last executing test programs: 5m41.730947868s ago: executing program 3 (id=247): r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x40282, 0x0) lseek(r0, 0x4, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000002030102000000000000000001000000080001000100001f0900020080000000010015da05dc0000"], 0x28}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) 5m41.52863288s ago: executing program 3 (id=250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) 5m41.347805885s ago: executing program 3 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d0300"], 0x40}}, 0x0) 5m41.126006463s ago: executing program 3 (id=254): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 5m40.894136677s ago: executing program 3 (id=256): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) umount2(&(0x7f0000000200)='./file0\x00', 0x2) 5m40.453431624s ago: executing program 3 (id=259): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 5m39.98860521s ago: executing program 32 (id=259): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 1m41.635514496s ago: executing program 2 (id=3544): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000b00)={{@any, 0xffffffff}, 0x7, 0xffffffffffffffff, 0x20000, 0x3ff, 0x8, 0xfffffdfd, 0xffffffffffffffff}) 1m41.58820612s ago: executing program 2 (id=3545): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) sendto$inet(r0, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) 1m41.537994189s ago: executing program 2 (id=3546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000002, 0x28011, r0, 0xf5ce9000) 1m40.596168543s ago: executing program 2 (id=3554): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 1m40.557752116s ago: executing program 2 (id=3555): r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x13, r0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) ftruncate(r0, 0x0) 1m40.086535486s ago: executing program 2 (id=3561): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) accept$unix(r0, 0x0, 0x0) 1m39.897151033s ago: executing program 33 (id=3561): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) accept$unix(r0, 0x0, 0x0) 39.262970234s ago: executing program 0 (id=4387): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) recvmmsg(r0, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/159, 0x9f}, {&(0x7f0000001980)=""/184, 0xb8}, {&(0x7f00000016c0)=""/235, 0xeb}, {&(0x7f0000001600)=""/185, 0xb9}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/39, 0x27}, {&(0x7f00000000c0)=""/248, 0xf8}], 0x8}, 0x10001}, {{0x0, 0x0, 0x0}, 0xfff}], 0x2, 0x4022, 0x0) 39.118334029s ago: executing program 0 (id=4390): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000008c0)="9a1646e333841dd817f884072bcfc4e86d09eae42c771150d2a0f7409c1370d3638a8b435039d8f5f5a58fd9696b618dee51e4869aced576ce4348d9b259fb3273c6a36fc309164021180c785a3c299cbf15a38790db0474eb0b41d11d4893959adec407e9ba742652a28fc5165a05b7593682298736a7ccd86db5f3758d2939e9992035d6de58a4b803a94a72a31139fd6e1f77b7e96492191da02c8bfd789de8bc6acd5484430d64a233fd9512f3d646d33db37e305f92dc1db89bd85b2689c942b596c0a45c4efff576", 0xcb}, {&(0x7f00000009c0)="efaf7a93d21cbcbd56d058e53b498eb5aec446ded5a0a15afc4a85e66ba967dd32bdaa041334d821c83f07626dff625725d9d7f2454a3c0354409cd461092701a394007cca7bf7ed39cb6d0860fc9fffc3867688808a8a9fa32d9c9f797ac6d2f35665413642d174ba233adaa36bf0d40144a05abc9458f98e5738d6952053397589681183bf74246782eaa788d1afbf227f54319c505f1678a3165181261067da7d2cc5ce2f9a8ca0b99fa09f8e95675cd7666c5e2edb4b8029c371ccfe0497285e0e223106e4b43dbbdae8faa67a625fff23346e701f1c8cf9b6cd0d485c422d1c07b63988d3377dfe6634b1e184", 0xef}, {&(0x7f0000000ac0)="8f30e4f3a357d24b35a884da0ffdc5c42f7ce57129b691f99daded3f1e2aa5f6738c747cd9fa7b3e59a5a24970b0a2a5bcc8cd72fc0a6e472442b441e273146cb840d20afb23fa12cfaaf4d54ffea9bdaf5d445e4773e815b6462cdc4b449d55a1d007a07e49cef17635abf4c4986abcc36fc5529e63aa97265af26fd3286548b2a7932c81883c382b1598d0761891370633573d40cd4b425576ff4998bf040fa0aef4b64392fc7f7b6fafb4a073a88f883f16c9c771664b430d91", 0xbb}, {&(0x7f0000000b80)="3b3d07b7091f697381965e2e7909f9f6f54a284af3f8fdb1c24e6d0c4a7f58ffca9b24b191f510fbf55fd3e76154e2a4fe1e14c7bbff4c24907805f79e2a90f0d8c8faccbd2243475ecfa1f5fac83b8910baf212596b2a4a23aab8eb9cfa683836af5e50b1bc4f815b49fc47f85fe32f63a26492042b663d8c955bfad12d47e8", 0x80}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000d80)="d51927d7b27f39aa725cb19a990f66ac9aae2f7d92045a4c05e60f4dc5dc6c4e4ac8449b9915fb289bf1692a4c7d9440950ee716b680274b3c53048b6a2aeca47c5e6987db6b4fb364fa1e1709caa0696b9e02eabc8757ef2dd6a17f3efa", 0x5e}, {&(0x7f0000000e00)="96bc7002996addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de006", 0x23}, {&(0x7f0000000e40)="1304235350b0171b15c5c7a6c9861daf", 0x10}, {&(0x7f0000000e80)="048dc9fb57afe301fd6f4184903098607627504035b7aa74e71b85eaa192909644d18f5695718d3c3532f6ed73c2422e87d6d3032447f236426269422e70740455409baf685a743e7e079b3ac4a1b592da8a23ea97a80da6ec7fb46355caf53ab8efe6d61dbb939c5f96f86c3d", 0x6d}, {&(0x7f0000000f00)="68a55df1c6bed91373cc79fcf0ea4c17187a680c0c711ae1d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1", 0x31}], 0x5}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="1f193ccd5e71244bc55dbcdc29e1a25fb59915f7f84fb5105984bc94ac926679df8c", 0x22}, {&(0x7f0000001100)="b35ba3572fcda875bc97e8", 0xb}, {&(0x7f0000001140)="795f2ce94a7d8725e389c01b493ee679f9e1f4660442a05c2cbbf66384679166ec101d934bd017c061424e92d24f48d86b", 0x31}, {&(0x7f0000001180)="93", 0x1}, {&(0x7f00000011c0)="3dff21fdbef2b0b843e0740163754db27084ece48f14e2ccb75ed71caecb8d01a49808a0a2269f17dc98a78e584f6cc71495faa98957034a6e6f6e9ea743d838d77a3f108a034c89", 0x48}, {&(0x7f0000001240)="b17b27be17bcb19544700a33471f8c21345d9ed983455906bb74ac68c911b5f14c7d60075f017c69c25768", 0x2b}, {&(0x7f0000001280)="45871f6c7aa143cfbb579d430702b24380586237795f6665c24e267fb8c62c14f85be705fbab74d85c8d479162b42724e414f24b9602b0c068930b8f0431f77f7ed4bb04c4bd7edbacb55c07e24b2b7ffbc83bb39385066e27b3b6727c8861edea62c5532877c2bc886e9f673bc9ef731ee32104bc102a8fda64676a9edf0e47f36cd6a35fd53b13b1f365ade8150f7e35c258b0253d8c4dcbc8", 0x9a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000014c0)="d480dc1917d9339f4084892894143b343fddd9303f0429a7ae5d89e2d238c7a6d95b89164290c367be830f56c6b95c492363a9b522", 0x35}], 0x1}}], 0x5, 0x0) 38.97051528s ago: executing program 0 (id=4392): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000540), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000ac0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}]}, 0x1c}}, 0x40000) 38.7746733s ago: executing program 0 (id=4395): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) 38.656987404s ago: executing program 0 (id=4398): syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109025f0003010300f40904000000010100000a2401030003020102090401000001020000090401010101020000090501090000f7090607250183020c000904020000010200000904020000000000000010"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0xdf952084a5a94a49, 0x8, {0x9, 0x21, 0x5, 0x9, 0x1, {0x22, 0x902}}, {{{0x9, 0x5, 0x81, 0x3, 0x37f, 0x2, 0xc, 0x2a}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120001a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 38.188537524s ago: executing program 0 (id=4399): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e21, 0x10000, @private2}}, 0x0, 0x24def624, 0xda9, 0x80000000, 0xfc94}, &(0x7f0000000200)=0x98) 37.807468336s ago: executing program 34 (id=4399): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e21, 0x10000, @private2}}, 0x0, 0x24def624, 0xda9, 0x80000000, 0xfc94}, &(0x7f0000000200)=0x98) 2.508581441s ago: executing program 6 (id=4828): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x77, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @param_prob={0x4, 0x0, 0x0, 0x804e, {0x1, 0x6, "55cab8", 0x443a, 0x32, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [], "fc1a6d218d5fc9ab53541393e16846d2d59700cab27317e81b66b4f038ed84ccae9eb52500a994e35d9b07258c5716de2ed65c4ed3b67eeb3b2da9d8d4b4e3"}}}}}}, 0xad) 2.104831215s ago: executing program 6 (id=4829): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x800003f, r1, 0x0) fanotify_mark(r1, 0x1, 0x11, r0, 0x0) fanotify_mark(r1, 0x80, 0x800, 0xffffffffffffffff, 0x0) 1.915071209s ago: executing program 6 (id=4831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x27, 0x1c, 0x64, 0x0, 0xb, 0x6c, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "3297e3ba0fa8a2e7"}}, 0x2a) 1.622021152s ago: executing program 6 (id=4834): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) syz_open_procfs$namespace(0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 1.272814891s ago: executing program 5 (id=4838): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x2000, 0x103) mknod$loop(&(0x7f0000000000)='./file7\x00', 0x2000, 0x1) 1.015730414s ago: executing program 1 (id=4840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0xfffffcda) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000008804"]) 1.014761461s ago: executing program 5 (id=4841): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x60}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000340)=0x3) write$ppp(r0, &(0x7f0000000580)='Di', 0x2) 972.919668ms ago: executing program 4 (id=4842): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf254b00000008000300", @ANYRES32=r2], 0x88}}, 0x8) 822.710771ms ago: executing program 4 (id=4843): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210928bd7000fcdbdf251b00000010002e800c0087000200aaaaaaaaaaaa08000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) 797.988384ms ago: executing program 1 (id=4844): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) 769.26251ms ago: executing program 5 (id=4845): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2000c850, 0x0, 0x0) 692.366337ms ago: executing program 4 (id=4846): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, r1, 0xd03, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0x5, 0x19, "a7"}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4c814) 592.124887ms ago: executing program 5 (id=4847): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 550.538883ms ago: executing program 1 (id=4848): sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000004c0)="40cf", 0x2}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 519.482441ms ago: executing program 4 (id=4849): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x800, 0x2, @rand_addr=' \x01\x00', 0x2}, 0x1c) 470.208946ms ago: executing program 5 (id=4850): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r0, &(0x7f0000000300)=""/152, 0x98) 351.175041ms ago: executing program 4 (id=4851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000003c0)) 305.010952ms ago: executing program 1 (id=4852): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r0], 0x1c}}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) 247.655303ms ago: executing program 6 (id=4853): writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000004c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r2}) 219.671242ms ago: executing program 5 (id=4854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000540)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @multicast2, @multicast, @empty}}}}}, 0x2e) 139.742015ms ago: executing program 1 (id=4855): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 72.988492ms ago: executing program 6 (id=4856): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 7.225363ms ago: executing program 1 (id=4857): setuid(0xee00) r0 = socket$unix(0x1, 0x1, 0x0) io_setup(0x7, &(0x7f0000000100)=0x0) r2 = eventfd(0x5a21) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x3899, r0, 0x0, 0x0, 0x4, 0x0, 0x3, r2}]) 0s ago: executing program 4 (id=4858): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000480)="ce9be92884bdac6fca5dad75fa765f9586a07f35c5436c", 0x17}], 0x2}}], 0x1, 0x0) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz.0.3684'. [ 368.269831][T14578] kvm: kvm [14577]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000003a) = 0x0 [ 368.522918][ T917] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 368.607666][T14598] netlink: 'syz.1.3701': attribute type 10 has an invalid length. [ 368.641922][T14598] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 368.658894][T14599] netlink: 'syz.1.3701': attribute type 4 has an invalid length. [ 368.669783][T14599] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3701'. [ 368.680246][ T5927] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 368.685364][ T917] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 368.698330][ T917] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 368.707231][ T917] usb 5-1: config 0 has no interface number 0 [ 368.713669][ T917] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 368.724043][ T917] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 368.727090][T14599] wlan1: mtu less than device minimum [ 368.734747][ T917] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 368.750121][ T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.776568][ T917] usb 5-1: config 0 descriptor?? [ 368.848058][ T5927] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 368.858371][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.866725][ T5927] usb 6-1: Product: syz [ 368.870938][ T5927] usb 6-1: Manufacturer: syz [ 368.875630][ T5927] usb 6-1: SerialNumber: syz [ 368.891880][ T5927] r8152-cfgselector 6-1: Unknown version 0x0000 [ 368.899142][ T5927] r8152-cfgselector 6-1: config 0 descriptor?? [ 369.043426][ T1210] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 369.116367][ T5927] r8152-cfgselector 6-1: Needed 2 retries to read version [ 369.123881][ T5927] r8152-cfgselector 6-1: Unknown version 0x4080 [ 369.130714][ T5927] r8152-cfgselector 6-1: bad CDC descriptors [ 369.173023][ T5934] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 369.194763][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.205840][ T1210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.216502][ T1210] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 369.226226][ T1210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.237217][ T1210] usb 1-1: config 0 descriptor?? [ 369.302818][ T5868] Bluetooth: hci1: command tx timeout [ 369.322572][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 369.330090][ T8682] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 369.341805][ T5934] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 369.351542][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.360012][ T5934] usb 2-1: Product: syz [ 369.365452][ T5934] usb 2-1: Manufacturer: syz [ 369.370113][ T5934] usb 2-1: SerialNumber: syz [ 369.428950][ T917] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input50 [ 369.444565][ T917] input: failed to attach handler kbd to device input50, error: -5 [ 369.590716][ T5934] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 369.632759][ T10] usb 5-1: USB disconnect, device number 52 [ 369.660875][ T1210] hid-steam 0003:28DE:1142.003A: unknown main item tag 0x0 [ 369.677198][ T1210] hid-steam 0003:28DE:1142.003A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 369.752530][ T1210] hid-steam 0003:28DE:1142.003A: Steam wireless receiver connected [ 369.760598][ T1210] hid-steam 0003:28DE:1142.003A: No HID_FEATURE_REPORT submitted - nothing to read [ 369.776415][ T1210] hid-steam 0003:28DE:1142.003B: unknown main item tag 0x0 [ 369.789243][ T1210] hid-steam 0003:28DE:1142.003B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 369.806038][ T917] usb 2-1: USB disconnect, device number 71 [ 369.833054][ T917] usblp0: removed [ 369.881532][ T8682] usb 1-1: USB disconnect, device number 60 [ 369.912477][ T8682] hid-steam 0003:28DE:1142.003A: Steam wireless receiver disconnected [ 370.462606][ T8682] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 370.631919][ T8682] usb 6-1: Using ep0 maxpacket: 8 [ 370.642966][ T8682] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 370.652275][ T8682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.660284][ T8682] usb 6-1: Product: syz [ 370.665183][ T8682] usb 6-1: Manufacturer: syz [ 370.669831][ T8682] usb 6-1: SerialNumber: syz [ 370.679900][ T8682] usb 6-1: config 0 descriptor?? [ 370.688734][ T8682] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 370.831990][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 370.995280][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 371.009620][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.024369][ T10] usb 2-1: config 0 descriptor?? [ 371.041385][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 371.298683][ T8682] gspca_sonixj: reg_w1 err -71 [ 371.305124][ T8682] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 371.317415][ T8682] usb 6-1: USB disconnect, device number 5 [ 371.847341][ T10] usb 2-1: USB disconnect, device number 72 [ 372.002629][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3738'. [ 372.180054][T14690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 372.192413][T14690] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 372.397095][ T6003] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 372.562015][ T6003] usb 5-1: Using ep0 maxpacket: 16 [ 372.568976][ T6003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.590885][ T6003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.600681][ T6003] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 372.639687][ T6003] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 372.650499][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.663961][ T6003] usb 5-1: config 0 descriptor?? [ 373.087465][ T6003] microsoft 0003:045E:07DA.003C: ignoring exceeding usage max [ 373.097575][ T6003] microsoft 0003:045E:07DA.003C: unsupported Resolution Multiplier 0 [ 373.107863][ T6003] microsoft 0003:045E:07DA.003C: implement() called with n (152) > 32! (kworker/1:6) [ 373.140922][ T5934] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 373.296664][ T6003] microsoft 0003:045E:07DA.003C: unsupported Resolution Multiplier 0 [ 373.312689][ T5934] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 373.322315][ T6003] microsoft 0003:045E:07DA.003C: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 373.340879][ T5934] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.360502][ T6003] microsoft 0003:045E:07DA.003C: no inputs found [ 373.361699][ T5934] usb 2-1: config 0 has no interface number 0 [ 373.370599][ T6003] microsoft 0003:045E:07DA.003C: could not initialize ff, continuing anyway [ 373.393266][ T5934] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 373.421403][ T5934] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.445588][T14743] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 373.469435][ T5934] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 373.500538][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.521843][ T5934] usb 2-1: Product: syz [ 373.526158][ T5934] usb 2-1: Manufacturer: syz [ 373.552150][ T5934] usb 2-1: SerialNumber: syz [ 373.562250][ T1210] usb 5-1: USB disconnect, device number 53 [ 373.587146][ T5934] usb 2-1: config 0 descriptor?? [ 373.960236][ T8682] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 374.110122][ T8682] usb 1-1: Using ep0 maxpacket: 8 [ 374.119684][ T8682] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 374.133493][ T8682] usb 1-1: config 179 has no interface number 0 [ 374.147294][ T8682] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 374.158868][ T8682] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 374.170617][ T8682] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 374.182569][ T8682] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 374.194513][ T8682] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 374.208259][ T8682] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 374.229517][ T8682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.243811][T14751] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 374.492414][ T8682] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input52 [ 374.584111][ T5934] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 374.690772][ T5927] usb 1-1: USB disconnect, device number 61 [ 374.690897][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 374.706886][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 374.747307][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 374.765676][ T5934] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 374.789112][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 374.809270][ T5934] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 374.824259][ T5934] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 374.833678][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.847454][ T5934] usb 5-1: config 0 descriptor?? [ 375.058827][ T5934] hdpvr 5-1:0.0: firmware version 0x0 dated [ 375.068398][ T5934] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 375.139712][ T8682] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 375.289550][ T8682] usb 6-1: Using ep0 maxpacket: 16 [ 375.302017][ T8682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.312327][ T8682] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 375.326677][ T8682] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 375.337444][ T8682] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 375.348674][ T8682] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.371220][ T8682] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 375.382621][ T8682] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 375.391335][ T8682] usb 6-1: Manufacturer: syz [ 375.405848][ T8682] usb 6-1: config 0 descriptor?? [ 375.506210][ T5934] hdpvr 5-1:0.0: Could not setup controls [ 375.513940][ T5934] hdpvr 5-1:0.0: registering videodev failed [ 375.533192][ T5934] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 375.546777][ T5934] usb 5-1: USB disconnect, device number 54 [ 375.650086][ T5927] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 375.669390][ T8682] rc_core: IR keymap rc-hauppauge not found [ 375.675353][ T8682] Registered IR keymap rc-empty [ 375.683113][ T8682] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.709387][ T8682] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.730587][ T8682] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 375.744614][ T8682] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input54 [ 375.761286][ T8682] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.780216][ T8682] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.799543][ T8682] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.819548][ T8682] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.824552][ T5927] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 375.835955][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.839743][ T8682] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.846550][ T5927] usb 1-1: Product: syz [ 375.856660][ T5927] usb 1-1: Manufacturer: syz [ 375.864775][ T5927] usb 1-1: SerialNumber: syz [ 375.869469][ T8682] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.873762][ T5927] usb 1-1: config 0 descriptor?? [ 375.893950][ T5927] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 375.899422][ T8682] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.919491][ T8682] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.934609][ T1210] usb 2-1: USB disconnect, device number 73 [ 375.939578][ T8682] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 375.982241][ T8682] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 376.012597][ T8682] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 376.027966][ T8682] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 376.116287][ T8682] usb 6-1: USB disconnect, device number 6 [ 376.747135][ T5927] usb 1-1: USB disconnect, device number 62 [ 377.133175][T14829] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3806'. [ 377.361420][T14840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3810'. [ 378.447956][ T5927] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 378.585273][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.595685][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.620196][ T5927] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 378.629844][ T5927] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 378.640460][ T5927] usb 1-1: config 220 has no interface number 2 [ 378.646858][ T5927] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 378.664227][ T5927] usb 1-1: config 220 interface 0 has no altsetting 0 [ 378.672902][ T5927] usb 1-1: config 220 interface 76 has no altsetting 0 [ 378.680817][ T5927] usb 1-1: config 220 interface 1 has no altsetting 0 [ 378.693908][ T5927] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 378.703281][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.712475][ T5927] usb 1-1: Product: syz [ 378.717284][ T5927] usb 1-1: Manufacturer: syz [ 378.723466][ T5927] usb 1-1: SerialNumber: syz [ 378.950940][ T5927] usb 1-1: selecting invalid altsetting 0 [ 378.957403][ T5927] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 378.965136][ T5927] uvcvideo 1-1:220.0: No valid video chain found. [ 378.990515][ T5927] usb 1-1: selecting invalid altsetting 0 [ 379.011123][ T5927] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 379.053400][ T5927] usb 1-1: USB disconnect, device number 63 [ 379.139381][T14919] input: syz1 as /devices/virtual/input/input55 [ 379.827281][ T8682] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 379.987889][ T8682] usb 2-1: Using ep0 maxpacket: 32 [ 379.995319][ T8682] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 380.007242][ T8682] usb 2-1: config 0 has no interface number 0 [ 380.013762][ T8682] usb 2-1: config 0 interface 172 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.040725][ T8682] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 380.060789][ T8682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.087111][ T8682] usb 2-1: Product: syz [ 380.096521][ T8682] usb 2-1: Manufacturer: syz [ 380.108667][ T8682] usb 2-1: SerialNumber: syz [ 380.131243][ T8682] usb 2-1: config 0 descriptor?? [ 380.158847][ T8682] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 380.297846][T14978] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 380.434316][T14984] pim6reg: entered allmulticast mode [ 380.443539][T14984] pim6reg: left allmulticast mode [ 380.627262][ T45] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 380.779975][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.793404][ T45] usb 5-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 380.802599][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.813479][ T45] usb 5-1: config 0 descriptor?? [ 380.953149][ T8682] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 380.962135][ T8682] gspca_pac7302 2-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 380.974713][ T8682] usb 2-1: USB disconnect, device number 74 [ 380.976843][ T5927] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 381.146600][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 381.156698][ T5927] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 381.165927][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=121, SerialNumber=76 [ 381.174382][ T5927] usb 6-1: Product: syz [ 381.178730][ T5927] usb 6-1: Manufacturer: syz [ 381.183674][ T5927] usb 6-1: SerialNumber: syz [ 381.228219][ T45] kye 0003:0458:5014.003D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 381.243013][ T45] kye 0003:0458:5014.003D: hidraw0: USB HID v1.01 Device [HID 0458:5014] on usb-dummy_hcd.4-1/input0 [ 381.254793][ T45] kye 0003:0458:5014.003D: tablet-enabling feature report not found [ 381.263877][ T45] kye 0003:0458:5014.003D: tablet enabling failed [ 381.426189][ T6003] usb 5-1: USB disconnect, device number 55 [ 381.606834][ T5927] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 381.833159][ T5927] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 381.883559][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.009552][ T5934] usb 6-1: USB disconnect, device number 7 [ 382.082870][ T1210] kernel read not supported for file /video7 (pid: 1210 comm: kworker/0:2) [ 382.156361][ T5927] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 382.297964][ T6003] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 382.316497][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 382.327245][ T5927] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 382.334721][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.349265][ T5927] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.362738][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.374225][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.387376][ T5927] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 382.395207][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.407527][ T5927] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.420521][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.432005][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.445351][ T5927] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 382.453481][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 382.465495][ T5927] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 382.475766][ T6003] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.477702][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 382.498885][ T5927] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 382.506080][ T6003] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 382.530480][ T5927] usb 2-1: string descriptor 0 read error: -22 [ 382.539630][ T5927] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 382.549400][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.557692][ T6003] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.576948][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.593718][ T6003] usb 5-1: Product: syz [ 382.603178][ T6003] usb 5-1: Manufacturer: syz [ 382.606210][ T5927] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 382.611313][ T6003] usb 5-1: SerialNumber: syz [ 382.868399][T15018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.869485][ T5927] usb 2-1: USB disconnect, device number 75 [ 382.883754][T15018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.910643][ T6003] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 382.942670][ T6003] usb 5-1: USB disconnect, device number 56 [ 383.385951][ T6003] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 383.535670][ T6003] usb 5-1: Using ep0 maxpacket: 8 [ 383.543127][ T6003] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 383.552281][ T6003] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 383.563182][ T6003] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 383.573723][ T6003] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 383.584299][ T6003] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 383.596007][ T6003] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.607295][ T6003] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.617217][ T6003] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 383.626562][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.844194][ T6003] usb 5-1: usb_control_msg returned -71 [ 383.851635][ T6003] usbtmc 5-1:16.0: can't read capabilities [ 383.859316][ T6003] usbtmc 5-1:16.0: Failed to submit iin_urb [ 383.870844][ T6003] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -90 [ 383.889101][ T6003] usb 5-1: USB disconnect, device number 57 [ 384.235253][ T5934] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 384.290159][T15080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.365292][ T6003] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 384.379349][T15082] wg2: entered promiscuous mode [ 384.384641][T15082] wg2: entered allmulticast mode [ 384.405757][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 384.424605][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.445025][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.468589][ T5934] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 384.490468][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.507681][ T5934] usb 1-1: config 0 descriptor?? [ 384.527651][ T5934] hub 1-1:0.0: USB hub found [ 384.556085][ T6003] usb 2-1: unable to get BOS descriptor or descriptor too short [ 384.565748][ T6003] usb 2-1: not running at top speed; connect to a high speed hub [ 384.589252][ T6003] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.610801][ T6003] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.641037][ T6003] usb 2-1: string descriptor 0 read error: -22 [ 384.647660][ T6003] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 384.658546][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.678747][ T6003] usb 2-1: 0:2 : does not exist [ 384.750167][ T5934] hub 1-1:0.0: 2 ports detected [ 384.845453][ T1210] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 384.956898][ T5934] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 384.967653][ T5934] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 384.988123][ T5934] usbhid 1-1:0.0: can't add hid device: -71 [ 384.994296][ T5934] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 385.004833][ T1210] usb 5-1: Using ep0 maxpacket: 16 [ 385.013076][ T1210] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.029866][ T5934] usb 1-1: USB disconnect, device number 64 [ 385.040388][ T1210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.050970][ T1210] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 385.064671][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.083853][ T1210] usb 5-1: config 0 descriptor?? [ 385.354487][ T5927] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 385.500868][ T6003] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 385.515519][ T6003] usb 2-1: Warning! Unlikely big volume range (=17161), cval->res is probably wrong. [ 385.532487][ T6003] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = 12453/29614/1 [ 385.541382][ T1210] nzxt-smart2 0003:1E71:2009.003E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 385.554359][ T5927] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 385.562818][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.578711][ T6003] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 385.609007][ T6003] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 385.619545][ T5927] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 385.643214][ T5927] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 385.675020][ T6003] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 385.683314][ T5927] usb 6-1: Manufacturer: syz [ 385.700864][ T6003] usb 2-1: USB disconnect, device number 76 [ 385.709951][ T5927] usb 6-1: config 0 descriptor?? [ 385.884292][ T5927] rc_core: IR keymap rc-hauppauge not found [ 385.891118][ T5927] Registered IR keymap rc-empty [ 385.899502][ T5927] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 385.914501][ T5927] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input56 [ 385.918686][ T8682] usb 5-1: USB disconnect, device number 58 [ 386.194248][ C0] igorplugusb 6-1:0.0: receive overflow, at least 22 lost [ 386.344110][ T5927] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 386.395742][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 386.397548][ T8682] usb 6-1: USB disconnect, device number 8 [ 386.401951][ C0] igorplugusb 6-1:0.0: submit urb failed: -19 [ 386.508700][ T5927] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 386.523128][ T5927] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 386.548025][ T5927] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 386.557315][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.566387][ T1210] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 386.577320][ T5927] usb 2-1: Product: syz [ 386.581543][ T5927] usb 2-1: Manufacturer: syz [ 386.586878][ T5927] usb 2-1: SerialNumber: syz [ 386.604510][ T5927] usb 2-1: config 0 descriptor?? [ 386.612302][T15115] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 386.622469][T15115] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 386.759504][ T1210] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 386.770058][ T1210] usb 1-1: config 0 has no interface number 0 [ 386.776791][ T1210] usb 1-1: config 0 interface 17 has no altsetting 0 [ 386.786687][ T1210] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 386.796142][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.805361][ T1210] usb 1-1: Product: syz [ 386.809616][ T1210] usb 1-1: Manufacturer: syz [ 386.816046][ T1210] usb 1-1: SerialNumber: syz [ 386.825511][ T1210] usb 1-1: config 0 descriptor?? [ 386.834905][ T1210] esd_usb 1-1:0.17: sending version message failed [ 386.841532][ T1210] esd_usb 1-1:0.17: probe with driver esd_usb failed with error -22 [ 386.853213][T15115] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 386.860857][T15115] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 387.077626][ T9] usb 1-1: USB disconnect, device number 65 [ 387.490224][ T5927] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 387.510960][ T5927] usb 2-1: USB disconnect, device number 77 [ 387.683571][ T8682] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 387.845276][ T8682] usb 6-1: config 0 has no interfaces? [ 387.850947][ T8682] usb 6-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 387.860581][ T8682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.873654][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 387.874351][ T8682] usb 6-1: config 0 descriptor?? [ 388.043150][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 388.057774][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 388.079066][ T9] usb 5-1: New USB device strings: Mfr=1, Product=121, SerialNumber=76 [ 388.106759][ T9] usb 5-1: Product: syz [ 388.110988][ T9] usb 5-1: Manufacturer: syz [ 388.118029][ T9] usb 5-1: SerialNumber: syz [ 388.125419][ T45] usb 6-1: USB disconnect, device number 9 [ 388.323586][ T8682] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 388.474477][ T8682] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 388.482631][ T8682] usb 2-1: config 0 has no interface number 0 [ 388.488946][ T8682] usb 2-1: config 0 interface 17 has no altsetting 0 [ 388.498254][ T8682] usb 2-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=c1.09 [ 388.507772][ T8682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.515867][ T8682] usb 2-1: Product: syz [ 388.520080][ T8682] usb 2-1: Manufacturer: syz [ 388.524896][ T6003] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 388.532616][ T8682] usb 2-1: SerialNumber: syz [ 388.540621][ T8682] usb 2-1: config 0 descriptor?? [ 388.542417][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 388.553894][ T8682] esd_usb 2-1:0.17: sending version message failed [ 388.560546][ T8682] esd_usb 2-1:0.17: probe with driver esd_usb failed with error -22 [ 388.683094][ T6003] usb 1-1: Using ep0 maxpacket: 32 [ 388.691223][ T6003] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 388.701547][ T6003] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 388.712393][ T6003] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 388.721851][ T6003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 388.731880][ T6003] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 388.741669][ T6003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 388.762832][ T6003] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 388.771305][ T9] snd-usb-audio 5-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 388.779245][ T6003] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 388.799913][ T8682] usb 2-1: USB disconnect, device number 78 [ 388.808019][ T6003] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 388.831357][ T6003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.839270][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.850556][ T6003] usb 1-1: config 0 descriptor?? [ 388.873420][T15188] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 388.959033][ T917] usb 5-1: USB disconnect, device number 59 [ 389.087934][ T6003] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 389.291807][ C0] usblp0: nonzero read bulk status received: -71 [ 389.300903][ T9] usb 1-1: USB disconnect, device number 66 [ 389.310872][ T9] usblp0: removed [ 390.087395][T15218] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3987'. [ 390.282039][ T6003] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 390.432053][ T6003] usb 1-1: Using ep0 maxpacket: 16 [ 390.439307][ T6003] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.449978][ T6003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.461002][ T6003] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 390.470738][ T6003] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 390.480625][ T6003] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.494734][ T6003] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 390.504379][ T6003] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 390.513323][ T6003] usb 1-1: Manufacturer: syz [ 390.521112][ T6003] usb 1-1: config 0 descriptor?? [ 390.791990][ T6003] rc_core: IR keymap rc-hauppauge not found [ 390.799986][ T6003] Registered IR keymap rc-empty [ 390.806479][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 390.831938][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 390.853527][ T6003] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 390.868317][ T6003] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input57 [ 390.885106][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 390.913682][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 390.941907][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 390.961844][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 390.981833][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.001721][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.021705][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.041722][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.062403][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.081821][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.101803][ T6003] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 391.136053][ T6003] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 391.146246][ T6003] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 391.254880][ T5927] usb 1-1: USB disconnect, device number 67 [ 391.771564][ T5868] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 391.779769][ T5872] Bluetooth: hci4: command 0x1003 tx timeout [ 391.901604][ T5927] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 392.062728][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.073123][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.086175][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.096364][ T5927] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 392.105530][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.118167][ T5927] usb 6-1: config 0 descriptor?? [ 392.132610][ T6003] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 392.291082][ T6003] usb 2-1: Using ep0 maxpacket: 16 [ 392.298178][ T6003] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.309680][ T6003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.322929][ T6003] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 392.332868][ T6003] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 392.343061][ T6003] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 392.357327][ T6003] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 392.366489][ T6003] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 392.374589][ T6003] usb 2-1: Manufacturer: syz [ 392.382024][ T6003] usb 2-1: config 0 descriptor?? [ 392.544026][ T5927] wacom 0003:056A:0010.003F: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 392.557784][ T5927] wacom 0003:056A:0010.003F: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.5-1/input0 [ 392.572635][ T5927] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:0010.003F/input/input58 [ 392.712921][ T6003] rc_core: IR keymap rc-hauppauge not found [ 392.718956][ T6003] Registered IR keymap rc-empty [ 392.724875][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 392.756472][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 392.756740][ T5927] usb 6-1: USB disconnect, device number 10 [ 392.781695][ T6003] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 392.804909][ T6003] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input61 [ 392.832021][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 392.880929][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 392.912461][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 392.940772][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 392.960878][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 393.010745][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 393.043950][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 393.071543][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 393.103891][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 393.130726][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 393.150761][ T6003] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 393.172382][ T6003] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 393.181718][ T6003] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 393.195361][ T6003] usb 2-1: USB disconnect, device number 79 [ 393.590440][ T8682] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 393.740450][ T8682] usb 6-1: Using ep0 maxpacket: 16 [ 393.747216][ T8682] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.759007][ T8682] usb 6-1: config 0 interface 0 has no altsetting 0 [ 393.765926][ T8682] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 393.775539][ T8682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.793935][ T8682] usb 6-1: config 0 descriptor?? [ 393.868157][T15296] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 394.120128][ T6003] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 394.237680][ T8682] nzxt-smart2 0003:1E71:2009.0040: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 394.292509][ T6003] usb 1-1: unable to get BOS descriptor or descriptor too short [ 394.310840][ T6003] usb 1-1: not running at top speed; connect to a high speed hub [ 394.344671][ T6003] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.359973][ T6003] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.386335][ T6003] usb 1-1: string descriptor 0 read error: -22 [ 394.392970][ T6003] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.410067][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.464119][ T6003] usb 1-1: 0:2 : does not exist [ 394.669669][ T9] usb 6-1: USB disconnect, device number 11 [ 395.276572][T15341] loop7: detected capacity change from 0 to 7 [ 395.286341][ T6003] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 395.314544][ T6003] usb 1-1: Warning! Unlikely big volume range (=17161), cval->res is probably wrong. [ 395.327659][ T6003] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 12453/29614/1 [ 395.354710][ T6003] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 395.395996][ T6003] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 395.409500][ T45] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 395.476519][ T6003] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 395.521612][ T6003] usb 1-1: USB disconnect, device number 68 [ 395.601158][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 395.620851][ T45] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 395.639337][ T45] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 395.648138][ T45] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 395.674211][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 395.707513][T15341] Dev loop7: unable to read RDB block 7 [ 395.710752][ C1] blk_print_req_error: 11 callbacks suppressed [ 395.710777][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 395.725420][T15341] loop7: unable to read partition table [ 395.729607][ C1] buffer_io_error: 11 callbacks suppressed [ 395.729626][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 395.729796][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 395.743429][T15341] loop7: partition table beyond EOD, [ 395.750470][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 395.778427][T15341] truncated [ 395.780506][ T45] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 395.783372][T15341] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 395.822207][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 395.837144][ T45] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 395.869199][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.909886][ T45] usb 5-1: config 0 descriptor?? [ 395.916081][T15338] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 395.991935][T15353] input: syz1 as /devices/virtual/input/input62 [ 396.115871][ T5868] Bluetooth: hci4: sending frame failed (-49) [ 396.123473][ T5872] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 396.159301][ T45] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 60 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 396.382562][ C0] usblp0: nonzero read bulk status received: -71 [ 396.389848][ T45] usb 5-1: USB disconnect, device number 60 [ 396.403657][ T45] usblp0: removed [ 396.942359][T15377] netlink: 'syz.5.4058': attribute type 10 has an invalid length. [ 396.990644][T15380] netlink: 'syz.5.4058': attribute type 4 has an invalid length. [ 397.010099][T15380] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4058'. [ 397.031535][T15377] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 397.041821][T15384] netlink: 'syz.0.4059': attribute type 21 has an invalid length. [ 397.053177][T15380] wlan1: mtu less than device minimum [ 397.062226][T15384] netlink: 13562 bytes leftover after parsing attributes in process `syz.0.4059'. [ 397.178741][ T45] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 397.350913][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 397.374472][ T45] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 397.393032][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.409658][T15400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4069'. [ 397.418749][ T45] usb 2-1: Product: syz [ 397.422958][ T45] usb 2-1: Manufacturer: syz [ 397.427581][ T45] usb 2-1: SerialNumber: syz [ 397.445815][ T45] usb 2-1: config 0 descriptor?? [ 397.461841][ T45] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 397.663033][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 397.818274][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 397.841392][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.880396][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.893091][ T9] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 397.904831][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.921150][ T9] usb 1-1: config 0 descriptor?? [ 398.073654][ T45] gspca_sonixj: reg_w1 err -71 [ 398.079804][ T45] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 398.100379][ T6003] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 398.111021][ T45] usb 2-1: USB disconnect, device number 80 [ 398.140249][T15402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.149541][T15402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.268129][ T6003] usb 5-1: Using ep0 maxpacket: 8 [ 398.275116][ T6003] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 398.283469][ T6003] usb 5-1: config 0 has no interface number 0 [ 398.290067][ T6003] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 398.301532][ T6003] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 398.313499][ T6003] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 398.324663][ T6003] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 398.338494][ T6003] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 398.347668][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.360554][ T6003] usb 5-1: config 0 descriptor?? [ 398.374956][ T9] hid (null): bogus close delimiter [ 398.381916][ T9] hid (null): unknown global tag 0xf2 [ 398.382710][ T6003] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 398.575662][ T9] usb 1-1: string descriptor 0 read error: -71 [ 398.588673][ T6003] usb 5-1: USB disconnect, device number 61 [ 398.594693][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 398.604867][ T6003] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 398.612714][ T9] usb 1-1: Max retries (5) exceeded reading string descriptor 200 [ 398.626817][ T9] letsketch 0003:6161:4D15.0041: probe with driver letsketch failed with error -32 [ 398.656844][ T9] usb 1-1: USB disconnect, device number 69 [ 398.802283][T15420] ldusb: No device or device unplugged -19 [ 399.124718][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 399.806792][T15479] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 400.197201][ T6003] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 400.358791][ T6003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.369898][ T6003] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.381040][ T6003] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 400.390253][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.409899][ T6003] usb 6-1: config 0 descriptor?? [ 400.546942][ T5927] usb 1-1: new low-speed USB device number 70 using dummy_hcd [ 400.712254][ T5927] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 400.726153][ T5927] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 400.740614][ T5927] usb 1-1: config 0 has no interface number 0 [ 400.748257][ T5927] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 400.758818][ T5927] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 400.769307][ T5927] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 400.779925][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.795383][ T5927] usb 1-1: config 0 descriptor?? [ 400.832091][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4128'. [ 400.841602][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4128'. [ 400.853493][T15528] netlink: 33 bytes leftover after parsing attributes in process `syz.1.4128'. [ 400.862612][ T6003] hid-steam 0003:28DE:1142.0042: unknown main item tag 0x0 [ 400.867929][ T6003] hid-steam 0003:28DE:1142.0042: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 400.872937][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4128'. [ 400.895468][T15528] netlink: 33 bytes leftover after parsing attributes in process `syz.1.4128'. [ 400.956791][ T6003] hid-steam 0003:28DE:1142.0042: Steam wireless receiver connected [ 400.970490][T15532] syz_tun: entered allmulticast mode [ 400.978727][T15531] syz_tun: left allmulticast mode [ 400.981329][ T6003] hid-steam 0003:28DE:1142.0042: No HID_FEATURE_REPORT submitted - nothing to read [ 401.021451][ T6003] hid-steam 0003:28DE:1142.0043: unknown main item tag 0x0 [ 401.046355][T15534] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input64 [ 401.068147][ T6003] hid-steam 0003:28DE:1142.0043: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 401.130203][ T6003] usb 6-1: USB disconnect, device number 12 [ 401.179687][ T6003] hid-steam 0003:28DE:1142.0042: Steam wireless receiver disconnected [ 401.233918][T15536] fido_id[15536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 401.436603][ T5927] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input63 [ 401.457318][ T5927] input: failed to attach handler kbd to device input63, error: -5 [ 401.655014][ T5927] usb 1-1: USB disconnect, device number 70 [ 401.970587][ T917] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 402.136099][ T917] usb 2-1: Using ep0 maxpacket: 32 [ 402.146932][ T917] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 402.170745][ T917] usb 2-1: config 0 has no interface number 0 [ 402.196214][ T917] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.217653][ T917] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.233263][ T917] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 402.256044][ T917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.290714][ T917] usb 2-1: config 0 descriptor?? [ 402.779259][T15605] netlink: 84 bytes leftover after parsing attributes in process `syz.5.4163'. [ 402.949225][ T917] input: HID 28bd:0094 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0044/input/input66 [ 403.007292][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4169'. [ 403.025714][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4169'. [ 403.034807][T15615] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4169'. [ 403.044367][T15615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4169'. [ 403.056891][T15615] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4169'. [ 403.070638][ T917] uclogic 0003:28BD:0094.0044: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 403.145091][ T917] usb 2-1: USB disconnect, device number 81 [ 403.232579][T15618] fido_id[15618]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 403.538083][ T5927] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 403.700025][ T5927] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 403.726810][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.739067][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 403.753819][ T5927] usb 6-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 403.763244][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.788239][ T5927] usb 6-1: config 0 descriptor?? [ 404.215387][ T5927] logitech 0003:046D:CA04.0045: hidraw0: USB HID v0.05 Device [HID 046d:ca04] on usb-dummy_hcd.5-1/input0 [ 404.239515][ T5927] logitech 0003:046D:CA04.0045: no inputs found [ 404.403417][ T5927] usb 6-1: USB disconnect, device number 13 [ 405.057413][T15654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4186'. [ 408.022535][T15731] input: syz0 as /devices/virtual/input/input67 [ 408.086311][T15732] kvm: apic: phys broadcast and lowest prio [ 408.219295][T15740] GUP no longer grows the stack in syz.5.4226 (15740): 200000005000-200000008000 (200000001000) [ 408.231511][T15740] CPU: 1 UID: 0 PID: 15740 Comm: syz.5.4226 Not tainted syzkaller #0 PREEMPT(full) [ 408.231540][T15740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 408.231562][T15740] Call Trace: [ 408.231571][T15740] [ 408.231580][T15740] dump_stack_lvl+0x189/0x250 [ 408.231657][T15740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.231690][T15740] ? __pfx__printk+0x10/0x10 [ 408.231723][T15740] ? find_vma+0xe7/0x160 [ 408.231756][T15740] ? vma_is_secretmem+0xd/0x50 [ 408.231786][T15740] ? check_vma_flags+0x50d/0x580 [ 408.231821][T15740] __get_user_pages+0x2470/0x2a00 [ 408.231882][T15740] __gup_longterm_locked+0x3dc/0x1660 [ 408.231930][T15740] ? trace_kmalloc+0x1f/0xd0 [ 408.231957][T15740] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 408.231994][T15740] pin_user_pages+0x9e/0xd0 [ 408.232026][T15740] xdp_umem_pin_pages+0x11c/0x350 [ 408.232066][T15740] xdp_umem_create+0x677/0x8e0 [ 408.232109][T15740] xsk_setsockopt+0x7b0/0x8d0 [ 408.232141][T15740] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.232174][T15740] ? __pfx_aa_sk_perm+0x10/0x10 [ 408.232199][T15740] ? aa_sock_opt_perm+0xff/0x1b0 [ 408.232227][T15740] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 408.232247][T15740] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.232277][T15740] do_sock_setsockopt+0x17c/0x1b0 [ 408.232304][T15740] __x64_sys_setsockopt+0x13f/0x1b0 [ 408.232332][T15740] do_syscall_64+0xfa/0xfa0 [ 408.232353][T15740] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.232372][T15740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.232394][T15740] ? clear_bhb_loop+0x60/0xb0 [ 408.232419][T15740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.232447][T15740] RIP: 0033:0x7f509658eec9 [ 408.232471][T15740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.232489][T15740] RSP: 002b:00007f509750b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.232512][T15740] RAX: ffffffffffffffda RBX: 00007f50967e5fa0 RCX: 00007f509658eec9 [ 408.232528][T15740] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 408.232541][T15740] RBP: 00007f5096611f91 R08: 0000000000000020 R09: 0000000000000000 [ 408.232555][T15740] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 408.232568][T15740] R13: 00007f50967e6038 R14: 00007f50967e5fa0 R15: 00007ffc4b3f3208 [ 408.232604][T15740] [ 408.762996][T15753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4231'. [ 409.402650][ T5927] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 409.565015][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 409.576522][ T5927] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 409.585223][ T5927] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 409.594139][ T5927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 409.603379][ T5927] usb 5-1: config 1 has no interface number 0 [ 409.609578][ T5927] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.622484][ T5927] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 409.635756][ T5927] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 409.645128][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.661697][ T5927] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 409.722460][ T8682] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 409.861144][ T5927] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 409.872674][ T8682] usb 2-1: Using ep0 maxpacket: 8 [ 409.879954][ T8682] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.890445][ T8682] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.900915][ T8682] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.911302][ T8682] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.925493][ T8682] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.934973][ T8682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.161406][ T8682] usb 2-1: GET_CAPABILITIES returned 0 [ 410.169909][ T8682] usbtmc 2-1:16.0: can't read capabilities [ 410.299656][ T8682] usb 5-1: USB disconnect, device number 62 [ 410.311172][ T8682] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 410.365651][ T5927] usb 2-1: USB disconnect, device number 82 [ 410.438499][T15798] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 410.445187][T15798] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 410.453961][T15798] vhci_hcd vhci_hcd.0: Device attached [ 410.691953][ T1210] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 410.701884][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 410.853637][ T9] usb 1-1: config 0 has no interfaces? [ 410.860746][ T9] usb 1-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 410.875288][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.891469][ T9] usb 1-1: config 0 descriptor?? [ 411.045119][T15810] netlink: 'syz.1.4257': attribute type 83 has an invalid length. [ 411.129119][T15799] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 411.130194][ T9] usb 1-1: USB disconnect, device number 71 [ 411.142668][ T60] vhci_hcd: stop threads [ 411.156893][ T60] vhci_hcd: release socket [ 411.168745][ T60] vhci_hcd: disconnect device [ 411.355728][T15823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.491520][ T917] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 411.651741][ T917] usb 6-1: Using ep0 maxpacket: 32 [ 411.662741][ T917] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 411.673495][ T917] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 411.687297][ T917] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 411.699176][ T917] usb 6-1: config 1 has no interface number 0 [ 411.720306][ T917] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 411.742053][ T917] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 411.759823][ T917] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 411.772997][ T917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.802439][ T917] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 411.998266][ T917] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 412.111418][ T8682] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 412.164284][T15844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 412.172897][ T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 412.274539][ T8682] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 252, using maximum allowed: 30 [ 412.289627][ T8682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.305962][ T8682] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 252 [ 412.322414][ T8682] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 412.331414][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 412.334176][ T8682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.345534][ T9] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 412.352690][ T8682] usb 2-1: config 0 descriptor?? [ 412.369613][ T9] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 412.395693][ T9] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.408741][ T9] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 412.425298][ T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 412.439556][ T917] usb 6-1: USB disconnect, device number 14 [ 412.441881][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.450098][ T917] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 412.465449][ T9] usb 1-1: Product: syz [ 412.465474][ T9] usb 1-1: Manufacturer: syz [ 412.465491][ T9] usb 1-1: SerialNumber: syz [ 412.494669][ C0] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 412.526864][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input68 [ 412.710870][ T9] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 412.722083][ T9] (id 0x00) [ 412.788945][ T8682] logitech 0003:046D:CA04.0046: hidraw0: USB HID v0.05 Device [HID 046d:ca04] on usb-dummy_hcd.1-1/input0 [ 412.811136][ T9] rc_core: IR keymap rc-imon-pad not found [ 412.821982][ T8682] logitech 0003:046D:CA04.0046: no inputs found [ 412.838019][ T9] Registered IR keymap rc-empty [ 412.857495][ T9] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 412.875257][ T9] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 412.914872][ T9] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 412.927699][ T9] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input69 [ 412.944526][ T9] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:72> initialized [ 413.039811][ T8682] usb 2-1: USB disconnect, device number 83 [ 413.060883][ T917] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 413.118081][ T5934] usb 1-1: USB disconnect, device number 72 [ 413.230815][ T917] usb 5-1: Using ep0 maxpacket: 32 [ 413.243300][ T917] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 413.253683][ T917] usb 5-1: config 0 has no interface number 0 [ 413.265366][ T917] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 413.283988][ T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.292512][ T917] usb 5-1: Product: syz [ 413.296867][ T917] usb 5-1: Manufacturer: syz [ 413.302508][ T917] usb 5-1: SerialNumber: syz [ 413.318128][ T917] usb 5-1: config 0 descriptor?? [ 413.329751][ T917] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 413.471994][T15868] netlink: 'syz.5.4283': attribute type 83 has an invalid length. [ 413.546636][ T917] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 413.564613][ T917] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 413.777636][T15878] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 413.973500][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 413.983281][ T917] usb 5-1: USB disconnect, device number 63 [ 414.018930][ T917] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 414.038364][ T917] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 414.086571][ T917] quatech2 5-1:0.51: device disconnected [ 414.210488][T15900] netlink: 'syz.5.4299': attribute type 11 has an invalid length. [ 414.645258][T15926] netlink: 'syz.1.4311': attribute type 11 has an invalid length. [ 414.658337][ T45] IPVS: starting estimator thread 0... [ 414.759774][T15930] IPVS: using max 26 ests per chain, 62400 per kthread [ 414.967153][ T45] IPVS: starting estimator thread 0... [ 415.060777][T15950] IPVS: using max 26 ests per chain, 62400 per kthread [ 415.159704][ T5927] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 415.199761][ T5934] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 415.309752][ T5927] usb 6-1: Using ep0 maxpacket: 32 [ 415.335034][ T5927] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 415.349991][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 415.363969][ T5927] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 415.379614][ T5927] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 415.395464][ T5934] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 415.417008][ T5934] usb 2-1: config 0 has no interface number 0 [ 415.423700][ T5927] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 415.458408][ T5934] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 415.468051][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.476552][ T5927] usb 6-1: config 0 interface 0 has no altsetting 0 [ 415.483544][ T5934] usb 2-1: Product: syz [ 415.488022][ T5934] usb 2-1: Manufacturer: syz [ 415.495050][ T5934] usb 2-1: SerialNumber: syz [ 415.501133][ T5927] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 415.524042][ T5927] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 415.559645][ T5934] usb 2-1: config 0 descriptor?? [ 415.564996][ T5927] usb 6-1: Product: syz [ 415.577179][ T5934] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 415.590884][ T5927] usb 6-1: Manufacturer: syz [ 415.599833][ T5927] usb 6-1: SerialNumber: syz [ 415.608549][ T5927] usb 6-1: config 0 descriptor?? [ 415.618160][ T5927] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 415.639874][ T5927] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 415.789564][ T45] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 415.790337][ T5934] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 415.810731][ T5934] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 415.830616][ T1210] vhci_hcd: vhci_device speed not set [ 415.949274][ T45] usb 1-1: Using ep0 maxpacket: 8 [ 415.956398][ T45] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 415.968761][ T45] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 415.979725][ T45] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 415.999778][ T45] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 416.021611][ T45] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 416.036634][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.229445][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 416.237908][ T5927] usb 2-1: USB disconnect, device number 84 [ 416.249887][ T5927] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 416.267482][ T45] usb 1-1: GET_CAPABILITIES returned 0 [ 416.274693][ T5927] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 416.276766][ T45] usbtmc 1-1:16.0: can't read capabilities [ 416.289895][ T5927] quatech2 2-1:0.51: device disconnected [ 416.383710][ T5934] usb 6-1: USB disconnect, device number 15 [ 416.395814][ T5934] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 416.483999][ T5927] usb 1-1: USB disconnect, device number 73 [ 417.078810][T15999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4343'. [ 417.092682][T15999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4343'. [ 417.748442][ T45] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 417.918934][ T45] usb 6-1: Using ep0 maxpacket: 16 [ 417.926510][ T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.929189][T16051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4376'. [ 417.948431][ T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.953283][T16051] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4376'. [ 417.972049][ T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 417.988231][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.010685][ T45] usb 6-1: Product: syz [ 418.014952][ T45] usb 6-1: Manufacturer: syz [ 418.026252][ T45] usb 6-1: SerialNumber: syz [ 418.449562][ T45] usb 6-1: cannot find UAC_HEADER [ 418.521790][ T45] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 418.540312][ T45] usb 6-1: USB disconnect, device number 16 [ 418.575612][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.674777][T16071] kernel read not supported for file /file1 (pid: 16071 comm: syz.1.4375) [ 418.689362][ T30] audit: type=1800 audit(1758826748.854:30): pid=16071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4375" name="file1" dev="mqueue" ino=73987 res=0 errno=0 [ 418.832867][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4381'. [ 419.050434][ T45] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 419.165640][T16093] mkiss: ax0: crc mode is auto. [ 419.229724][ T45] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 419.257752][ T45] usb 2-1: config 0 has no interface number 0 [ 419.279057][ T45] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 419.318748][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.340098][ T45] usb 2-1: Product: syz [ 419.344347][ T45] usb 2-1: Manufacturer: syz [ 419.360257][ T45] usb 2-1: SerialNumber: syz [ 419.382197][ T45] usb 2-1: config 0 descriptor?? [ 419.411415][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4393'. [ 419.808788][ T917] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 419.823933][ T45] usb 2-1: Firmware: major: 0, minor: 84, hardware type: ATUSB (0) [ 419.981973][ T917] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 419.993244][ T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.013189][ T917] usb 5-1: config 0 descriptor?? [ 420.031464][ T917] cp210x 5-1:0.0: cp210x converter detected [ 420.039827][ T45] usb 2-1: failed to fetch extended address, random address set [ 420.095120][ T45] usb 2-1: USB disconnect, device number 85 [ 420.397479][ T1210] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 420.444520][ T917] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 420.488514][ T917] usb 5-1: cp210x converter now attached to ttyUSB0 [ 420.583341][ T1210] usb 6-1: Using ep0 maxpacket: 8 [ 420.616672][ T1210] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 420.634298][ T1210] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 420.650178][ T1210] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.673146][ T5927] usb 5-1: USB disconnect, device number 64 [ 420.698594][ T5927] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 420.713976][ T1210] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.740825][ T5927] cp210x 5-1:0.0: device disconnected [ 420.750248][ T1210] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 420.775811][ T1210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.927211][ T45] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 421.011573][ T1210] usb 6-1: GET_CAPABILITIES returned 0 [ 421.019552][ T1210] usbtmc 6-1:16.0: can't read capabilities [ 421.049816][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.060155][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.071065][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.083047][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.091161][ T45] usb 2-1: Using ep0 maxpacket: 32 [ 421.092163][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.099942][ T45] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 421.112963][ T45] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 421.128564][ T45] usb 2-1: config 0 has no interface number 0 [ 421.145663][ T45] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 421.154372][ T45] usb 2-1: config 0 has no interface number 0 [ 421.161977][ T45] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 421.171026][ T45] usb 2-1: config 0 has no interface number 0 [ 421.192672][ T45] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 421.206548][ T45] usb 2-1: config 0 has no interface number 0 [ 421.225097][ T45] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 421.233892][ T45] usb 2-1: config 0 has no interface number 0 [ 421.239217][ T1210] usb 6-1: USB disconnect, device number 17 [ 421.247986][ T45] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 421.256350][ T45] usb 2-1: config 0 has no interface number 0 [ 421.273537][ T45] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 421.284709][ T45] usb 2-1: config 0 has no interface number 0 [ 421.292586][ T45] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 421.312757][ T45] usb 2-1: config 0 has no interface number 0 [ 421.325061][ T45] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 421.335083][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.343374][ T45] usb 2-1: Product: syz [ 421.347990][ T45] usb 2-1: Manufacturer: syz [ 421.352632][ T45] usb 2-1: SerialNumber: syz [ 421.361764][ T45] usb 2-1: config 0 descriptor?? [ 421.370338][ T45] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 421.495440][T16148] chnl_net:caif_netlink_parms(): no params data found [ 421.589685][ T45] etas_es58x 2-1:0.2: could not parse product info: '' [ 421.670409][T16148] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.683618][T16148] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.708118][T16148] bridge_slave_0: entered allmulticast mode [ 421.724274][T16148] bridge_slave_0: entered promiscuous mode [ 421.743491][T16148] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.756892][T16148] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.765383][T16148] bridge_slave_1: entered allmulticast mode [ 421.773603][T16148] bridge_slave_1: entered promiscuous mode [ 421.921994][T16148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.960156][T16148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.098440][T16148] team0: Port device team_slave_0 added [ 422.148046][T16148] team0: Port device team_slave_1 added [ 422.555342][T16148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.574331][T16148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.607762][T16148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.648359][T16148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.669241][T16148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.731634][T16148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.752624][ C1] etas_es58x 2-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 422.764762][ C1] etas_es58x 2-1:0.2: es58x_check_crc: Bad CRC, urb_len: 9 [ 422.772390][ C1] etas_es58x 2-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 422.780421][ C1] etas_es58x 2-1:0.2: es58x_split_urb() returned error -EBADMSG [ 422.791058][ T5528] etas_es58x 2-1:0.2 can1: bit-timing not yet defined [ 422.793205][T16191] raw_sendmsg: syz.5.4411 forgot to set AF_INET. Fix it! [ 422.879630][T16193] Context (ID=0x4dc) not attached to queue pair (handle=0xffffffff:0x4) [ 422.961599][T16196] tmpfs: Cannot change global quota limit on remount [ 422.992238][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 423.001517][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 423.010709][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 423.019899][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 423.029099][ C1] etas_es58x 2-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 423.038391][ C1] etas_es58x 2-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 423.049169][ T45] usb 2-1: USB disconnect, device number 86 [ 423.057204][ T45] etas_es58x 2-1:0.2: Disconnecting syz syz [ 423.064345][ T5528] etas_es58x 2-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 423.158051][T16148] hsr_slave_0: entered promiscuous mode [ 423.165084][T16148] hsr_slave_1: entered promiscuous mode [ 423.173390][T16148] debugfs: 'hsr0' already exists in 'hsr' [ 423.181566][T16148] Cannot create hsr debugfs directory [ 423.195756][ T5872] Bluetooth: hci0: command tx timeout [ 423.366362][ T1210] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 423.491341][T16148] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 423.527796][T16148] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 423.535442][ T1210] usb 5-1: Using ep0 maxpacket: 32 [ 423.543737][ T1210] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 423.556916][T16148] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 423.567143][ T1210] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 423.581834][ T1210] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 423.597216][T16148] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 423.604170][ T1210] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 423.619603][ T1210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 423.630292][ T1210] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 423.645612][ T1210] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 423.655062][ T1210] usb 5-1: Product: syz [ 423.662736][ T1210] usb 5-1: Manufacturer: syz [ 423.675628][ T1210] usb 5-1: SerialNumber: syz [ 423.717798][ T1210] usb 5-1: config 0 descriptor?? [ 423.756649][ T1210] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 423.780158][ T1210] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 423.982078][T16148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.047521][T16148] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.087777][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.095225][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.144918][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.153756][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.343097][ T30] audit: type=1326 audit(1758826754.517:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.1.4423" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f074d18eec9 code=0x0 [ 424.538828][T16148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.573523][ T5854] usb 5-1: USB disconnect, device number 65 [ 424.590812][ T5854] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 424.682300][T16249] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4426'. [ 424.939664][T16148] veth0_vlan: entered promiscuous mode [ 424.958521][T16148] veth1_vlan: entered promiscuous mode [ 424.991124][T16261] sctp: [Deprecated]: syz.5.4430 (pid 16261) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.991124][T16261] Use struct sctp_sack_info instead [ 425.024174][T16148] veth0_macvtap: entered promiscuous mode [ 425.049966][T16148] veth1_macvtap: entered promiscuous mode [ 425.077826][T16148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.096194][T16148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.117790][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.137228][ T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.159748][ T60] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.192784][ T60] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.275712][ T5872] Bluetooth: hci0: command tx timeout [ 425.332250][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.353362][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.397546][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.417780][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.760226][ T30] audit: type=1326 audit(1758826755.928:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16284 comm="syz.5.4441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f509658eec9 code=0x0 [ 425.844318][ T917] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 425.994536][ T917] usb 5-1: Using ep0 maxpacket: 16 [ 426.019810][ T917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.030958][ T917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.057527][ T917] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.067479][ T917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.081268][ T917] usb 5-1: Product: syz [ 426.085958][ T917] usb 5-1: Manufacturer: syz [ 426.090776][ T917] usb 5-1: SerialNumber: syz [ 426.538620][T16295] netlink: 'syz.6.4445': attribute type 1 has an invalid length. [ 426.560917][ T917] usb 5-1: cannot find UAC_HEADER [ 426.637984][ T917] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 426.662240][ T917] usb 5-1: USB disconnect, device number 66 [ 426.770812][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.296163][T16326] Zero length message leads to an empty skb [ 427.353963][ T5872] Bluetooth: hci0: command tx timeout [ 427.363685][ T917] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 427.533428][ T917] usb 6-1: Using ep0 maxpacket: 8 [ 427.547241][ T917] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.573791][ T917] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 427.593814][ T917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.614367][ T917] usb 6-1: config 0 descriptor?? [ 427.655154][ T917] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 428.436768][ T917] gspca_vc032x: reg_w err -71 [ 428.443438][ T917] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 428.484241][ T917] usb 6-1: USB disconnect, device number 18 [ 429.194331][T16388] netlink: 'syz.5.4489': attribute type 13 has an invalid length. [ 429.212586][T16388] netlink: 'syz.5.4489': attribute type 4 has an invalid length. [ 429.231110][T16388] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4489'. [ 429.432836][ T5872] Bluetooth: hci0: command tx timeout [ 429.443941][ T917] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 429.615538][ T917] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.624893][ T917] usb 2-1: config 0 has no interface number 0 [ 429.631159][ T917] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.643836][ T917] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.654249][ T917] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 429.664732][ T917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.677096][ T917] usb 2-1: config 0 descriptor?? [ 429.832824][ T5934] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 429.927542][T16417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4503'. [ 430.002608][ T5934] usb 6-1: Using ep0 maxpacket: 8 [ 430.015064][ T5934] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.029991][ T5934] usb 6-1: config 0 interface 0 has no altsetting 0 [ 430.040827][ T5934] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 430.060281][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.082651][ T5934] usb 6-1: Product: syz [ 430.089555][ T5934] usb 6-1: Manufacturer: syz [ 430.094302][ T5934] usb 6-1: SerialNumber: syz [ 430.106800][ T5934] usb 6-1: config 0 descriptor?? [ 430.110751][ T917] prodikeys 0003:041E:2801.0047: invalid report_size 61482 [ 430.120685][ T917] prodikeys 0003:041E:2801.0047: item 0 2 1 7 parsing failed [ 430.127602][ T5934] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 430.133127][ T917] prodikeys 0003:041E:2801.0047: hid parse failed [ 430.144234][ T917] prodikeys 0003:041E:2801.0047: probe with driver prodikeys failed with error -22 [ 430.281351][T16425] netlink: 'syz.6.4507': attribute type 10 has an invalid length. [ 430.298650][T16425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.311106][ T917] usb 2-1: USB disconnect, device number 87 [ 430.321015][T16425] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 430.337835][ T5934] snd_usb_toneport 6-1:0.0: cannot get proper max packet size [ 430.351045][ T5934] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 430.368697][T16425] netlink: 'syz.6.4507': attribute type 10 has an invalid length. [ 430.374926][ T5934] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 430.377188][T16425] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4507'. [ 430.402916][T16425] batadv0: entered promiscuous mode [ 430.408353][T16425] batadv0: entered allmulticast mode [ 430.428126][T16425] bond0: (slave batadv0): Releasing backup interface [ 430.439684][T16425] bridge0: port 3(batadv0) entered blocking state [ 430.446819][T16425] bridge0: port 3(batadv0) entered disabled state [ 430.551529][ T5934] usb 6-1: USB disconnect, device number 19 [ 430.661451][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4512'. [ 430.675456][T16438] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4512'. [ 430.750826][T16440] wireguard: wg1: Could not create IPv4 socket [ 430.802221][ T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 430.812453][ T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 431.169374][T16456] wireguard: wg1: Could not create IPv4 socket [ 431.286954][T16464] netlink: 'syz.4.4526': attribute type 13 has an invalid length. [ 431.315702][T16464] netlink: 'syz.4.4526': attribute type 4 has an invalid length. [ 431.362824][T16464] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4526'. [ 431.837463][ T8682] kernel read not supported for file [fscontext] (pid: 8682 comm: kworker/1:7) [ 431.918454][T16501] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4543'. [ 432.174477][T16512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.271401][ T5934] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 432.433185][ T5934] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 432.446757][ T5934] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 432.456226][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.467942][ T5934] usb 2-1: config 0 descriptor?? [ 432.892085][ T5934] samsung 0003:0419:0600.0048: unknown main item tag 0x0 [ 432.899244][ T5934] samsung 0003:0419:0600.0048: unknown main item tag 0x0 [ 432.909942][ T5934] samsung 0003:0419:0600.0048: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 433.095027][ T8682] usb 2-1: USB disconnect, device number 88 [ 433.202029][T16535] netlink: 'syz.4.4559': attribute type 10 has an invalid length. [ 433.230764][T16535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.241361][T16535] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 433.259011][T16535] netlink: 'syz.4.4559': attribute type 10 has an invalid length. [ 433.267015][T16535] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4559'. [ 433.276180][T16535] batadv0: entered promiscuous mode [ 433.282127][T16535] batadv0: entered allmulticast mode [ 433.290092][T16535] bond0: (slave batadv0): Releasing backup interface [ 433.304792][T16535] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 433.462809][T16541] PID 16541 killed due to inadequate hugepage pool [ 433.760348][ T5854] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 433.932671][ T5854] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 433.950440][ T5854] usb 7-1: config 0 has no interface number 0 [ 433.963452][ T5854] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.985226][ T5854] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.996326][ T5872] Bluetooth: hci1: unexpected cc 0x042d length: 1 < 7 [ 434.020164][ T5854] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.040212][ T5854] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 434.049538][ T5854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.061391][ T5854] usb 7-1: config 0 descriptor?? [ 434.110113][ T917] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 434.210888][ T5868] Bluetooth: hci4: sending frame failed (-49) [ 434.219405][ T5872] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 434.261724][ T917] usb 5-1: Using ep0 maxpacket: 8 [ 434.290169][ T917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 434.308040][ T917] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 434.320864][ T917] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 434.329557][ T917] usb 5-1: Product: syz [ 434.336120][ T917] usb 5-1: Manufacturer: syz [ 434.341877][ T917] usb 5-1: SerialNumber: syz [ 434.569999][ T917] usb 5-1: Invalid connection information received from device [ 434.677539][T16561] syz.1.4578: vmalloc error: size 75497472, failed to allocated page array size 147456, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 434.698331][T16561] CPU: 0 UID: 0 PID: 16561 Comm: syz.1.4578 Not tainted syzkaller #0 PREEMPT(full) [ 434.698360][T16561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.698375][T16561] Call Trace: [ 434.698384][T16561] [ 434.698394][T16561] dump_stack_lvl+0x189/0x250 [ 434.698442][T16561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.698475][T16561] ? __pfx__printk+0x10/0x10 [ 434.698512][T16561] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 434.698545][T16561] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 434.698580][T16561] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 434.698616][T16561] warn_alloc+0x214/0x310 [ 434.698643][T16561] ? __pfx_warn_alloc+0x10/0x10 [ 434.698671][T16561] ? __get_vm_area_node+0x28f/0x300 [ 434.698702][T16561] ? vb2_vmalloc_alloc+0xef/0x340 [ 434.698733][T16561] __vmalloc_node_range_noprof+0x690/0x12d0 [ 434.698796][T16561] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 434.698832][T16561] ? __kasan_kmalloc+0x93/0xb0 [ 434.698859][T16561] vmalloc_user_noprof+0xad/0xf0 [ 434.698891][T16561] ? vb2_vmalloc_alloc+0xef/0x340 [ 434.698917][T16561] vb2_vmalloc_alloc+0xef/0x340 [ 434.698943][T16561] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 434.698971][T16561] __vb2_queue_alloc+0x9c2/0x15a0 [ 434.699023][T16561] vb2_core_reqbufs+0xc31/0x1420 [ 434.699045][T16561] ? do_syscall_64+0xfa/0xfa0 [ 434.699086][T16561] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 434.699121][T16561] ? vb2_verify_memory_type+0x1fc/0x570 [ 434.699147][T16561] vb2_ioctl_reqbufs+0x4c0/0x830 [ 434.699185][T16561] __video_do_ioctl+0xa59/0xc10 [ 434.699224][T16561] ? __pfx___video_do_ioctl+0x10/0x10 [ 434.699267][T16561] video_usercopy+0x82d/0x1450 [ 434.699305][T16561] ? __pfx___video_do_ioctl+0x10/0x10 [ 434.699332][T16561] ? __pfx_video_usercopy+0x10/0x10 [ 434.699377][T16561] ? __fget_files+0x3a0/0x420 [ 434.699422][T16561] v4l2_ioctl+0x18d/0x1e0 [ 434.699447][T16561] ? __pfx_v4l2_ioctl+0x10/0x10 [ 434.699472][T16561] __se_sys_ioctl+0xfc/0x170 [ 434.699513][T16561] do_syscall_64+0xfa/0xfa0 [ 434.699531][T16561] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.699549][T16561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.699570][T16561] ? clear_bhb_loop+0x60/0xb0 [ 434.699597][T16561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.699618][T16561] RIP: 0033:0x7f074d18eec9 [ 434.699635][T16561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.699662][T16561] RSP: 002b:00007f074dfa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 434.699687][T16561] RAX: ffffffffffffffda RBX: 00007f074d3e5fa0 RCX: 00007f074d18eec9 [ 434.699703][T16561] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 434.699717][T16561] RBP: 00007f074d211f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.699730][T16561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.699742][T16561] R13: 00007f074d3e6038 R14: 00007f074d3e5fa0 R15: 00007ffc2c1a3668 [ 434.699776][T16561] [ 434.706747][ T5854] input: HID 28bd:0042 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0042.0049/input/input70 [ 434.733067][T16561] Mem-Info: [ 434.773141][ T917] usb 5-1: USB disconnect, device number 67 [ 434.806740][T16561] active_anon:6617 inactive_anon:0 isolated_anon:0 [ 434.806740][T16561] active_file:17959 inactive_file:4146 isolated_file:0 [ 434.806740][T16561] unevictable:768 dirty:120 writeback:0 [ 434.806740][T16561] slab_reclaimable:10000 slab_unreclaimable:98819 [ 434.806740][T16561] mapped:25119 shmem:1362 pagetables:1651 [ 434.806740][T16561] sec_pagetables:0 bounce:0 [ 434.806740][T16561] kernel_misc_reclaimable:0 [ 434.806740][T16561] free:1320512 free_pcp:16584 free_cma:0 [ 434.820857][ T5854] uclogic 0003:28BD:0042.0049: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.6-1/input1 [ 434.890702][T16561] Node 0 active_anon:26428kB inactive_anon:0kB active_file:71732kB inactive_file:16456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100516kB dirty:532kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12752kB pagetables:6596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 434.947559][ T5854] usb 7-1: USB disconnect, device number 2 [ 434.965941][T16561] Node 1 active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 435.084114][T16585] fido_id[16585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 435.199503][T16561] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 435.261291][T16561] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 435.272971][T16561] Node 0 DMA32 free:1393788kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26528kB inactive_anon:0kB active_file:71732kB inactive_file:16456kB unevictable:1536kB writepending:532kB zspages:0kB present:3129332kB managed:2549492kB mlocked:0kB bounce:0kB free_pcp:35916kB local_pcp:18420kB free_cma:0kB [ 435.309132][T16561] lowmem_reserve[]: 0 0 0 0 0 [ 435.314802][T16561] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 435.347074][T16561] lowmem_reserve[]: 0 0 0 0 0 [ 435.371411][T16561] Node 1 Normal free:3872756kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:104kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:30880kB local_pcp:17536kB free_cma:0kB [ 435.405730][T16561] lowmem_reserve[]: 0 0 0 0 0 [ 435.411155][T16561] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 435.431488][T16561] Node 0 DMA32: 392*4kB (M) 261*8kB (UME) 226*16kB (ME) 275*32kB (ME) 146*64kB (ME) 104*128kB (UME) 45*256kB (UME) 18*512kB (UM) 13*1024kB (M) 7*2048kB (M) 319*4096kB (UM) = 1393736kB [ 435.455346][T16561] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 435.495039][T16561] Node 1 Normal: 197*4kB (UME) 50*8kB (UME) 47*16kB (U) 133*32kB (U) 51*64kB (UME) 14*128kB (UE) 6*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 940*4096kB (M) = 3872756kB [ 435.558651][T16561] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.569102][T16561] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 435.581240][T16561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.591997][T16561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 435.602068][T16561] 23470 total pagecache pages [ 435.606849][T16561] 0 pages in swap cache [ 435.611513][T16561] Free swap = 124996kB [ 435.615799][T16561] Total swap = 124996kB [ 435.620336][T16561] 2097051 pages RAM [ 435.643960][T16561] 0 pages HighMem/MovableOnly [ 435.648811][T16561] 427972 pages reserved [ 435.653946][T16561] 0 pages cma reserved [ 435.713685][T16597] netlink: 'syz.5.4588': attribute type 27 has an invalid length. [ 435.729634][T16597] netlink: 'syz.5.4588': attribute type 1 has an invalid length. [ 435.738397][T16597] bridge0: port 1(bridge_slave_0) entered learning state [ 436.419575][ T45] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 436.548968][ T5854] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 436.580856][ T45] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.593106][ T45] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.604223][ T45] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 436.614437][ T45] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 436.622965][ T45] usb 7-1: SerialNumber: syz [ 436.711079][ T5854] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.724183][ T5854] usb 5-1: config 0 has no interface number 0 [ 436.743339][ T5854] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.762665][ T5854] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.773015][ T5854] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 436.782777][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.817339][ T5854] usb 5-1: config 0 descriptor?? [ 436.853618][ T45] usb 7-1: 0:2 : does not exist [ 436.887251][ T45] usb 7-1: USB disconnect, device number 3 [ 436.943778][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.246241][ T5854] prodikeys 0003:041E:2801.004A: invalid report_size 61482 [ 437.258515][ T5854] prodikeys 0003:041E:2801.004A: item 0 2 1 7 parsing failed [ 437.266705][ T5854] prodikeys 0003:041E:2801.004A: hid parse failed [ 437.277700][ T5854] prodikeys 0003:041E:2801.004A: probe with driver prodikeys failed with error -22 [ 437.472463][ T45] usb 5-1: USB disconnect, device number 68 [ 437.494372][T16657] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4616'. [ 437.552601][T16657] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4616'. [ 437.765787][T16669] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4620'. [ 437.783679][ T1210] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 437.948458][ T1210] usb 7-1: Using ep0 maxpacket: 8 [ 437.955585][ T1210] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.966676][ T1210] usb 7-1: config 0 has no interfaces? [ 437.972626][ T1210] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 437.983063][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.012551][ T1210] usb 7-1: config 0 descriptor?? [ 438.041207][T16673] netlink: 'syz.1.4622': attribute type 27 has an invalid length. [ 438.054656][T16673] netlink: 'syz.1.4622': attribute type 1 has an invalid length. [ 438.063554][T16673] bridge0: port 1(bridge_slave_0) entered learning state [ 438.072945][ T5872] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 438.088627][ T5872] Bluetooth: hci1: Injecting HCI hardware error event [ 438.099504][ T5868] Bluetooth: hci1: hardware error 0x00 [ 438.228243][ T1210] usb 7-1: USB disconnect, device number 4 [ 438.463858][T16697] Invalid ELF header len 16 [ 438.607928][ T45] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 438.775155][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.787510][ T45] usb 6-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 438.799607][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.811092][ T45] usb 6-1: config 0 descriptor?? [ 438.907706][ T1210] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 439.057635][ T1210] usb 5-1: Using ep0 maxpacket: 8 [ 439.064728][ T1210] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.075629][ T1210] usb 5-1: config 0 has no interfaces? [ 439.081386][ T1210] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 439.090841][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.102529][ T1210] usb 5-1: config 0 descriptor?? [ 439.224506][ T45] steelseries 0003:1038:12C2.004B: unknown main item tag 0x0 [ 439.234010][ T45] steelseries 0003:1038:12C2.004B: unknown main item tag 0x0 [ 439.244269][ T45] steelseries 0003:1038:12C2.004B: unknown main item tag 0x0 [ 439.252224][ T45] steelseries 0003:1038:12C2.004B: unknown main item tag 0x0 [ 439.260082][ T45] steelseries 0003:1038:12C2.004B: unknown main item tag 0x0 [ 439.269666][ T45] steelseries 0003:1038:12C2.004B: unknown main item tag 0x0 [ 439.277128][ T45] steelseries 0003:1038:12C2.004B: unknown main item tag 0x0 [ 439.313928][ T5934] usb 5-1: USB disconnect, device number 69 [ 439.426080][ T45] usb 6-1: USB disconnect, device number 20 [ 439.697409][ T1210] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 439.850016][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.862752][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.873882][ T1210] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 439.885463][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.901296][ T1210] usb 2-1: config 0 descriptor?? [ 439.998637][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.005882][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.227099][ T5868] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 440.351039][ T1210] arvo 0003:1E7D:30D4.004C: unknown main item tag 0x0 [ 440.386214][ T1210] arvo 0003:1E7D:30D4.004C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 440.783661][ T1210] usb 2-1: USB disconnect, device number 89 [ 440.943886][T16733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4650'. [ 440.994074][T16733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4650'. [ 441.715916][T16763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.773836][T16712] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 441.846404][ T5927] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 442.007226][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 442.014886][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.025877][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 442.037404][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 442.047362][ T5927] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 442.057295][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.077347][ T5927] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 442.090779][ T5927] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 442.099992][ T5927] usb 6-1: Manufacturer: syz [ 442.107837][ T5927] usb 6-1: config 0 descriptor?? [ 442.136140][ T1210] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 442.287839][ T1210] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 442.296322][ T1210] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 442.305226][ T1210] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 442.315770][ T1210] usb 7-1: config 220 has no interface number 2 [ 442.322286][ T1210] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 442.335793][ T1210] usb 7-1: config 220 interface 0 has no altsetting 0 [ 442.343321][ T1210] usb 7-1: config 220 interface 76 has no altsetting 0 [ 442.351156][ T1210] usb 7-1: config 220 interface 1 has no altsetting 0 [ 442.362407][ T1210] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 442.371784][ T1210] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.380133][ T1210] usb 7-1: Product: syz [ 442.384361][ T1210] usb 7-1: Manufacturer: syz [ 442.390013][ T1210] usb 7-1: SerialNumber: syz [ 442.415919][ T5927] rc_core: IR keymap rc-hauppauge not found [ 442.421901][ T5927] Registered IR keymap rc-empty [ 442.427134][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 442.446056][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 442.456037][ T5854] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 442.468982][ T5927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 442.482733][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input72 [ 442.498415][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 442.515937][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 442.535982][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 442.559078][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 442.586019][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 442.600641][ C0] mceusb 6-1:0.0: long-range (0x8d) receiver active [ 442.610336][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 442.623047][ T1210] usb 7-1: selecting invalid altsetting 0 [ 442.628627][ T5854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.641912][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 442.642433][ T1210] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 442.656015][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 442.662388][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 442.683270][ T5854] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 442.684832][ T1210] uvcvideo 7-1:220.0: No valid video chain found. [ 442.709561][ T5854] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 442.716824][ T1210] usb 7-1: selecting invalid altsetting 0 [ 442.722326][ T5854] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 442.724696][ T1210] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 442.733437][ T5854] usb 2-1: Manufacturer: syz [ 442.741193][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 442.764129][ T5854] usb 2-1: config 0 descriptor?? [ 442.767198][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 442.778959][ T1210] usb 7-1: USB disconnect, device number 5 [ 442.816024][ T5927] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 442.839846][ T5927] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 442.850190][ T5927] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x8d active) [ 442.872656][ T5927] usb 6-1: USB disconnect, device number 21 [ 443.025827][ T5854] rc_core: IR keymap rc-hauppauge not found [ 443.031822][ T5854] Registered IR keymap rc-empty [ 443.039042][ T5854] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 443.067480][ T5854] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 443.087245][ T5854] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 443.102625][ T5854] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input73 [ 443.128017][ T5854] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 443.165962][ T5854] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 443.186389][ T5872] Bluetooth: hci4: command 0x1003 tx timeout [ 443.190220][ T5868] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 443.204573][ T5854] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 443.246648][ T5854] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 443.285534][ T5854] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 443.336231][ T5854] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 443.358974][ T5854] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 443.406690][ T5854] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 443.449920][ T5854] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 443.487549][ T5854] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 443.519133][ T5854] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 443.546306][ T5854] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 443.564746][ T5854] usb 2-1: USB disconnect, device number 90 [ 444.019426][T16821] batadv_slave_0: entered promiscuous mode [ 444.032787][T16820] batadv_slave_0: left promiscuous mode [ 444.564918][ T5927] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 444.629528][T16843] 9p: Unknown Cache mode or invalid value fs [ 444.747339][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.781391][ T5927] usb 2-1: config 0 has no interfaces? [ 444.793132][ T5927] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 444.836239][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.879349][ T5927] usb 2-1: config 0 descriptor?? [ 444.979026][T16851] netlink: 'syz.6.4702': attribute type 6 has an invalid length. [ 444.988770][T16851] netlink: 'syz.6.4702': attribute type 6 has an invalid length. [ 445.311141][ T1210] usb 2-1: USB disconnect, device number 91 [ 446.259435][T16902] kvm: kvm [16900]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x4 [ 446.304087][ T45] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 446.505809][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.544203][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.553453][T16917] pimreg: entered allmulticast mode [ 446.579792][ T30] audit: type=1326 audit(1758826776.758:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16918 comm="syz.6.4724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb54f8eec9 code=0x0 [ 446.588755][T16917] pimreg: left allmulticast mode [ 446.612337][ T45] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 446.631073][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.664866][ T45] usb 5-1: config 0 descriptor?? [ 446.780165][T16928] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 446.791075][T16928] binder: 16927:16928 ioctl 4018620d 200000000100 returned -1 [ 447.088061][ T45] arvo 0003:1E7D:30D4.004D: unknown main item tag 0x0 [ 447.098140][ T45] arvo 0003:1E7D:30D4.004D: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 447.508435][ T917] usb 5-1: USB disconnect, device number 70 [ 447.611081][T16943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.033241][ T917] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 448.193630][ T917] usb 6-1: Using ep0 maxpacket: 16 [ 448.200641][ T917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.211698][ T917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.222566][ T917] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 448.231756][ T917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.242839][ T917] usb 6-1: config 0 descriptor?? [ 448.343079][ T45] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 448.495229][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.505643][ T45] usb 5-1: config 0 has no interfaces? [ 448.511371][ T45] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 448.521318][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.532574][ T45] usb 5-1: config 0 descriptor?? [ 448.690901][ T917] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.004E/input/input74 [ 448.753521][ T5927] usb 5-1: USB disconnect, device number 71 [ 448.794631][ T917] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.004E/input/input75 [ 448.853808][ T917] kye 0003:0458:5012.004E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.5-1/input0 [ 449.105082][ T5927] usb 6-1: USB disconnect, device number 22 [ 449.502688][ T5872] Bluetooth: hci4: command 0x1003 tx timeout [ 449.509586][ T5868] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 449.606885][T16997] pimreg: entered allmulticast mode [ 449.620177][T16997] pimreg: left allmulticast mode [ 449.732985][T16999] syzkaller1: entered promiscuous mode [ 449.738530][T16999] syzkaller1: entered allmulticast mode [ 450.709914][T17044] kvm: kvm [17043]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1201ba41f1f636b2 [ 450.823952][ T917] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 450.984761][ T917] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 450.998094][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 451.010113][ T917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 451.020335][ T917] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 451.034039][ T917] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 451.044686][ T917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.063238][ T917] usb 5-1: config 0 descriptor?? [ 451.483646][ T917] plantronics 0003:047F:FFFF.004F: ignoring exceeding usage max [ 451.530734][ T917] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 451.963685][T17074] block nbd6: shutting down sockets [ 452.460311][T17089] tipc: Started in network mode [ 452.465866][T17089] tipc: Node identity ac14142f, cluster identity 4711 [ 452.476866][T17089] tipc: New replicast peer: 0.0.0.0 [ 452.483412][T17089] tipc: Enabled bearer , priority 10 [ 452.498892][T17089] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 452.520707][T17091] syzkaller1: entered promiscuous mode [ 452.542705][T17091] syzkaller1: entered allmulticast mode [ 452.708100][T17097] netlink: 184 bytes leftover after parsing attributes in process `syz.5.4799'. [ 453.315944][T17118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.593249][ T5927] usb 5-1: USB disconnect, device number 72 [ 453.612316][ T9] tipc: Node number set to 2886997039 [ 453.993930][T17109] syz.1.4805 (17109): drop_caches: 2 [ 454.040187][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 454.224047][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 454.244661][ T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 454.269023][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 454.283096][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 454.294239][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 454.315612][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 454.342812][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 454.352021][ T9] usb 6-1: Product: syz [ 454.356305][ T9] usb 6-1: Manufacturer: syz [ 454.380431][ T5927] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 454.416666][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 454.422898][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 454.443402][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 454.449378][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 454.553040][ T5927] usb 7-1: Using ep0 maxpacket: 8 [ 454.561819][ T5927] usb 7-1: config 130 has an invalid descriptor of length 0, skipping remainder of the config [ 454.582168][ T5927] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 454.601830][ T5927] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.617782][ T5927] usb 7-1: Product: syz [ 454.628381][ T5927] usb 7-1: Manufacturer: syz [ 454.634700][ T5927] usb 7-1: SerialNumber: syz [ 454.655939][ T5927] ch9200 7-1:130.0: probe with driver ch9200 failed with error -22 [ 454.795620][T17151] syzkaller1: entered promiscuous mode [ 454.802186][T17151] syzkaller1: entered allmulticast mode [ 454.902029][ T5854] usb 7-1: USB disconnect, device number 6 [ 454.970019][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 455.139583][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 455.157982][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 455.164916][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 455.179523][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.194997][ T9] usb 2-1: config 0 descriptor?? [ 455.417337][T17149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.431201][T17149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.695553][ T9] hid (null): unknown global tag 0xc [ 455.729250][ T9] hid (null): global environment stack underflow [ 455.735718][ T9] hid (null): invalid report_size 4243 [ 455.749265][ T9] hid (null): unknown global tag 0xe [ 455.923034][ T9] usb 2-1: USB disconnect, device number 92 [ 456.078786][T17157] syz.4.4826 (17157): drop_caches: 2 [ 456.464226][T17167] syzkaller1: entered promiscuous mode [ 456.474869][T17167] syzkaller1: entered allmulticast mode [ 456.823320][ T9] usb 6-1: USB disconnect, device number 23 [ 457.367257][T17192] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4842'. [ 458.114454][T17221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 458.273418][T17227] [ 458.275809][T17227] ====================================================== [ 458.282839][T17227] WARNING: possible circular locking dependency detected [ 458.289876][T17227] syzkaller #0 Not tainted [ 458.294298][T17227] ------------------------------------------------------ [ 458.301316][T17227] syz.6.4856/17227 is trying to acquire lock: [ 458.307384][T17227] ffffffff8e6452a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x45/0x6e0 [ 458.316803][T17227] [ 458.316803][T17227] but task is already holding lock: [ 458.324174][T17227] ffffffff8e62d2f0 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x45/0x320 [ 458.333685][T17227] [ 458.333685][T17227] which lock already depends on the new lock. [ 458.333685][T17227] [ 458.344090][T17227] [ 458.344090][T17227] the existing dependency chain (in reverse order) is: [ 458.353108][T17227] [ 458.353108][T17227] -> #8 (slab_mutex){+.+.}-{4:4}: [ 458.360337][T17227] lock_acquire+0x120/0x360 [ 458.365369][T17227] __mutex_lock+0x187/0x1350 [ 458.370483][T17227] flush_all_rcu_sheaves+0x21/0x210 [ 458.376213][T17227] kvfree_rcu_barrier+0x13/0x160 [ 458.381687][T17227] kmem_cache_destroy+0x2e/0x170 [ 458.387159][T17227] p9_client_destroy+0x491/0x4e0 [ 458.392625][T17227] v9fs_session_close+0x4f/0x200 [ 458.398094][T17227] v9fs_kill_super+0x5c/0x90 [ 458.403214][T17227] deactivate_locked_super+0xbc/0x130 [ 458.409115][T17227] v9fs_mount+0x805/0xa50 [ 458.413979][T17227] legacy_get_tree+0xfd/0x1a0 [ 458.419183][T17227] vfs_get_tree+0x92/0x2b0 [ 458.424127][T17227] do_new_mount+0x302/0x9e0 [ 458.429157][T17227] __se_sys_mount+0x313/0x410 [ 458.434361][T17227] do_syscall_64+0xfa/0xfa0 [ 458.439386][T17227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.445799][T17227] [ 458.445799][T17227] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 458.453539][T17227] lock_acquire+0x120/0x360 [ 458.458575][T17227] cpus_read_lock+0x42/0x160 [ 458.463695][T17227] static_key_slow_inc+0x12/0x30 [ 458.469190][T17227] tcp_md5_do_add+0x21f/0x3a0 [ 458.474405][T17227] tcp_v4_parse_md5_keys+0x412/0x600 [ 458.480221][T17227] do_tcp_setsockopt+0x11dc/0x1f20 [ 458.485855][T17227] do_sock_setsockopt+0x17c/0x1b0 [ 458.491424][T17227] __x64_sys_setsockopt+0x13f/0x1b0 [ 458.497146][T17227] do_syscall_64+0xfa/0xfa0 [ 458.502169][T17227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.508606][T17227] [ 458.508606][T17227] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 458.516259][T17227] lock_acquire+0x120/0x360 [ 458.521295][T17227] lock_sock_nested+0x48/0x100 [ 458.526591][T17227] inet_shutdown+0x6a/0x390 [ 458.531627][T17227] nbd_mark_nsock_dead+0x2e9/0x560 [ 458.537269][T17227] sock_shutdown+0x15e/0x260 [ 458.542390][T17227] nbd_config_put+0x342/0x790 [ 458.547610][T17227] nbd_release+0xfe/0x140 [ 458.552470][T17227] bdev_release+0x536/0x650 [ 458.557496][T17227] blkdev_release+0x15/0x20 [ 458.562546][T17227] __fput+0x44c/0xa70 [ 458.567073][T17227] task_work_run+0x1d4/0x260 [ 458.572190][T17227] exit_to_user_mode_loop+0xe9/0x130 [ 458.578000][T17227] do_syscall_64+0x2bd/0xfa0 [ 458.583119][T17227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.589555][T17227] [ 458.589555][T17227] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 458.597206][T17227] lock_acquire+0x120/0x360 [ 458.602236][T17227] __mutex_lock+0x187/0x1350 [ 458.607353][T17227] nbd_queue_rq+0x257/0xf10 [ 458.612387][T17227] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 458.618458][T17227] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 458.625317][T17227] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 458.631827][T17227] blk_mq_run_hw_queue+0x348/0x4f0 [ 458.637462][T17227] blk_mq_dispatch_list+0xd0c/0xe00 [ 458.643182][T17227] blk_mq_flush_plug_list+0x469/0x550 [ 458.649083][T17227] __blk_flush_plug+0x3d3/0x4b0 [ 458.654473][T17227] __submit_bio+0x2d3/0x5a0 [ 458.659506][T17227] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 458.665661][T17227] block_read_full_folio+0x599/0x830 [ 458.671482][T17227] filemap_read_folio+0x117/0x380 [ 458.677037][T17227] do_read_cache_folio+0x350/0x590 [ 458.682671][T17227] read_part_sector+0xb6/0x2b0 [ 458.687957][T17227] adfspart_check_ICS+0xa4/0xa50 [ 458.693419][T17227] bdev_disk_changed+0x75f/0x14b0 [ 458.698968][T17227] blkdev_get_whole+0x380/0x510 [ 458.704432][T17227] bdev_open+0x31e/0xd30 [ 458.709199][T17227] blkdev_open+0x457/0x600 [ 458.714158][T17227] do_dentry_open+0x953/0x13f0 [ 458.719451][T17227] vfs_open+0x3b/0x340 [ 458.724052][T17227] path_openat+0x2ee5/0x3830 [ 458.729178][T17227] do_filp_open+0x1fa/0x410 [ 458.734220][T17227] do_sys_openat2+0x121/0x1c0 [ 458.739425][T17227] __x64_sys_openat+0x138/0x170 [ 458.744803][T17227] do_syscall_64+0xfa/0xfa0 [ 458.749827][T17227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.756249][T17227] [ 458.756249][T17227] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 458.763471][T17227] lock_acquire+0x120/0x360 [ 458.768501][T17227] __mutex_lock+0x187/0x1350 [ 458.773702][T17227] nbd_queue_rq+0xc8/0xf10 [ 458.778649][T17227] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 458.784806][T17227] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 458.791661][T17227] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 458.798166][T17227] blk_mq_run_hw_queue+0x348/0x4f0 [ 458.803802][T17227] blk_mq_dispatch_list+0xd0c/0xe00 [ 458.809523][T17227] blk_mq_flush_plug_list+0x469/0x550 [ 458.815421][T17227] __blk_flush_plug+0x3d3/0x4b0 [ 458.820800][T17227] __submit_bio+0x2d3/0x5a0 [ 458.825831][T17227] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 458.831987][T17227] block_read_full_folio+0x599/0x830 [ 458.837810][T17227] filemap_read_folio+0x117/0x380 [ 458.843363][T17227] do_read_cache_folio+0x350/0x590 [ 458.849002][T17227] read_part_sector+0xb6/0x2b0 [ 458.854292][T17227] adfspart_check_ICS+0xa4/0xa50 [ 458.859752][T17227] bdev_disk_changed+0x75f/0x14b0 [ 458.865300][T17227] blkdev_get_whole+0x380/0x510 [ 458.870675][T17227] bdev_open+0x31e/0xd30 [ 458.875467][T17227] blkdev_open+0x457/0x600 [ 458.880409][T17227] do_dentry_open+0x953/0x13f0 [ 458.885702][T17227] vfs_open+0x3b/0x340 [ 458.890301][T17227] path_openat+0x2ee5/0x3830 [ 458.895425][T17227] do_filp_open+0x1fa/0x410 [ 458.900561][T17227] do_sys_openat2+0x121/0x1c0 [ 458.905795][T17227] __x64_sys_openat+0x138/0x170 [ 458.911193][T17227] do_syscall_64+0xfa/0xfa0 [ 458.916227][T17227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.922648][T17227] [ 458.922648][T17227] -> #3 (set->srcu){.+.+}-{0:0}: [ 458.929785][T17227] lock_sync+0xba/0x160 [ 458.934476][T17227] __synchronize_srcu+0x96/0x3a0 [ 458.939936][T17227] elevator_switch+0x12b/0x640 [ 458.945224][T17227] elevator_change+0x315/0x4c0 [ 458.950540][T17227] elevator_set_default+0x186/0x260 [ 458.956294][T17227] blk_register_queue+0x34e/0x3f0 [ 458.961853][T17227] __add_disk+0x677/0xd50 [ 458.966716][T17227] add_disk_fwnode+0xfc/0x480 [ 458.971933][T17227] nbd_dev_add+0x717/0xae0 [ 458.976881][T17227] nbd_init+0x168/0x1f0 [ 458.981571][T17227] do_one_initcall+0x236/0x820 [ 458.986860][T17227] do_initcall_level+0x104/0x190 [ 458.992348][T17227] do_initcalls+0x59/0xa0 [ 458.997206][T17227] kernel_init_freeable+0x334/0x4b0 [ 459.002940][T17227] kernel_init+0x1d/0x1d0 [ 459.007796][T17227] ret_from_fork+0x4bc/0x870 [ 459.012912][T17227] ret_from_fork_asm+0x1a/0x30 [ 459.018201][T17227] [ 459.018201][T17227] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 459.026040][T17227] lock_acquire+0x120/0x360 [ 459.031069][T17227] __mutex_lock+0x187/0x1350 [ 459.036183][T17227] elevator_change+0x1e5/0x4c0 [ 459.041470][T17227] elevator_set_none+0x42/0xb0 [ 459.046762][T17227] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 459.053094][T17227] nbd_start_device+0x17f/0xb10 [ 459.058476][T17227] nbd_genl_connect+0x135b/0x18f0 [ 459.064033][T17227] genl_family_rcv_msg_doit+0x215/0x300 [ 459.070110][T17227] genl_rcv_msg+0x60e/0x790 [ 459.075145][T17227] netlink_rcv_skb+0x208/0x470 [ 459.080443][T17227] genl_rcv+0x28/0x40 [ 459.084948][T17227] netlink_unicast+0x82f/0x9e0 [ 459.090238][T17227] netlink_sendmsg+0x805/0xb30 [ 459.095526][T17227] __sock_sendmsg+0x21c/0x270 [ 459.100733][T17227] ____sys_sendmsg+0x505/0x830 [ 459.106024][T17227] ___sys_sendmsg+0x21f/0x2a0 [ 459.111222][T17227] __x64_sys_sendmsg+0x19b/0x260 [ 459.116686][T17227] do_syscall_64+0xfa/0xfa0 [ 459.121714][T17227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.128207][T17227] [ 459.128207][T17227] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 459.136828][T17227] lock_acquire+0x120/0x360 [ 459.141856][T17227] blk_alloc_queue+0x538/0x620 [ 459.147140][T17227] __blk_mq_alloc_disk+0x15c/0x340 [ 459.152781][T17227] nbd_dev_add+0x46c/0xae0 [ 459.157726][T17227] nbd_init+0x168/0x1f0 [ 459.162405][T17227] do_one_initcall+0x236/0x820 [ 459.167694][T17227] do_initcall_level+0x104/0x190 [ 459.173167][T17227] do_initcalls+0x59/0xa0 [ 459.178027][T17227] kernel_init_freeable+0x334/0x4b0 [ 459.183759][T17227] kernel_init+0x1d/0x1d0 [ 459.188617][T17227] ret_from_fork+0x4bc/0x870 [ 459.193739][T17227] ret_from_fork_asm+0x1a/0x30 [ 459.199034][T17227] [ 459.199034][T17227] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 459.206254][T17227] validate_chain+0xb9b/0x2140 [ 459.211575][T17227] __lock_acquire+0xab9/0xd20 [ 459.216776][T17227] lock_acquire+0x120/0x360 [ 459.221807][T17227] fs_reclaim_acquire+0x72/0x100 [ 459.227269][T17227] kmem_cache_alloc_noprof+0x45/0x6e0 [ 459.233173][T17227] __kmem_cache_create_args+0x19b/0x320 [ 459.239255][T17227] ieee80211_mesh_init_sdata+0x35f/0x610 [ 459.245421][T17227] ieee80211_setup_sdata+0x80e/0xb50 [ 459.251227][T17227] ieee80211_if_add+0xc17/0x1390 [ 459.256693][T17227] ieee80211_add_iface+0xb5/0x5c0 [ 459.262251][T17227] nl80211_new_interface+0x893/0x11a0 [ 459.268157][T17227] genl_family_rcv_msg_doit+0x215/0x300 [ 459.274231][T17227] genl_rcv_msg+0x60e/0x790 [ 459.279266][T17227] netlink_rcv_skb+0x208/0x470 [ 459.284559][T17227] genl_rcv+0x28/0x40 [ 459.289069][T17227] netlink_unicast+0x82f/0x9e0 [ 459.294370][T17227] netlink_sendmsg+0x805/0xb30 [ 459.299655][T17227] __sock_sendmsg+0x21c/0x270 [ 459.304859][T17227] ____sys_sendmsg+0x505/0x830 [ 459.310144][T17227] ___sys_sendmsg+0x21f/0x2a0 [ 459.315344][T17227] __x64_sys_sendmsg+0x19b/0x260 [ 459.320808][T17227] do_syscall_64+0xfa/0xfa0 [ 459.325835][T17227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.332250][T17227] [ 459.332250][T17227] other info that might help us debug this: [ 459.332250][T17227] [ 459.342475][T17227] Chain exists of: [ 459.342475][T17227] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 459.342475][T17227] [ 459.354736][T17227] Possible unsafe locking scenario: [ 459.354736][T17227] [ 459.362185][T17227] CPU0 CPU1 [ 459.367546][T17227] ---- ---- [ 459.372911][T17227] lock(slab_mutex); [ 459.376897][T17227] lock(cpu_hotplug_lock); [ 459.383920][T17227] lock(slab_mutex); [ 459.390422][T17227] lock(fs_reclaim); [ 459.394410][T17227] [ 459.394410][T17227] *** DEADLOCK *** [ 459.394410][T17227] [ 459.402553][T17227] 4 locks held by syz.6.4856/17227: [ 459.407749][T17227] #0: ffffffff8f9b8090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 459.415959][T17227] #1: ffffffff8f952588 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8e0 [ 459.425195][T17227] #2: ffff88805a690788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_new_interface+0xc3/0x11a0 [ 459.435483][T17227] #3: ffffffff8e62d2f0 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x45/0x320 [ 459.445506][T17227] [ 459.445506][T17227] stack backtrace: [ 459.451394][T17227] CPU: 1 UID: 0 PID: 17227 Comm: syz.6.4856 Not tainted syzkaller #0 PREEMPT(full) [ 459.451414][T17227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 459.451426][T17227] Call Trace: [ 459.451432][T17227] [ 459.451440][T17227] dump_stack_lvl+0x189/0x250 [ 459.451469][T17227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.451494][T17227] ? __pfx__printk+0x10/0x10 [ 459.451518][T17227] ? print_lock_name+0xde/0x100 [ 459.451540][T17227] print_circular_bug+0x2ee/0x310 [ 459.451566][T17227] check_noncircular+0x134/0x160 [ 459.451592][T17227] validate_chain+0xb9b/0x2140 [ 459.451615][T17227] ? __mutex_trylock_common+0x153/0x260 [ 459.451639][T17227] ? __pfx___mutex_trylock_common+0x10/0x10 [ 459.451662][T17227] ? genl_rcv_msg+0x60e/0x790 [ 459.451701][T17227] ? genl_rcv+0x28/0x40 [ 459.451720][T17227] ? rcu_is_watching+0x15/0xb0 [ 459.451744][T17227] __lock_acquire+0xab9/0xd20 [ 459.451766][T17227] ? kmem_cache_alloc_noprof+0x45/0x6e0 [ 459.451789][T17227] lock_acquire+0x120/0x360 [ 459.451807][T17227] ? kmem_cache_alloc_noprof+0x45/0x6e0 [ 459.451836][T17227] fs_reclaim_acquire+0x72/0x100 [ 459.451851][T17227] ? kmem_cache_alloc_noprof+0x45/0x6e0 [ 459.451874][T17227] kmem_cache_alloc_noprof+0x45/0x6e0 [ 459.451898][T17227] ? __kmem_cache_create_args+0x19b/0x320 [ 459.451925][T17227] __kmem_cache_create_args+0x19b/0x320 [ 459.451952][T17227] ieee80211_mesh_init_sdata+0x35f/0x610 [ 459.451982][T17227] ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10 [ 459.452008][T17227] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 459.452037][T17227] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 459.452064][T17227] ? __raw_spin_lock_init+0x45/0x100 [ 459.452091][T17227] ieee80211_setup_sdata+0x80e/0xb50 [ 459.452112][T17227] ieee80211_if_add+0xc17/0x1390 [ 459.452132][T17227] ieee80211_add_iface+0xb5/0x5c0 [ 459.452160][T17227] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 459.452189][T17227] nl80211_new_interface+0x893/0x11a0 [ 459.452219][T17227] ? __pfx_nl80211_new_interface+0x10/0x10 [ 459.452250][T17227] ? nl80211_pre_doit+0x4df/0x8e0 [ 459.452276][T17227] genl_family_rcv_msg_doit+0x215/0x300 [ 459.452300][T17227] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 459.452327][T17227] ? bpf_lsm_capable+0x9/0x20 [ 459.452349][T17227] ? security_capable+0x7e/0x2e0 [ 459.452368][T17227] genl_rcv_msg+0x60e/0x790 [ 459.452391][T17227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.452410][T17227] ? ref_tracker_free+0x63a/0x7d0 [ 459.452437][T17227] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 459.452459][T17227] ? __pfx_nl80211_new_interface+0x10/0x10 [ 459.452484][T17227] ? __pfx_nl80211_post_doit+0x10/0x10 [ 459.452507][T17227] ? ____sys_sendmsg+0x505/0x830 [ 459.452524][T17227] ? ___sys_sendmsg+0x21f/0x2a0 [ 459.452540][T17227] ? __x64_sys_sendmsg+0x19b/0x260 [ 459.452557][T17227] ? do_syscall_64+0xfa/0xfa0 [ 459.452573][T17227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.452593][T17227] netlink_rcv_skb+0x208/0x470 [ 459.452619][T17227] ? __lock_acquire+0xab9/0xd20 [ 459.452638][T17227] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.452659][T17227] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.452692][T17227] ? down_read+0x1ad/0x2e0 [ 459.452712][T17227] genl_rcv+0x28/0x40 [ 459.452730][T17227] netlink_unicast+0x82f/0x9e0 [ 459.452758][T17227] ? __pfx_netlink_unicast+0x10/0x10 [ 459.452783][T17227] ? netlink_sendmsg+0x642/0xb30 [ 459.452798][T17227] ? skb_put+0x11b/0x210 [ 459.452814][T17227] netlink_sendmsg+0x805/0xb30 [ 459.452834][T17227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.452851][T17227] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.452871][T17227] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.452887][T17227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.452904][T17227] __sock_sendmsg+0x21c/0x270 [ 459.452928][T17227] ____sys_sendmsg+0x505/0x830 [ 459.452947][T17227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.452969][T17227] ? import_iovec+0x74/0xa0 [ 459.452992][T17227] ___sys_sendmsg+0x21f/0x2a0 [ 459.453010][T17227] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.453042][T17227] ? __fget_files+0x2a/0x420 [ 459.453062][T17227] ? __fget_files+0x3a0/0x420 [ 459.453086][T17227] __x64_sys_sendmsg+0x19b/0x260 [ 459.453105][T17227] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.453130][T17227] ? do_syscall_64+0xbe/0xfa0 [ 459.453147][T17227] do_syscall_64+0xfa/0xfa0 [ 459.453162][T17227] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.453178][T17227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.453195][T17227] ? clear_bhb_loop+0x60/0xb0 [ 459.453213][T17227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.453235][T17227] RIP: 0033:0x7fdb54f8eec9 [ 459.453250][T17227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.453266][T17227] RSP: 002b:00007fdb55e34038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.453284][T17227] RAX: ffffffffffffffda RBX: 00007fdb551e5fa0 RCX: 00007fdb54f8eec9 [ 459.453298][T17227] RDX: 0000000024044884 RSI: 0000200000000100 RDI: 0000000000000003 [ 459.453310][T17227] RBP: 00007fdb55011f91 R08: 0000000000000000 R09: 0000000000000000 [ 459.453321][T17227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.453332][T17227] R13: 00007fdb551e6038 R14: 00007fdb551e5fa0 R15: 00007ffe53586338 [ 459.453351][T17227]