012424][ T43] usb 1-1: Manufacturer: syz [ 534.031868][ T43] usb 1-1: SerialNumber: syz [ 534.289654][ T43] usb 1-1: 0:2 : does not exist [ 534.319220][ T43] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 534.363139][ T43] usb 1-1: USB disconnect, device number 51 [ 534.480845][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 534.642559][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 534.659121][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 534.678225][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.696496][ T10] usb 3-1: Product: syz [ 534.700855][ T10] usb 3-1: Manufacturer: syz [ 534.705666][ T10] usb 3-1: SerialNumber: syz [ 534.727718][ T10] usb 3-1: config 0 descriptor?? [ 534.748460][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 535.128947][ T43] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 535.305010][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.336354][ T43] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 535.373756][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.384660][T18648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5627'. [ 535.394202][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.408403][ T43] usb 5-1: Product: syz [ 535.418275][ T43] usb 5-1: Manufacturer: syz [ 535.426378][ T43] usb 5-1: SerialNumber: syz [ 535.456216][ T43] cdc_mbim 5-1:1.0: skipping garbage [ 535.671265][T18638] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 535.775538][ T10] gspca_sonixj: reg_w1 err -71 [ 535.858526][ T10] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 535.881993][ T10] usb 3-1: USB disconnect, device number 50 [ 536.310944][T18638] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 536.329812][ T43] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 536.348247][ T43] cdc_mbim 5-1:1.0: setting rx_max = 2048 [ 536.532831][ T43] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 536.557910][ T43] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 536.585380][ T43] wwan wwan0: port wwan0mbim0 attached [ 536.648139][ T43] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 22:1c:67:59:de:00 [ 536.695176][ T43] usb 5-1: USB disconnect, device number 50 [ 536.713377][ T43] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 536.910259][ T43] wwan wwan0: port wwan0mbim0 disconnected [ 537.318261][ T10] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 537.478331][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 537.516402][ T10] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 537.538345][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.546590][ T10] usb 1-1: Product: syz [ 537.592916][ T10] usb 1-1: Manufacturer: syz [ 537.597673][ T10] usb 1-1: SerialNumber: syz [ 537.628405][ T10] usb 1-1: config 0 descriptor?? [ 537.781272][T18691] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5645'. [ 538.049344][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 538.052721][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 538.053677][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 538.053746][ T10] usb 1-1: media controller created [ 538.102541][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.253459][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 538.253536][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 538.253553][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 538.264657][ T10] usb 1-1: USB disconnect, device number 52 [ 538.352155][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 538.408645][T18708] openvswitch: netlink: Message has 4 unknown bytes. [ 538.623382][ T30] kauditd_printk_skb: 5330 callbacks suppressed [ 538.623402][ T30] audit: type=1400 audit(1755741248.828:153638): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18714 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 538.662890][ T6032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.669764][ T6032] audit: audit_lost=3862 audit_rate_limit=0 audit_backlog_limit=64 [ 538.678502][T18716] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.685363][ T6032] audit: backlog limit exceeded [ 538.688384][ T30] audit: type=1400 audit(1755741248.828:153639): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18714 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 538.693353][T18716] audit: audit_lost=3863 audit_rate_limit=0 audit_backlog_limit=64 [ 538.719046][ T6032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 538.725590][ T6032] audit: audit_lost=3864 audit_rate_limit=0 audit_backlog_limit=64 [ 538.733942][ T6032] audit: backlog limit exceeded [ 539.262321][T18731] ALSA: seq fatal error: cannot create timer (-22) [ 539.851118][ T5899] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 540.044260][ T5899] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 540.072189][ T5899] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.106565][ T5899] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 540.132135][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.377973][ T5899] usb 3-1: usb_control_msg returned -32 [ 540.403649][ T5899] usbtmc 3-1:16.0: can't read capabilities [ 540.669391][T18769] sctp: [Deprecated]: syz.3.5682 (pid 18769) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.669391][T18769] Use struct sctp_sack_info instead [ 540.919001][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5684'. [ 540.981903][T18780] batadv0: entered promiscuous mode [ 540.992285][T18780] batadv0: left promiscuous mode [ 541.406640][T18796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5692'. [ 541.838598][ T5899] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 541.900398][T18805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5696'. [ 542.041224][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.058173][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.078309][ T5899] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 542.095085][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.112027][ T5899] usb 1-1: config 0 descriptor?? [ 542.520887][T18813] loop2: detected capacity change from 0 to 7 [ 542.536486][T18813] Dev loop2: unable to read RDB block 7 [ 542.543997][T18813] loop2: unable to read partition table [ 542.550317][ T5899] cm6533_jd 0003:0D8C:0022.003F: hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 542.553465][T18813] loop2: partition table beyond EOD, truncated [ 542.573387][T18813] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 542.634996][ T10] usb 3-1: USB disconnect, device number 51 [ 542.781831][ T5898] usb 1-1: USB disconnect, device number 53 [ 543.629106][ T30] kauditd_printk_skb: 5491 callbacks suppressed [ 543.629126][ T30] audit: type=1400 audit(1755741253.838:158929): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5845 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 543.647015][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 543.656695][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 543.656718][ C0] audit: audit_lost=3932 audit_rate_limit=0 audit_backlog_limit=64 [ 543.678189][ C0] audit: backlog limit exceeded [ 543.683705][ T30] audit: type=1400 audit(1755741253.838:158930): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5845 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 543.704343][ T30] audit: type=1400 audit(1755741253.838:158931): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5845 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 543.725819][ T5845] audit: audit_lost=3933 audit_rate_limit=0 audit_backlog_limit=64 [ 543.745580][ T5845] audit: backlog limit exceeded [ 543.756221][ T30] audit: type=1400 audit(1755741253.838:158932): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5845 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 544.254581][T18847] syzkaller1: entered promiscuous mode [ 544.264166][T18847] syzkaller1: entered allmulticast mode [ 544.488373][ T5898] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 544.598243][ T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 544.648202][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 544.671506][ T5898] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 544.682463][ T5898] usb 4-1: config 179 has no interface number 0 [ 544.693140][ T5898] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 544.704944][ T5898] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 544.717193][ T5898] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 544.728983][ T5898] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 544.740706][ T5898] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 544.755011][ T5898] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 544.764279][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.772459][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 544.780563][ T10] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 544.789206][ T10] usb 5-1: config 0 has no interface number 0 [ 544.811486][ T10] usb 5-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 544.822216][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.837612][T18848] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 544.845208][ T10] usb 5-1: Product: syz [ 544.862192][ T10] usb 5-1: Manufacturer: syz [ 544.866947][ T10] usb 5-1: SerialNumber: syz [ 544.890445][ T10] usb 5-1: config 0 descriptor?? [ 545.144678][ T10] kaweth 5-1:0.235: Firmware present in device. [ 545.145287][T18848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.166763][T18848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.351816][ T10] kaweth 5-1:0.235: Statistics collection: 0 [ 545.368376][ T10] kaweth 5-1:0.235: Multicast filter limit: 0 [ 545.374703][ T10] kaweth 5-1:0.235: MTU: 0 [ 545.383337][ T10] kaweth 5-1:0.235: Read MAC address 00:00:00:00:00:00 [ 545.654032][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 545.654039][ T5899] usb 4-1: USB disconnect, device number 48 [ 545.654088][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 545.758685][ T10] kaweth 5-1:0.235: Error setting SOFS wait [ 545.764971][ T10] kaweth 5-1:0.235: probe with driver kaweth failed with error -5 [ 545.793237][ T10] usb 5-1: USB disconnect, device number 51 [ 546.470604][T18906] netlink: 428 bytes leftover after parsing attributes in process `syz.4.5743'. [ 546.480020][T18906] netlink: 'syz.4.5743': attribute type 5 has an invalid length. [ 546.578283][ T5899] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 546.742727][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 546.763586][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.779790][ T5899] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 546.793026][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.806814][ T5899] usb 1-1: config 0 descriptor?? [ 546.958502][T18923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5749'. [ 547.257080][ T5899] hid-picolcd 0003:04D8:C002.0040: unknown main item tag 0x0 [ 547.292921][ T5899] hid-picolcd 0003:04D8:C002.0040: unknown main item tag 0x0 [ 547.308605][ T5899] hid-picolcd 0003:04D8:C002.0040: unknown main item tag 0x0 [ 547.339145][ T5899] hid-picolcd 0003:04D8:C002.0040: unknown main item tag 0x0 [ 547.359590][ T5899] hid-picolcd 0003:04D8:C002.0040: unknown main item tag 0x0 [ 547.451543][ T5899] hid-picolcd 0003:04D8:C002.0040: No report with id 0x11 found [ 547.485355][ T5899] usb 1-1: USB disconnect, device number 54 [ 547.561080][T18939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5756'. [ 548.405920][T18971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5771'. [ 548.447369][T18971] ipvlan3: entered promiscuous mode [ 548.503449][T18976] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.5772'. [ 548.643658][ T30] kauditd_printk_skb: 7001 callbacks suppressed [ 548.643679][ T30] audit: type=1400 audit(1755741258.848:165712): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=18977 comm="syz.4.5775" name="file1" dev="tmpfs" ino=5730 [ 548.692199][T10668] audit: audit_backlog=66 > audit_backlog_limit=64 [ 548.699313][T10668] audit: audit_lost=4008 audit_rate_limit=0 audit_backlog_limit=64 [ 548.706757][T15208] audit: audit_backlog=67 > audit_backlog_limit=64 [ 548.707307][ T30] audit: type=1400 audit(1755741258.868:165713): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=18978 comm="syz.1.5773" saddr=172.20.20.170 src=20001 daddr=172.20.20.170 dest=20001 netif=lo [ 548.718592][ T5845] audit: audit_backlog=66 > audit_backlog_limit=64 [ 548.737760][T10668] audit: backlog limit exceeded [ 548.749864][T15208] audit: audit_lost=4009 audit_rate_limit=0 audit_backlog_limit=64 [ 548.750148][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 548.762987][T15208] audit: backlog limit exceeded [ 549.221539][T18996] dummy0: entered promiscuous mode [ 549.559298][T19008] loop2: detected capacity change from 0 to 7 [ 549.573736][T19008] Dev loop2: unable to read RDB block 7 [ 549.579615][T19008] loop2: unable to read partition table [ 549.579621][T19007] kvm: user requested TSC rate below hardware speed [ 549.585576][T19008] loop2: partition table beyond EOD, truncated [ 549.612667][T19008] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 549.659561][ T5837] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 550.384323][T19034] netlink: 'syz.1.5800': attribute type 10 has an invalid length. [ 550.454447][T19034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.495192][T19034] team0: Port device bond0 added [ 550.975624][T19046] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 552.118454][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 552.341768][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 552.364492][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 552.396194][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 552.428399][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 552.468784][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 552.518276][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.558017][ T10] usb 1-1: config 0 descriptor?? [ 552.571433][T19069] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 553.044063][ T10] plantronics 0003:047F:FFFF.0041: reserved main item tag 0xd [ 553.088751][ T10] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 553.335655][ T5899] usb 1-1: USB disconnect, device number 55 [ 553.648320][ T30] kauditd_printk_skb: 7710 callbacks suppressed [ 553.648341][ T30] audit: type=1400 audit(1755741263.848:172109): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6584 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 553.712862][T15208] audit: audit_backlog=66 > audit_backlog_limit=64 [ 553.719671][ T30] audit: type=1400 audit(1755741263.858:172110): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6584 comm="syz-executor" name="1027" dev="tmpfs" ino=5284 [ 553.739636][T15208] audit: audit_lost=4449 audit_rate_limit=0 audit_backlog_limit=64 [ 553.747580][T15208] audit: backlog limit exceeded [ 553.748712][T19123] audit: audit_backlog=65 > audit_backlog_limit=64 [ 553.752678][T15208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 553.763198][T19123] audit: audit_lost=4450 audit_rate_limit=0 audit_backlog_limit=64 [ 553.767275][ T30] audit: type=1400 audit(1755741263.858:172111): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6584 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 553.776118][T19123] audit: backlog limit exceeded [ 554.041012][T19134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 554.128254][ T5899] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 554.206057][T19141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5850'. [ 554.281214][ T5899] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 554.288215][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 554.309248][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.332851][ T5899] usb 3-1: config 0 descriptor?? [ 554.352064][ T5899] cp210x 3-1:0.0: cp210x converter detected [ 554.448740][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 554.477263][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.500031][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.511643][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 554.511701][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 554.511726][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.515064][ T10] usb 2-1: config 0 descriptor?? [ 554.767291][ T5899] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 554.998332][ T5912] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 555.006973][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 555.019089][ T5899] usb 3-1: cp210x converter now attached to ttyUSB0 [ 555.034206][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0042/input/input81 [ 555.045552][ T10] microsoft 0003:045E:07DA.0042: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 555.158805][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 555.171445][ T5912] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 555.171478][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.171499][ T5912] usb 5-1: Product: syz [ 555.171515][ T5912] usb 5-1: Manufacturer: syz [ 555.171531][ T5912] usb 5-1: SerialNumber: syz [ 555.175217][ T5912] usb 5-1: config 0 descriptor?? [ 555.214166][ T5912] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 555.215353][ T5912] usb 5-1: Detected FT-X [ 555.250686][ T5899] usb 3-1: USB disconnect, device number 52 [ 555.260489][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 555.276310][ T5899] cp210x 3-1:0.0: device disconnected [ 555.312980][ T10] usb 2-1: USB disconnect, device number 57 [ 555.443844][ T5912] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 555.882579][ T5912] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 556.144793][ T5912] usb 5-1: USB disconnect, device number 52 [ 556.168564][ T5912] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 556.193900][ T5912] ftdi_sio 5-1:0.0: device disconnected [ 556.652236][ T5931] kernel write not supported for file /2662/attr/exec (pid: 5931 comm: kworker/1:6) [ 556.839929][T19202] loop2: detected capacity change from 0 to 7 [ 556.864502][T19202] Dev loop2: unable to read RDB block 7 [ 556.878247][T19202] loop2: AHDI p1 p2 [ 556.882239][T19202] loop2: partition table partially beyond EOD, truncated [ 556.908352][T19202] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 558.448359][T19247] use of bytesused == 0 is deprecated and will be removed in the future, [ 558.467605][T19247] use the actual size instead. [ 558.661064][ T30] kauditd_printk_skb: 6690 callbacks suppressed [ 558.661085][ T30] audit: type=1400 audit(1755741268.848:177948): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=6584 comm="syz-executor" path="/1034/cgroup.cpu" dev="tmpfs" ino=5321 [ 558.721337][ T30] audit: type=1400 audit(1755741268.848:177949): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6584 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 558.743605][ T30] audit: type=1400 audit(1755741268.848:177950): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6584 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 558.751707][T19254] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.798360][ T30] audit: type=1400 audit(1755741268.848:177951): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6584 comm="syz-executor" name="1034" dev="tmpfs" ino=5319 [ 558.805770][T19254] audit: audit_lost=4736 audit_rate_limit=0 audit_backlog_limit=64 [ 558.819816][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.826729][T10668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.838316][ T5845] audit: audit_lost=4737 audit_rate_limit=0 audit_backlog_limit=64 [ 558.839799][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 558.923801][T19255] netlink: 'syz.1.5899': attribute type 29 has an invalid length. [ 560.447421][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5913'. [ 561.171394][T19305] netlink: 452 bytes leftover after parsing attributes in process `syz.0.5919'. [ 561.238374][ T5899] Process accounting resumed [ 561.533427][ T5899] IPVS: starting estimator thread 0... [ 561.550623][T19311] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 561.658290][T19319] IPVS: using max 26 ests per chain, 62400 per kthread [ 561.941489][T19332] sctp: [Deprecated]: syz.4.5931 (pid 19332) Use of struct sctp_assoc_value in delayed_ack socket option. [ 561.941489][T19332] Use struct sctp_sack_info instead [ 562.554637][T19344] netlink: 'syz.0.5936': attribute type 1 has an invalid length. [ 562.914806][T19350] netlink: 'syz.1.5939': attribute type 1 has an invalid length. [ 562.927197][T19350] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5939'. [ 563.119004][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.178546][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5942'. [ 563.216044][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5942'. [ 563.578682][ T5931] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 563.668267][ T30] kauditd_printk_skb: 5326 callbacks suppressed [ 563.668286][ T30] audit: type=1400 audit(1755741273.878:183206): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=19374 comm="syz-executor" path="/proc/2306/oom_score_adj" dev="proc" ino=74074 [ 563.739945][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 563.767659][ T30] audit: type=1400 audit(1755741273.878:183207): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19374 comm="syz-executor" name="1048" dev="tmpfs" ino=5389 [ 563.784622][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.787506][ T30] audit: type=1400 audit(1755741273.878:183208): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19374 comm="syz-executor" name="1048" dev="tmpfs" ino=5389 [ 563.797887][T19364] audit: audit_backlog=65 > audit_backlog_limit=64 [ 563.813573][ T30] audit: type=1400 audit(1755741273.878:183209): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=19374 comm="syz-executor" name="1048" dev="tmpfs" ino=5389 [ 563.840736][ T30] audit: type=1400 audit(1755741273.908:183210): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30008 daddr=10.128.1.91 dest=36758 netif=eth0 [ 563.863653][ T5845] audit: audit_lost=4762 audit_rate_limit=0 audit_backlog_limit=64 [ 563.871927][T19364] audit: audit_lost=4763 audit_rate_limit=0 audit_backlog_limit=64 [ 563.881792][ T5845] audit: backlog limit exceeded [ 563.890388][ T5931] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.928375][ T5931] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 563.958342][ T5931] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 563.977202][ T5931] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 564.006580][ T5931] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.020578][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.038506][ T5931] usb 3-1: Product: syz [ 564.042951][ T5931] usb 3-1: Manufacturer: syz [ 564.047683][ T5931] usb 3-1: SerialNumber: syz [ 564.058814][T19364] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 564.925187][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5958'. [ 565.154962][ T5931] cdc_ncm 3-1:1.0: bind() failure [ 565.188631][ T5931] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 565.208375][ T5931] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 565.223869][ T5931] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 565.240023][ T5931] usb 3-1: USB disconnect, device number 53 [ 566.104703][T19434] syzkaller1: entered promiscuous mode [ 566.112612][T19434] syzkaller1: entered allmulticast mode [ 566.347959][T19441] syzkaller1: entered promiscuous mode [ 566.371908][T19441] syzkaller1: entered allmulticast mode [ 566.645753][T19451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.782643][T19459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.213960][ T5837] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 567.248280][ T5931] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 567.428401][ T5931] usb 5-1: Using ep0 maxpacket: 16 [ 567.475430][ T5931] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 567.486384][ T5931] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.528211][ T5931] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.567162][ T5931] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.584801][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.598208][ T5931] usb 5-1: Product: syz [ 567.602527][ T5931] usb 5-1: Manufacturer: syz [ 567.611582][ T5931] usb 5-1: SerialNumber: syz [ 567.699567][ T5898] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 567.789817][T19494] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 567.879458][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 567.904774][ T5898] usb 2-1: config 0 interface 0 has no altsetting 0 [ 567.927017][ T5898] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 567.957757][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.983443][ T5898] usb 2-1: Product: syz [ 568.005918][ T5898] usb 2-1: Manufacturer: syz [ 568.019206][ T5898] usb 2-1: SerialNumber: syz [ 568.035300][ T5898] usb 2-1: config 0 descriptor?? [ 568.103236][ T5931] usb 5-1: 0:2 : does not exist [ 568.159820][T19505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 568.167279][T19505] IPv6: NLM_F_CREATE should be set when creating new route [ 568.174685][T19505] IPv6: NLM_F_CREATE should be set when creating new route [ 568.244282][T19507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 568.473837][ T5898] gs_usb 2-1:0.0: Configuring for 2 interfaces [ 568.681668][ T30] kauditd_printk_skb: 6310 callbacks suppressed [ 568.681689][ T30] audit: type=1400 audit(1755741278.888:188905): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=19483 comm="syz.1.5997" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 568.709365][ T30] audit: type=1400 audit(1755741278.888:188906): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=19483 comm="syz.1.5997" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 568.729845][ T30] audit: type=1400 audit(1755741278.888:188907): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.1.91 dest=36758 netif=eth0 [ 568.761806][ T30] audit: type=1400 audit(1755741278.968:188908): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 568.770096][ T5931] usb 5-1: USB disconnect, device number 53 [ 568.785686][ T30] audit: type=1400 audit(1755741278.968:188909): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="snd" dev="devtmpfs" ino=1283 [ 568.807395][ T30] audit: type=1400 audit(1755741278.968:188910): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=26 comm="kdevtmpfs" name="snd" dev="devtmpfs" ino=1283 [ 568.826667][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.847852][ T30] audit: type=1400 audit(1755741278.968:188911): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=26 comm="kdevtmpfs" name="controlC3" dev="devtmpfs" ino=3636 [ 568.867554][ T30] audit: type=1400 audit(1755741278.968:188912): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 568.891918][ T30] audit: type=1400 audit(1755741278.968:188913): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 568.911087][ T30] audit: type=1400 audit(1755741278.968:188914): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=26 comm="kdevtmpfs" name="mixer3" dev="devtmpfs" ino=3637 [ 569.085233][ T5898] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 569.142277][ T5898] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 569.154484][ T5898] usb 2-1: USB disconnect, device number 58 [ 570.358275][ T5899] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 570.546022][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.568334][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.588221][ T5899] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 570.608021][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.637642][ T5899] usb 5-1: config 0 descriptor?? [ 571.096191][ T5899] pyra 0003:1E7D:2CF6.0043: unknown main item tag 0x2 [ 571.116461][T19557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6027'. [ 571.128199][ T5899] pyra 0003:1E7D:2CF6.0043: unknown global tag 0xc [ 571.144433][ T5899] pyra 0003:1E7D:2CF6.0043: item 0 2 1 12 parsing failed [ 571.173173][ T5899] pyra 0003:1E7D:2CF6.0043: parse failed [ 571.202209][ T5899] pyra 0003:1E7D:2CF6.0043: probe with driver pyra failed with error -22 [ 571.261054][ T5837] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 571.271831][ T5837] Bluetooth: hci1: Injecting HCI hardware error event [ 571.281902][ T5850] Bluetooth: hci1: hardware error 0x00 [ 571.317095][ T5899] usb 5-1: USB disconnect, device number 54 [ 571.640394][T19571] netlink: 'syz.2.6033': attribute type 10 has an invalid length. [ 571.690378][T19571] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 572.131414][T19590] loop8: detected capacity change from 0 to 8 [ 572.139949][T19590] Dev loop8: unable to read RDB block 8 [ 572.145710][T19590] loop8: unable to read partition table [ 572.151744][T19590] loop8: partition table beyond EOD, truncated [ 572.157923][T19590] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 572.493083][T19602] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6045'. [ 572.671467][ T5898] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 572.832479][ T5898] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.849840][ T5898] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.874537][ T5898] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 572.895495][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.917027][ T5898] usb 5-1: Product: syz [ 572.928144][ T5898] usb 5-1: Manufacturer: syz [ 572.932830][ T5898] usb 5-1: SerialNumber: syz [ 572.948180][ T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 573.113523][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 573.129339][ T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 573.145305][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.168144][ T10] usb 1-1: config 0 descriptor?? [ 573.182041][ T5898] usb 5-1: 0:2 : does not exist [ 573.200837][ T5898] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 573.251614][ T5898] usb 5-1: USB disconnect, device number 55 [ 573.341495][ T5850] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 573.695635][ T30] kauditd_printk_skb: 5237 callbacks suppressed [ 573.695656][ T30] audit: type=1400 audit(1755741283.898:193990): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=19621 comm="syz.3.6055" saddr=10.128.0.169 src=30008 daddr=10.128.1.91 dest=36758 netif=eth0 [ 573.753032][ T30] audit: type=1400 audit(1755741283.938:193991): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19625 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 573.772882][ T30] audit: type=1400 audit(1755741283.938:193992): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19625 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 573.802449][T10668] audit: audit_backlog=66 > audit_backlog_limit=64 [ 573.809240][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 573.815779][ C0] audit: audit_lost=5023 audit_rate_limit=0 audit_backlog_limit=64 [ 573.823727][ C0] audit: backlog limit exceeded [ 573.831021][T10668] audit: audit_lost=5024 audit_rate_limit=0 audit_backlog_limit=64 [ 573.834505][ T6032] audit: audit_backlog=66 > audit_backlog_limit=64 [ 573.844535][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 573.998328][ T5898] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 574.158363][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 574.172090][ T5898] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 574.196362][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.208335][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 574.230166][ T10] asix 1-1:0.0: probe with driver asix failed with error -71 [ 574.238271][ T5898] usb 3-1: Product: syz [ 574.252798][ T5898] usb 3-1: Manufacturer: syz [ 574.257474][ T5898] usb 3-1: SerialNumber: syz [ 574.272550][T19636] input: syz1 as /devices/virtual/input/input82 [ 574.273942][ T10] usb 1-1: USB disconnect, device number 56 [ 574.296891][ T5898] usb 3-1: config 0 descriptor?? [ 574.733253][ T5898] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 574.762691][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 574.775606][ T5898] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 574.802228][ T5898] usb 3-1: media controller created [ 574.887028][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.978950][ T5898] zl10353_read_register: readreg error (reg=127, ret==0) [ 574.987280][ T5898] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 574.996420][T19652] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6068'. [ 575.006131][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 575.016438][T19650] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6068'. [ 575.028904][ T5898] usb 3-1: USB disconnect, device number 54 [ 575.170734][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 578.699965][ T30] kauditd_printk_skb: 6248 callbacks suppressed [ 578.699986][ T30] audit: type=1400 audit(1755741288.908:199714): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=19726 comm="syz.0.6104" saddr=10.128.0.169 src=30008 daddr=10.128.1.91 dest=36758 netif=eth0 [ 578.744065][T10668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.752505][T19747] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.759696][T19748] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.766361][T19747] audit: audit_lost=5201 audit_rate_limit=0 audit_backlog_limit=64 [ 578.774383][T10668] audit: audit_lost=5202 audit_rate_limit=0 audit_backlog_limit=64 [ 578.786079][T19748] audit: audit_lost=5203 audit_rate_limit=0 audit_backlog_limit=64 [ 578.794142][T19747] audit: backlog limit exceeded [ 578.799238][T10668] audit: backlog limit exceeded [ 578.799938][ T5845] audit: audit_backlog=65 > audit_backlog_limit=64 [ 578.959548][T19753] netlink: 'syz.1.6117': attribute type 1 has an invalid length. [ 578.967838][T19753] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6117'. [ 580.615548][T19797] pim6reg: entered allmulticast mode [ 580.632760][T19797] pim6reg: left allmulticast mode [ 580.929239][ T5899] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 581.109568][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 581.135032][ T5899] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 581.157166][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.183653][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.225857][ T5899] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.244040][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.272754][ T5899] usb 2-1: Product: syz [ 581.300926][ T5899] usb 2-1: Manufacturer: syz [ 581.318317][ T5899] usb 2-1: SerialNumber: syz [ 581.786389][ T5899] usb 2-1: 0:2 : does not exist [ 581.868035][ T43] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 581.894589][ T43] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 582.436636][ T5899] usb 2-1: USB disconnect, device number 59 [ 583.712099][ T5899] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 583.723992][ T30] kauditd_printk_skb: 5518 callbacks suppressed [ 583.724012][ T30] audit: type=1400 audit(1755741293.908:205083): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6032 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 583.753518][ T6032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 583.757491][T15208] audit: audit_backlog=65 > audit_backlog_limit=64 [ 583.774966][T15208] audit: audit_lost=5254 audit_rate_limit=0 audit_backlog_limit=64 [ 583.775405][T10668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 583.785728][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 583.790015][ T6032] audit: audit_lost=5255 audit_rate_limit=0 audit_backlog_limit=64 [ 583.796376][ C0] audit: audit_lost=5256 audit_rate_limit=0 audit_backlog_limit=64 [ 583.796395][ C0] audit: backlog limit exceeded [ 583.796489][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 583.958194][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 583.974957][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.004972][ T5899] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 584.068140][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.093322][ T5899] usb 1-1: config 0 descriptor?? [ 584.134270][T19842] syz.1.6154 (19842): drop_caches: 2 [ 584.308298][ T5912] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 584.478550][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 584.486934][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.497748][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.528516][ T5912] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 584.543911][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.552427][ T5912] usb 3-1: Product: syz [ 584.556890][ T5899] mcp2221 0003:04D8:00DD.0045: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 584.560356][ T5912] usb 3-1: Manufacturer: syz [ 584.579970][T19879] devpts: Invalid uid '0x00000000ffffffff' [ 584.586911][ T5912] usb 3-1: SerialNumber: syz [ 584.844328][ T5912] usb 3-1: 0:2 : does not exist [ 584.868050][ T5912] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 584.904433][ T5912] usb 3-1: USB disconnect, device number 55 [ 584.951021][ T9] usb 1-1: USB disconnect, device number 57 [ 585.078475][ T10] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 585.192635][T16981] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.240727][ T10] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 585.278737][ T10] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 585.295358][T16981] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.313808][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 585.328248][ T10] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 585.347553][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.367921][ T10] usb 4-1: config 0 descriptor?? [ 585.376037][T19886] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 585.402598][T16981] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.536367][T16981] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.856926][ T10] holtek_mouse 0003:04D9:A067.0046: item fetching failed at offset 7/8 [ 585.902921][ T10] holtek_mouse 0003:04D9:A067.0046: hid parse failed: -22 [ 585.928363][ T10] holtek_mouse 0003:04D9:A067.0046: probe with driver holtek_mouse failed with error -22 [ 585.970347][T16981] bridge_slave_0: left allmulticast mode [ 585.988511][T16981] bridge_slave_0: left promiscuous mode [ 586.001899][T16981] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.097229][ T5898] usb 4-1: USB disconnect, device number 49 [ 586.166485][T19902] sctp: [Deprecated]: syz.0.6184 (pid 19902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 586.166485][T19902] Use struct sctp_sack_info instead [ 586.230929][T19904] vivid-004: disconnect [ 586.268019][T19903] vivid-004: reconnect [ 586.618872][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.641858][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.653319][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 586.664102][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 586.672240][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 586.688275][ T5931] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 586.861142][ T5931] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 586.882749][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.904259][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.924538][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 586.943297][ T5931] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 586.963201][ T5931] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 586.976811][ T5931] usb 1-1: Manufacturer: syz [ 586.996465][ T5931] usb 1-1: config 0 descriptor?? [ 587.380124][T16981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.391361][T16981] bond_slave_0: left promiscuous mode [ 587.405960][T16981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.416234][T16981] bond_slave_1: left promiscuous mode [ 587.435765][T16981] bond0 (unregistering): Released all slaves [ 587.442459][ T5931] appleir 0003:05AC:8243.0047: unknown main item tag 0x0 [ 587.448402][ T5912] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 587.481927][ T5931] appleir 0003:05AC:8243.0047: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 587.576254][T16981] tipc: Left network mode [ 587.624903][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.652001][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.676665][ T5912] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 587.686107][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.709255][ T5912] usb 2-1: config 0 descriptor?? [ 588.067578][T19913] chnl_net:caif_netlink_parms(): no params data found [ 588.174276][T16981] team0: left promiscuous mode [ 588.179937][T16981] team_slave_0: left promiscuous mode [ 588.187804][T16981] team_slave_1: left promiscuous mode [ 588.191012][ T5912] cm6533_jd 0003:0D8C:0022.0048: unknown main item tag 0x0 [ 588.207635][T16981] batadv_slave_1: left promiscuous mode [ 588.222048][ T5912] cm6533_jd 0003:0D8C:0022.0048: unknown main item tag 0x0 [ 588.230318][T16981] hsr_slave_0: left promiscuous mode [ 588.243494][T16981] hsr_slave_1: left promiscuous mode [ 588.247735][ T5912] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0048/input/input83 [ 588.270928][T16981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.298333][T16981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.312042][ T5912] cm6533_jd 0003:0D8C:0022.0048: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 588.326631][T16981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.337720][T16981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.402839][T16981] veth1_macvtap: left promiscuous mode [ 588.428291][T16981] veth0_macvtap: left promiscuous mode [ 588.663152][T19949] input: syz0 as /devices/virtual/input/input84 [ 588.699506][ T5850] Bluetooth: hci0: command tx timeout [ 588.731930][ T30] kauditd_printk_skb: 4702 callbacks suppressed [ 588.731950][ T30] audit: type=1400 audit(1755741298.938:209522): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=26 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 588.764748][ T30] audit: type=1400 audit(1755741298.968:209523): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=19946 comm="syz.2.6202" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 588.777861][T10668] audit: audit_backlog=65 > audit_backlog_limit=64 [ 588.790807][ T30] audit: type=1400 audit(1755741298.978:209524): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10668 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 588.792926][T10668] audit: audit_lost=5345 audit_rate_limit=0 audit_backlog_limit=64 [ 588.816776][ T5898] usb 2-1: USB disconnect, device number 60 [ 588.834895][ T30] audit: type=1400 audit(1755741298.978:209525): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=10668 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 588.855193][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 588.861785][ C0] audit: audit_lost=5346 audit_rate_limit=0 audit_backlog_limit=64 [ 588.869739][ C0] audit: backlog limit exceeded [ 588.874626][T10668] audit: backlog limit exceeded [ 588.908184][ T5931] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 589.064370][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.077377][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 589.090859][ T5931] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 589.101880][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.130490][ T5931] usb 3-1: config 0 descriptor?? [ 589.373905][T16981] team0 (unregistering): Port device team_slave_1 removed [ 589.502307][T19957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6206'. [ 589.517895][T16981] team0 (unregistering): Port device team_slave_0 removed [ 589.583679][ T5931] kovaplus 0003:1E7D:2D50.0049: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 589.584959][ T10] usb 1-1: USB disconnect, device number 58 [ 589.867126][T17004] [ 589.869518][T17004] ====================================================== [ 589.876568][T17004] WARNING: possible circular locking dependency detected [ 589.883829][T17004] 6.16.0-syzkaller #0 Not tainted [ 589.888889][T17004] ------------------------------------------------------ [ 589.895939][T17004] kworker/u8:42/17004 is trying to acquire lock: [ 589.902331][T17004] ffff88807c490358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 589.911614][T17004] [ 589.911614][T17004] but task is already holding lock: [ 589.918986][T17004] ffff88807a20e188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 589.928603][T17004] [ 589.928603][T17004] which lock already depends on the new lock. [ 589.928603][T17004] [ 589.939039][T17004] [ 589.939039][T17004] the existing dependency chain (in reverse order) is: [ 589.948144][T17004] [ 589.948144][T17004] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 589.956591][T17004] lock_acquire+0x120/0x360 [ 589.961630][T17004] down_write+0x96/0x1f0 [ 589.966431][T17004] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 589.972882][T17004] nbd_start_device+0x16c/0xac0 [ 589.978281][T17004] nbd_ioctl+0x636/0xeb0 [ 589.983061][T17004] blkdev_ioctl+0x5a8/0x6d0 [ 589.988104][T17004] __se_sys_ioctl+0xfc/0x170 [ 589.993342][T17004] do_syscall_64+0xfa/0x3b0 [ 589.998414][T17004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.004873][T17004] [ 590.004873][T17004] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 590.013336][T17004] lock_acquire+0x120/0x360 [ 590.018463][T17004] __mutex_lock+0x182/0xe80 [ 590.023500][T17004] refcount_dec_and_mutex_lock+0x30/0xa0 [ 590.029689][T17004] nbd_config_put+0x2c/0x790 [ 590.034822][T17004] nbd_release+0xfe/0x140 [ 590.039685][T17004] bdev_release+0x533/0x650 [ 590.044731][T17004] blkdev_release+0x15/0x20 [ 590.049862][T17004] __fput+0x449/0xa70 [ 590.054384][T17004] fput_close_sync+0x119/0x200 [ 590.059708][T17004] __x64_sys_close+0x7f/0x110 [ 590.064944][T17004] do_syscall_64+0xfa/0x3b0 [ 590.069983][T17004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.076414][T17004] [ 590.076414][T17004] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 590.084250][T17004] validate_chain+0xb9b/0x2140 [ 590.089553][T17004] __lock_acquire+0xab9/0xd20 [ 590.094754][T17004] lock_acquire+0x120/0x360 [ 590.099782][T17004] __mutex_lock+0x182/0xe80 [ 590.104897][T17004] __del_gendisk+0x129/0x9e0 [ 590.110018][T17004] del_gendisk+0xe8/0x160 [ 590.114921][T17004] nbd_dev_remove_work+0x47/0xe0 [ 590.120479][T17004] process_scheduled_works+0xade/0x17b0 [ 590.126951][T17004] worker_thread+0x8a0/0xda0 [ 590.132082][T17004] kthread+0x70e/0x8a0 [ 590.136685][T17004] ret_from_fork+0x3fc/0x770 [ 590.141805][T17004] ret_from_fork_asm+0x1a/0x30 [ 590.147111][T17004] [ 590.147111][T17004] other info that might help us debug this: [ 590.147111][T17004] [ 590.157705][T17004] Chain exists of: [ 590.157705][T17004] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 590.157705][T17004] [ 590.172091][T17004] Possible unsafe locking scenario: [ 590.172091][T17004] [ 590.179649][T17004] CPU0 CPU1 [ 590.185052][T17004] ---- ---- [ 590.190437][T17004] rlock(&set->update_nr_hwq_lock); [ 590.195737][T17004] lock(&nbd->config_lock); [ 590.202944][T17004] lock(&set->update_nr_hwq_lock); [ 590.210675][T17004] lock(&disk->open_mutex); [ 590.215375][T17004] [ 590.215375][T17004] *** DEADLOCK *** [ 590.215375][T17004] [ 590.223693][T17004] 3 locks held by kworker/u8:42/17004: [ 590.229156][T17004] #0: ffff888025774948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 590.240226][T17004] #1: ffffc9000ef27bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 590.252595][T17004] #2: ffff88807a20e188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 590.262643][T17004] [ 590.262643][T17004] stack backtrace: [ 590.268643][T17004] CPU: 0 UID: 0 PID: 17004 Comm: kworker/u8:42 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 590.268664][T17004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.268677][T17004] Workqueue: nbd-del nbd_dev_remove_work [ 590.268699][T17004] Call Trace: [ 590.268706][T17004] [ 590.268715][T17004] dump_stack_lvl+0x189/0x250 [ 590.268738][T17004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.268756][T17004] ? __pfx__printk+0x10/0x10 [ 590.268782][T17004] ? print_lock_name+0xde/0x100 [ 590.268801][T17004] print_circular_bug+0x2ee/0x310 [ 590.268822][T17004] check_noncircular+0x134/0x160 [ 590.268842][T17004] validate_chain+0xb9b/0x2140 [ 590.268863][T17004] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 590.268887][T17004] ? look_up_lock_class+0x74/0x170 [ 590.268904][T17004] ? register_lock_class+0x51/0x320 [ 590.268929][T17004] __lock_acquire+0xab9/0xd20 [ 590.268945][T17004] ? __del_gendisk+0x129/0x9e0 [ 590.268964][T17004] lock_acquire+0x120/0x360 [ 590.268977][T17004] ? __del_gendisk+0x129/0x9e0 [ 590.268997][T17004] ? check_path+0x21/0x40 [ 590.269019][T17004] __mutex_lock+0x182/0xe80 [ 590.269036][T17004] ? __del_gendisk+0x129/0x9e0 [ 590.269058][T17004] ? __del_gendisk+0x129/0x9e0 [ 590.269077][T17004] ? __pfx___mutex_lock+0x10/0x10 [ 590.269094][T17004] ? __pfx___might_resched+0x10/0x10 [ 590.269113][T17004] ? __lock_acquire+0xab9/0xd20 [ 590.269127][T17004] ? disk_del_events+0xb5/0x210 [ 590.269148][T17004] ? __del_gendisk+0xc1/0x9e0 [ 590.269169][T17004] __del_gendisk+0x129/0x9e0 [ 590.269189][T17004] ? del_gendisk+0xe0/0x160 [ 590.269209][T17004] ? __pfx___del_gendisk+0x10/0x10 [ 590.269230][T17004] ? down_read+0x1ad/0x2e0 [ 590.269248][T17004] del_gendisk+0xe8/0x160 [ 590.269267][T17004] nbd_dev_remove_work+0x47/0xe0 [ 590.269287][T17004] ? process_scheduled_works+0x9ef/0x17b0 [ 590.269306][T17004] process_scheduled_works+0xade/0x17b0 [ 590.269331][T17004] ? __pfx_process_scheduled_works+0x10/0x10 [ 590.269353][T17004] worker_thread+0x8a0/0xda0 [ 590.269378][T17004] kthread+0x70e/0x8a0 [ 590.269398][T17004] ? __pfx_worker_thread+0x10/0x10 [ 590.269422][T17004] ? __pfx_kthread+0x10/0x10 [ 590.269445][T17004] ? _raw_spin_unlock_irq+0x23/0x50 [ 590.269459][T17004] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.269473][T17004] ? __pfx_kthread+0x10/0x10 [ 590.269492][T17004] ret_from_fork+0x3fc/0x770 [ 590.269509][T17004] ? __pfx_ret_from_fork+0x10/0x10 [ 590.269525][T17004] ? __switch_to_asm+0x39/0x70 [ 590.269543][T17004] ? __switch_to_asm+0x33/0x70 [ 590.269561][T17004] ? __pfx_kthread+0x10/0x10 [ 590.269582][T17004] ret_from_fork_asm+0x1a/0x30 [ 590.269606][T17004] [ 590.548357][ T5931] kovaplus 0003:1E7D:2D50.0049: couldn't init struct kovaplus_device [ 590.575412][ T5931] kovaplus 0003:1E7D:2D50.0049: couldn't install mouse [ 590.584687][ T5931] kovaplus 0003:1E7D:2D50.0049: probe with driver kovaplus failed with error -71 [ 590.597132][ T5931] usb 3-1: USB disconnect, device number 56 [ 590.788302][ T5850] Bluetooth: hci0: command tx timeout [ 590.890777][T19913] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.898540][T19913] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.906065][T19913] bridge_slave_0: entered allmulticast mode [ 590.913453][T19913] bridge_slave_0: entered promiscuous mode [ 590.921827][T19913] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.930525][T19913] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.937889][T19913] bridge_slave_1: entered allmulticast mode [ 590.945662][T19913] bridge_slave_1: entered promiscuous mode [ 590.965175][T19913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.976625][T19913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.003223][T19913] team0: Port device team_slave_0 added [ 591.011425][T16981] IPVS: stop unused estimator thread 0... [ 591.011548][T19913] team0: Port device team_slave_1 added [ 591.038763][T19913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.045771][T19913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.081047][T19913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.093858][T19913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.098351][T16981] ------------[ cut here ]------------ [ 591.101024][T19913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.106319][T16981] WARNING: CPU: 1 PID: 16981 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x270/0x2f0 [ 591.132465][T19913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.142092][T16981] Modules linked in: [ 591.156646][T16981] CPU: 1 UID: 0 PID: 16981 Comm: kworker/u8:20 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 591.167043][T16981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.177429][T16981] Workqueue: netns cleanup_net [ 591.182352][T16981] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 591.187958][T16981] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 591.207904][T16981] RSP: 0018:ffffc9000e947898 EFLAGS: 00010293 [ 591.214169][T16981] RAX: ffffffff8a0f293f RBX: ffff88801e37a080 RCX: ffff88802d151e00 [ 591.222318][T16981] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff88802d151e00 [ 591.230416][T16981] RBP: ffffc9000e9479b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 591.238458][T16981] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 591.246463][T16981] R13: 1ffff92001d28f40 R14: ffff88801e37b540 R15: dffffc0000000000 [ 591.254579][T16981] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 591.263674][T16981] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.270316][T16981] CR2: 00007f440c783ad8 CR3: 0000000020b8c000 CR4: 00000000003526f0 [ 591.278371][T16981] Call Trace: [ 591.281682][T16981] [ 591.284722][T16981] xfrm_net_exit+0x2d/0x70 [ 591.289304][T16981] ops_undo_list+0x497/0x990 [ 591.294167][T16981] ? __pfx_ops_undo_list+0x10/0x10 [ 591.299485][T16981] cleanup_net+0x4c5/0x800 [ 591.304021][T16981] ? __pfx_cleanup_net+0x10/0x10 [ 591.309011][T16981] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.314233][T16981] ? process_scheduled_works+0x9ef/0x17b0 [ 591.320155][T16981] ? process_scheduled_works+0x9ef/0x17b0 [ 591.325919][T16981] process_scheduled_works+0xade/0x17b0 [ 591.331501][T16981] ? __pfx_process_scheduled_works+0x10/0x10 [ 591.337489][T16981] worker_thread+0x8a0/0xda0 [ 591.342334][T16981] kthread+0x70e/0x8a0 [ 591.346521][T16981] ? __pfx_worker_thread+0x10/0x10 [ 591.351691][T16981] ? __pfx_kthread+0x10/0x10 [ 591.356545][T16981] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.361780][T16981] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.367013][T16981] ? __pfx_kthread+0x10/0x10 [ 591.371722][T16981] ret_from_fork+0x3fc/0x770 [ 591.376337][T16981] ? __pfx_ret_from_fork+0x10/0x10 [ 591.381535][T16981] ? __switch_to_asm+0x39/0x70 [ 591.386309][T16981] ? __switch_to_asm+0x33/0x70 [ 591.391109][T16981] ? __pfx_kthread+0x10/0x10 [ 591.396233][T16981] ret_from_fork_asm+0x1a/0x30 [ 591.401048][T16981] [ 591.404078][T16981] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 591.411364][T16981] CPU: 1 UID: 0 PID: 16981 Comm: kworker/u8:20 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 591.421687][T16981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.431830][T16981] Workqueue: netns cleanup_net [ 591.436602][T16981] Call Trace: [ 591.439884][T16981] [ 591.442823][T16981] dump_stack_lvl+0x99/0x250 [ 591.447464][T16981] ? __asan_memcpy+0x40/0x70 [ 591.452111][T16981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.457325][T16981] ? __pfx__printk+0x10/0x10 [ 591.461963][T16981] panic+0x2db/0x790 [ 591.465972][T16981] ? __pfx_panic+0x10/0x10 [ 591.470409][T16981] ? ret_from_fork_asm+0x1a/0x30 [ 591.475365][T16981] __warn+0x31b/0x4b0 [ 591.479362][T16981] ? xfrm_state_fini+0x270/0x2f0 [ 591.484350][T16981] ? xfrm_state_fini+0x270/0x2f0 [ 591.489311][T16981] report_bug+0x2be/0x4f0 [ 591.493653][T16981] ? xfrm_state_fini+0x270/0x2f0 [ 591.498607][T16981] ? xfrm_state_fini+0x270/0x2f0 [ 591.503558][T16981] ? xfrm_state_fini+0x272/0x2f0 [ 591.508510][T16981] handle_bug+0x84/0x160 [ 591.512767][T16981] exc_invalid_op+0x1a/0x50 [ 591.517280][T16981] asm_exc_invalid_op+0x1a/0x20 [ 591.522228][T16981] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 591.527790][T16981] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 591.547434][T16981] RSP: 0018:ffffc9000e947898 EFLAGS: 00010293 [ 591.553513][T16981] RAX: ffffffff8a0f293f RBX: ffff88801e37a080 RCX: ffff88802d151e00 [ 591.561495][T16981] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff88802d151e00 [ 591.569559][T16981] RBP: ffffc9000e9479b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 591.577535][T16981] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 591.585604][T16981] R13: 1ffff92001d28f40 R14: ffff88801e37b540 R15: dffffc0000000000 [ 591.593608][T16981] ? xfrm_state_fini+0x26f/0x2f0 [ 591.598662][T16981] ? xfrm_state_fini+0x26f/0x2f0 [ 591.603614][T16981] xfrm_net_exit+0x2d/0x70 [ 591.608040][T16981] ops_undo_list+0x497/0x990 [ 591.612656][T16981] ? __pfx_ops_undo_list+0x10/0x10 [ 591.617782][T16981] cleanup_net+0x4c5/0x800 [ 591.622212][T16981] ? __pfx_cleanup_net+0x10/0x10 [ 591.627249][T16981] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.632475][T16981] ? process_scheduled_works+0x9ef/0x17b0 [ 591.638200][T16981] ? process_scheduled_works+0x9ef/0x17b0 [ 591.643929][T16981] process_scheduled_works+0xade/0x17b0 [ 591.649544][T16981] ? __pfx_process_scheduled_works+0x10/0x10 [ 591.655534][T16981] worker_thread+0x8a0/0xda0 [ 591.660143][T16981] kthread+0x70e/0x8a0 [ 591.664220][T16981] ? __pfx_worker_thread+0x10/0x10 [ 591.669340][T16981] ? __pfx_kthread+0x10/0x10 [ 591.673940][T16981] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.679141][T16981] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.684348][T16981] ? __pfx_kthread+0x10/0x10 [ 591.688948][T16981] ret_from_fork+0x3fc/0x770 [ 591.693556][T16981] ? __pfx_ret_from_fork+0x10/0x10 [ 591.698701][T16981] ? __switch_to_asm+0x39/0x70 [ 591.703734][T16981] ? __switch_to_asm+0x33/0x70 [ 591.708509][T16981] ? __pfx_kthread+0x10/0x10 [ 591.713201][T16981] ret_from_fork_asm+0x1a/0x30 [ 591.717979][T16981] [ 591.721277][T16981] Kernel Offset: disabled [ 591.725599][T16981] Rebooting in 86400 seconds..