last executing test programs: 3.836196114s ago: executing program 1 (id=3739): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.5522572s ago: executing program 1 (id=3743): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.85738748s ago: executing program 4 (id=3747): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x227e, 0x0) 2.692134226s ago: executing program 4 (id=3748): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000050000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000020766c616e30000000000000004000000076657468305f746f5f7465616d000000aaaaaaf991bb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba316000000000000000000080000000000000208000000892f0700636f6e6e6c6162656c000000000000000000e5ffffff00000000000020000000080000000000000000000000000000004e465154455545000000000000000000000000000000000000000000000000000800000000000000000800000000000400000000000000000000000080000000000000000000000001fcffffffffffff0000000001000000ffffffff000000000000000000000000000400000000efff000000000000000000000000000000000000000001000000feffffff010000000b00006b90088754ea234d6f6e6430000000000000000000000074489c4c2c0000000000000000000000626f6e64300000ff000000000000000076657468315f744d8abdc76964676500aaaaaaaaaabb0000000000e7feffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d3c964de64039918d16289341524b0000000020827903000000000000000000000000000804000000"]}, 0x2a8) 2.397698961s ago: executing program 1 (id=3750): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x3, 0x1dc}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 1.688564209s ago: executing program 2 (id=3759): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'gretap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000080005000400000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x54}}, 0x0) 1.469610259s ago: executing program 2 (id=3762): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) unshare(0x680) poll(&(0x7f0000000300)=[{r0, 0x262}], 0x1, 0x1fb) 1.367413138s ago: executing program 0 (id=3763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=""/112) 1.307613908s ago: executing program 0 (id=3765): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000010c0)=0x15) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r1, &(0x7f0000000940)=[{&(0x7f0000000380)='\n', 0x1}, {0x0}], 0x2) 1.083691597s ago: executing program 0 (id=3767): r0 = syz_io_uring_setup(0x117, &(0x7f0000000580), &(0x7f00000002c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3b, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 920.212256ms ago: executing program 1 (id=3768): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 919.54906ms ago: executing program 3 (id=3769): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002700)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) 844.782161ms ago: executing program 4 (id=3770): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0xa000, @ipv4={'\x00', '\xff\xff', @local}}], 0x1c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/47, &(0x7f0000000100)=0x1d) 786.767602ms ago: executing program 2 (id=3771): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='wf', 0x2) 764.514452ms ago: executing program 4 (id=3772): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="2e00000010008188040f6fec59acbc0435a181003f00000000060000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) 747.389014ms ago: executing program 3 (id=3773): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='nr_inodes=2']) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 671.800581ms ago: executing program 0 (id=3774): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = dup2(r1, r0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x1e) 639.13359ms ago: executing program 1 (id=3775): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2, 0x0, 0x11203}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004850}, 0x10) 587.588644ms ago: executing program 3 (id=3776): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r1, 0x4, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 499.490755ms ago: executing program 2 (id=3777): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0x8}, {0x6}]}) write$ppp(r0, &(0x7f00000005c0)="1632855c4ef3b24c", 0x8) 466.063064ms ago: executing program 0 (id=3778): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) 384.26811ms ago: executing program 3 (id=3779): keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r0, 0x0, 0x0) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) 349.070516ms ago: executing program 4 (id=3780): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x34, r1, 0x111, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x18, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x34}}, 0x4000) 327.449046ms ago: executing program 1 (id=3781): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000012c0)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 289.32107ms ago: executing program 0 (id=3782): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 211.344142ms ago: executing program 4 (id=3783): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 199.677886ms ago: executing program 2 (id=3784): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "af99799d517effffffb429cdb400007b2364ee"}) close_range(r0, 0xffffffffffffffff, 0x0) 191.042688ms ago: executing program 3 (id=3785): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 48.93425ms ago: executing program 2 (id=3786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000020}]}) 0s ago: executing program 3 (id=3787): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000b11000/0x1000)=nil, 0x4) kernel console output (not intermixed with test programs): : auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd37ed7def9 code=0x7ffc0000 [ 200.739858][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.779381][ T940] usb 1-1: Product: syz [ 200.783593][ T940] usb 1-1: Manufacturer: syz [ 200.794390][ T940] usb 1-1: SerialNumber: syz [ 200.799983][ T29] audit: type=1326 audit(1726090586.030:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37ed7def9 code=0x7ffc0000 [ 200.843691][ T940] usb 1-1: config 0 descriptor?? [ 200.900276][ T29] audit: type=1326 audit(1726090586.040:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd37ed7def9 code=0x7ffc0000 [ 200.928347][ T9806] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2029'. [ 200.984761][ T29] audit: type=1326 audit(1726090586.040:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.4.2024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37ed7def9 code=0x7ffc0000 [ 201.095251][ T940] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 201.511414][ T940] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 201.847627][ T5275] usb 1-1: USB disconnect, device number 17 [ 202.357989][ T9830] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 203.668578][ T29] audit: type=1326 audit(1726090589.220:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9877 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f97def9 code=0x7ffc0000 [ 203.733292][ T29] audit: type=1326 audit(1726090589.220:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9877 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f97def9 code=0x7ffc0000 [ 203.789036][ T29] audit: type=1326 audit(1726090589.250:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9877 comm="syz.3.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f345f97def9 code=0x7ffc0000 [ 204.658787][ T9906] program syz.1.2073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.911634][ T9912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 204.961659][ T9912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 205.012155][ T9912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1274) [ 205.074626][ T9912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1275) [ 205.124638][ T9912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1276) [ 205.180724][ T9912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1277) [ 205.244964][ T9912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1278) [ 205.301020][ T9912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1279) [ 205.340135][ T9912] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1280) [ 205.379733][ T9912] bridge_slave_0: default FDB implementation only supports local addresses [ 206.049932][ T9930] netlink: 'syz.1.2083': attribute type 11 has an invalid length. [ 206.091443][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 206.091461][ T29] audit: type=1326 audit(1726090591.640:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd37ed74ea7 code=0x7ffc0000 [ 206.175855][ T29] audit: type=1326 audit(1726090591.640:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd37ed19869 code=0x7ffc0000 [ 206.260276][ T29] audit: type=1326 audit(1726090591.640:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd37ed74ea7 code=0x7ffc0000 [ 206.306075][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2087'. [ 206.334905][ T29] audit: type=1326 audit(1726090591.640:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd37ed19869 code=0x7ffc0000 [ 206.336540][ T9939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2087'. [ 206.406836][ T29] audit: type=1326 audit(1726090591.640:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd37ed74ea7 code=0x7ffc0000 [ 206.460635][ T29] audit: type=1326 audit(1726090591.640:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd37ed19869 code=0x7ffc0000 [ 206.531287][ T29] audit: type=1326 audit(1726090591.640:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd37ed74ea7 code=0x7ffc0000 [ 206.586466][ T9944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.622669][ T29] audit: type=1326 audit(1726090591.640:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd37ed19869 code=0x7ffc0000 [ 206.673645][ T29] audit: type=1326 audit(1726090591.640:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd37ed74ea7 code=0x7ffc0000 [ 206.761634][ T29] audit: type=1326 audit(1726090591.640:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.4.2084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd37ed19869 code=0x7ffc0000 [ 206.845045][ T5225] Bluetooth: hci4: command 0x0405 tx timeout [ 207.165907][ T940] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 207.386402][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.410872][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.440342][ T940] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 207.460789][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.496081][ T940] usb 5-1: config 0 descriptor?? [ 207.664789][ T9969] netlink: 'syz.0.2100': attribute type 8 has an invalid length. [ 207.917458][ T9950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.947297][ T9950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.997792][ T940] sony 0003:054C:024B.0024: unknown main item tag 0x0 [ 208.019793][ T940] sony 0003:054C:024B.0024: unknown main item tag 0x0 [ 208.036513][ T940] sony 0003:054C:024B.0024: unexpected long global item [ 208.044220][ T940] sony 0003:054C:024B.0024: parse failed [ 208.066245][ T940] sony 0003:054C:024B.0024: probe with driver sony failed with error -22 [ 208.260077][ T46] usb 5-1: USB disconnect, device number 16 [ 208.378764][ T9993] netlink: 2060 bytes leftover after parsing attributes in process `syz.1.2111'. [ 208.399108][ T9993] netlink: 'syz.1.2111': attribute type 1 has an invalid length. [ 208.410792][ T9993] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2111'. [ 209.461114][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.489160][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.509373][ T5225] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.517605][ T5225] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.536560][ T5225] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.547016][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.765312][ T5271] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 209.780075][ T967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.961494][ T967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.992408][ T5271] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.018002][ T5271] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 210.036415][ T5271] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.064452][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.096136][T10026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 210.117116][ T5271] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.131074][ T967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.228541][ T967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.534282][ T5274] usb 1-1: USB disconnect, device number 18 [ 210.563854][T10075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2144'. [ 210.616241][T10023] chnl_net:caif_netlink_parms(): no params data found [ 210.661383][ T967] bridge_slave_1: left allmulticast mode [ 210.667847][ T967] bridge_slave_1: left promiscuous mode [ 210.673583][ T967] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.688884][ T967] bridge_slave_0: left allmulticast mode [ 210.695092][ T967] bridge_slave_0: left promiscuous mode [ 210.701817][ T967] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.856318][ T5275] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 210.914674][ T46] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 211.045010][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 211.052617][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.063836][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.073818][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.088734][ T5275] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.099460][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.111196][ T5275] usb 2-1: config 0 descriptor?? [ 211.116647][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 211.128682][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.139679][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.149978][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.162950][ T46] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.175013][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.185936][ T46] usb 4-1: config 0 descriptor?? [ 211.244908][ T1850] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 211.295158][ T967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.336524][ T967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.376897][ T967] bond0 (unregistering): Released all slaves [ 211.425998][ T1850] usb 5-1: Using ep0 maxpacket: 32 [ 211.464652][ T1850] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 211.499815][ T1850] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 211.526892][ T1850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.552877][ T5275] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 211.565352][ T1850] usb 5-1: Product: syz [ 211.569583][ T1850] usb 5-1: Manufacturer: syz [ 211.574215][ T1850] usb 5-1: SerialNumber: syz [ 211.581617][ T5275] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 211.598803][ T5275] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 211.609882][ T1850] usb 5-1: config 0 descriptor?? [ 211.617022][ T5275] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 211.627893][ T46] microsoft 0003:045E:07DA.0026: item 0 4 0 8 parsing failed [ 211.635916][ T5275] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 211.643221][ T5275] microsoft 0003:045E:07DA.0025: unknown main item tag 0x5 [ 211.653342][ T46] microsoft 0003:045E:07DA.0026: parse failed [ 211.657051][ T4615] Bluetooth: hci1: command tx timeout [ 211.660206][T10088] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 211.672910][ T5275] microsoft 0003:045E:07DA.0025: report is too long [ 211.682914][ T46] microsoft 0003:045E:07DA.0026: probe with driver microsoft failed with error -22 [ 211.693606][ T1850] hub 5-1:0.0: bad descriptor, ignoring hub [ 211.701829][ T1850] hub 5-1:0.0: probe with driver hub failed with error -5 [ 211.712592][ T5275] microsoft 0003:045E:07DA.0025: item 0 0 0 8 parsing failed [ 211.735500][ T5275] microsoft 0003:045E:07DA.0025: parse failed [ 211.748104][ T1850] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input38 [ 211.764553][ T5275] microsoft 0003:045E:07DA.0025: probe with driver microsoft failed with error -22 [ 211.787390][ T5275] usb 2-1: USB disconnect, device number 12 [ 211.836146][T10023] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.859837][T10023] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.883575][T10023] bridge_slave_0: entered allmulticast mode [ 211.905730][T10023] bridge_slave_0: entered promiscuous mode [ 211.921435][ T46] usb 4-1: USB disconnect, device number 21 [ 211.937977][T10023] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.951186][T10023] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.959951][T10023] bridge_slave_1: entered allmulticast mode [ 211.970644][T10023] bridge_slave_1: entered promiscuous mode [ 212.053377][ T940] usb 5-1: USB disconnect, device number 17 [ 212.053388][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 212.143059][T10023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.165247][ T967] hsr_slave_0: left promiscuous mode [ 212.183235][ T967] hsr_slave_1: left promiscuous mode [ 212.189496][ T967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.212973][ T967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.224115][ T967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.231963][ T967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.253729][ T967] veth1_macvtap: left promiscuous mode [ 212.259663][ T967] veth0_macvtap: left promiscuous mode [ 212.265405][ T967] veth1_vlan: left promiscuous mode [ 212.270672][ T967] veth0_vlan: left promiscuous mode [ 213.026810][ T967] team0 (unregistering): Port device team_slave_1 removed [ 213.078652][ T967] team0 (unregistering): Port device team_slave_0 removed [ 213.541395][T10023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.735005][ T4615] Bluetooth: hci1: command tx timeout [ 213.755195][T10123] netlink: 'syz.0.2161': attribute type 10 has an invalid length. [ 213.823202][T10123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.838326][T10123] batadv0: entered promiscuous mode [ 213.844426][T10123] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 213.858847][T10119] hsr0: entered promiscuous mode [ 213.917974][T10023] team0: Port device team_slave_0 added [ 213.966355][T10023] team0: Port device team_slave_1 added [ 214.115891][T10023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.135425][T10023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.162226][T10023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.180255][T10023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.193585][T10023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.224964][T10023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.310719][T10023] hsr_slave_0: entered promiscuous mode [ 214.320125][T10023] hsr_slave_1: entered promiscuous mode [ 214.328975][T10023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.337042][ T5275] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 214.345317][T10023] Cannot create hsr debugfs directory [ 214.458234][T10141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2172'. [ 214.534865][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 214.544939][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 214.570506][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 214.588109][ T5275] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 214.597525][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.606134][ T5275] usb 2-1: Product: syz [ 214.611700][ T5275] usb 2-1: Manufacturer: syz [ 214.623097][ T5275] usb 2-1: SerialNumber: syz [ 214.644610][ T5275] usb 2-1: config 0 descriptor?? [ 214.669470][ T5275] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 214.697842][ T5275] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 215.084982][ T940] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 215.133092][T10023] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.152181][T10023] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.163110][T10023] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.174262][T10023] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.298841][ T940] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 215.303824][T10023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.315930][ T5275] em28xx 2-1:0.0: chip ID is em2870 [ 215.325479][ T940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.349742][ T940] usb 5-1: Product: syz [ 215.357290][T10023] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.364294][ T940] usb 5-1: Manufacturer: syz [ 215.375111][ T940] usb 5-1: SerialNumber: syz [ 215.378631][ T2474] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.386998][ T2474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.397682][ T940] usb 5-1: config 0 descriptor?? [ 215.427770][ T2474] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.434989][ T2474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.559621][ T5275] usb 2-1: USB disconnect, device number 13 [ 215.567021][ T5275] em28xx 2-1:0.0: Disconnecting em28xx [ 215.590484][ T5275] em28xx 2-1:0.0: Freeing device [ 215.676000][ T5223] usb 5-1: USB disconnect, device number 18 [ 215.805567][ T4615] Bluetooth: hci1: command tx timeout [ 215.855234][T10023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.963829][T10023] veth0_vlan: entered promiscuous mode [ 216.003293][T10023] veth1_vlan: entered promiscuous mode [ 216.065400][T10023] veth0_macvtap: entered promiscuous mode [ 216.077339][T10023] veth1_macvtap: entered promiscuous mode [ 216.099362][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.110098][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.121783][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.133457][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.164753][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.188082][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.198557][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.214998][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.229664][T10023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.241469][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.252074][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 216.252090][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.252104][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.297562][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.328702][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.341710][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.360568][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.373562][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.391210][T10023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.402386][T10023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.422530][T10023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.478184][T10023] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.498137][T10023] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.514766][T10023] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.530897][T10023] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.539943][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 216.567281][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.590374][ T9] usb 4-1: Product: syz [ 216.604020][ T9] usb 4-1: Manufacturer: syz [ 216.629386][ T9] usb 4-1: SerialNumber: syz [ 216.646315][ T9] usb 4-1: config 0 descriptor?? [ 216.744149][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.763246][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.845261][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.853131][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.079132][ T9] usb 4-1: Firmware: major: 152, minor: 239, hardware type: HULUSB (4) [ 217.280002][ T9] usb 4-1: failed to fetch extended address, random address set [ 217.338113][ T9] usb 4-1: USB disconnect, device number 22 [ 217.642645][ T1850] kernel write not supported for file /snd/seq (pid: 1850 comm: kworker/1:2) [ 217.885408][ T4615] Bluetooth: hci1: command tx timeout [ 219.008902][T10290] program syz.4.2238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.166422][T10298] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2242'. [ 219.355005][ T5223] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 219.546437][ T5223] usb 5-1: Using ep0 maxpacket: 8 [ 219.557861][ T5223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.577940][ T5223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.591374][ T5223] usb 5-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 219.611115][ T5223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.622796][ T5223] usb 5-1: config 0 descriptor?? [ 219.658209][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 219.658226][ T29] audit: type=1326 audit(1726090605.210:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10280 comm="syz.2.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ed7def9 code=0x7fc00000 [ 219.725243][ T29] audit: type=1326 audit(1726090605.210:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10280 comm="syz.2.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f070ed7def9 code=0x7fc00000 [ 219.793572][ T29] audit: type=1326 audit(1726090605.210:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10280 comm="syz.2.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ed7def9 code=0x7fc00000 [ 219.878190][ T29] audit: type=1326 audit(1726090605.210:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10280 comm="syz.2.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ed7def9 code=0x7fc00000 [ 219.976665][ T29] audit: type=1326 audit(1726090605.210:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10280 comm="syz.2.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ed7def9 code=0x7fc00000 [ 220.034575][ T29] audit: type=1326 audit(1726090605.210:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10280 comm="syz.2.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ed7def9 code=0x7fc00000 [ 220.093836][ T5223] aquacomputer_d5next 0003:0C70:F014.0027: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.4-1/input0 [ 220.103902][ T29] audit: type=1326 audit(1726090605.210:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10280 comm="syz.2.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ed7def9 code=0x7fc00000 [ 220.173584][ T29] audit: type=1326 audit(1726090605.210:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10280 comm="syz.2.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ed7def9 code=0x7fc00000 [ 220.219069][ T29] audit: type=1326 audit(1726090605.210:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10280 comm="syz.2.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070ed7def9 code=0x7fc00000 [ 220.335565][ T8] usb 5-1: USB disconnect, device number 19 [ 220.768452][T10337] ipvlan2: entered promiscuous mode [ 220.982815][T10339] program syz.2.2261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.325227][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 221.376258][T10360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2270'. [ 221.406613][T10360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2270'. [ 221.526086][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 221.548840][ T8] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 221.548900][T10371] netlink: 'syz.0.2275': attribute type 1 has an invalid length. [ 221.563256][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.582783][ T8] usb 3-1: config 0 descriptor?? [ 221.600578][ T8] gspca_main: sunplus-2.14.0 probing 041e:400b [ 221.604841][T10371] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.2275'. [ 221.627287][T10371] netlink: 'syz.0.2275': attribute type 1 has an invalid length. [ 221.636667][T10371] netlink: 'syz.0.2275': attribute type 2 has an invalid length. [ 221.932954][T10388] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2282'. [ 221.949744][T10388] netlink: 'syz.3.2282': attribute type 1 has an invalid length. [ 222.105709][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 222.276660][T10399] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 222.288148][T10399] cramfs: wrong magic [ 222.329970][ T9] usb 1-1: New USB device found, idVendor=07ca, idProduct=b808, bcdDevice=db.2f [ 222.360677][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.389867][ T9] usb 1-1: Product: syz [ 222.396194][ T9] usb 1-1: Manufacturer: syz [ 222.400844][ T9] usb 1-1: SerialNumber: syz [ 222.419786][ T8] gspca_sunplus: reg_r err -71 [ 222.429248][ T9] usb 1-1: config 0 descriptor?? [ 222.434421][ T8] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 222.457147][ T8] usb 3-1: USB disconnect, device number 14 [ 222.863597][ T9] dvb-usb: found a 'AVerMedia AVerTV DVB-T Volar' in warm state. [ 222.887306][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 222.908168][ T9] dvbdev: DVB: registering new adapter (AVerMedia AVerTV DVB-T Volar) [ 222.926433][ T9] usb 1-1: media controller created [ 222.944070][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.054249][ T9] DVB: Unable to find symbol dib7000p_attach() [ 223.074045][ T9] dvb-usb: no frontend was attached by 'AVerMedia AVerTV DVB-T Volar' [ 223.204581][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 223.210707][ T9] Registered IR keymap rc-empty [ 223.229299][ T9] dvb-usb: could not initialize remote control. [ 223.240061][ T9] dvb-usb: AVerMedia AVerTV DVB-T Volar successfully initialized and connected. [ 223.274875][ T9] usb 1-1: USB disconnect, device number 19 [ 223.316137][ T9] dvb-usb: AVerMedia AVerTV DVB-T Volar successfully deinitialized and disconnected. [ 223.398702][T10441] netlink: 'syz.2.2304': attribute type 2 has an invalid length. [ 223.415288][T10441] netlink: 'syz.2.2304': attribute type 1 has an invalid length. [ 223.860844][T10458] vlan2: entered allmulticast mode [ 223.881954][T10458] bridge0: port 3(vlan2) entered blocking state [ 223.889000][T10458] bridge0: port 3(vlan2) entered disabled state [ 223.934887][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2313'. [ 224.111814][ T29] audit: type=1326 audit(1726090609.660:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10477 comm="syz.2.2320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f070ed7def9 code=0x0 [ 224.732831][T10496] tap0: tun_chr_ioctl cmd 1074025672 [ 224.742007][T10496] tap0: ignored: set checksum disabled [ 225.040617][T10508] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.047922][T10508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.131700][ T29] audit: type=1326 audit(1726090610.680:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10513 comm="syz.4.2336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd37ed7def9 code=0x0 [ 225.373647][T10525] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 225.445086][ T46] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 225.634820][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 225.652817][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.681580][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.704650][ T46] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 225.723540][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.745850][ T46] usb 1-1: config 0 descriptor?? [ 225.963804][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 225.985254][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 226.005973][ T46] usb 1-1: USB disconnect, device number 20 [ 226.273367][T10564] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2357'. [ 226.369159][T10568] netlink: 'syz.4.2359': attribute type 2 has an invalid length. [ 226.574592][ T46] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 226.796738][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.809323][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.828456][ T46] usb 1-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice= 0.00 [ 226.848825][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.870337][ T46] usb 1-1: config 0 descriptor?? [ 226.883571][ T46] HFC-S_USB 1-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 227.087991][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 227.102626][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 227.113288][ T46] usb 1-1: USB disconnect, device number 21 [ 227.222792][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2380'. [ 227.768649][T10633] netlink: 'syz.3.2389': attribute type 1 has an invalid length. [ 227.776735][T10633] netlink: 9236 bytes leftover after parsing attributes in process `syz.3.2389'. [ 227.794890][T10633] netlink: 'syz.3.2389': attribute type 1 has an invalid length. [ 227.823079][T10633] netlink: 'syz.3.2389': attribute type 2 has an invalid length. [ 228.025294][ T5275] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 228.121996][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2401'. [ 228.216562][ T5275] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 228.244622][ T5275] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 228.256443][ T5275] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 228.272818][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.297002][ T5275] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 228.507636][ T5275] gspca_sn9c2028: read1 error -32 [ 228.518786][ T5275] gspca_sn9c2028: read1 error -32 [ 228.523497][T10677] Invalid ELF section header overflow [ 228.610373][T10683] net_ratelimit: 2060 callbacks suppressed [ 228.610392][T10683] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 228.766032][ T46] usb 1-1: USB disconnect, device number 22 [ 228.801867][T10693] netlink: 'syz.4.2417': attribute type 46 has an invalid length. [ 228.809972][T10693] netlink: 212868 bytes leftover after parsing attributes in process `syz.4.2417'. [ 228.815460][ T5275] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 229.009456][ T5275] usb 3-1: Using ep0 maxpacket: 8 [ 229.026038][ T5275] usb 3-1: config 0 interface 0 has no altsetting 0 [ 229.040997][ T5275] usb 3-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 229.063290][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.077083][ T5275] usb 3-1: Product: syz [ 229.097481][ T5275] usb 3-1: Manufacturer: syz [ 229.109377][ T5275] usb 3-1: SerialNumber: syz [ 229.121902][ T5275] usb 3-1: config 0 descriptor?? [ 229.135740][ T5275] usb 3-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 229.317203][ T5275] usb 3-1: reset high-speed USB device number 15 using dummy_hcd [ 229.434820][ T940] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 229.632551][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.658034][ T940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.685873][ T940] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 229.710741][ T940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.734880][ T940] usb 5-1: config 0 descriptor?? [ 230.037078][ T5275] usb 3-1: device descriptor read/64, error -71 [ 230.160276][ T940] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 230.183864][ T940] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 230.354578][ T5275] usb 3-1: reset high-speed USB device number 15 using dummy_hcd [ 230.355691][ T940] cp2112 0003:10C4:EA90.0028: Part Number: 0x42 Device Version: 0x9C [ 230.534858][T10747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2441'. [ 230.556398][ T940] cp2112 0003:10C4:EA90.0028: error requesting SMBus config [ 230.579492][T10747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2441'. [ 230.583659][ T940] cp2112 0003:10C4:EA90.0028: probe with driver cp2112 failed with error -71 [ 230.592237][T10747] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2441'. [ 230.610869][ T940] usb 5-1: USB disconnect, device number 20 [ 230.746552][T10755] netlink: 'syz.3.2445': attribute type 16 has an invalid length. [ 230.760414][T10755] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2445'. [ 230.789414][T10755] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.001999][ T5275] usb 3-1: [UEAGLE-ATM] interface 1 not found [ 231.040794][ T5275] ueagle-atm 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 231.049877][T10770] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 231.071012][ T5275] usb 3-1: USB disconnect, device number 15 [ 231.081424][T10770] overlayfs: conflicting lowerdir path [ 231.115541][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2453'. [ 231.222193][T10779] netlink: 'syz.0.2457': attribute type 9 has an invalid length. [ 231.409037][T10791] tipc: Started in network mode [ 231.423117][T10791] tipc: Node identity id-name-, cluster identity 4711 [ 231.433152][T10791] tipc: Enabling of bearer rejected, failed to enable media [ 231.626257][T10805] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 231.633784][T10805] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 231.655225][T10805] Error parsing options; rc = [-22] [ 231.776220][ T5275] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 231.868851][T10818] netlink: 'syz.2.2474': attribute type 1 has an invalid length. [ 231.878356][T10818] netlink: 9320 bytes leftover after parsing attributes in process `syz.2.2474'. [ 231.891583][T10818] netlink: 'syz.2.2474': attribute type 1 has an invalid length. [ 231.900031][T10818] netlink: 'syz.2.2474': attribute type 2 has an invalid length. [ 231.974970][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 231.988131][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 231.999278][ T5275] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 232.043978][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB [ 232.076528][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 232.104609][ T5275] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 232.145525][ T5275] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 232.161481][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 232.171568][ T5275] usb 2-1: Product: syz [ 232.176172][ T5275] usb 2-1: Manufacturer: syz [ 232.180653][ T940] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 232.180763][ T5275] usb 2-1: SerialNumber: syz [ 232.185378][ T5275] usb 2-1: config 0 descriptor?? [ 232.209148][ T940] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz0 [ 232.223814][ T5275] usb 2-1: NFC: intf ffff88802908e000 id ffffffff8f0bfbe0 [ 232.327723][T10839] netlink: 210620 bytes leftover after parsing attributes in process `syz.3.2484'. [ 232.337372][T10839] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16) [ 232.343490][T10838] bridge_slave_0: default FDB implementation only supports local addresses [ 232.361599][T10841] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2485'. [ 232.454576][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 232.492959][ T5275] usb 2-1: USB disconnect, device number 14 [ 232.649451][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 232.657415][ T8] usb 3-1: config 0 has no interfaces? [ 232.675461][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 232.694533][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.714976][ T8] usb 3-1: Product: syz [ 232.719293][ T8] usb 3-1: Manufacturer: syz [ 232.723910][ T8] usb 3-1: SerialNumber: syz [ 232.745970][ T8] usb 3-1: config 0 descriptor?? [ 232.831998][ T76] Bluetooth: hci2: Frame reassembly failed (-84) [ 232.971076][ T8] usb 3-1: USB disconnect, device number 16 [ 233.247867][T10882] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2504'. [ 233.342148][T10885] kernel profiling enabled (shift: 0) [ 234.456429][ T5275] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 234.549075][T10885] syz.0.2505: vmalloc error: size 729808896, failed to allocated page array size 1425408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 234.601959][T10885] CPU: 1 UID: 0 PID: 10885 Comm: syz.0.2505 Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 234.612792][T10885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.622865][T10885] Call Trace: [ 234.626154][T10885] [ 234.629097][T10885] dump_stack_lvl+0x241/0x360 [ 234.633806][T10885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.639022][T10885] ? __pfx__printk+0x10/0x10 [ 234.643668][T10885] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 234.650102][T10885] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 234.656630][T10885] warn_alloc+0x278/0x410 [ 234.660982][T10885] ? __pfx_warn_alloc+0x10/0x10 [ 234.665940][T10885] ? profile_init+0xb1/0x100 [ 234.670548][T10885] ? __get_vm_area_node+0x23d/0x270 [ 234.675770][T10885] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 234.681679][T10885] ? _printk+0xd5/0x120 [ 234.685880][T10885] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 234.692222][T10885] ? rcu_is_watching+0x15/0xb0 [ 234.697009][T10885] ? rcu_is_watching+0x15/0xb0 [ 234.702222][T10885] ? profile_init+0xb1/0x100 [ 234.706827][T10885] ? __pfx_sysfs_kf_write+0x10/0x10 [ 234.712061][T10885] vzalloc_noprof+0x79/0x90 [ 234.716603][T10885] ? profile_init+0xb1/0x100 [ 234.721221][T10885] profile_init+0xb1/0x100 [ 234.725667][T10885] profiling_store+0x6c/0xf0 [ 234.730276][T10885] kernfs_fop_write_iter+0x3a1/0x500 [ 234.735608][T10885] vfs_write+0xa72/0xc90 [ 234.739902][T10885] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 234.745733][T10885] ? __pfx_vfs_write+0x10/0x10 [ 234.750522][T10885] ? do_futex+0x33b/0x560 [ 234.754899][T10885] ksys_write+0x1a0/0x2c0 [ 234.759262][T10885] ? __pfx_ksys_write+0x10/0x10 [ 234.764134][T10885] ? do_syscall_64+0x100/0x230 [ 234.768916][T10885] ? do_syscall_64+0xb6/0x230 [ 234.773620][T10885] do_syscall_64+0xf3/0x230 [ 234.778152][T10885] ? clear_bhb_loop+0x35/0x90 [ 234.782855][T10885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.788782][T10885] RIP: 0033:0x7f040cd7def9 [ 234.793212][T10885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.812838][T10885] RSP: 002b:00007f040dc3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 234.821276][T10885] RAX: ffffffffffffffda RBX: 00007f040cf35f80 RCX: 00007f040cd7def9 [ 234.829262][T10885] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000003 [ 234.837250][T10885] RBP: 00007f040cdf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 234.845240][T10885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.853227][T10885] R13: 0000000000000000 R14: 00007f040cf35f80 R15: 00007ffdc2ff4598 [ 234.861242][T10885] [ 234.874633][ T5225] Bluetooth: hci2: command 0x1003 tx timeout [ 234.887786][T10885] Mem-Info: [ 234.890937][T10885] active_anon:270 inactive_anon:4770 isolated_anon:0 [ 234.890937][T10885] active_file:5038 inactive_file:46125 isolated_file:0 [ 234.890937][T10885] unevictable:1507 dirty:195 writeback:0 [ 234.890937][T10885] slab_reclaimable:9517 slab_unreclaimable:103528 [ 234.890937][T10885] mapped:22694 shmem:3139 pagetables:842 [ 234.890937][T10885] sec_pagetables:0 bounce:0 [ 234.890937][T10885] kernel_misc_reclaimable:0 [ 234.890937][T10885] free:1303899 free_pcp:15842 free_cma:0 [ 234.895339][ T4615] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 234.936321][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.951184][T10885] Node 0 active_anon:1080kB inactive_anon:19780kB active_file:20020kB inactive_file:184500kB unevictable:4492kB isolated(anon):0kB isolated(file):0kB mapped:91324kB dirty:876kB writeback:0kB shmem:11520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10320kB pagetables:3368kB sec_pagetables:0kB all_unreclaimable? no [ 234.973794][ T5275] usb 2-1: New USB device found, idVendor=0b05, idProduct=173f, bcdDevice=9d.6b [ 234.983741][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.002785][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.011061][ T5275] usb 2-1: Product: syz [ 235.015314][ T5275] usb 2-1: Manufacturer: syz [ 235.020008][ T5275] usb 2-1: SerialNumber: syz [ 235.026080][T10885] Node 1 active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 235.059409][ T5275] usb 2-1: config 0 descriptor?? [ 235.064784][T10885] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.093959][T10885] lowmem_reserve[]: 0 2469 2470 0 0 [ 235.099410][T10885] Node 0 DMA32 free:1272868kB boost:0kB min:34244kB low:42804kB high:51364kB reserved_highatomic:0KB active_anon:1076kB inactive_anon:20972kB active_file:19736kB inactive_file:183736kB unevictable:4496kB writepending:916kB present:3129332kB managed:2557024kB mlocked:2988kB bounce:0kB free_pcp:35416kB local_pcp:436kB free_cma:0kB [ 235.136262][T10885] lowmem_reserve[]: 0 0 1 0 0 [ 235.141616][T10885] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:980kB inactive_file:64kB unevictable:0kB writepending:4kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 235.201560][T10885] lowmem_reserve[]: 0 0 0 0 0 [ 235.221128][T10885] Node 1 Normal free:3942140kB boost:0kB min:55644kB low:69552kB high:83460kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:132kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:11792kB local_pcp:11792kB free_cma:0kB [ 235.289501][T10885] lowmem_reserve[]: 0 0 0 0 0 [ 235.294326][T10885] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 235.322430][T10885] Node 0 DMA32: 1*4kB (U) 2*8kB (UE) 15*16kB (ME) 139*32kB (UME) 1*64kB (M) 1*128kB (E) 3*256kB (UE) 2*512kB (U) 5*1024kB (UM) 7*2048kB (UME) 304*4096kB (UM) = 1271332kB [ 235.375215][T10885] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 235.405196][T10885] Node 1 Normal: 1*4kB (M) 7*8kB (U) 10*16kB (UM) 7*32kB (UM) 7*64kB (UM) 3*128kB (UM) 2*256kB (U) 2*512kB (U) 5*1024kB (UM) 3*2048kB (U) 959*4096kB (M) = 3942140kB [ 235.444734][T10885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.454361][T10885] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 235.494662][T10885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 235.513922][ T5275] dvb-usb: found a 'ASUS My Cinema U3100 Mini DVBT Tuner' in warm state. [ 235.522769][T10885] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 235.538209][ T5275] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 235.554787][T10885] 53564 total pagecache pages [ 235.570377][T10885] 0 pages in swap cache [ 235.578690][ T5275] dvbdev: DVB: registering new adapter (ASUS My Cinema U3100 Mini DVBT Tuner) [ 235.594939][T10885] Free swap = 124348kB [ 235.599221][T10885] Total swap = 124996kB [ 235.605072][ T5275] usb 2-1: media controller created [ 235.613201][ T5275] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.621834][T10885] 2097051 pages RAM [ 235.628811][T10885] 0 pages HighMem/MovableOnly [ 235.633513][T10885] 426393 pages reserved [ 235.638268][T10885] 0 pages cma reserved [ 235.784135][ T5275] DVB: Unable to find symbol dib7000p_attach() [ 235.801588][ T5275] dvb-usb: no frontend was attached by 'ASUS My Cinema U3100 Mini DVBT Tuner' [ 235.924933][ T5275] rc_core: IR keymap rc-dib0700-rc5 not found [ 235.931097][ T5275] Registered IR keymap rc-empty [ 235.964969][ T5275] dvb-usb: could not initialize remote control. [ 235.990512][ T5275] dvb-usb: ASUS My Cinema U3100 Mini DVBT Tuner successfully initialized and connected. [ 236.357003][ T5275] usb 2-1: USB disconnect, device number 15 [ 236.381156][ T5275] dvb-usb: ASUS My Cinema U3100 Mini DVBT Tuner successfully deinitialized and disconnected. [ 236.869292][T10979] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 237.166238][T10989] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2553'. [ 237.198928][T10989] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 237.916269][ T5275] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 238.131576][ T5275] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 238.159413][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.181723][ T5275] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 238.224804][ T5275] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 238.265592][ T5275] usb 3-1: Manufacturer: syz [ 238.273471][ T5275] usb 3-1: config 0 descriptor?? [ 238.444800][ T5275] rc_core: IR keymap rc-hauppauge not found [ 238.450738][ T5275] Registered IR keymap rc-empty [ 238.468445][ T5275] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 238.481165][ T5275] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41 [ 238.509851][T11009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.535581][T11051] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2581'. [ 238.555130][T11009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.610684][ T5275] usb 3-1: USB disconnect, device number 17 [ 238.814042][ T29] audit: type=1326 audit(1726090624.360:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11063 comm="syz.1.2588" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x0 [ 239.074578][ T940] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 239.239171][T11076] netlink: 'syz.2.2593': attribute type 12 has an invalid length. [ 239.248263][T11076] netlink: 'syz.2.2593': attribute type 29 has an invalid length. [ 239.257036][T11076] netlink: 'syz.2.2593': attribute type 2 has an invalid length. [ 239.273808][ T940] usb 1-1: Using ep0 maxpacket: 8 [ 239.287260][T11076] netlink: 'syz.2.2593': attribute type 2 has an invalid length. [ 239.297776][T11076] netlink: 'syz.2.2593': attribute type 1 has an invalid length. [ 239.306541][T11076] netlink: 'syz.2.2593': attribute type 37 has an invalid length. [ 239.328315][T11076] netlink: 'syz.2.2593': attribute type 2 has an invalid length. [ 239.337721][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.338181][ T940] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 239.359632][ T940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.376804][ T940] usb 1-1: Product: syz [ 239.384425][ T940] usb 1-1: Manufacturer: syz [ 239.393652][ T940] usb 1-1: SerialNumber: syz [ 239.425795][ T940] usb 1-1: config 0 descriptor?? [ 239.662633][ T940] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 239.931102][T11092] tun0: tun_chr_ioctl cmd 1074025675 [ 239.957544][T11092] tun0: persist disabled [ 240.127221][T11100] syz_tun: entered promiscuous mode [ 240.146060][T11100] syz_tun: left promiscuous mode [ 240.299139][ T940] usb write operation failed. (-71) [ 240.341129][ T940] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 240.381427][ T940] dvbdev: DVB: registering new adapter (Terratec H7) [ 240.406892][ T940] usb 1-1: media controller created [ 240.422815][ T940] usb read operation failed. (-71) [ 240.438458][ T940] usb write operation failed. (-71) [ 240.460413][ T940] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 240.527759][ T940] usb 1-1: USB disconnect, device number 23 [ 240.804958][ T5275] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 240.998201][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.018703][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.031289][ T5223] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 241.043995][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.066367][ T5275] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.80 [ 241.082093][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.107869][ T5275] usb 2-1: config 0 descriptor?? [ 241.249636][ T5223] usb 3-1: config 0 has an invalid interface number: 104 but max is 0 [ 241.265999][ T5223] usb 3-1: config 0 has no interface number 0 [ 241.280968][ T5223] usb 3-1: config 0 interface 104 has no altsetting 0 [ 241.291768][ T5223] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 241.302723][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.312440][ T5223] usb 3-1: Product: syz [ 241.318008][ T5223] usb 3-1: Manufacturer: syz [ 241.322611][ T5223] usb 3-1: SerialNumber: syz [ 241.334573][ T5223] usb 3-1: config 0 descriptor?? [ 241.341720][ T5223] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 241.524577][ T940] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 241.537110][ T5275] acrux 0003:1A34:0802.002A: item fetching failed at offset 3/5 [ 241.547799][ T5275] acrux 0003:1A34:0802.002A: parse failed [ 241.553782][ T5275] acrux 0003:1A34:0802.002A: probe with driver acrux failed with error -22 [ 241.562816][ T5223] gspca_vc032x: reg_r err -71 [ 241.564714][ T5271] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 241.570857][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.580781][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.586331][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.591697][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.597328][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.602620][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.608057][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.614400][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.619960][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.627105][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.632430][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.637784][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.643069][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.648532][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.653814][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.661550][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.666944][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.672241][ T5223] gspca_vc032x: I2c Bus Busy Wait 00 [ 241.677841][ T5223] gspca_vc032x: Unknown sensor... [ 241.682942][ T5223] vc032x 3-1:0.104: probe with driver vc032x failed with error -22 [ 241.693329][ T5223] usb 3-1: USB disconnect, device number 18 [ 241.710530][ T940] usb 4-1: Using ep0 maxpacket: 8 [ 241.719025][ T940] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 241.728046][ T940] usb 4-1: config 0 has no interface number 0 [ 241.738149][ T940] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 241.750603][ T9] usb 2-1: USB disconnect, device number 16 [ 241.756773][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.787604][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.799597][ T940] usb 4-1: config 0 descriptor?? [ 241.823136][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.841268][ T5271] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.854504][ T5271] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 241.863612][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.882936][ T5271] usb 1-1: config 0 descriptor?? [ 241.945322][ T940] viperboard 4-1:0.143: version 0.00 found at bus 004 address 023 [ 241.969712][ T940] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 241.979185][ T940] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 242.040714][ T5223] usb 4-1: USB disconnect, device number 23 [ 242.325499][ T5271] hid-alps 0003:044E:120B.002B: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.0-1/input0 [ 242.529055][ T5223] usb 1-1: USB disconnect, device number 24 [ 242.657724][T11179] sctp: [Deprecated]: syz.4.2640 (pid 11179) Use of int in maxseg socket option. [ 242.657724][T11179] Use struct sctp_assoc_value instead [ 243.391362][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2660'. [ 243.485603][ T5275] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 243.674593][ T5275] usb 4-1: Using ep0 maxpacket: 32 [ 243.687580][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 243.699598][ T46] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 243.718112][ T5275] usb 4-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 243.728152][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.739672][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2671'. [ 243.748198][ T5275] usb 4-1: Product: syz [ 243.758341][ T5275] usb 4-1: Manufacturer: syz [ 243.768478][ T5275] usb 4-1: SerialNumber: syz [ 243.783186][ T5275] usb 4-1: config 0 descriptor?? [ 243.896792][ T46] usb 3-1: config 0 has no interfaces? [ 243.905345][ T46] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.921740][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.936269][ T46] usb 3-1: config 0 descriptor?? [ 244.012488][ T5275] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 244.035229][ T5275] usb 4-1: USB disconnect, device number 24 [ 244.152831][ T1850] usb 3-1: USB disconnect, device number 19 [ 244.314741][ T46] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 244.459582][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2676'. [ 244.483646][T11253] netlink: 'syz.4.2677': attribute type 1 has an invalid length. [ 244.491801][T11253] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.2677'. [ 244.504318][T11253] netlink: 'syz.4.2677': attribute type 1 has an invalid length. [ 244.525814][T11253] netlink: 'syz.4.2677': attribute type 2 has an invalid length. [ 244.525871][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 244.552493][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 244.572146][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.592730][ T46] usb 1-1: config 0 descriptor?? [ 244.652982][T11259] Process accounting resumed [ 244.658334][T11259] kernel write not supported for file /asound/timers (pid: 11259 comm: syz.1.2680) [ 245.426664][ T46] video4linux radio32: keene_cmd_main failed (-71) [ 245.440866][ T46] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 245.450820][ T46] usb 1-1: USB disconnect, device number 25 [ 245.544705][ T5271] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 245.724147][T11293] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2696'. [ 245.734438][T11293] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2696'. [ 245.735573][ T1850] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 245.753318][T11293] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2696'. [ 245.761942][ T5271] usb 4-1: Using ep0 maxpacket: 16 [ 245.771122][ T5271] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 245.779330][ T5223] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 245.794519][ T5271] usb 4-1: config 0 has no interface number 0 [ 245.800751][ T5271] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 245.813036][ T5271] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 245.826067][ T5271] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 245.835640][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.843658][ T5271] usb 4-1: Product: syz [ 245.848448][ T5271] usb 4-1: Manufacturer: syz [ 245.853071][ T5271] usb 4-1: SerialNumber: syz [ 245.860512][ T5271] usb 4-1: config 0 descriptor?? [ 245.865160][T11295] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2697'. [ 245.866412][T11279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.876284][T11295] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2697'. [ 245.892998][T11279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 245.949280][ T1850] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 245.964620][ T1850] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.975477][ T5223] usb 5-1: Using ep0 maxpacket: 8 [ 245.981322][ T1850] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 246.009062][ T1850] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.022275][ T5223] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 246.035075][ T1850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.043112][ T1850] usb 3-1: Product: syz [ 246.052259][ T5223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.074573][ T5223] usb 5-1: Product: syz [ 246.078778][ T5223] usb 5-1: Manufacturer: syz [ 246.083468][ T5223] usb 5-1: SerialNumber: syz [ 246.088247][ T1850] usb 3-1: Manufacturer: syz [ 246.092880][ T1850] usb 3-1: SerialNumber: syz [ 246.120177][ T5223] usb 5-1: config 0 descriptor?? [ 246.151427][T11279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 246.160639][T11279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 246.341690][ T5223] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 246.744429][ T5223] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 246.767098][ T1850] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 246.788210][ T5271] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 246.789728][ T1850] usb 3-1: 2:1 : sample bitwidth 64 in over sample bytes 2 [ 246.802797][ T5271] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 246.809284][ T5223] usb 5-1: USB disconnect, device number 21 [ 246.823773][ T5271] asix 4-1:0.251: probe with driver asix failed with error -71 [ 246.835207][ T1850] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 246.841395][ T1850] usb 3-1: 2:1 : invalid channels 0 [ 246.849670][ T5271] usb 4-1: USB disconnect, device number 25 [ 246.984817][ T1850] usb 3-1: USB disconnect, device number 20 [ 247.965131][ T5271] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 248.163580][ T5271] usb 4-1: Using ep0 maxpacket: 8 [ 248.173599][ T5271] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec [ 248.190756][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.191234][T11382] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 248.202947][ T5271] usb 4-1: config 0 descriptor?? [ 248.241150][ T5271] ttusb_dec_send_command: command bulk message failed: error -22 [ 248.265288][ T5271] ttusb-dec 4-1:0.0: probe with driver ttusb-dec failed with error -22 [ 248.522020][ T5271] usb 4-1: USB disconnect, device number 26 [ 248.620884][T11401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2747'. [ 248.705055][T11404] netlink: 'syz.2.2748': attribute type 1 has an invalid length. [ 248.724713][T11404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2748'. [ 248.799868][T11408] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2750'. [ 248.980582][T11416] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 249.488837][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.543212][T11443] netlink: 47 bytes leftover after parsing attributes in process `syz.4.2767'. [ 250.379422][ T5271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.526709][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.037046][T11499] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.2793'. [ 251.403319][T11524] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.417589][ T29] audit: type=1400 audit(1726090636.970:611): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=11525 comm="syz.4.2804" name="242" dev="tmpfs" ino=1241 [ 251.487243][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.497594][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.506462][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.518629][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.566836][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.679573][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2811'. [ 251.704138][T11539] block nbd2: not configured, cannot reconfigure [ 251.984727][ T46] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 252.005210][T11552] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.2818'. [ 252.146430][ T940] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 252.179395][ T46] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 252.202429][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.225801][T11560] xt_bpf: check failed: parse error [ 252.242392][ T46] usb 5-1: config 0 descriptor?? [ 252.249847][ T46] cp210x 5-1:0.0: cp210x converter detected [ 252.307628][T11564] netlink: 'syz.2.2824': attribute type 9 has an invalid length. [ 252.315910][T11564] netlink: 91148 bytes leftover after parsing attributes in process `syz.2.2824'. [ 252.365103][ T940] usb 1-1: Using ep0 maxpacket: 16 [ 252.378600][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.399917][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.416816][ T940] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 252.429880][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.446559][ T940] usb 1-1: config 0 descriptor?? [ 252.504675][ T5271] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 252.663107][ T46] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 252.686003][ T46] usb 5-1: cp210x converter now attached to ttyUSB0 [ 252.716067][ T5271] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 252.716098][ T5271] usb 2-1: config 0 has no interface number 0 [ 252.716165][ T5271] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 252.716190][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.718927][ T5271] usb 2-1: config 0 descriptor?? [ 252.721184][ T5271] ums-realtek 2-1:0.6: USB Mass Storage device detected [ 252.871400][ T940] corsair 0003:1B1C:1B02.002C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 252.908733][ T5271] usb 5-1: USB disconnect, device number 22 [ 252.930138][ T5271] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.971009][ T5271] cp210x 5-1:0.0: device disconnected [ 252.974074][ T5223] usb 2-1: USB disconnect, device number 17 [ 253.133972][T11593] pim6reg: entered allmulticast mode [ 253.273896][ T5271] usb 1-1: USB disconnect, device number 26 [ 253.374908][T11605] netlink: 'syz.3.2843': attribute type 12 has an invalid length. [ 253.645284][ T5223] net_ratelimit: 2 callbacks suppressed [ 253.645304][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.664631][T11617] netlink: 'syz.3.2849': attribute type 1 has an invalid length. [ 253.672402][T11617] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.2849'. [ 253.700290][T11623] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 253.715252][T11617] netlink: 'syz.3.2849': attribute type 1 has an invalid length. [ 254.261706][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2866'. [ 254.525983][ T5271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.681742][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2875'. [ 254.691216][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.697689][T11673] netlink: 'syz.1.2875': attribute type 1 has an invalid length. [ 254.727612][T11673] netlink: 'syz.1.2875': attribute type 2 has an invalid length. [ 254.741930][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2875'. [ 255.098873][T11702] Bluetooth: MGMT ver 1.23 [ 255.264893][ T5223] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 255.491409][ T5223] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 255.504645][ T5223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.513159][ T5223] usb 5-1: Product: syz [ 255.552678][ T5223] usb 5-1: Manufacturer: syz [ 255.559491][ T5223] usb 5-1: SerialNumber: syz [ 255.566966][ T5223] usb 5-1: config 0 descriptor?? [ 255.726392][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.774629][ T940] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 255.864777][ T46] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 255.967404][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.973812][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.981185][ T940] usb 3-1: Using ep0 maxpacket: 8 [ 256.000092][ T5223] usb 5-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 256.009284][ T940] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 256.021027][ T940] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 256.032791][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 256.044395][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 256.059046][ T940] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 256.059295][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 256.083233][ T940] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 256.102682][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.103235][ T940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.121113][ T46] usb 4-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=ab.0b [ 256.121171][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.123785][ T46] usb 4-1: config 0 descriptor?? [ 256.160952][ T940] usb 3-1: Product: syz [ 256.171066][ T940] usb 3-1: Manufacturer: syz [ 256.176330][ T46] r8712u: register rtl8712_netdev_ops to netdev_ops [ 256.181048][ T940] usb 3-1: SerialNumber: syz [ 256.184175][ T46] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 256.199175][ T940] usb 3-1: config 0 descriptor?? [ 256.209431][ T940] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input45 [ 256.215075][ T5223] usb 5-1: failed to fetch extended address, random address set [ 256.267837][ T5223] usb 5-1: USB disconnect, device number 23 [ 256.455161][ T5275] usb 3-1: USB disconnect, device number 21 [ 256.465205][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 256.585378][ T46] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 256.592056][ T46] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 256.600074][ T46] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 256.656958][ T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 256.673252][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.683644][ T9] usb 2-1: config 0 descriptor?? [ 256.692654][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 256.767658][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.887492][T11756] input: syz1 as /devices/virtual/input/input46 [ 256.911741][ T5271] usb 4-1: USB disconnect, device number 27 [ 256.916882][ T29] audit: type=1326 audit(1726090642.460:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11757 comm="syz.4.2912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd37ed7def9 code=0x0 [ 257.121747][ T9] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 257.502960][T11784] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.532777][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 257.554592][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 257.560622][ T9] cpia1 2-1:0.0: unexpected systemstate: 00 [ 257.574873][ T940] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.591698][ T9] usb 2-1: USB disconnect, device number 18 [ 257.656054][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2928'. [ 257.737615][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2930'. [ 257.798337][T11794] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2930'. [ 257.827624][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.846534][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.066672][ T5223] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 259.264564][ T5223] usb 3-1: Using ep0 maxpacket: 16 [ 259.277450][ T5223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.292774][ T5223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.301238][T11884] netlink: 'syz.3.2971': attribute type 15 has an invalid length. [ 259.303503][ T5223] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 259.339579][ T5223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.368146][ T5223] usb 3-1: config 0 descriptor?? [ 259.659114][T11901] input: syz0 as /devices/virtual/input/input47 [ 259.823182][ T5223] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.002D/input/input48 [ 259.885665][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.923287][ T5223] creative-sb0540 0003:041E:3100.002D: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 259.932845][T11913] input: syz0 as /devices/virtual/input/input49 [ 259.953758][ T29] audit: type=1326 audit(1726090645.500:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11914 comm="syz.1.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 260.000051][ T29] audit: type=1326 audit(1726090645.500:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11914 comm="syz.1.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 260.022887][ T29] audit: type=1326 audit(1726090645.530:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11914 comm="syz.1.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 260.027065][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 260.045788][ T29] audit: type=1326 audit(1726090645.530:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11914 comm="syz.1.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 260.129919][ T29] audit: type=1326 audit(1726090645.530:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11914 comm="syz.1.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 260.178741][ T29] audit: type=1326 audit(1726090645.530:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11914 comm="syz.1.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 260.207891][ T5223] usb 3-1: USB disconnect, device number 22 [ 260.226242][ T29] audit: type=1326 audit(1726090645.530:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11914 comm="syz.1.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 260.275832][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 260.286422][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 260.301561][ T29] audit: type=1326 audit(1726090645.530:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11914 comm="syz.1.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 260.324005][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.342788][ T9] usb 1-1: Product: syz [ 260.353396][ T9] usb 1-1: Manufacturer: syz [ 260.364817][ T9] usb 1-1: SerialNumber: syz [ 260.371916][ T29] audit: type=1326 audit(1726090645.530:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11914 comm="syz.1.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 260.397144][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 260.403488][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 260.587607][ T5271] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 260.615556][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.640709][ T9] r8152-cfgselector 1-1: Needed 2 retries to read version [ 260.649721][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 260.656656][ T9] r8152-cfgselector 1-1: bad CDC descriptors [ 260.720195][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3000'. [ 260.787468][ T5271] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 260.818192][ T5271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 260.836371][ T5271] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 260.859786][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 260.878310][ T5271] usb 2-1: SerialNumber: syz [ 260.925367][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.980338][ T5275] r8152-cfgselector 1-1: USB disconnect, device number 27 [ 261.085491][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.115342][ T5271] usb 2-1: 0:2 : does not exist [ 261.144344][ T5271] usb 2-1: USB disconnect, device number 19 [ 261.996717][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.201402][T11998] openvswitch: netlink: IP tunnel dst address not specified [ 262.446389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.585315][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 262.585333][ T29] audit: type=1804 audit(1726090648.130:625): pid=12015 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3028" name="/" dev="pidfs" ino=12309 res=1 errno=0 [ 262.725447][ T5275] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 262.791269][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3035'. [ 262.832462][T12025] pim6reg: entered allmulticast mode [ 262.873917][T12025] pim6reg: left allmulticast mode [ 262.955742][ T46] kernel read not supported for file /rfkill (pid: 46 comm: kworker/1:1) [ 263.005269][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.020931][ T5275] usb 4-1: unable to get BOS descriptor or descriptor too short [ 263.030096][ T5275] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 263.044918][ T5275] usb 4-1: can't read configurations, error -71 [ 263.156742][T12036] vivid-002: disconnect [ 263.163350][T12035] vivid-002: reconnect [ 263.385186][ T5271] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 263.578946][ T5271] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 263.598052][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.613392][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.628251][ T5271] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 263.628959][T12056] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3051'. [ 263.662233][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.677619][ T5271] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 263.687181][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.698594][ T5271] usb 1-1: config 0 descriptor?? [ 263.966036][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.048182][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.128173][ T5271] nintendo 0003:057E:2009.002E: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.0-1/input0 [ 264.184581][ T46] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 264.206663][ T5271] nintendo 0003:057E:2009.002E: Failed to get joycon info; ret=-38 [ 264.215226][ T5271] nintendo 0003:057E:2009.002E: Failed to retrieve controller info; ret=-38 [ 264.224002][ T5271] nintendo 0003:057E:2009.002E: Failed to initialize controller; ret=-38 [ 264.250680][ T5271] nintendo 0003:057E:2009.002E: probe - fail = -38 [ 264.257739][ T5271] nintendo 0003:057E:2009.002E: probe with driver nintendo failed with error -38 [ 264.369619][ T5271] usb 1-1: USB disconnect, device number 28 [ 264.372257][ T46] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 264.392575][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.400852][ T46] usb 3-1: Product: syz [ 264.405896][ T46] usb 3-1: Manufacturer: syz [ 264.410585][ T46] usb 3-1: SerialNumber: syz [ 264.419563][ T46] usb 3-1: config 0 descriptor?? [ 264.493858][T12074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.602768][T12078] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3061'. [ 265.006128][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.062518][ T46] usb 3-1: Firmware version (0.0) predates our first public release. [ 265.081933][ T46] usb 3-1: Please update to version 0.2 or newer [ 265.092256][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.187489][ T46] usb 3-1: USB disconnect, device number 23 [ 266.128733][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.137515][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3094'. [ 266.177054][T12154] netlink: 203452 bytes leftover after parsing attributes in process `syz.2.3096'. [ 266.198615][T12154] netlink: 'syz.2.3096': attribute type 2 has an invalid length. [ 266.213918][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3096'. [ 266.608447][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3108'. [ 266.665285][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 266.693843][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.885558][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 266.894068][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.931727][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.959842][ T8] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 266.978683][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.993761][ T8] usb 4-1: config 0 descriptor?? [ 267.173161][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.221056][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 267.250989][ T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 267.301770][ T8] usb 4-1: USB disconnect, device number 30 [ 268.067894][T12242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3136'. [ 268.207970][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.428025][T12262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3144'. [ 268.450002][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3144'. [ 268.671857][T12269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.886217][T12276] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3150'. [ 268.929335][T12276] openvswitch: netlink: Multiple metadata blocks provided [ 268.949043][T12278] mmap: syz.2.3151 (12278) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 269.242455][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3155'. [ 269.251880][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.386617][T12294] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.554881][ T5271] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 269.664569][ T8] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 269.725202][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.738421][ T5271] usb 2-1: config 0 has no interfaces? [ 269.753367][ T5271] usb 2-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 269.776512][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.801118][ T5271] usb 2-1: config 0 descriptor?? [ 269.854537][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 269.866879][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.890073][T12321] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3172'. [ 269.899939][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.919590][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 269.944784][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.961872][ T8] usb 1-1: config 0 descriptor?? [ 270.045033][ T5271] usb 2-1: USB disconnect, device number 20 [ 270.214186][T12337] netlink: 'syz.3.3179': attribute type 1 has an invalid length. [ 270.234819][T12337] netlink: 'syz.3.3179': attribute type 1 has an invalid length. [ 270.303430][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.442111][ T8] input: HID 0458:5015 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5015.002F/input/input50 [ 270.557616][ T8] input: HID 0458:5015 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5015.002F/input/input51 [ 270.648090][ T8] input: HID 0458:5015 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5015.002F/input/input52 [ 270.685384][ T5271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.761597][ T8] kye 0003:0458:5015.002F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5015] on usb-dummy_hcd.0-1/input0 [ 270.806417][ T8] usb 1-1: USB disconnect, device number 29 [ 271.305134][ T5271] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 271.325352][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.457127][T12387] netlink: 'syz.4.3203': attribute type 6 has an invalid length. [ 271.545101][ T5271] usb 2-1: Using ep0 maxpacket: 8 [ 271.572067][ T5271] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 271.597363][ T5271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.609957][ T5271] usb 2-1: Product: syz [ 271.616050][ T5271] usb 2-1: Manufacturer: syz [ 271.622429][ T5271] usb 2-1: SerialNumber: syz [ 271.649204][T12395] __nla_validate_parse: 1 callbacks suppressed [ 271.649222][T12395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3207'. [ 271.872842][ T5271] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 272.063361][ T8] usb 2-1: USB disconnect, device number 21 [ 272.084084][ T8] usblp0: removed [ 272.365154][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.799650][ T5271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.848085][ T1850] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 273.047396][ T1850] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 273.077592][ T1850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.113090][ T1850] usb 4-1: config 0 descriptor?? [ 273.370043][T12455] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3234'. [ 273.406873][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.540533][ T1850] [drm:udl_init] *ERROR* Selecting channel failed [ 273.607548][ T1850] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 273.614282][ T1850] [drm] Initialized udl on minor 2 [ 273.641769][ T1850] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 273.679468][ T1850] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 273.719843][ T46] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 273.735351][ T1850] usb 4-1: USB disconnect, device number 31 [ 273.753073][ T46] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 273.951967][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3248'. [ 274.252537][T12494] team0: Port device macvlan2 added [ 274.445680][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.598056][T12508] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 275.114550][ T5270] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 275.294642][ T5270] usb 1-1: Using ep0 maxpacket: 32 [ 275.306019][ T5270] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 275.316330][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.324343][ T5270] usb 1-1: Product: syz [ 275.329917][ T5270] usb 1-1: Manufacturer: syz [ 275.344693][ T46] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 275.345109][ T5270] usb 1-1: SerialNumber: syz [ 275.392855][ T5270] usb 1-1: config 0 descriptor?? [ 275.485645][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.546601][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 275.565975][ T46] usb 5-1: not running at top speed; connect to a high speed hub [ 275.585037][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.600257][ T46] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.642300][ T46] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 275.666697][ T46] usb 5-1: config 1 interface 0 has no altsetting 0 [ 275.687341][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.705366][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.724939][ T46] usb 5-1: Product: syz [ 275.729143][ T46] usb 5-1: Manufacturer: syz [ 275.733744][ T46] usb 5-1: SerialNumber: syz [ 275.816211][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.992530][ T46] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 276.015657][ T46] usb 5-1: USB disconnect, device number 24 [ 276.031051][ T29] audit: type=1326 audit(1726090661.580:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f97def9 code=0x7ffc0000 [ 276.067465][ T5270] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 276.098057][ T5270] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 276.105003][ T29] audit: type=1326 audit(1726090661.580:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f97def9 code=0x7ffc0000 [ 276.105050][ T29] audit: type=1326 audit(1726090661.630:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f345f97def9 code=0x7ffc0000 [ 276.176374][ T5270] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 276.193510][ T29] audit: type=1326 audit(1726090661.630:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f97def9 code=0x7ffc0000 [ 276.236086][ T29] audit: type=1326 audit(1726090661.630:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f97def9 code=0x7ffc0000 [ 276.279233][ T29] audit: type=1326 audit(1726090661.640:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f345f97def9 code=0x7ffc0000 [ 276.301640][ T29] audit: type=1326 audit(1726090661.640:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f345f97def9 code=0x7ffc0000 [ 276.345298][ T5270] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 276.381864][ T29] audit: type=1326 audit(1726090661.640:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f345f974ea7 code=0x7ffc0000 [ 276.391454][ T5270] usb 1-1: USB disconnect, device number 30 [ 276.438966][ T29] audit: type=1326 audit(1726090661.640:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f345f919869 code=0x7ffc0000 [ 276.481971][ T29] audit: type=1326 audit(1726090661.640:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12552 comm="syz.3.3279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f345f974ea7 code=0x7ffc0000 [ 276.513206][T12565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.544897][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.559973][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3284'. [ 276.832937][T12582] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3288'. [ 277.036115][ T5270] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 277.225130][ T5270] usb 4-1: Using ep0 maxpacket: 8 [ 277.242407][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.274389][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.315034][ T5270] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 277.350246][ T5270] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 277.372395][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.409645][ T5270] usb 4-1: config 0 descriptor?? [ 277.571273][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.672777][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3302'. [ 277.839328][ T5270] pyra 0003:1E7D:2C24.0030: item fetching failed at offset 5/7 [ 277.865633][ T5270] pyra 0003:1E7D:2C24.0030: parse failed [ 277.895490][ T5270] pyra 0003:1E7D:2C24.0030: probe with driver pyra failed with error -22 [ 277.999294][T12622] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 278.114068][ T5270] usb 4-1: USB disconnect, device number 32 [ 278.605083][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.781118][T12659] UBIFS error (pid: 12659): cannot open "./file0", error -22 [ 278.847567][ T5270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.130464][T12667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.208025][T12666] Falling back ldisc for ttyS3. [ 279.390439][T12684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3337'. [ 279.654944][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.285520][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.506234][T12741] tap0: tun_chr_ioctl cmd 1074025681 [ 280.685776][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.780310][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3367'. [ 280.807007][T12754] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3367'. [ 281.284587][ T46] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 281.485835][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 281.493220][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.511509][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.522335][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 281.534054][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.545310][ T46] usb 4-1: config 0 descriptor?? [ 281.576670][ T46] hub 4-1:0.0: USB hub found [ 281.671597][T12793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.681598][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.727200][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.795309][ T46] hub 4-1:0.0: 1 port detected [ 281.886226][ T5270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.209808][ T46] usb 4-1: USB disconnect, device number 33 [ 282.406601][ T1850] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 282.600735][ T1850] usb 2-1: Using ep0 maxpacket: 16 [ 282.611235][ T1850] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 282.629223][ T1850] usb 2-1: config 0 has no interface number 0 [ 282.648978][ T1850] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 282.685953][ T1850] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 282.707019][ T1850] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 282.718214][ T1850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.735060][ T1850] usb 2-1: Product: syz [ 282.739571][ T1850] usb 2-1: Manufacturer: syz [ 282.744310][ T1850] usb 2-1: SerialNumber: syz [ 282.765212][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.785107][ T1850] usb 2-1: config 0 descriptor?? [ 282.793751][T12805] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 282.803520][T12805] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 282.814269][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3394'. [ 283.048737][T12805] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 283.074681][T12805] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 283.576945][T12836] mkiss: ax0: crc mode is auto. [ 283.732019][ T1850] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 283.751595][ T1850] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 283.804289][ T1850] asix 2-1:0.251: probe with driver asix failed with error -71 [ 283.812374][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.836922][ T1850] usb 2-1: USB disconnect, device number 22 [ 284.785217][ T8] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 284.845150][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.925524][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.009752][ T8] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 285.024498][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.057658][ T8] usb 4-1: Product: syz [ 285.061873][ T8] usb 4-1: Manufacturer: syz [ 285.077376][ T8] usb 4-1: SerialNumber: syz [ 285.095912][ T8] usb 4-1: config 0 descriptor?? [ 285.285424][T12885] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 1 [ 285.286320][T12884] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 0 [ 285.320479][T12886] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 2 [ 285.327092][T12888] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 0, id = 3 [ 285.734861][ T1850] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 285.757127][ T8] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 285.806349][T12901] program syz.1.3431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.887354][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.935312][ T1850] usb 1-1: Using ep0 maxpacket: 8 [ 285.942845][ T1850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.957988][ T8] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 285.958790][ T1850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.992826][ T1850] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 285.994067][ T8] usb 4-1: USB disconnect, device number 34 [ 286.003765][ T1850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.049739][ T1850] usb 1-1: config 0 descriptor?? [ 286.284861][T12920] sctp: [Deprecated]: syz.1.3441 (pid 12920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 286.284861][T12920] Use struct sctp_sack_info instead [ 286.487011][ T1850] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 286.505508][ T1850] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 286.523072][ T1850] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 286.539993][ T1850] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 286.555492][ T1850] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 286.582886][ T1850] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 286.599912][ T1850] playstation 0003:054C:0CE6.0031: unknown main item tag 0x0 [ 286.638760][ T1850] playstation 0003:054C:0CE6.0031: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 286.766260][ T1850] playstation 0003:054C:0CE6.0031: Invalid byte count transferred, expected 20 got 0 [ 286.790271][ T1850] playstation 0003:054C:0CE6.0031: Failed to retrieve DualSense pairing info: -22 [ 286.810538][ T1850] playstation 0003:054C:0CE6.0031: Failed to get MAC address from DualSense [ 286.834663][ T1850] playstation 0003:054C:0CE6.0031: Failed to create dualsense. [ 286.847498][ T1850] playstation 0003:054C:0CE6.0031: probe with driver playstation failed with error -22 [ 286.924930][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.026028][ T5270] usb 1-1: USB disconnect, device number 31 [ 287.122649][T12957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3458'. [ 287.522296][T12979] io-wq is not configured for unbound workers [ 287.687128][T12989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3472'. [ 287.759655][T12989] veth1_macvtap: left promiscuous mode [ 287.786430][T12989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3472'. [ 287.965399][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.973594][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.087372][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 288.087390][ T29] audit: type=1326 audit(1726090673.640:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13010 comm="syz.1.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 288.115408][T13013] vlan3: entered promiscuous mode [ 288.115435][T13013] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 288.129145][T13013] mac80211_hwsim hwsim15 wlan0: left promiscuous mode [ 288.165894][ T29] audit: type=1326 audit(1726090673.640:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13010 comm="syz.1.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 288.193042][ T29] audit: type=1326 audit(1726090673.640:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13010 comm="syz.1.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 288.216893][ T29] audit: type=1326 audit(1726090673.640:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13010 comm="syz.1.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 288.264060][ T29] audit: type=1326 audit(1726090673.640:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13010 comm="syz.1.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 288.287605][ T29] audit: type=1326 audit(1726090673.640:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13010 comm="syz.1.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 288.356392][ T29] audit: type=1326 audit(1726090673.640:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13010 comm="syz.1.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 288.434761][ T29] audit: type=1326 audit(1726090673.640:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13010 comm="syz.1.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 288.472040][ T29] audit: type=1326 audit(1726090673.640:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13010 comm="syz.1.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 288.501301][ T29] audit: type=1326 audit(1726090673.640:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13010 comm="syz.1.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f050ab7def9 code=0x7ffc0000 [ 288.662840][T13033] CUSE: info not properly terminated [ 288.832348][T13041] trusted_key: syz.4.3495 sent an empty control message without MSG_MORE. [ 288.891141][T13046] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 289.005596][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.115213][T13046] vhci_hcd: default hub control req: 4012 v0007 i0006 l0 [ 289.321619][ T1125] Bluetooth: hci2: Frame reassembly failed (-84) [ 289.503255][T13081] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 289.683823][T13093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3521'. [ 289.701016][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3521'. [ 289.807707][T13095] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 289.904775][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.045084][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.129554][T13115] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3531'. [ 290.174353][T13117] netlink: 'syz.1.3532': attribute type 11 has an invalid length. [ 290.303052][T13125] Process accounting resumed [ 290.714622][ T1850] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 290.916302][ T1850] usb 5-1: Using ep0 maxpacket: 16 [ 290.926635][ T1850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.948061][ T1850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.974576][ T1850] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 291.004778][ T5270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.006307][ T1850] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 291.034599][ T1850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.055793][ T1850] usb 5-1: config 0 descriptor?? [ 291.086749][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.302816][T13175] xt_hashlimit: max too large, truncated to 1048576 [ 291.325373][ T4615] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 291.493415][ T1850] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 291.513697][ T1850] microsoft 0003:045E:07DA.0032: item 0 0 0 11 parsing failed [ 291.535873][ T1850] microsoft 0003:045E:07DA.0032: parse failed [ 291.552310][ T1850] microsoft 0003:045E:07DA.0032: probe with driver microsoft failed with error -22 [ 291.730009][T13187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.767331][ T1850] usb 5-1: USB disconnect, device number 25 [ 292.125768][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.450869][T13225] MPI: mpi too large (185152 bits) [ 292.596501][T13231] devtmpfs: Cannot change global quota limit on remount [ 292.730764][T13239] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 292.785259][T13239] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 293.030248][T13256] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 293.165042][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.285123][ T5270] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 293.428567][T13284] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 293.491763][ T5270] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 293.511291][ T5270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.529916][ T5270] usb 1-1: Product: syz [ 293.541714][ T5270] usb 1-1: Manufacturer: syz [ 293.553013][ T5270] usb 1-1: SerialNumber: syz [ 293.569053][ T5270] usb 1-1: config 0 descriptor?? [ 293.644705][ T46] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 293.795396][ T5270] hso 1-1:0.0: Failed to find BULK IN ep [ 293.814136][ T5270] usb-storage 1-1:0.0: USB Mass Storage device detected [ 293.843643][ T46] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 293.868440][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.888655][ T5225] Bluetooth: hci5: command 0x0406 tx timeout [ 293.900911][ T46] usb 2-1: config 0 descriptor?? [ 293.918285][ T46] cp210x 2-1:0.0: cp210x converter detected [ 293.996824][ T5270] usb 1-1: USB disconnect, device number 32 [ 294.045792][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.124828][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 294.207729][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.312379][T13315] netlink: 'syz.4.3623': attribute type 25 has an invalid length. [ 294.320683][T13315] netlink: 'syz.4.3623': attribute type 7 has an invalid length. [ 294.335543][T13315] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3623'. [ 294.346082][ T8] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 294.358740][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.369433][ T8] usb 3-1: config 0 descriptor?? [ 294.565211][ T46] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 294.572948][ T46] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 294.581203][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 294.610364][ T46] usb 2-1: cp210x converter now attached to ttyUSB0 [ 294.611399][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 294.625645][ T46] usb 2-1: USB disconnect, device number 23 [ 294.642428][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 294.657049][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 294.660952][ T46] cp210x 2-1:0.0: device disconnected [ 294.703150][ T8] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 294.740868][ T8] [drm] Initialized udl on minor 2 [ 294.759323][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 294.780958][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 294.794808][ T5270] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 294.802840][ T5270] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 294.824996][ T8] usb 3-1: USB disconnect, device number 24 [ 295.245657][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.735438][ T5275] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 295.924593][ T5275] usb 1-1: Using ep0 maxpacket: 8 [ 295.938671][ T5275] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 295.952284][ T5275] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.975235][ T5275] usb 1-1: Product: syz [ 295.984675][ T5275] usb 1-1: Manufacturer: syz [ 296.004370][ T5275] usb 1-1: SerialNumber: syz [ 296.025565][ T5275] usb 1-1: config 0 descriptor?? [ 296.031734][T13375] use of bytesused == 0 is deprecated and will be removed in the future, [ 296.039061][ T5275] gspca_main: se401-2.14.0 probing 047d:5003 [ 296.066739][T13375] use the actual size instead. [ 296.145433][T13380] netlink: 'syz.2.3651': attribute type 1 has an invalid length. [ 296.160953][T13380] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3651'. [ 296.284908][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.553376][T13393] loop8: detected capacity change from 0 to 6 [ 296.573725][T13393] Dev loop8: unable to read RDB block 6 [ 296.580409][T13393] loop8: unable to read partition table [ 296.589994][T13393] loop8: partition table beyond EOD, truncated [ 296.598509][T13393] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 296.598509][T13393] ) failed (rc=-5) [ 296.602040][T13397] Falling back ldisc for ttyS3. [ 296.644692][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 296.834751][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 296.842440][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.859488][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.885792][ T9] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 296.912134][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.925580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.946391][ T9] usb 5-1: config 0 descriptor?? [ 296.949001][ T5275] usb 1-1: reset high-speed USB device number 33 using dummy_hcd [ 296.995982][ T52] bridge_slave_1: left allmulticast mode [ 297.001748][ T52] bridge_slave_1: left promiscuous mode [ 297.030427][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.058564][ T52] bridge_slave_0: left allmulticast mode [ 297.075407][ T52] bridge_slave_0: left promiscuous mode [ 297.081169][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.107290][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.328041][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.432822][ T9] ntrig 0003:1B96:0008.0033: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 297.599947][ T5275] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 297.609946][ T9] ntrig 0003:1B96:0008.0033: Firmware version: 2.13.12.1.7 (35a5 3780) [ 297.615510][ T5275] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 297.649102][ T5275] usb 1-1: USB disconnect, device number 33 [ 297.850818][ T8] usb 5-1: USB disconnect, device number 26 [ 297.932491][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.945558][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.959023][ T52] bond0 (unregistering): Released all slaves [ 297.972823][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3667'. [ 298.368428][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.394111][T13436] program syz.0.3674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.716027][ T52] hsr_slave_0: left promiscuous mode [ 298.759747][ T52] hsr_slave_1: left promiscuous mode [ 298.766615][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.774059][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.803199][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 298.819700][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.827394][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.882373][ T52] veth0_macvtap: left promiscuous mode [ 298.895142][ T52] veth1_vlan: left promiscuous mode [ 298.900716][ T52] veth0_vlan: left promiscuous mode [ 299.016803][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 299.024112][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.041598][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.060256][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 299.070244][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.081203][ T9] usb 2-1: config 0 descriptor?? [ 299.404845][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.494992][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.523708][ T9] hid-led 0003:04D8:F372.0034: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 299.574204][ T9] hid-led 0003:04D8:F372.0034: Greynut Luxafor initialized [ 299.652341][ T52] team0 (unregistering): Port device team_slave_1 removed [ 299.706971][ T52] team0 (unregistering): Port device team_slave_0 removed [ 299.744821][ T46] usb 2-1: USB disconnect, device number 24 [ 299.769207][ T5275] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 299.784193][ T5275] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 299.801168][ T5275] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 299.820571][ T5275] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 299.831619][ T5275] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 299.843417][ T5275] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 299.852658][ T5275] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 299.861653][ T5275] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 299.871035][ T5275] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 299.881722][ T5275] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 299.890952][ T1850] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 299.908208][ T5223] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 299.917915][ T5223] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 299.927427][ T5223] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 299.936974][ T5223] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 299.948641][ T5223] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 299.957832][ T5223] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 299.975596][ T5223] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 300.142755][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.351278][T13455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3685'. [ 300.362076][T13455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3685'. [ 300.455085][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.820646][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 300.820666][ T29] audit: type=1326 audit(1726090686.360:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13489 comm="syz.3.3701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f345f97def9 code=0x0 [ 301.414382][T13480] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 301.445993][T13480] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 301.487466][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.873773][T13480] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 301.897351][T13480] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 302.058382][ T5270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.094267][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.233918][T13480] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 302.269873][T13480] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 302.527562][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.166580][ T5270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.565374][ T1850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.611264][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.654703][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.205744][ T5270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.442377][T13701] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3764'. [ 306.685081][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.132111][T13728] netlink: 'syz.4.3772': attribute type 13 has an invalid length. [ 307.196172][T13728] veth0_macvtap: left promiscuous mode [ 307.218618][T13728] macvtap0: entered allmulticast mode [ 307.252538][T13728] macvtap0: refused to change device tx_queue_len [ 412.604412][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 412.611409][ C0] rcu: 1-...!: (1 GPs behind) idle=5b1c/1/0x4000000000000000 softirq=34930/34934 fqs=2 [ 412.622625][ C0] rcu: (detected by 0, t=10506 jiffies, g=51105, q=202 ncpus=2) [ 412.630355][ C0] Sending NMI from CPU 0 to CPUs 1: [ 412.635582][ C1] NMI backtrace for cpu 1 [ 412.635603][ C1] CPU: 1 UID: 0 PID: 13751 Comm: syz.4.3783 Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 412.635623][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 412.635636][ C1] RIP: 0010:__kasan_check_read+0xa/0x20 [ 412.635659][ C1] Code: db eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 6f e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 [ 412.635677][ C1] RSP: 0018:ffffc90000a189e0 EFLAGS: 00000047 [ 412.635693][ C1] RAX: 0000000000000000 RBX: 0000000000000021 RCX: ffffffff81703f9a [ 412.635704][ C1] RDX: 0000000000000008 RSI: 0000000000000008 RDI: ffffffff93fa6840 [ 412.635714][ C1] RBP: 0000000000000009 R08: ffffffff93fa6847 R09: 1ffffffff27f4d08 [ 412.635725][ C1] R10: dffffc0000000000 R11: fffffbfff27f4d09 R12: ffff888028601e00 [ 412.635737][ C1] R13: dffffc0000000000 R14: 0000000000000200 R15: ffff8880286028e0 [ 412.635749][ C1] FS: 000055558b248500(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 412.635764][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.635775][ C1] CR2: 0000001b2c61eff8 CR3: 000000002a966000 CR4: 00000000003506f0 [ 412.635789][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.635799][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.635809][ C1] Call Trace: [ 412.635817][ C1] [ 412.635830][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 412.635854][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 412.635877][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 412.635904][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 412.635924][ C1] ? nmi_handle+0x14f/0x5a0 [ 412.635940][ C1] ? nmi_handle+0x2a/0x5a0 [ 412.635955][ C1] ? __kasan_check_read+0xa/0x20 [ 412.635969][ C1] ? default_do_nmi+0x63/0x160 [ 412.635990][ C1] ? exc_nmi+0x123/0x1f0 [ 412.636010][ C1] ? end_repeat_nmi+0xf/0x53 [ 412.636033][ C1] ? mark_lock+0x9a/0x350 [ 412.636055][ C1] ? __kasan_check_read+0xa/0x20 [ 412.636070][ C1] ? __kasan_check_read+0xa/0x20 [ 412.636086][ C1] ? __kasan_check_read+0xa/0x20 [ 412.636100][ C1] [ 412.636106][ C1] [ 412.636111][ C1] mark_lock+0x9a/0x350 [ 412.636134][ C1] __lock_acquire+0xc35/0x2040 [ 412.636162][ C1] lock_acquire+0x1ed/0x550 [ 412.636182][ C1] ? advance_sched+0xa02/0xca0 [ 412.636204][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 412.636225][ C1] ? advance_sched+0x9b4/0xca0 [ 412.636241][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 412.636258][ C1] ? __pfx_lock_release+0x10/0x10 [ 412.636282][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 412.636299][ C1] ? taprio_set_budgets+0x32c/0x370 [ 412.636318][ C1] ? advance_sched+0xa02/0xca0 [ 412.636335][ C1] advance_sched+0xa1e/0xca0 [ 412.636353][ C1] ? advance_sched+0xa02/0xca0 [ 412.636376][ C1] ? __pfx_advance_sched+0x10/0x10 [ 412.636393][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 412.636411][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 412.636440][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 412.636457][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 412.636481][ C1] hrtimer_interrupt+0x396/0x990 [ 412.636507][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 412.636532][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 412.636556][ C1] [ 412.636561][ C1] [ 412.636567][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 412.636587][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0xa4/0x120 [ 412.636610][ C1] Code: 8b 00 00 00 4c 8b 4c 24 20 65 4c 8b 1c 25 c0 d6 03 00 31 d2 eb 08 48 ff c2 49 39 d2 74 71 4c 8b 74 d6 10 65 8b 05 44 44 70 7e <25> 00 01 ff 00 74 11 3d 00 01 00 00 75 de 41 83 bb 1c 16 00 00 00 [ 412.636622][ C1] RSP: 0018:ffffc9000ab9f860 EFLAGS: 00000202 [ 412.636636][ C1] RAX: 0000000080000001 RBX: 0000000000000002 RCX: ffff888028601e00 [ 412.636647][ C1] RDX: 0000000000000001 RSI: ffffffff8e5a3d80 RDI: 0000000000000002 [ 412.636657][ C1] RBP: ffffffff90885fac R08: 0000000000000003 R09: ffffffff81412e12 [ 412.636668][ C1] R10: 0000000000000002 R11: ffff888028601e00 R12: ffffffff900fb1d8 [ 412.636684][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffffff90885fa8 [ 412.636697][ C1] ? unwind_next_frame+0x6c2/0x2a00 [ 412.636726][ C1] unwind_next_frame+0x6c2/0x2a00 [ 412.636750][ C1] ? __kasan_slab_free+0x36/0x60 [ 412.636768][ C1] ? __kasan_slab_free+0x37/0x60 [ 412.636784][ C1] ? __kasan_slab_free+0x37/0x60 [ 412.636800][ C1] ? __kernel_text_address+0xd/0x40 [ 412.636817][ C1] ? __kasan_slab_free+0x37/0x60 [ 412.636833][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 412.636853][ C1] arch_stack_walk+0x151/0x1b0 [ 412.636872][ C1] ? __kasan_slab_free+0x37/0x60 [ 412.636890][ C1] stack_trace_save+0x118/0x1d0 [ 412.636911][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 412.636936][ C1] kasan_save_track+0x3f/0x80 [ 412.636952][ C1] ? kasan_save_track+0x3f/0x80 [ 412.636967][ C1] ? kasan_save_free_info+0x40/0x50 [ 412.636988][ C1] ? poison_slab_object+0xe0/0x150 [ 412.637005][ C1] ? __kasan_slab_free+0x37/0x60 [ 412.637040][ C1] ? __dentry_kill+0x4e9/0x630 [ 412.637059][ C1] ? file_free+0x24/0x1f0 [ 412.637076][ C1] kasan_save_free_info+0x40/0x50 [ 412.637098][ C1] poison_slab_object+0xe0/0x150 [ 412.637115][ C1] ? file_free+0x24/0x1f0 [ 412.637132][ C1] __kasan_slab_free+0x37/0x60 [ 412.637149][ C1] kmem_cache_free+0x145/0x350 [ 412.637172][ C1] file_free+0x24/0x1f0 [ 412.637191][ C1] task_work_run+0x24f/0x310 [ 412.637209][ C1] ? __pfx_task_work_run+0x10/0x10 [ 412.637227][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 412.637244][ C1] syscall_exit_to_user_mode+0x168/0x370 [ 412.637263][ C1] do_syscall_64+0x100/0x230 [ 412.637280][ C1] ? clear_bhb_loop+0x35/0x90 [ 412.637299][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.637318][ C1] RIP: 0033:0x7fd37ed7def9 [ 412.637333][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.637346][ C1] RSP: 002b:00007ffe9d11edc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 412.637361][ C1] RAX: 0000000000000000 RBX: 000000000004b126 RCX: 00007fd37ed7def9 [ 412.637372][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 412.637381][ C1] RBP: 00007fd37ef37a80 R08: 0000000000000001 R09: 00007ffe9d11f0bf [ 412.637392][ C1] R10: 00007fd37ec00000 R11: 0000000000000246 R12: 000000000004b167 [ 412.637403][ C1] R13: 00007ffe9d11eed0 R14: 0000000000000032 R15: ffffffffffffffff [ 412.637421][ C1] [ 412.637576][ C0] rcu: rcu_preempt kthread starved for 10495 jiffies! g51105 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 413.288643][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 413.298616][ C0] rcu: RCU grace-period kthread stack dump: [ 413.304501][ C0] task:rcu_preempt state:R running task stack:24176 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 413.316265][ C0] Call Trace: [ 413.319556][ C0] [ 413.322501][ C0] __schedule+0x17ae/0x4a10 [ 413.327053][ C0] ? __pfx___schedule+0x10/0x10 [ 413.331925][ C0] ? __pfx_lock_release+0x10/0x10 [ 413.336962][ C0] ? __asan_memset+0x23/0x50 [ 413.341571][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 413.347389][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 413.353733][ C0] ? schedule+0x90/0x320 [ 413.357987][ C0] schedule+0x14b/0x320 [ 413.362160][ C0] schedule_timeout+0x1be/0x310 [ 413.367025][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 413.372422][ C0] ? __pfx_process_timeout+0x10/0x10 [ 413.377727][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 413.383288][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 413.388147][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 413.393362][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 413.399439][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 413.404733][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 413.410645][ C0] ? finish_swait+0xd4/0x1e0 [ 413.415247][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 413.419849][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 413.425061][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 413.430971][ C0] ? __kthread_parkme+0x169/0x1d0 [ 413.436009][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 413.441216][ C0] kthread+0x2f0/0x390 [ 413.445298][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 413.450506][ C0] ? __pfx_kthread+0x10/0x10 [ 413.455107][ C0] ret_from_fork+0x4b/0x80 [ 413.459533][ C0] ? __pfx_kthread+0x10/0x10 [ 413.464139][ C0] ret_from_fork_asm+0x1a/0x30 [ 413.468930][ C0] [ 413.471951][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 413.478448][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.11.0-rc7-syzkaller-00021-g7c6a3a65ace7 #0 [ 413.489123][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 413.499180][ C0] Workqueue: events_unbound toggle_allocation_gate [ 413.505704][ C0] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 [ 413.512474][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 39 18 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 e4 13 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 c8 13 [ 413.532086][ C0] RSP: 0018:ffffc90000117700 EFLAGS: 00000293 [ 413.538160][ C0] RAX: ffffffff81877898 RBX: 1ffff110171288e9 RCX: ffff88801cec5a00 [ 413.546139][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 413.554111][ C0] RBP: ffffc900001178e0 R08: ffffffff81877867 R09: 1ffffffff27f4d08 [ 413.562084][ C0] R10: dffffc0000000000 R11: fffffbfff27f4d09 R12: dffffc0000000000 [ 413.570060][ C0] R13: ffff8880b8944748 R14: ffff8880b883fb00 R15: 0000000000000001 [ 413.578036][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 413.586968][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.593649][ C0] CR2: 00007f070fa656c0 CR3: 000000000e534000 CR4: 00000000003506f0 [ 413.601625][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 413.609598][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 413.617572][ C0] Call Trace: [ 413.620860][ C0] [ 413.623710][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 413.630056][ C0] ? print_other_cpu_stall+0x1470/0x15a0 [ 413.635711][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 413.641537][ C0] ? __pfx_lock_release+0x10/0x10 [ 413.646589][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 413.652842][ C0] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 413.658239][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 413.663883][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 413.669088][ C0] ? acct_account_cputime+0x207/0x210 [ 413.674477][ C0] ? update_process_times+0x1ce/0x230 [ 413.679864][ C0] ? tick_nohz_handler+0x37c/0x500 [ 413.684986][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 413.690451][ C0] ? __hrtimer_run_queues+0x551/0xd50 [ 413.695829][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 413.701839][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 413.707569][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 413.713653][ C0] ? hrtimer_interrupt+0x396/0x990 [ 413.718795][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 413.724966][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 413.730784][ C0] [ 413.733716][ C0] [ 413.736652][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 413.742908][ C0] ? smp_call_function_many_cond+0x1847/0x29d0 [ 413.749066][ C0] ? smp_call_function_many_cond+0x1878/0x29d0 [ 413.755233][ C0] ? smp_call_function_many_cond+0x1860/0x29d0 [ 413.761395][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x790 [ 413.767476][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 413.772508][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x790 [ 413.778604][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 413.784938][ C0] ? __pfx___might_resched+0x10/0x10 [ 413.790314][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 413.795867][ C0] ? __pfx___might_resched+0x10/0x10 [ 413.801165][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 413.806195][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 413.811312][ C0] text_poke_bp_batch+0x352/0xb30 [ 413.816355][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 413.821909][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 413.827026][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 413.833371][ C0] text_poke_finish+0x30/0x50 [ 413.838053][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 413.844046][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 413.849951][ C0] static_key_enable+0x1a/0x20 [ 413.854721][ C0] toggle_allocation_gate+0xb5/0x250 [ 413.860014][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 413.865916][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 413.872262][ C0] ? process_scheduled_works+0x945/0x1830 [ 413.877987][ C0] process_scheduled_works+0xa2c/0x1830 [ 413.883574][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 413.889570][ C0] ? assign_work+0x364/0x3d0 [ 413.894173][ C0] worker_thread+0x86d/0xd10 [ 413.898787][ C0] ? __kthread_parkme+0x169/0x1d0 [ 413.903826][ C0] ? __pfx_worker_thread+0x10/0x10 [ 413.909126][ C0] kthread+0x2f0/0x390 [ 413.913205][ C0] ? __pfx_worker_thread+0x10/0x10 [ 413.918326][ C0] ? __pfx_kthread+0x10/0x10 [ 413.922928][ C0] ret_from_fork+0x4b/0x80 [ 413.927354][ C0] ? __pfx_kthread+0x10/0x10 [ 413.931956][ C0] ret_from_fork_asm+0x1a/0x30 [ 413.936743][ C0] [ 419.826170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog