last executing test programs: 6.231773263s ago: executing program 4 (id=2709): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x2, 0x4000, 0x1000, &(0x7f0000ec4000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 6.077394751s ago: executing program 4 (id=2711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) read(r1, &(0x7f0000000000)=""/170, 0xaa) 6.011814663s ago: executing program 4 (id=2712): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0x703, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x436, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.869330419s ago: executing program 4 (id=2716): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x300}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_submit(r0, 0x0, 0x0) 4.905188302s ago: executing program 4 (id=2735): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x400007c, 0x2302, 0x0) 3.609261577s ago: executing program 1 (id=2748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) 3.282303521s ago: executing program 1 (id=2754): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xb0a, 0x3, 0x0, 0x84, "810010cc2bf5ff550598b2fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) dup3(r1, r0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) 3.090829723s ago: executing program 1 (id=2756): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 2.924320568s ago: executing program 1 (id=2759): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) read(r1, &(0x7f0000000c80)=""/4096, 0x1000) 2.728493801s ago: executing program 1 (id=2762): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000b10b5103a09222689b7010203010902450001000000000904000002f46479000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.681495604s ago: executing program 2 (id=2763): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @mcast1, 0x5}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)="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", 0x3a5}, {&(0x7f0000000300)="ab29d9281830990100010000000000bc979ae4df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054fe53ea51e89a11506532991d60e1c65cc18dbe99369be03e492fb5feff067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0cd29b7450e741f04aeadf1774a5dbb3726ac1b6ad97d802d5fa0200f0769421fb965c73d6854e2a3ac844a3769f8449908ea5e2b2da1ff6119aeb26ac20000000000000600095491ae2c0cb2690cba61dae7a17740e8112ff188919c6e2e3d59ea16d625317c0d52a8d649dd0231a2a054863edba4aafe94b75510c648d29d7f9e48a43b8cb7d3c5a1e3ea67f87538140f8d633a54bceb8800000007ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cfa60f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb704a610b3738b393eed8633fc8e8f6309322069c0da076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba94489895945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e41657300000000000000000000020000", 0x1df}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 2.6441232s ago: executing program 3 (id=2764): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x630b00, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x3320f4, 0x0) 2.539762905s ago: executing program 0 (id=2765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x64, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}}}}}}, 0x26) 2.457110709s ago: executing program 2 (id=2766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x143140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xa, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009102"]) 2.128586943s ago: executing program 2 (id=2767): execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={[0x0, &(0x7f0000000080)='\x00']}, 0x0, 0x100) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008890) listen(r0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) 1.855590718s ago: executing program 2 (id=2768): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) 1.846727748s ago: executing program 0 (id=2769): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xd2c6, 0x0, 0x0, 0x221}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.446309344s ago: executing program 0 (id=2770): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[@ANYBLOB="ffffffffbfff20000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) 1.236323214s ago: executing program 0 (id=2771): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)="ff", 0x1}], 0x1}, 0x480c0) 1.120797405s ago: executing program 3 (id=2772): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x0, 0x0) 972.464995ms ago: executing program 3 (id=2773): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 917.071424ms ago: executing program 0 (id=2774): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='locks_get_lock_context\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e}) 793.570894ms ago: executing program 2 (id=2775): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r1, r1, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) 501.438009ms ago: executing program 0 (id=2776): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001400010000000000000000c903000080080002"], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) 486.360863ms ago: executing program 3 (id=2777): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8) 388.824582ms ago: executing program 2 (id=2778): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 248.633804ms ago: executing program 3 (id=2779): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 79.330703ms ago: executing program 3 (id=2780): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 45.657806ms ago: executing program 4 (id=2781): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2782): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="ff", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 140.753728][ T7839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.777918][ T7839] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 140.786916][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 140.816105][ T7839] netlink: 'syz.2.863': attribute type 10 has an invalid length. [ 140.837263][ T7839] netlink: 40 bytes leftover after parsing attributes in process `syz.2.863'. [ 140.852758][ T7839] batadv0: entered promiscuous mode [ 140.877775][ T7839] batadv0: entered allmulticast mode [ 140.914221][ T7839] bond0: (slave batadv0): Releasing backup interface [ 140.950771][ T7839] bridge0: port 3(batadv0) entered blocking state [ 140.957952][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 140.960762][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.976178][ T7839] bridge0: port 3(batadv0) entered disabled state [ 141.004113][ T46] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 141.013825][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 141.040675][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 141.060832][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.101911][ T46] usb 2-1: config 0 descriptor?? [ 141.157461][ T3462] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 141.167125][ T3462] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 141.360015][ T973] usb 2-1: USB disconnect, device number 10 [ 142.221276][ T973] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 142.406803][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 142.434847][ T973] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 142.450214][ T973] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 142.476582][ T973] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 142.503823][ T973] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 142.569361][ T973] usb 1-1: config 0 interface 0 has no altsetting 0 [ 142.608296][ T973] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 142.636535][ T973] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 142.673830][ T973] usb 1-1: Product: syz [ 142.706174][ T973] usb 1-1: Manufacturer: syz [ 142.727748][ T973] usb 1-1: SerialNumber: syz [ 142.738185][ T973] usb 1-1: config 0 descriptor?? [ 142.785173][ T973] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 142.838956][ T973] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 143.641888][ T5871] usb 1-1: USB disconnect, device number 9 [ 143.671440][ T5871] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 144.566957][ T7968] cgroup: fork rejected by pids controller in /syz2 [ 144.589661][ T8004] netlink: 'syz.4.927': attribute type 10 has an invalid length. [ 144.650104][ T8004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.674146][ T8004] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 144.700129][ T8070] netlink: 'syz.4.927': attribute type 10 has an invalid length. [ 144.712336][ T8044] veth1_to_hsr: default FDB implementation only supports local addresses [ 144.724222][ T8070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.927'. [ 144.745487][ T8070] batadv0: entered promiscuous mode [ 144.816070][ T8070] batadv0: entered allmulticast mode [ 144.853505][ T8070] bond0: (slave batadv0): Releasing backup interface [ 144.895695][ T8070] bridge0: port 3(batadv0) entered blocking state [ 144.928459][ T8070] bridge0: port 3(batadv0) entered disabled state [ 144.948098][ T8214] netlink: 'syz.1.929': attribute type 15 has an invalid length. [ 145.165517][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 145.179575][ T66] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 145.189620][ T66] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 145.210919][ T8332] netlink: 'syz.3.933': attribute type 2 has an invalid length. [ 145.229836][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.248952][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.933'. [ 146.874142][ T8486] batadv_slave_1: entered promiscuous mode [ 146.916223][ T8486] batadv_slave_1: left promiscuous mode [ 148.267494][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.736833][ T8556] syz.4.978 uses obsolete (PF_INET,SOCK_PACKET) [ 149.238198][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.247543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.292964][ T8575] veth1_macvtap: left promiscuous mode [ 149.486021][ T29] audit: type=1326 audit(1741131566.846:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428e98d169 code=0x7ffc0000 [ 149.509676][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.582885][ T29] audit: type=1326 audit(1741131566.846:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428e98d169 code=0x7ffc0000 [ 149.651331][ T29] audit: type=1326 audit(1741131566.896:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f428e98d169 code=0x7ffc0000 [ 149.676839][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.751528][ T29] audit: type=1326 audit(1741131566.896:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428e98d169 code=0x7ffc0000 [ 149.763645][ T8588] o2cb: This node has not been configured. [ 149.775587][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.827955][ T29] audit: type=1326 audit(1741131566.896:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428e98d169 code=0x7ffc0000 [ 149.844624][ T8588] o2cb: Cluster check failed. Fix errors before retrying. [ 149.881354][ T8588] (syz.4.993,8588,1):user_dlm_register:674 ERROR: status = -22 [ 149.894644][ T29] audit: type=1326 audit(1741131566.896:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f428e98d169 code=0x7ffc0000 [ 149.915309][ T8588] (syz.4.993,8588,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 149.942319][ T29] audit: type=1326 audit(1741131566.896:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428e98d169 code=0x7ffc0000 [ 149.974644][ T29] audit: type=1326 audit(1741131566.896:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428e98d169 code=0x7ffc0000 [ 150.000730][ T29] audit: type=1326 audit(1741131566.896:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f428e98d169 code=0x7ffc0000 [ 150.024941][ T29] audit: type=1326 audit(1741131566.896:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8580 comm="syz.4.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428e98d169 code=0x7ffc0000 [ 150.416599][ T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 150.592610][ T46] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 150.606720][ T5871] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 150.613392][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.627530][ T46] usb 5-1: config 0 descriptor?? [ 150.664517][ T8618] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1004'. [ 150.776711][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 150.798940][ T5871] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.825356][ T5871] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.853405][ T5871] usb 3-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 150.878273][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.906278][ T5871] usb 3-1: config 0 descriptor?? [ 150.954603][ T8625] vlan3: entered allmulticast mode [ 151.057412][ T46] [drm:udl_init] *ERROR* Selecting channel failed [ 151.121475][ T46] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 151.166485][ T46] [drm] Initialized udl on minor 2 [ 151.195852][ T46] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.233672][ T46] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 151.252101][ T5900] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 151.262469][ T46] usb 5-1: USB disconnect, device number 10 [ 151.273573][ T5900] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 151.329801][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.354787][ T5871] wacom 0003:056A:0094.0009: unknown main item tag 0x6 [ 151.393417][ T5871] wacom 0003:056A:0094.0009: Using device in hidraw-only mode [ 151.409518][ T5871] wacom 0003:056A:0094.0009: hidraw0: USB HID v3.ff Device [HID 056a:0094] on usb-dummy_hcd.2-1/input0 [ 151.550378][ T5871] usb 3-1: USB disconnect, device number 10 [ 152.752059][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 152.905536][ T8690] program syz.0.1038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.029879][ T8696] gtp0: entered promiscuous mode [ 153.035362][ T8696] gtp0: entered allmulticast mode [ 153.300295][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 153.956715][ T5871] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.089609][ T8745] overlay: Unknown parameter ' [ 154.089609][ T8745] time [ 154.089609][ T8745] string [ 154.089609][ T8745] statistic [ 154.089609][ T8745] state [ 154.089609][ T8745] realm [ 154.089609][ T8745] rateest [ 154.089609][ T8745] quota [ 154.089609][ T8745] pkttype [ 154.089609][ T8745] physdev [ 154.089609][ T8745] cgroup [ 154.089609][ T8745] cgroup [ 154.089609][ T8745] cgroup [ 154.089609][ T8745] owner [ 154.089609][ T8745] nfacct [ 154.089609][ T8745] nfacct [ 154.089609][ T8745] mac [ 154.089609][ T8745] limit [ 154.089609][ T8745] ipvs [ 154.089609][ T8745] helper [ 154.089609][ T8745] devgroup [ 154.089609][ T8745] cpu [ 154.089609][ T8745] conntrack [ 154.089609][ T8745] conntrack [ 154.089609][ T8745] conntrack [ 154.089609][ T8745] connlabel [ 154.089609][ T8745] connbytes [ 154.089609][ T8745] comment [ 154.089609][ T8745] bpf [ 154.089609][ T8745] bpf [ 154.089609][ T8745] connmark [ 154.089609][ T8745] mark [ 154.089609][ T8745] rpfilter [ 154.089609][ T8745] ah [ 154.089609][ T8745] tcpmss [ 154.089609][ T8745] socket [ 154.089609][ T8745] socket [ 154.089609][ T8745] socket [ 154.089609][ T8745] socket [ 154.089609][ T8745] sctp [ 154.089609][ T8745] recent [ 154.089609][ T8745] recent [ 154.089609][ T8745] policy [ 154.089609][ T8745] osf [ 154.089609][ T8745] multiport [ 154.089609][ T8745] length [ 154.089609][ T8745] l2tp [ 154.089609][ T8745] iprange [ 154.089609][ T8745] ipcomp [ 154.089609][ T8745] ttl [ 154.089609][ T8745] hashlimit [ 154.089609][ T8745] hashlimit [ 154.089609][ T8745] hashlimit [ 154.089609][ T8745] esp [ 154.089609][ T8745] ecn [ 154.089609][ T8745] tos [ 154.089609][ T8745] dscp [ 154.089609][ T8745] dccp [ 154.089609][ T8745] connlimit [ 154.089609][ T8745] cluster [ 154.089609][ T8745] addrtype [ 154.089609][ T8745] addrtype [ 154.089609][ T8745] set [ 154.089609][ T8745] set [ 154.089609][ T8745] set [ 154.089609][ T8745] set [ 154.089609][ T8745] set [ 154.089609][ T8745] icmp [ 154.346797][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.369299][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.389775][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.402427][ T5871] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 154.413230][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.423828][ T5871] usb 4-1: config 0 descriptor?? [ 154.492592][ T8751] netlink: 'syz.0.1067': attribute type 39 has an invalid length. [ 154.869572][ T5871] sony 0003:054C:024B.000A: unexpected long global item [ 154.897742][ T5871] sony 0003:054C:024B.000A: parse failed [ 154.903591][ T5871] sony 0003:054C:024B.000A: probe with driver sony failed with error -22 [ 154.987825][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.996639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.088003][ T5871] usb 4-1: USB disconnect, device number 7 [ 155.195319][ T8777] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1079'. [ 156.110405][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 156.154362][ T8818] netlink: 'syz.3.1099': attribute type 30 has an invalid length. [ 156.163458][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1099'. [ 156.606629][ T5901] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.803128][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 156.818416][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.829152][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 156.855165][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.865337][ T5901] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.875721][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.890789][ T5901] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 156.901193][ T5901] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 156.914660][ T5901] usb 4-1: Manufacturer: syz [ 156.927305][ T5901] usb 4-1: config 0 descriptor?? [ 157.160678][ T8827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.204513][ T8827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.386852][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.396659][ T5901] rc_core: IR keymap rc-hauppauge not found [ 157.417677][ T5901] Registered IR keymap rc-empty [ 157.423062][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.453239][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.487933][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 157.527508][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 157.554498][ T8852] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 157.579463][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.606716][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.627856][ T4111] Bluetooth: hci5: Frame reassembly failed (-84) [ 157.637674][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.656740][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.676645][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.704492][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.730852][ T8855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1114'. [ 157.740219][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.766772][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.808257][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.846790][ T5901] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 157.887690][ T5901] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 157.906532][ T5901] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 157.936306][ T5901] usb 4-1: USB disconnect, device number 8 [ 158.034722][ T8863] dvmrp5: entered allmulticast mode [ 158.045922][ T8862] dvmrp5: left allmulticast mode [ 158.101154][ T8865] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1119'. [ 158.346660][ T5871] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 158.516546][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 158.544398][ T5871] usb 5-1: config 77 has an invalid descriptor of length 0, skipping remainder of the config [ 158.566533][ T5871] usb 5-1: config 77 has 0 interfaces, different from the descriptor's value: 27 [ 158.601851][ T5871] usb 5-1: New USB device found, idVendor=0c72, idProduct=100d, bcdDevice=45.9b [ 158.633162][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.642704][ T5871] usb 5-1: Product: syz [ 158.647766][ T5871] usb 5-1: Manufacturer: syz [ 158.652805][ T5871] usb 5-1: SerialNumber: syz [ 158.976625][ T5870] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 159.085295][ T5871] usb 5-1: USB disconnect, device number 11 [ 159.126906][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 159.138352][ T5870] usb 2-1: config 0 has no interfaces? [ 159.145527][ T5870] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=9c.25 [ 159.156510][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=251, SerialNumber=3 [ 159.164865][ T5870] usb 2-1: Product: syz [ 159.177893][ T5870] usb 2-1: SerialNumber: syz [ 159.184985][ T5870] usb 2-1: config 0 descriptor?? [ 159.403842][ T5871] usb 2-1: USB disconnect, device number 11 [ 159.546652][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 159.896810][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1151'. [ 160.089812][ T8942] random: crng reseeded on system resumption [ 160.119563][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.128064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.426770][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.587400][ T8963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.696619][ T5901] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 160.861492][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 160.881269][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.901258][ T8979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.914159][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.914479][ T8979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.926459][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 160.939546][ T8979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.950383][ T5901] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 160.963487][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.989833][ T5901] usb 1-1: config 0 descriptor?? [ 161.084172][ T8979] syz.1.1174 (8979) used greatest stack depth: 18200 bytes left [ 161.269200][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.278440][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.421687][ T5901] hid (null): unknown global tag 0xd [ 161.478061][ T5901] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000B/input/input13 [ 161.609576][ T5901] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.000B/input/input14 [ 161.662871][ T5901] kye 0003:0458:5011.000B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0 [ 161.668313][ T5901] usb 1-1: USB disconnect, device number 10 [ 162.141024][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 162.353597][ T9029] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1195'. [ 162.354307][ T9028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.372735][ T9029] sch_tbf: peakrate 4 is lower than or equals to rate 5 ! [ 162.846673][ T5901] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 163.030393][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 163.052771][ T5901] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 163.071657][ T5901] usb 5-1: config 150 has no interface number 0 [ 163.104288][ T5901] usb 5-1: config 150 interface 204 has no altsetting 0 [ 163.126314][ T5901] usb 5-1: config 150 interface 1 has no altsetting 0 [ 163.152184][ T5901] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 163.170597][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.182467][ T5901] usb 5-1: Product: syz [ 163.187207][ T5901] usb 5-1: Manufacturer: syz [ 163.191996][ T5901] usb 5-1: SerialNumber: syz [ 163.454258][ T5901] xr_serial 5-1:150.204: xr_serial converter detected [ 163.470515][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.554998][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 163.555018][ T29] audit: type=1326 audit(1741131580.916:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9081 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8518d169 code=0x7ffc0000 [ 163.599427][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 163.624015][ T29] audit: type=1326 audit(1741131580.956:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9081 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7faf8518d169 code=0x7ffc0000 [ 163.672484][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1225'. [ 163.692136][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1225'. [ 163.711765][ T29] audit: type=1326 audit(1741131580.956:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9081 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8518d169 code=0x7ffc0000 [ 163.713322][ T9085] nbd: socks must be embedded in a SOCK_ITEM attr [ 163.758197][ T9089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.767153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.783149][ T9089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.792055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.801067][ T29] audit: type=1326 audit(1741131580.956:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9081 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8518d169 code=0x7ffc0000 [ 163.808816][ T9089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.822586][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.837528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.856099][ T9089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.865519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.885804][ T9089] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.886719][ T29] audit: type=1326 audit(1741131580.956:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9081 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7faf8518d169 code=0x7ffc0000 [ 163.925615][ T9094] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 163.986826][ T29] audit: type=1326 audit(1741131580.956:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9081 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8518d169 code=0x7ffc0000 [ 164.043253][ T29] audit: type=1326 audit(1741131580.956:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9081 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8518d169 code=0x7ffc0000 [ 164.087314][ T5901] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 164.093812][ T5901] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 164.125899][ T5901] usb 5-1: USB disconnect, device number 12 [ 164.154920][ T5901] xr_serial 5-1:150.204: device disconnected [ 164.173072][ T29] audit: type=1326 audit(1741131580.966:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9081 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7faf8518d169 code=0x7ffc0000 [ 164.308432][ T29] audit: type=1326 audit(1741131580.966:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9081 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8518d169 code=0x7ffc0000 [ 164.339110][ T29] audit: type=1326 audit(1741131580.966:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9081 comm="syz.1.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf8518d169 code=0x7ffc0000 [ 164.757566][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1242'. [ 164.816603][ T9124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1242'. [ 165.023167][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 165.766977][ T9166] team0: entered promiscuous mode [ 165.790679][ T9166] team_slave_0: entered promiscuous mode [ 165.824887][ T9166] team_slave_1: entered promiscuous mode [ 165.848578][ T9165] team0: left promiscuous mode [ 165.886817][ T9165] team_slave_0: left promiscuous mode [ 165.941284][ T9165] team_slave_1: left promiscuous mode [ 166.260834][ T9187] nbd: nbd1 already in use [ 166.369526][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1273'. [ 167.175989][ T9214] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 167.516545][ T5901] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.737386][ T5901] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 167.747051][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.774988][ T5901] usb 3-1: config 0 descriptor?? [ 167.791114][ T5901] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 167.936559][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 168.117336][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 168.128227][ T46] usb 1-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00 [ 168.151239][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.180333][ T46] usb 1-1: config 0 descriptor?? [ 168.195807][ T5901] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 168.266639][ T5133] Bluetooth: hci4: command 0x0405 tx timeout [ 168.770870][ T46] wacom 0003:056A:030E.000C: Unknown device_type for 'HID 056a:030e'. Assuming pen. [ 168.781540][ T5901] gspca_cpia1: usb_control_msg 02, error -71 [ 168.787859][ T5901] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 168.801603][ T5901] usb 3-1: USB disconnect, device number 11 [ 168.808408][ T46] wacom 0003:056A:030E.000C: hidraw0: USB HID v20.00 Device [HID 056a:030e] on usb-dummy_hcd.0-1/input0 [ 168.825235][ T46] input: Wacom Intuos S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:030E.000C/input/input15 [ 168.915570][ T46] usb 1-1: USB disconnect, device number 11 [ 169.419430][ T9278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1316'. [ 169.567785][ T5871] net_ratelimit: 2052 callbacks suppressed [ 169.567805][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.877763][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.482088][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 170.482106][ T29] audit: type=1800 audit(1741131587.846:70): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1336" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 170.794835][ T9332] can0: slcan on ptm0. [ 170.909909][ T9340] nbd: socks must be embedded in a SOCK_ITEM attr [ 170.923630][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.937040][ T9331] can0 (unregistered): slcan off ptm0. [ 171.143919][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 171.386873][ T5895] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 171.488270][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1354'. [ 171.551311][ T9357] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 171.592116][ T9357] macsec2: entered allmulticast mode [ 171.612366][ T9357] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 171.627653][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.636127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.733984][ T9357] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 171.750203][ T9357] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 171.838134][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 171.845773][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.862596][ T5895] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 171.873556][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 171.882082][ T5895] usb 5-1: SerialNumber: syz [ 171.904768][ T9362] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1356'. [ 171.925438][ T5895] usb 5-1: config 0 descriptor?? [ 171.948125][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.962787][ T5895] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 171.975249][ T9361] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1356'. [ 171.996075][ T5895] usb 5-1: Failed to create links for entity 255 [ 172.027148][ T5895] usb 5-1: Failed to register entities (-22). [ 172.033463][ T9363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1356'. [ 172.150781][ T5870] usb 5-1: USB disconnect, device number 13 [ 172.266821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.277564][ T4111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.286306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.587158][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.212358][ T9412] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 173.646615][ T5871] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 173.719008][ T29] audit: type=1326 audit(1741131591.086:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9433 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 173.774499][ T29] audit: type=1326 audit(1741131591.116:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9433 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 173.814136][ T29] audit: type=1326 audit(1741131591.126:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9433 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 173.816958][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 173.877386][ T5871] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.891045][ T29] audit: type=1326 audit(1741131591.126:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9433 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 173.915882][ T5871] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 173.915911][ T5871] usb 1-1: config 0 interface 0 has no altsetting 0 [ 173.918196][ T5871] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 173.953294][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.979112][ T29] audit: type=1326 audit(1741131591.126:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9433 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 174.002604][ T29] audit: type=1326 audit(1741131591.206:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9433 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 174.025510][ T29] audit: type=1326 audit(1741131591.206:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9433 comm="syz.2.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 174.033659][ T5871] usb 1-1: Product: syz [ 174.066527][ T5871] usb 1-1: Manufacturer: syz [ 174.077357][ T5871] usb 1-1: SerialNumber: syz [ 174.089923][ T5871] usb 1-1: config 0 descriptor?? [ 174.482899][ T9466] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.491478][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.516961][ T5871] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 174.945134][ T5871] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 174.981250][ T5871] usb 1-1: USB disconnect, device number 12 [ 175.067144][ T46] net_ratelimit: 5 callbacks suppressed [ 175.067165][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.161064][ T9494] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1417'. [ 175.220404][ T9497] sctp: [Deprecated]: syz.4.1419 (pid 9497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 175.220404][ T9497] Use struct sctp_sack_info instead [ 175.633605][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.887138][ T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 176.077322][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.116697][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.125118][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.136071][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 176.176511][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.217632][ T46] usb 5-1: config 0 descriptor?? [ 176.634037][ T46] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 176.667507][ T46] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 176.676325][ T46] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 176.725441][ T46] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 176.734689][ T46] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 176.758081][ T29] audit: type=1326 audit(1741131594.106:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9552 comm="syz.2.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 176.794856][ T46] logitech 0003:046D:C29C.000D: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 176.816348][ T29] audit: type=1326 audit(1741131594.106:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9552 comm="syz.2.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 176.840018][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.899462][ T29] audit: type=1326 audit(1741131594.106:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9552 comm="syz.2.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 176.922685][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.975615][ T29] audit: type=1326 audit(1741131594.106:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9552 comm="syz.2.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 177.047892][ T46] logitech 0003:046D:C29C.000D: no inputs found [ 177.074593][ T46] usb 5-1: USB disconnect, device number 14 [ 177.151693][ T29] audit: type=1326 audit(1741131594.516:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9569 comm="syz.1.1449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf8518d169 code=0x0 [ 177.158363][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.175243][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.388938][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.397915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.435306][ T9581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1454'. [ 177.777284][ T9596] trusted_key: syz.4.1461 sent an empty control message without MSG_MORE. [ 177.798422][ T46] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 177.949207][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.951301][ T9602] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1464'. [ 177.969517][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 177.986249][ T46] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 178.010292][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.030932][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.032098][ T46] usb 4-1: Product: syz [ 178.039763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.044553][ T46] usb 4-1: Manufacturer: syz [ 178.058195][ T46] usb 4-1: SerialNumber: syz [ 178.065139][ T46] usb 4-1: config 0 descriptor?? [ 178.102141][ T46] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 178.174439][ T9612] usb usb8: usbfs: process 9612 (syz.2.1468) did not claim interface 0 before use [ 178.187151][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.367851][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1470'. [ 178.385162][ T46] usb 4-1: USB disconnect, device number 9 [ 178.392849][ T9619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1470'. [ 179.456539][ T5871] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 179.609021][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.636961][ T5871] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.683220][ T5871] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.755984][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.783550][ T5871] usb 4-1: Product: syz [ 179.799571][ T5871] usb 4-1: Manufacturer: syz [ 179.804239][ T5871] usb 4-1: SerialNumber: syz [ 180.273673][ T5871] usb 4-1: 0:2 : does not exist [ 180.274456][ T46] net_ratelimit: 3 callbacks suppressed [ 180.274473][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.389443][ T5133] Bluetooth: hci5: sending frame failed (-49) [ 180.398055][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 180.698651][ T5871] usb 4-1: USB disconnect, device number 10 [ 181.177064][ T5870] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 181.306943][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.367849][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 181.396590][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 181.416724][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 181.429242][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 99, setting to 64 [ 181.443673][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 181.468607][ T5870] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 181.485522][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.499112][ T5870] usb 2-1: Product: syz [ 181.503552][ T5870] usb 2-1: Manufacturer: syz [ 181.509405][ T5870] usb 2-1: SerialNumber: syz [ 181.516165][ T5870] usb 2-1: config 0 descriptor?? [ 181.528270][ T9715] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.544978][ T5870] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 181.708073][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.777084][ T5871] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 181.923677][ T5901] usb 2-1: USB disconnect, device number 12 [ 181.942907][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short [ 181.975425][ T5871] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 182.000680][ T5871] usb 4-1: can't read configurations, error -71 [ 182.023360][ T9759] sctp: [Deprecated]: syz.2.1536 (pid 9759) Use of int in max_burst socket option deprecated. [ 182.023360][ T9759] Use struct sctp_assoc_value instead [ 182.060859][ T9756] sp0: Synchronizing with TNC [ 182.362585][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.580501][ T9779] netlink: 'syz.3.1547': attribute type 10 has an invalid length. [ 182.630596][ T9779] veth0_vlan: left promiscuous mode [ 182.679718][ T9779] veth0_vlan: entered promiscuous mode [ 182.709383][ T9779] team0: Device veth0_vlan failed to register rx_handler [ 182.783589][ T9779] syz.3.1547 (9779) used greatest stack depth: 18128 bytes left [ 182.895798][ T9777] sctp: [Deprecated]: syz.0.1545 (pid 9777) Use of int in max_burst socket option. [ 182.895798][ T9777] Use struct sctp_assoc_value instead [ 182.940314][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 183.147692][ T3462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.167051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.396799][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.787317][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.795924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.966521][ T9837] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1572'. [ 184.281533][ T9854] bridge_slave_0: default FDB implementation only supports local addresses [ 184.714907][ T4111] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.739013][ T9870] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 184.763927][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.823857][ T9877] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1593'. [ 184.971982][ T9885] trusted_key: encrypted_key: keyword 'upcate' not recognized [ 185.403801][ T9913] program syz.2.1609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.636663][ T46] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 185.811620][ T9926] ubi31: attaching mtd0 [ 185.812697][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.827934][ T9926] ubi31 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 185.843882][ T46] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 185.866654][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.894616][ T46] usb 5-1: config 0 descriptor?? [ 186.005874][ T9931] loop4: detected capacity change from 0 to 524287999 [ 186.042711][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.052292][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.070854][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.080187][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.098596][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.108259][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.136750][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.146268][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.158087][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.167603][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.175923][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 186.182358][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 186.191450][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.194923][ T46] usb 5-1: USB disconnect, device number 15 [ 186.201038][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.227925][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.237604][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.247169][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.256606][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.264805][ T9931] ldm_validate_partition_table(): Disk read failed. [ 186.275267][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.284612][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.293268][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 186.302808][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 186.318580][ T9931] Dev loop4: unable to read RDB block 0 [ 186.325943][ T9931] loop4: unable to read partition table [ 186.332151][ T9931] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 186.376820][ T29] audit: type=1804 audit(1741131603.716:83): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1622" name="/newroot/347/bus" dev="tmpfs" ino=1768 res=1 errno=0 [ 186.746682][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 186.753339][ T5133] Bluetooth: hci5: command 0x1003 tx timeout [ 186.921933][ T9966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.958325][ T9966] bond0: (slave bond2): Enslaving as an active interface with an up link [ 186.996809][ T9971] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 187.023582][ T9971] macsec1: entered promiscuous mode [ 187.029467][ T9971] macsec1: entered allmulticast mode [ 187.047375][ T9971] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 187.093603][ T9977] input: syz1 as /devices/virtual/input/input19 [ 187.494043][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 187.708356][ T9998] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1648'. [ 187.802990][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.274426][T10019] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 10019 comm: syz.1.1659) [ 188.298042][T10017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1658'. [ 188.303180][ T29] audit: type=1800 audit(1741131605.666:84): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1659" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=26315 res=0 errno=0 [ 188.329809][T10023] netlink: 'syz.3.1661': attribute type 30 has an invalid length. [ 188.347091][ T5871] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 188.521944][ T5871] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 188.536903][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.577864][ T5871] usb 5-1: config 0 descriptor?? [ 188.584938][ T5871] cp210x 5-1:0.0: cp210x converter detected [ 188.916886][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 189.011492][ T5871] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 189.034024][ T5871] usb 5-1: cp210x converter now attached to ttyUSB0 [ 189.099291][T10049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.240402][ T46] usb 5-1: USB disconnect, device number 16 [ 189.253563][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 189.273990][T10053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1675'. [ 189.286903][ T46] cp210x 5-1:0.0: device disconnected [ 189.550448][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.563178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.217321][T10082] hugetlbfs: syz.0.1688 (10082): Using mlock ulimits for SHM_HUGETLB is obsolete [ 190.828625][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.837616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.160893][ T5870] kernel write not supported for file /sg0 (pid: 5870 comm: kworker/0:5) [ 191.635079][T10151] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1721'. [ 192.673419][ T5870] kernel write not supported for file /uhid (pid: 5870 comm: kworker/0:5) [ 192.737226][ T5871] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 192.916684][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 192.945190][ T5871] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 192.964909][ T5871] usb 4-1: config 179 has no interface number 0 [ 192.984410][ T5871] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 193.009550][ T5871] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 193.051747][ T5871] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 193.072666][ T5871] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 193.092541][ T5871] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 193.113913][ T5871] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 193.124290][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.133174][T10230] sch_tbf: burst 1683 is lower than device lo mtu (65550) ! [ 193.142436][T10197] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 193.283498][T10236] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1760'. [ 193.392455][ T5871] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input20 [ 193.568985][T10246] support for the xor transformation has been removed. [ 193.615139][ T5900] usb 4-1: USB disconnect, device number 13 [ 193.615144][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 193.615184][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 193.638412][ T5900] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 193.649471][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.762772][T10256] pimreg0: tun_chr_ioctl cmd 1074025677 [ 193.778065][T10256] pimreg0: linktype set to 65534 [ 193.812579][T10259] veth1_to_bond: entered allmulticast mode [ 193.824858][T10259] veth1_to_bond: entered promiscuous mode [ 193.836843][T10257] veth1_to_bond: left promiscuous mode [ 193.842563][T10257] veth1_to_bond: left allmulticast mode [ 193.866748][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.875227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.056633][ T5871] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 194.220572][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.234752][T10272] ref_ctr_offset mismatch. inode: 0x79a offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 194.234830][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.269803][ T5871] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 194.282386][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.294604][ T5871] usb 2-1: config 0 descriptor?? [ 194.296876][T10276] loop9: detected capacity change from 0 to 7 [ 194.329655][T10276] Dev loop9: unable to read RDB block 7 [ 194.336047][T10276] loop9: unable to read partition table [ 194.342848][T10276] loop9: partition table beyond EOD, truncated [ 194.354126][T10276] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 194.672754][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.679750][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.721501][ T5871] hid-led 0003:1D34:000A.000E: unknown main item tag 0x0 [ 194.918985][ T5871] hid-led 0003:1D34:000A.000E: probe with driver hid-led failed with error -71 [ 194.956968][ T5871] usb 2-1: USB disconnect, device number 13 [ 195.317469][ T3462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.325902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.379551][T10319] netlink: 632 bytes leftover after parsing attributes in process `syz.3.1796'. [ 196.456845][ T5871] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 196.635828][ T5871] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 196.657804][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.675986][ T5871] usb 2-1: Product: syz [ 196.680616][ T5871] usb 2-1: Manufacturer: syz [ 196.685355][ T5871] usb 2-1: SerialNumber: syz [ 196.712715][ T5871] usb 2-1: config 0 descriptor?? [ 196.906774][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.915187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.953716][ T5871] usb 2-1: USB disconnect, device number 14 [ 197.284267][T10399] syz.4.1832: attempt to access beyond end of device [ 197.284267][T10399] loop4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 197.317321][T10399] syz.4.1832: attempt to access beyond end of device [ 197.317321][T10399] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 197.887378][T10421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.924652][T10421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.964137][T10421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.996683][T10421] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.086013][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 198.098964][T10429] netlink: 'syz.2.1845': attribute type 12 has an invalid length. [ 198.136565][T10429] netlink: 'syz.2.1845': attribute type 29 has an invalid length. [ 198.145245][T10429] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1845'. [ 198.156682][T10429] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1845'. [ 198.601921][T10438] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.1848'. [ 198.878601][T10444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.888219][T10444] batadv_slave_1: entered promiscuous mode [ 199.487929][T10468] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1862'. [ 199.513519][T10468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1862'. [ 199.789389][ C0] net_ratelimit: 1264 callbacks suppressed [ 199.789410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.812380][ T5871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.821970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.319208][ T5871] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 200.488693][ T5871] usb 4-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.517137][ T5871] usb 4-1: config 0 interface 0 has no altsetting 0 [ 200.535257][ T5871] usb 4-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 200.551530][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.607949][ T5871] usb 4-1: config 0 descriptor?? [ 200.915548][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'. [ 201.030439][ T5871] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x4 [ 201.052345][ T5871] holtek_mouse 0003:04D9:A072.000F: unknown main item tag 0x3 [ 201.070373][ T5871] holtek_mouse 0003:04D9:A072.000F: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.3-1/input0 [ 201.071072][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.091013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.226831][ T46] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 201.259634][ T5900] usb 4-1: USB disconnect, device number 14 [ 201.409946][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.429915][ T46] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.456497][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.474311][ T46] usb 5-1: config 0 descriptor?? [ 201.554704][T10526] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 201.566023][T10526] team0: Port device batadv1 added [ 201.902837][ T46] keytouch 0003:0926:3333.0010: fixing up Keytouch IEC report descriptor [ 201.938774][ T46] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0010/input/input21 [ 202.098188][ T46] keytouch 0003:0926:3333.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 202.111610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.208608][T10544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.216689][T10544] IPv6: NLM_F_CREATE should be set when creating new route [ 202.224109][T10544] IPv6: NLM_F_CREATE should be set when creating new route [ 202.231597][T10544] IPv6: NLM_F_CREATE should be set when creating new route [ 202.523789][ T8] usb 5-1: USB disconnect, device number 17 [ 202.527227][T10553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1901'. [ 202.645906][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 202.691824][T10559] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1903'. [ 202.826777][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.835696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.266525][T10594] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 203.269716][ T5871] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 203.297551][T10594] CIFS mount error: No usable UNC path provided in device string! [ 203.297551][T10594] [ 203.327901][T10594] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 203.418178][ T46] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 203.451641][T10600] netlink: 'syz.3.1924': attribute type 4 has an invalid length. [ 203.478785][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.492975][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.516876][ T5871] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 203.534496][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.567664][ T5871] usb 3-1: config 0 descriptor?? [ 203.599217][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 203.618454][ T46] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.642947][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 203.672743][ T46] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 203.703757][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.727430][ T46] usb 5-1: config 0 descriptor?? [ 203.999686][ T5871] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 204.018829][ T5871] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 204.027719][ T5871] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 204.035291][ T5871] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 204.043475][ T5871] megaworld 0003:07B5:0312.0011: unknown main item tag 0x0 [ 204.053517][ T5871] megaworld 0003:07B5:0312.0011: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 204.065975][ T5871] megaworld 0003:07B5:0312.0011: no inputs found [ 204.165814][ T46] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 204.323090][ T5871] usb 3-1: USB disconnect, device number 12 [ 204.593755][ T46] usb 5-1: USB disconnect, device number 18 [ 205.528121][ T3462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.576541][ T3462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.766031][ T3462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.823226][ T3462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.117421][ T3462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.171100][ T3462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.496818][ T3462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.536783][T10695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.563797][ T3462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.647572][ T5133] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.676004][ T5133] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.686696][ T5133] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.710260][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.718396][ T5133] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.727198][ T5133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.029502][T10698] chnl_net:caif_netlink_parms(): no params data found [ 207.042987][ T3462] bridge_slave_1: left allmulticast mode [ 207.050013][ T3462] bridge_slave_1: left promiscuous mode [ 207.068931][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.126006][ T3462] bridge_slave_0: left allmulticast mode [ 207.147007][ T3462] bridge_slave_0: left promiscuous mode [ 207.152889][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.393956][T10743] openvswitch: netlink: nsh attribute has 65504 unknown bytes. [ 208.405496][T10743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.434782][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.460992][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.490791][ T3462] bond0 (unregistering): Released all slaves [ 208.678141][ T5871] kernel write not supported for file /amidi2 (pid: 5871 comm: kworker/0:6) [ 208.838868][ T5133] Bluetooth: hci4: command tx timeout [ 209.028362][T10698] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.062620][T10698] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.088656][T10698] bridge_slave_0: entered allmulticast mode [ 209.100597][T10698] bridge_slave_0: entered promiscuous mode [ 209.246035][T10698] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.273976][T10698] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.285092][T10698] bridge_slave_1: entered allmulticast mode [ 209.306546][T10698] bridge_slave_1: entered promiscuous mode [ 209.410086][ T3462] hsr_slave_0: left promiscuous mode [ 209.426291][ T3462] hsr_slave_1: left promiscuous mode [ 209.434312][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.442745][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.457018][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.476729][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.511563][ T3462] veth1_macvtap: left promiscuous mode [ 209.519554][ T3462] veth0_macvtap: left promiscuous mode [ 209.525481][ T3462] veth1_vlan: left promiscuous mode [ 209.533060][ T3462] veth0_vlan: left promiscuous mode [ 209.636751][ T29] audit: type=1400 audit(1741131626.996:85): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=10788 comm="syz.2.2011" name="436" dev="tmpfs" ino=2219 [ 209.798765][ T3462] team0 (unregistering): Port device batadv1 removed [ 210.782753][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 210.842026][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 210.866719][ T46] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 210.916748][ T5133] Bluetooth: hci4: command tx timeout [ 211.068687][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.088332][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 211.106653][ T46] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 211.118113][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.142346][ T46] usb 5-1: config 0 descriptor?? [ 211.151144][ T46] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 211.171895][ T46] dvb-usb: bulk message failed: -22 (3/0) [ 211.201220][ T46] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 211.217361][ T46] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 211.225388][ T46] usb 5-1: media controller created [ 211.232653][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.251210][ T46] dvb-usb: bulk message failed: -22 (6/0) [ 211.259230][ T46] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 211.268673][ T46] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 211.289508][ T46] dvb-usb: schedule remote query interval to 150 msecs. [ 211.297182][ T46] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 211.369345][T10698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.383456][T10802] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2017'. [ 211.414993][T10698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.458900][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 211.465122][ T5900] dvb-usb: error while querying for an remote control event. [ 211.545120][T10698] team0: Port device team_slave_0 added [ 211.572153][T10698] team0: Port device team_slave_1 added [ 211.657680][T10698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.665386][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.723240][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 211.734397][ T5900] dvb-usb: error while querying for an remote control event. [ 211.786705][T10698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.822953][T10698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.846479][T10698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.902628][T10698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.916519][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 211.922747][ T5900] dvb-usb: error while querying for an remote control event. [ 212.096825][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 212.122349][ T5900] dvb-usb: error while querying for an remote control event. [ 212.316530][ T5900] dvb-usb: bulk message failed: -22 (1/0) [ 212.328006][ T5900] dvb-usb: error while querying for an remote control event. [ 212.506649][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 212.512877][ T5901] dvb-usb: error while querying for an remote control event. [ 212.570257][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2033'. [ 212.615009][T10698] hsr_slave_0: entered promiscuous mode [ 212.622845][T10698] hsr_slave_1: entered promiscuous mode [ 212.629580][T10698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.641926][T10843] loop5: detected capacity change from 0 to 7 [ 212.648574][T10698] Cannot create hsr debugfs directory [ 212.655489][T10843] buffer_io_error: 7 callbacks suppressed [ 212.655506][T10843] Buffer I/O error on dev loop5, logical block 0, async page read [ 212.696566][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 212.704062][ T46] dvb-usb: error while querying for an remote control event. [ 212.721109][T10843] Buffer I/O error on dev loop5, logical block 0, async page read [ 212.735196][T10843] Buffer I/O error on dev loop5, logical block 0, async page read [ 212.744356][T10843] Buffer I/O error on dev loop5, logical block 0, async page read [ 212.754146][T10843] Buffer I/O error on dev loop5, logical block 0, async page read [ 212.796817][T10843] Buffer I/O error on dev loop5, logical block 0, async page read [ 212.805105][T10843] Buffer I/O error on dev loop5, logical block 0, async page read [ 212.855387][T10843] ldm_validate_partition_table(): Disk read failed. [ 212.881953][T10843] Buffer I/O error on dev loop5, logical block 0, async page read [ 212.894171][T10843] Buffer I/O error on dev loop5, logical block 0, async page read [ 212.897552][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 212.911171][T10843] Buffer I/O error on dev loop5, logical block 0, async page read [ 212.912148][ T46] dvb-usb: error while querying for an remote control event. [ 212.922016][T10843] Dev loop5: unable to read RDB block 0 [ 212.941774][T10851] loop6: detected capacity change from 0 to 524287999 [ 212.973378][ C0] blk_print_req_error: 7 callbacks suppressed [ 212.973393][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.987570][T10843] loop5: unable to read partition table [ 212.989945][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.996662][ T5133] Bluetooth: hci4: command tx timeout [ 213.007532][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.020615][T10851] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.031591][T10851] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.037255][T10843] loop5: partition table beyond EOD, [ 213.041819][T10851] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.071155][T10843] truncated [ 213.075235][T10843] loop_reread_partitions: partition scan of loop5 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 213.075235][T10843] ) failed (rc=-5) [ 213.081871][T10851] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.106597][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 213.115882][ T46] dvb-usb: error while querying for an remote control event. [ 213.146431][T10851] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.155770][T10851] ldm_validate_partition_table(): Disk read failed. [ 213.188086][T10851] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.209182][T10851] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 213.252322][T10851] Dev loop6: unable to read RDB block 0 [ 213.261783][T10851] loop6: unable to read partition table [ 213.273838][T10851] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 213.296858][ T5901] dvb-usb: bulk message failed: -22 (1/0) [ 213.320357][ T5901] dvb-usb: error while querying for an remote control event. [ 213.526687][ T46] dvb-usb: bulk message failed: -22 (1/0) [ 213.540871][ T46] dvb-usb: error while querying for an remote control event. [ 213.558109][T10866] input: syz1 as /devices/virtual/input/input23 [ 213.618545][T10698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.684210][T10698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.709635][ T46] usb 5-1: USB disconnect, device number 19 [ 213.743669][T10698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.783995][ T46] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 213.794069][T10698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.976583][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 214.025258][T10698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.076015][T10698] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.124687][ T1799] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.132960][ T1799] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.146834][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 214.157952][ T8] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 214.176530][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.184734][ T1799] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.195268][ T1799] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.214288][ T8] usb 3-1: Product: syz [ 214.231061][ T8] usb 3-1: Manufacturer: syz [ 214.241574][ T8] usb 3-1: SerialNumber: syz [ 214.263917][ T8] usb 3-1: config 0 descriptor?? [ 214.331665][ T8] as10x_usb: device has been detected [ 214.344431][ T8] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 214.400616][ T8] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 214.489436][T10901] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2060'. [ 214.502745][ T8] as10x_usb: error during firmware upload part1 [ 214.533005][ T8] Registered device Sky IT Digital Key (green led) [ 214.534155][T10872] random: crng reseeded on system resumption [ 214.860860][T10698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.982426][T10698] veth0_vlan: entered promiscuous mode [ 215.018554][T10698] veth1_vlan: entered promiscuous mode [ 215.066748][ T5133] Bluetooth: hci4: command tx timeout [ 215.098070][T10698] veth0_macvtap: entered promiscuous mode [ 215.118594][T10698] veth1_macvtap: entered promiscuous mode [ 215.235468][T10698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.378801][T10698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.420031][T10698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.467150][T10698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.478803][T10698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.505627][T10698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.525873][ T5900] usb 3-1: USB disconnect, device number 13 [ 215.534334][T10698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.554606][ T5900] Unregistered device Sky IT Digital Key (green led) [ 215.566637][ T5900] as10x_usb: device has been disconnected [ 215.585341][T10698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.608016][T10698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.629915][T10698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.654424][T10698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.684108][T10698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.703495][T10698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.718140][T10698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.726836][ T46] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 215.732404][T10698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.760110][T10698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.806261][T10964] dummy0: entered promiscuous mode [ 215.828762][T10698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.854285][T10698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.886530][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 215.891107][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.891153][ T46] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 215.891175][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.891698][T10698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.891737][T10698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.894259][ T46] usb 1-1: config 0 descriptor?? [ 216.061589][T10945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.061616][T10945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.119723][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.119748][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.339322][ T46] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 216.483109][ T46] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 216.504789][ T46] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 216.515983][ T46] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 216.532171][ T46] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 216.552957][ T29] audit: type=1326 audit(1741131633.906:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10984 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 216.626040][ T29] audit: type=1326 audit(1741131633.916:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10984 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 216.669587][ T29] audit: type=1326 audit(1741131633.916:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10984 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 216.694749][ T29] audit: type=1326 audit(1741131633.916:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10984 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 216.756348][ T5895] usb 1-1: USB disconnect, device number 13 [ 216.792490][ T29] audit: type=1326 audit(1741131633.916:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10984 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 216.824774][ T29] audit: type=1326 audit(1741131633.916:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10984 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 216.865365][ T29] audit: type=1326 audit(1741131633.916:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10984 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 216.928619][ T29] audit: type=1326 audit(1741131633.916:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10984 comm="syz.2.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0dd8d169 code=0x7ffc0000 [ 217.009101][T10997] Falling back ldisc for ttyS3. [ 217.515131][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2096'. [ 217.856674][ T5901] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 217.907742][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2103'. [ 218.027412][T11042] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 218.044277][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 218.054407][ T5901] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 218.065002][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.087498][ T5901] usb 4-1: config 0 descriptor?? [ 218.099011][ T5901] gspca_main: sunplus-2.14.0 probing 041e:400b [ 218.168852][T11048] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.181510][T11048] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.277530][T11052] netlink: 'syz.1.2109': attribute type 1 has an invalid length. [ 218.928983][ T5901] gspca_sunplus: reg_w_riv err -71 [ 218.934541][ T5901] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 218.968162][ T5901] usb 4-1: USB disconnect, device number 15 [ 219.032480][ T29] audit: type=1326 audit(1741131636.396:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11062 comm="syz.4.2114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f428e98d169 code=0x0 [ 220.066818][T11091] netlink: 'syz.0.2127': attribute type 2 has an invalid length. [ 221.046573][ T973] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 221.234988][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 221.262318][ T973] usb 3-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 221.286514][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.328148][ T973] usb 3-1: config 0 descriptor?? [ 221.335777][T11117] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.606503][ T46] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 221.768717][ T973] wacom 0003:056A:0000.0014: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 221.783570][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 221.797567][T11055] Set syz1 is full, maxelem 65536 reached [ 221.817410][ T973] wacom 0003:056A:0000.0014: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.2-1/input0 [ 221.830136][ T46] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 221.838174][ T973] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0000.0014/input/input24 [ 221.839505][ T46] usb 1-1: config 0 has no interface number 0 [ 221.879150][ T46] usb 1-1: config 0 interface 12 has no altsetting 0 [ 221.889816][ T46] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 221.900788][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.911450][ T46] usb 1-1: Product: syz [ 221.916193][ T46] usb 1-1: Manufacturer: syz [ 221.954497][ T46] usb 1-1: SerialNumber: syz [ 221.985890][ T46] usb 1-1: config 0 descriptor?? [ 221.995973][ T5895] usb 3-1: USB disconnect, device number 14 [ 222.317078][T11138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2145'. [ 222.383156][T11141] veth0_to_bridge: entered promiscuous mode [ 222.396602][T11139] veth0_to_bridge: left promiscuous mode [ 222.860962][ T46] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 222.876757][ T46] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 222.894493][ T46] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 222.907985][ T46] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 222.944965][ T46] usb 1-1: USB disconnect, device number 14 [ 224.208116][T11222] netlink: 'syz.2.2185': attribute type 1 has an invalid length. [ 224.216268][T11222] netlink: 'syz.2.2185': attribute type 2 has an invalid length. [ 225.788292][ T5829] Bluetooth: hci5: command 0xfc11 tx timeout [ 225.796789][ T5133] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 226.002683][T11268] input: syz0 as /devices/virtual/input/input27 [ 227.000841][T11305] netlink: 'syz.3.2222': attribute type 21 has an invalid length. [ 227.046159][T11305] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2222'. [ 227.082526][T11309] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2224'. [ 227.102271][T11305] netlink: 'syz.3.2222': attribute type 4 has an invalid length. [ 227.130599][T11305] netlink: 'syz.3.2222': attribute type 5 has an invalid length. [ 227.148459][T11305] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2222'. [ 227.256894][ T29] audit: type=1326 audit(1741131644.626:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.4.2227" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f428e98d169 code=0x0 [ 228.976699][ T973] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 229.054455][T11375] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.146908][ T973] usb 2-1: Using ep0 maxpacket: 16 [ 229.184506][T11382] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 229.227902][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.248073][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.260008][ T973] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 229.271202][ T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.290175][ T973] usb 2-1: config 0 descriptor?? [ 229.318694][T11387] tun0: tun_chr_ioctl cmd 1074025675 [ 229.324944][T11387] tun0: persist disabled [ 229.693764][T11404] ip6_vti0: entered promiscuous mode [ 229.709768][T11404] ip6_vti0: left promiscuous mode [ 229.721595][ T973] corsair 0003:1B1C:1B02.0015: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 229.746591][ T5133] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 230.062177][T11419] kvm: apic: phys broadcast and lowest prio [ 230.139185][ T46] usb 2-1: USB disconnect, device number 15 [ 230.242906][ T5870] kernel read not supported for file /video9 (pid: 5870 comm: kworker/0:5) [ 230.896529][ T5895] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 231.090214][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 231.116192][ T5895] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 231.125793][ T5895] usb 5-1: config 179 has no interface number 0 [ 231.132997][ T5895] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 231.169274][ T5895] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 231.193682][ T5895] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 231.227013][ T5895] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 231.258358][ T5895] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 231.280852][ T5895] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 231.306587][ T5900] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.314525][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.344007][T11451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 231.456775][T11480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2303'. [ 231.465931][T11480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2303'. [ 231.507177][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 231.524616][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.557173][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.586538][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.606249][ T5901] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input28 [ 231.642468][ T5900] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 231.660548][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.689024][ T5900] usb 3-1: config 0 descriptor?? [ 231.814789][ T973] usb 5-1: USB disconnect, device number 20 [ 231.814797][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 231.814866][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 231.838870][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.842874][ T973] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 232.019751][T11498] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 232.038776][T11498] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 232.115950][ T5900] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 232.135494][T11502] batman_adv: batadv0: Adding interface: dummy0 [ 232.139606][ T5900] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 232.144147][T11502] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.180025][ T5900] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 232.184117][T11502] batman_adv: batadv0: Interface activated: dummy0 [ 232.203387][ T5900] microsoft 0003:045E:07DA.0016: no inputs found [ 232.211362][ T5900] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 232.316594][ T5895] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 232.331860][ T5900] usb 3-1: USB disconnect, device number 15 [ 232.484112][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 232.495717][ T5895] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 232.509250][ T5895] usb 2-1: config 0 has no interface number 0 [ 232.526138][ T5133] Bluetooth: hci3: Unknown advertising packet type: 0x60 [ 232.526229][ T5133] Bluetooth: hci3: Malformed LE Event: 0x0d [ 232.549461][ T5895] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 232.571260][ T5895] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 232.580676][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.589220][ T5895] usb 2-1: Product: syz [ 232.593546][ T5895] usb 2-1: Manufacturer: syz [ 232.598465][ T5895] usb 2-1: SerialNumber: syz [ 232.605266][ T5895] usb 2-1: config 0 descriptor?? [ 233.031169][T11533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2328'. [ 233.226038][ T5895] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input30 [ 233.461352][ T5895] usb 2-1: USB disconnect, device number 16 [ 233.977035][T11578] Bluetooth: MGMT ver 1.23 [ 235.449073][T11642] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 235.456151][T11642] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 235.535318][T11642] vhci_hcd vhci_hcd.0: Device attached [ 235.639887][T11643] usbip_core: unknown command [ 235.677288][T11643] vhci_hcd: unknown pdu 134217728 [ 235.727528][T11643] usbip_core: unknown command [ 235.741821][T10949] vhci_hcd: stop threads [ 235.750556][T10949] vhci_hcd: release socket [ 235.756754][ T5895] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 235.769714][T10949] vhci_hcd: disconnect device [ 235.916756][ T5870] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 236.090625][ T5870] usb 5-1: config 7 has an invalid interface number: 34 but max is 0 [ 236.099709][ T5870] usb 5-1: config 7 has no interface number 0 [ 236.134600][ T5870] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35 [ 236.158906][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.182528][ T5870] usb 5-1: Product: syz [ 236.206861][ T5870] usb 5-1: Manufacturer: syz [ 236.221697][ T5870] usb 5-1: SerialNumber: syz [ 237.008647][ T5870] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state. [ 237.040949][ T5870] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 237.055664][ T973] kernel write not supported for file /sequencer (pid: 973 comm: kworker/0:2) [ 237.089897][ T5870] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19) [ 237.107088][ T5870] dvb_usb_cxusb 5-1:7.34: probe with driver dvb_usb_cxusb failed with error -22 [ 237.220592][ T5870] usb 5-1: USB disconnect, device number 21 [ 237.557056][T11715] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 237.573467][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 238.598902][T11763] block device autoloading is deprecated and will be removed. [ 238.978594][T11784] vlan4: entered allmulticast mode [ 238.984052][T11784] bridge0: entered allmulticast mode [ 239.004179][T11784] bridge0: left allmulticast mode [ 239.026542][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 239.038827][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 239.096553][ T5900] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 239.104432][ T46] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 239.272744][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 239.292959][ T5900] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 239.305725][ T5900] usb 4-1: config 4 has no interface number 0 [ 239.326945][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.346460][ T5900] usb 4-1: config 4 interface 44 altsetting 0 endpoint 0x7 has invalid maxpacket 104, setting to 64 [ 239.359270][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.378449][ T5900] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=80.20 [ 239.391311][ T46] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 239.403798][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2444'. [ 239.413413][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.422139][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.430546][T11796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2444'. [ 239.440774][ T5900] usb 4-1: Product: syz [ 239.445066][ T5900] usb 4-1: Manufacturer: syz [ 239.452807][ T46] usb 2-1: config 0 descriptor?? [ 239.459710][ T5900] usb 4-1: SerialNumber: syz [ 239.773662][T11810] syzkaller1: entered promiscuous mode [ 239.804869][T11810] syzkaller1: entered allmulticast mode [ 239.861356][T11815] Trying to write to read-only block-device nullb0 [ 239.890859][ T46] uclogic 0003:5543:0781.0017: unknown main item tag 0x0 [ 239.906928][ T5900] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 239.916349][ T46] uclogic 0003:5543:0781.0017: unknown main item tag 0x0 [ 239.923799][ T46] uclogic 0003:5543:0781.0017: unknown main item tag 0x0 [ 239.933107][ T5900] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 239.941885][ T46] uclogic 0003:5543:0781.0017: unknown main item tag 0x0 [ 239.950626][ T46] uclogic 0003:5543:0781.0017: unknown main item tag 0x0 [ 239.958232][ T5900] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 239.965375][ T5900] usb 4-1: media controller created [ 239.972267][ T46] uclogic 0003:5543:0781.0017: No inputs registered, leaving [ 239.992588][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.023311][ T46] uclogic 0003:5543:0781.0017: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input0 [ 240.092440][ T5870] usb 2-1: USB disconnect, device number 17 [ 240.105719][ T5900] DVB: Unable to find symbol dib7000p_attach() [ 240.116444][ T5900] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 240.216604][ T5900] rc_core: IR keymap rc-dib0700-rc5 not found [ 240.226431][ T5900] Registered IR keymap rc-empty [ 240.231590][ T5900] dvb-usb: could not initialize remote control. [ 240.270053][ T5900] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 240.300638][ T5900] dib0700: There's no endpoint for remote controller [ 240.317485][T11823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.525527][ T5871] usb 4-1: USB disconnect, device number 16 [ 240.536770][ T5870] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 240.558426][ T5871] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 240.626675][ T973] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 240.716583][ T5870] usb 5-1: Using ep0 maxpacket: 16 [ 240.731167][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.755603][ T5870] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 240.773253][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.784402][ T5870] usb 5-1: config 0 descriptor?? [ 240.792757][ T973] usb 1-1: Using ep0 maxpacket: 8 [ 240.807317][ T973] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 240.823942][ T973] usb 1-1: config 0 has no interface number 0 [ 240.845680][ T973] usb 1-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=47.83 [ 240.855604][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.871241][ T973] usb 1-1: Product: syz [ 240.875859][ T973] usb 1-1: Manufacturer: syz [ 240.881369][ T973] usb 1-1: SerialNumber: syz [ 240.895778][ T973] usb 1-1: config 0 descriptor?? [ 240.907116][ T5895] vhci_hcd: vhci_device speed not set [ 241.236047][ T5870] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 241.337392][ T5870] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 241.368049][ T5870] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 241.403711][ T5870] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 241.420231][ T5870] gpio gpiochip0: gpiochip_add_data_with_key: get_direction failed: -38 [ 241.635807][ T5870] usb 1-1: USB disconnect, device number 15 [ 241.658281][ T5871] usb 5-1: USB disconnect, device number 22 [ 242.282250][T11900] loop6: detected capacity change from 0 to 4087 [ 242.344483][T11904] loop6: detected capacity change from 4087 to 6591 [ 242.457815][T11909] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 242.622922][T11915] netlink: 'syz.3.2497': attribute type 1 has an invalid length. [ 242.631396][T11915] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2497'. [ 242.641639][T11915] netlink: 'syz.3.2497': attribute type 1 has an invalid length. [ 242.650557][T11915] netlink: 'syz.3.2497': attribute type 2 has an invalid length. [ 243.167190][ T5895] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 243.341919][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 243.351023][ T5895] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 243.387973][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.411746][ T5895] usb 4-1: config 0 descriptor?? [ 243.437460][ T5895] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 244.133521][ T5900] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 244.329330][ T5900] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 244.357369][ T5900] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 244.378284][ T5900] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.399595][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.411820][T11957] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 244.424042][ T5900] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 244.459177][ T5895] gspca_vc032x: reg_w err -71 [ 244.464132][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.470547][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.475857][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.481788][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.487428][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.492858][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.500639][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.506246][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.512161][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.519378][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.525249][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.531019][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.537087][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.542676][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.548408][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.554834][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.560361][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.565957][ T5895] gspca_vc032x: I2c Bus Busy Wait 00 [ 244.571701][ T5895] gspca_vc032x: Unknown sensor... [ 244.577250][ T5895] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 244.586663][ T5895] usb 4-1: USB disconnect, device number 17 [ 244.642713][ T5900] usb 2-1: USB disconnect, device number 18 [ 245.548153][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 245.554973][ T5133] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 245.772405][T12014] syzkaller1: entered promiscuous mode [ 245.783086][T12014] syzkaller1: entered allmulticast mode [ 245.857333][ T5870] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 246.016522][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 246.027929][ T5870] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.046234][ T5870] usb 3-1: config 0 has no interface number 0 [ 246.076514][ T5870] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.114858][ T5870] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.140725][ T5870] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 246.163640][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.176280][ T5870] usb 3-1: config 0 descriptor?? [ 246.663666][T12049] input: syz0 as /devices/virtual/input/input34 [ 246.676170][T12049] input: failed to attach handler leds to device input34, error: -6 [ 246.820522][ T5870] uclogic 0003:28BD:0071.0019: pen parameters not found [ 246.833941][ T5870] uclogic 0003:28BD:0071.0019: interface is invalid, ignoring [ 246.852315][ T5870] usb 3-1: USB disconnect, device number 16 [ 247.466614][ T5870] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 247.533939][ T29] audit: type=1326 audit(1741131664.896:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12090 comm="syz.0.2578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff63d38d169 code=0x0 [ 247.559806][T12092] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 247.559806][T12092] The task syz.1.2576 (12092) triggered the difference, watch for misbehavior. [ 247.658435][ T5870] usb 5-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 247.678838][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.712572][ T5870] usb 5-1: config 0 descriptor?? [ 247.781349][ T29] audit: type=1326 audit(1741131665.146:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 247.812093][ T29] audit: type=1326 audit(1741131665.146:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 247.853110][ T29] audit: type=1326 audit(1741131665.146:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 247.892191][ T29] audit: type=1326 audit(1741131665.176:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12097 comm="syz.3.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 248.076127][T12108] netlink: 'syz.2.2584': attribute type 1 has an invalid length. [ 248.095045][T12108] netlink: 134708 bytes leftover after parsing attributes in process `syz.2.2584'. [ 248.159857][ T5870] ntrig 0003:1B96:0003.001A: hidraw0: USB HID v1.01 Device [HID 1b96:0003] on usb-dummy_hcd.4-1/input0 [ 248.359375][ T5870] ntrig 0003:1B96:0003.001A: Firmware version: 4.4.20.9.1 (d2a9 3991) [ 248.575002][ T46] usb 5-1: USB disconnect, device number 23 [ 248.687387][ T5870] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 248.815724][T12130] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 248.852178][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 248.864837][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 248.882438][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 248.896010][ T5870] usb 3-1: New USB device found, idVendor=0738, idProduct=a2c5, bcdDevice=1e.ce [ 248.907753][ T5870] usb 3-1: New USB device strings: Mfr=224, Product=2, SerialNumber=3 [ 248.916628][ T5870] usb 3-1: Product: syz [ 248.921714][ T5870] usb 3-1: Manufacturer: syz [ 248.926790][ T5870] usb 3-1: SerialNumber: syz [ 248.934901][ T5870] usb 3-1: config 0 descriptor?? [ 249.178460][ T46] usb 3-1: USB disconnect, device number 17 [ 249.400756][T12151] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2603'. [ 249.512618][T12157] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.2607'. [ 250.001422][T12178] pim6reg1: entered promiscuous mode [ 250.016618][T12178] pim6reg1: entered allmulticast mode [ 250.277998][T12190] GUP no longer grows the stack in syz.1.2623 (12190): 400000004000-400000008000 (400000002000) [ 250.314815][T12190] CPU: 1 UID: 0 PID: 12190 Comm: syz.1.2623 Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 250.314841][T12190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.314851][T12190] Call Trace: [ 250.314858][T12190] [ 250.314866][T12190] dump_stack_lvl+0x241/0x360 [ 250.314895][T12190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.314912][T12190] ? __pfx__printk+0x10/0x10 [ 250.314930][T12190] ? find_vma+0xf9/0x170 [ 250.314958][T12190] __get_user_pages+0x3b07/0x4140 [ 250.315005][T12190] ? __pfx___get_user_pages+0x10/0x10 [ 250.315044][T12190] get_user_pages_remote+0x31e/0xb60 [ 250.315074][T12190] ? __pfx_get_user_pages_remote+0x10/0x10 [ 250.315097][T12190] ? __access_remote_vm+0x324/0x800 [ 250.315120][T12190] __access_remote_vm+0x22d/0x800 [ 250.315146][T12190] ? __pfx___access_remote_vm+0x10/0x10 [ 250.315176][T12190] ? rep_movs_alternative+0x4c/0x70 [ 250.315202][T12190] proc_pid_cmdline_read+0x4b6/0x8c0 [ 250.315235][T12190] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 250.315262][T12190] ? rw_verify_area+0x243/0x630 [ 250.315282][T12190] vfs_readv+0x6bc/0xa80 [ 250.315304][T12190] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 250.315327][T12190] ? __pfx_vfs_readv+0x10/0x10 [ 250.315340][T12190] ? do_sys_openat2+0x17a/0x1d0 [ 250.315367][T12190] ? __fget_files+0x2a/0x410 [ 250.315384][T12190] ? __fget_files+0x395/0x410 [ 250.315400][T12190] ? __fget_files+0x2a/0x410 [ 250.315423][T12190] __x64_sys_preadv+0x1b7/0x2d0 [ 250.315448][T12190] ? __pfx___x64_sys_preadv+0x10/0x10 [ 250.315467][T12190] ? do_syscall_64+0x100/0x230 [ 250.315489][T12190] ? do_syscall_64+0xb6/0x230 [ 250.315509][T12190] do_syscall_64+0xf3/0x230 [ 250.315532][T12190] ? clear_bhb_loop+0x35/0x90 [ 250.315554][T12190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.315583][T12190] RIP: 0033:0x7f679318d169 [ 250.315603][T12190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.315618][T12190] RSP: 002b:00007f6793fd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 250.315638][T12190] RAX: ffffffffffffffda RBX: 00007f67933a5fa0 RCX: 00007f679318d169 [ 250.315651][T12190] RDX: 0000000000000001 RSI: 00004000000000c0 RDI: 0000000000000003 [ 250.315663][T12190] RBP: 00007f679320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 250.315672][T12190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.315681][T12190] R13: 0000000000000000 R14: 00007f67933a5fa0 R15: 00007ffebf1bbd18 [ 250.315706][T12190] [ 250.583634][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.657258][ T29] audit: type=1400 audit(1741131667.986:101): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=12196 comm="syz.0.2627" name="blkio.bfq.io_service_time_recursive" dev="tmpfs" ino=2635 [ 250.716612][ T5870] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 250.869012][ T5870] usb 5-1: config 0 has an invalid interface number: 42 but max is 0 [ 250.878207][ T5870] usb 5-1: config 0 has no interface number 0 [ 250.896617][ T5870] usb 5-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.ae [ 250.912913][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.933323][ T5870] usb 5-1: config 0 descriptor?? [ 251.107242][ T5895] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 251.159639][ T5870] usb 5-1: string descriptor 0 read error: -71 [ 251.180369][ T5870] usb-storage 5-1:0.42: USB Mass Storage device detected [ 251.213988][ T5870] usb-storage 5-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 251.227181][T12214] syz.3.2634 (12214) used greatest stack depth: 15832 bytes left [ 251.232686][ T5870] usb-storage 5-1:0.42: This device (04cb,0100,00ae S 04 P 01) has an unneeded SubClass entry in unusual_devs.h (kernel 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58) [ 251.232686][ T5870] Please send a copy of this message to and [ 251.296934][ T5895] usb 1-1: Using ep0 maxpacket: 32 [ 251.303501][ T5870] usb 5-1: USB disconnect, device number 24 [ 251.328468][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.350269][ T5895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.370744][ T5895] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 251.383534][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.394435][ T5895] usb 1-1: config 0 descriptor?? [ 251.841114][ T5895] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 252.032569][T12241] tipc: Started in network mode [ 252.037749][T12241] tipc: Node identity 1, cluster identity 4711 [ 252.044054][T12241] tipc: Node number set to 1 [ 252.049012][ T5870] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 252.131794][ T973] usb 1-1: USB disconnect, device number 16 [ 252.199043][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 252.208051][ T5870] usb 5-1: config 0 interface 0 has no altsetting 0 [ 252.225122][ T5870] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 252.245159][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.263618][ T5870] usb 5-1: Product: syz [ 252.268407][ T5870] usb 5-1: Manufacturer: syz [ 252.273479][ T5870] usb 5-1: SerialNumber: syz [ 252.281732][ T5870] usb 5-1: config 0 descriptor?? [ 252.460183][T12250] loop6: detected capacity change from 0 to 524287999 [ 252.479177][ C0] blk_print_req_error: 7 callbacks suppressed [ 252.479242][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.499115][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.520198][ T12] loop: Write error at byte offset 1, length 4096. [ 252.536554][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 252.546199][ C1] buffer_io_error: 21 callbacks suppressed [ 252.546213][ C1] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 252.667005][ T5133] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 252.710313][ T5870] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 253.311913][ T5870] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 253.359076][ T5870] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 253.363010][ T5900] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 253.408106][ T5870] usb 5-1: USB disconnect, device number 25 [ 253.558179][ T5900] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 253.568375][ T5900] usb 1-1: config 0 has an invalid descriptor of length 54, skipping remainder of the config [ 253.579741][ T5900] usb 1-1: config 0 has no interface number 1 [ 253.589488][ T5900] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 253.602072][ T5900] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.617457][ T5900] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 253.633638][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 253.642317][ T5900] usb 1-1: SerialNumber: syz [ 253.649188][ T5900] usb 1-1: config 0 descriptor?? [ 253.658629][ T5900] usb 1-1: Found UVC 0.00 device (0002:0000) [ 253.676441][ T5900] usb 1-1: No valid video chain found. [ 253.880690][ T5900] usb 1-1: USB disconnect, device number 17 [ 254.447942][T12312] veth2: entered promiscuous mode [ 254.453262][T12312] veth2: entered allmulticast mode [ 254.783511][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2683'. [ 254.862311][T12333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2683'. [ 254.987978][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 255.057166][T12341] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2688'. [ 255.094173][T12341] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2688'. [ 255.216924][ T46] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 255.231305][T12350] veth1_to_bond: entered allmulticast mode [ 255.247161][T12350] veth1_to_bond: entered promiscuous mode [ 255.262752][T12348] veth1_to_bond: left promiscuous mode [ 255.272617][T12348] veth1_to_bond: left allmulticast mode [ 255.289136][T12353] loop6: detected capacity change from 0 to 1919 [ 255.328594][T12353] loop6: detected capacity change from 1919 to 3575 [ 255.376598][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 255.393524][ T46] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 255.403799][ T46] usb 1-1: config 0 has no interface number 0 [ 255.423553][ T46] usb 1-1: config 0 interface 12 has no altsetting 0 [ 255.447346][ T46] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 255.729337][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.746563][ T46] usb 1-1: Product: syz [ 255.750895][ T46] usb 1-1: Manufacturer: syz [ 255.755527][ T46] usb 1-1: SerialNumber: syz [ 255.785597][ T46] usb 1-1: config 0 descriptor?? [ 256.061048][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2699'. [ 256.108862][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.116044][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.503510][T12387] loop9: detected capacity change from 0 to 7 [ 256.517414][T12387] Dev loop9: unable to read RDB block 7 [ 256.540046][T12387] loop9: unable to read partition table [ 256.552647][T12387] loop9: partition table beyond EOD, truncated [ 256.562184][T12387] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 256.620969][T12389] input: syz0 as /devices/virtual/input/input35 [ 256.836253][ T46] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 256.856877][ T46] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 256.864374][ T46] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 256.901452][ T46] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 256.946920][ T46] usb 1-1: USB disconnect, device number 18 [ 258.832303][T12468] loop2: detected capacity change from 0 to 7 [ 258.836294][T12468] Dev loop2: unable to read RDB block 7 [ 258.936678][T12468] loop2: unable to read partition table [ 258.936878][T12468] loop2: partition table beyond EOD, truncated [ 258.936902][T12468] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 259.696612][T12486] netlink: 'syz.3.2753': attribute type 2 has an invalid length. [ 260.427711][ T973] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 260.596668][ T973] usb 2-1: Using ep0 maxpacket: 16 [ 260.620948][ T973] usb 2-1: config index 0 descriptor too short (expected 69, got 36) [ 260.664349][ T973] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 260.697020][ T973] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.735195][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 260.768931][ T973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 260.806551][ T973] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.850507][ T973] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 260.865152][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.894064][ T973] usb 2-1: Product: syz [ 260.983605][ T973] usb 2-1: Manufacturer: syz [ 261.016514][ T973] usb 2-1: SerialNumber: syz [ 261.048024][ T973] usb 2-1: config 0 descriptor?? [ 261.071817][T12505] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 261.084204][ T973] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 261.752586][ T29] audit: type=1326 audit(1741131679.116:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12536 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 261.836245][ T29] audit: type=1326 audit(1741131679.156:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12536 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 261.896513][ T29] audit: type=1326 audit(1741131679.156:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12536 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 261.938696][ T973] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input36 [ 261.952960][T12541] netlink: 'syz.3.2773': attribute type 29 has an invalid length. [ 261.967258][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 261.974219][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 261.981254][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 261.991235][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 261.998830][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.006291][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.014233][ T29] audit: type=1326 audit(1741131679.156:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12536 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 262.036552][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.043481][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.050794][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.058457][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.065746][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.074087][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.080945][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.087912][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.094785][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.101703][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.108715][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.115608][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.122613][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.129528][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.136377][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.143254][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.150390][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.157264][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.164067][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.171540][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.178422][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.185215][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.192999][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.200315][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.207248][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.214422][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.221605][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.228667][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.235570][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.242748][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.245588][ T5900] usb 2-1: USB disconnect, device number 19 [ 262.249875][ C0] gspca_pac7302 2-1:0.0: URB error -71, resubmitting [ 262.249897][ C0] gspca_main: Resubmit URB failed with error -19 [ 262.493704][ T29] audit: type=1326 audit(1741131679.156:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12536 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 262.556883][ T29] audit: type=1326 audit(1741131679.156:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12536 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 262.616540][ T29] audit: type=1326 audit(1741131679.156:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12536 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 262.651085][T12554] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 262.677046][ T29] audit: type=1326 audit(1741131679.156:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12536 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 262.706875][ T46] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 262.742245][ T29] audit: type=1326 audit(1741131679.156:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12536 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 262.802256][ T29] audit: type=1326 audit(1741131679.156:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12536 comm="syz.3.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f833ff8d169 code=0x7ffc0000 [ 262.876873][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 367.886341][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 367.893367][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12552/1:b..l [ 367.901990][ C1] rcu: (detected by 1, t=10502 jiffies, g=42845, q=208 ncpus=2) [ 367.909808][ C1] task:syz.2.2778 state:R running task stack:23776 pid:12552 tgid:12551 ppid:5818 task_flags:0x400140 flags:0x00024002 [ 367.924695][ C1] Call Trace: [ 367.928028][ C1] [ 367.930976][ C1] __schedule+0x18bc/0x4c40 [ 367.935518][ C1] ? __pfx___schedule+0x10/0x10 [ 367.940393][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 367.946401][ C1] ? __lock_acquire+0x1397/0x2100 [ 367.951446][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 367.956744][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 367.961873][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 367.967705][ C1] irqentry_exit+0x5e/0x90 [ 367.972155][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 367.978171][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 367.983569][ C1] Code: 2b 00 74 08 4c 89 f7 e8 7a bf 89 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 368.003272][ C1] RSP: 0018:ffffc90004e37680 EFLAGS: 00000206 [ 368.009440][ C1] RAX: 0000000000000001 RBX: 1ffff920009c6edc RCX: ffff88805e59e4e8 [ 368.017435][ C1] RDX: dffffc0000000000 RSI: ffffffff8c2ab700 RDI: ffffffff8c801c20 [ 368.025514][ C1] RBP: ffffc90004e377d0 R08: ffffffff94514847 R09: 1ffffffff28a2908 [ 368.033501][ C1] R10: dffffc0000000000 R11: fffffbfff28a2909 R12: 1ffff920009c6ed8 [ 368.041491][ C1] R13: dffffc0000000000 R14: ffffc90004e376e0 R15: 0000000000000246 [ 368.049520][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 368.054581][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 368.059798][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 368.065703][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 368.072058][ C1] io_poll_remove_entries+0x84/0x640 [ 368.077371][ C1] ? io_poll_remove_entries+0x63/0x640 [ 368.082867][ C1] ? io_poll_remove_entries+0x63/0x640 [ 368.088368][ C1] __io_arm_poll_handler+0x41b/0x9d0 [ 368.093688][ C1] io_arm_poll_handler+0x7de/0xbf0 [ 368.098827][ C1] ? io_issue_sqe+0x7b2/0x12b0 [ 368.103603][ C1] ? __pfx_io_arm_poll_handler+0x10/0x10 [ 368.109342][ C1] ? __pfx_io_async_queue_proc+0x10/0x10 [ 368.114999][ C1] ? __pfx_io_issue_sqe+0x10/0x10 [ 368.120038][ C1] io_queue_async+0xa4/0x4e0 [ 368.124662][ C1] ? __pfx_io_req_task_submit+0x10/0x10 [ 368.130319][ C1] io_handle_tw_list+0x380/0x500 [ 368.135331][ C1] tctx_task_work_run+0x9a/0x370 [ 368.140304][ C1] tctx_task_work+0x9a/0x100 [ 368.145105][ C1] ? __pfx_tctx_task_work+0x10/0x10 [ 368.150338][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.155555][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 368.160777][ C1] task_work_run+0x24f/0x310 [ 368.165396][ C1] ? __pfx_task_work_run+0x10/0x10 [ 368.170527][ C1] ? futex_wait+0x285/0x360 [ 368.175045][ C1] ? __pfx_futex_wait+0x10/0x10 [ 368.179910][ C1] get_signal+0x15d1/0x1720 [ 368.184421][ C1] ? __mm_populate+0x39a/0x460 [ 368.189204][ C1] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 368.195201][ C1] ? __pfx_get_signal+0x10/0x10 [ 368.200076][ C1] arch_do_signal_or_restart+0x96/0x860 [ 368.205634][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 368.211802][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 368.217814][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 368.223550][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 368.229136][ C1] do_syscall_64+0x100/0x230 [ 368.233746][ C1] ? clear_bhb_loop+0x35/0x90 [ 368.238446][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.244613][ C1] RIP: 0033:0x7fbc0dd8d169 [ 368.249061][ C1] RSP: 002b:00007fbc0ec07038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 368.257575][ C1] RAX: 0000000000000200 RBX: 00007fbc0dfa5fa0 RCX: 00007fbc0dd8d169 [ 368.265555][ C1] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000004 [ 368.273534][ C1] RBP: 00007fbc0de0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 368.281510][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.289508][ C1] R13: 0000000000000000 R14: 00007fbc0dfa5fa0 R15: 00007ffed14ffae8 [ 368.297516][ C1] [ 368.300584][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g42845 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 368.312958][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=21845 [ 368.320853][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g42845 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 368.332226][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 368.342216][ C1] rcu: RCU grace-period kthread stack dump: [ 368.348106][ C1] task:rcu_preempt state:I stack:26104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 368.360041][ C1] Call Trace: [ 368.363327][ C1] [ 368.366274][ C1] __schedule+0x18bc/0x4c40 [ 368.370797][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 368.376804][ C1] ? __pfx___schedule+0x10/0x10 [ 368.381670][ C1] ? __pfx_lock_release+0x10/0x10 [ 368.386717][ C1] ? __pfx___mod_timer+0x10/0x10 [ 368.391664][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.398017][ C1] ? schedule+0x90/0x320 [ 368.402279][ C1] schedule+0x14b/0x320 [ 368.406452][ C1] schedule_timeout+0x15a/0x290 [ 368.411318][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 368.416708][ C1] ? __pfx_process_timeout+0x10/0x10 [ 368.422020][ C1] ? prepare_to_swait_event+0x330/0x350 [ 368.427582][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 368.432812][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 368.437683][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 368.442904][ C1] ? rcu_gp_init+0x1256/0x1630 [ 368.447711][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 368.452668][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 368.458576][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 368.463878][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 368.469883][ C1] ? finish_swait+0xd4/0x1e0 [ 368.474512][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 368.479727][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 368.484339][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 368.489552][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 368.495461][ C1] ? __kthread_parkme+0x169/0x1d0 [ 368.500506][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 368.505718][ C1] kthread+0x7a9/0x920 [ 368.509806][ C1] ? __pfx_kthread+0x10/0x10 [ 368.514409][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 368.519623][ C1] ? __pfx_kthread+0x10/0x10 [ 368.524226][ C1] ? __pfx_kthread+0x10/0x10 [ 368.528842][ C1] ? __pfx_kthread+0x10/0x10 [ 368.533445][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.538650][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 368.543863][ C1] ? __pfx_kthread+0x10/0x10 [ 368.548472][ C1] ret_from_fork+0x4b/0x80 [ 368.552903][ C1] ? __pfx_kthread+0x10/0x10 [ 368.557512][ C1] ret_from_fork_asm+0x1a/0x30 [ 368.562301][ C1] [ 368.565324][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 368.571666][ C1] Sending NMI from CPU 1 to CPUs 0: [ 368.576891][ C0] NMI backtrace for cpu 0 [ 368.576905][ C0] CPU: 0 UID: 0 PID: 12557 Comm: syz-executor Not tainted 6.14.0-rc5-syzkaller-00016-g48a5eed9ad58 #0 [ 368.576923][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 368.576933][ C0] RIP: 0010:lock_is_held_type+0x67/0x190 [ 368.576957][ C0] Code: f1 00 00 00 65 4c 8b 2c 25 00 d5 03 00 41 83 bd ec 0a 00 00 00 0f 85 da 00 00 00 41 89 f6 49 89 ff 48 c7 04 24 00 00 00 00 9c <8f> 04 24 4c 8b 24 24 fa 48 c7 c7 40 b2 2a 8c e8 05 1b 00 00 65 ff [ 368.576970][ C0] RSP: 0000:ffffc90000007c20 EFLAGS: 00000046 [ 368.576983][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: ffff888025c88000 [ 368.576999][ C0] RDX: ffff888025c88000 RSI: 00000000ffffffff RDI: ffff88802a1bf300 [ 368.577010][ C0] RBP: dffffc0000000000 R08: ffffffff89fcb11b R09: fffff52000000f7c [ 368.577022][ C0] R10: dffffc0000000000 R11: fffff52000000f7c R12: 0000000000000000 [ 368.577032][ C0] R13: ffff888025c88000 R14: 00000000ffffffff R15: ffff88802a1bf300 [ 368.577044][ C0] FS: 000055555b6dd500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 368.577056][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 368.577067][ C0] CR2: 00007f428e935680 CR3: 000000007d7b6000 CR4: 00000000003526f0 [ 368.577080][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 368.577089][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 368.577098][ C0] Call Trace: [ 368.577105][ C0] [ 368.577112][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 368.577144][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 368.577186][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 368.577216][ C0] ? nmi_handle+0x2a/0x5a0 [ 368.577244][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 368.577261][ C0] ? nmi_handle+0x14f/0x5a0 [ 368.577282][ C0] ? nmi_handle+0x2a/0x5a0 [ 368.577302][ C0] ? lock_is_held_type+0x67/0x190 [ 368.577321][ C0] ? default_do_nmi+0x63/0x160 [ 368.577336][ C0] ? exc_nmi+0x123/0x1f0 [ 368.577351][ C0] ? end_repeat_nmi+0xf/0x53 [ 368.577374][ C0] ? advance_sched+0xbb/0xca0 [ 368.577393][ C0] ? lock_is_held_type+0x67/0x190 [ 368.577412][ C0] ? lock_is_held_type+0x67/0x190 [ 368.577432][ C0] ? lock_is_held_type+0x67/0x190 [ 368.577451][ C0] [ 368.577456][ C0] [ 368.577463][ C0] ? __pfx_advance_sched+0x10/0x10 [ 368.577480][ C0] advance_sched+0xcd/0xca0 [ 368.577498][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 368.577516][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 368.577538][ C0] ? __pfx_advance_sched+0x10/0x10 [ 368.577555][ C0] __hrtimer_run_queues+0x59b/0xd30 [ 368.577579][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 368.577593][ C0] ? sched_clock+0x4a/0x70 [ 368.577610][ C0] ? read_tsc+0x9/0x20 [ 368.577624][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 368.577646][ C0] hrtimer_interrupt+0x403/0xa40 [ 368.577672][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 368.577699][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 368.577720][ C0] [ 368.577724][ C0] [ 368.577730][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.577751][ C0] RIP: 0010:__kasan_check_read+0xa/0x20 [ 368.577768][ C0] Code: db eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 ef e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 [ 368.577780][ C0] RSP: 0000:ffffc900048e7770 EFLAGS: 00000246 [ 368.577793][ C0] RAX: 0000000000000000 RBX: ffffea0002d11800 RCX: ffffffff81fb89f8 [ 368.577803][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffea0002d11800 [ 368.577813][ C0] RBP: 0000000000000000 R08: ffffffff81fb89e1 R09: 1ffffd40005a2300 [ 368.577824][ C0] R10: dffffc0000000000 R11: fffff940005a2301 R12: ffffc900048e7940 [ 368.577835][ C0] R13: 1ffffd40005a2301 R14: ffffea0002d11808 R15: 000000000000013f [ 368.577849][ C0] ? next_uptodate_folio+0x2f1/0x5f0 [ 368.577871][ C0] ? next_uptodate_folio+0x308/0x5f0 [ 368.577895][ C0] next_uptodate_folio+0x308/0x5f0 [ 368.577921][ C0] filemap_map_pages+0x12d0/0x1900 [ 368.577943][ C0] ? filemap_map_pages+0x231/0x1900 [ 368.577974][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 368.578001][ C0] ? __handle_mm_fault+0x1b9d/0x70f0 [ 368.578018][ C0] ? __pfx_lock_release+0x10/0x10 [ 368.578044][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 368.578065][ C0] ? __handle_mm_fault+0x3b08/0x70f0 [ 368.578081][ C0] __handle_mm_fault+0x4acb/0x70f0 [ 368.578110][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 368.578127][ C0] ? lock_vma_under_rcu+0x34b/0x790 [ 368.578150][ C0] ? __pfx_reacquire_held_locks+0x10/0x10 [ 368.578172][ C0] ? mtree_range_walk+0x6fd/0x8e0 [ 368.578191][ C0] ? lock_vma_under_rcu+0x1dd/0x790 [ 368.578207][ C0] ? __pfx_lock_release+0x10/0x10 [ 368.578226][ C0] ? lock_vma_under_rcu+0x34b/0x790 [ 368.578252][ C0] ? lock_vma_under_rcu+0x1dd/0x790 [ 368.578269][ C0] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 368.578285][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 368.578307][ C0] handle_mm_fault+0x2c1/0x7e0 [ 368.578328][ C0] exc_page_fault+0x459/0x8b0 [ 368.578350][ C0] asm_exc_page_fault+0x26/0x30 [ 368.578369][ C0] RIP: 0033:0x7f428e935680 [ 368.578389][ C0] Code: 8b 54 24 18 64 48 2b 14 25 28 00 00 00 75 08 48 81 c4 d8 00 00 00 c3 e8 5e ad 05 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <48> 81 ec d8 00 00 00 48 89 4c 24 38 4c 89 44 24 40 4c 89 4c 24 48 [ 368.578401][ C0] RSP: 002b:00007ffc33fd7878 EFLAGS: 00010246 [ 368.578414][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 368.578423][ C0] RDX: 00007f428ea0f9de RSI: 0000000000000040 RDI: 00007ffc33fd7910 [ 368.578433][ C0] RBP: 00007ffc33fd78bc R08: 0000000000000000 R09: 00007f428f6dd6c0 [ 368.578444][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001eb [ 368.578453][ C0] R13: 000055555b6f0590 R14: 000000000003f3cc R15: 00007ffc33fd7910 [ 368.578471][ C0]