last executing test programs: 3.611847935s ago: executing program 2 (id=2081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) fsync(0xffffffffffffffff) 3.472017714s ago: executing program 2 (id=2084): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8}}, 0x30) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[], 0x0) 3.218108561s ago: executing program 2 (id=2089): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000000000000000000016000000850000000500000095000000000000002303f03bfae165c4bc628493371b43603a47c018ef0f7ffcf276988d40b37fa91a86f47a0b2cedc200d3f58cb4cf02dcdc614c7f8aaac0f46d4082cd9645831b7ce5b4aa31ea5f408eac8c4b7142232f1ca1413424797943897cd49fda"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) syz_emit_ethernet(0x60, &(0x7f0000000700)={@local, @empty, @val={@val={0x88a8, 0x2, 0x1}, {0x8100, 0x1}}, {@mpls_mc={0x8848, {[{0x4}], @ipv6=@dccp_packet={0x4, 0x6, "55e169", 0x1e, 0x21, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[@hopopts={0x32}], {{0x4e21, 0x4e22, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, '\'?f', 0x3, "596b87"}, "0870aa6db8f9"}}}}}}}, 0x0) 3.075683042s ago: executing program 2 (id=2092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCINQ(r1, 0x8905, &(0x7f00000000c0)) 2.736216839s ago: executing program 1 (id=2105): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0xb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x9}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000540)=0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x1) 2.542119314s ago: executing program 1 (id=2097): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 2.353747628s ago: executing program 1 (id=2110): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x90001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0x3, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x4, 0xa, 0x0, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffc], [0x10000007, 0xffff, 0x1, 0x8000, 0x10, 0xfffffff5, 0x129432e6, 0x7, 0x6, 0x0, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0xfff, 0x1002, 0x4, 0x7, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x7, 0x8, 0x86, 0x3, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x6d01, 0x5, 0x3b, 0x3, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0x3, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x2, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0x6, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0x7, 0x7ffffffe, 0x5, 0x8, 0x8, 0x5, 0x50fd, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x80000004, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0xb1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 2.274647213s ago: executing program 4 (id=2100): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) bind$vsock_stream(r1, 0x0, 0x0) 2.218583627s ago: executing program 4 (id=2101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000100)=""/186}, 0x20) 2.169440271s ago: executing program 4 (id=2102): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000004b00)=0x52, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/19, 0x13}, 0x4000000c}], 0x1, 0x10002, 0x0) 2.111552496s ago: executing program 2 (id=2103): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000100)={0x0, 0x13, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x10, &(0x7f00000001c0)={0x0, 0x0, 0x3, '^i\x00'}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d00)={0x24, &(0x7f0000000ac0)={0x20, 0x3, 0x1, "a1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.505912125s ago: executing program 0 (id=2104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x68, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x0, 0x5}}}}, 0x36) 1.387661638s ago: executing program 1 (id=2106): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @remote, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000300), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "ecf0ff19", "4e67cb72f328ac2f"}, 0x28) 1.386830987s ago: executing program 3 (id=2107): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000007000/0x2000)=nil) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x6, r1, 0x0, &(0x7f0000000000/0x4000)=nil, 0x4000}) 1.246201697s ago: executing program 0 (id=2108): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read(r0, &(0x7f00000003c0)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.243981971s ago: executing program 4 (id=2109): r0 = gettid() futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f0000000000)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) tkill(r0, 0x7) 1.204809792s ago: executing program 3 (id=2111): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_io_uring_setup(0xc98, &(0x7f0000000800)={0x0, 0x588d, 0x800, 0x2, 0x183}, &(0x7f0000000740)=0x0, &(0x7f0000000700)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r0, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.072057071s ago: executing program 0 (id=2112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000010000003a0000000000000007"]) 862.048597ms ago: executing program 1 (id=2113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb81000900080046e0002c006800004006"], 0x42) 861.728605ms ago: executing program 0 (id=2114): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x22000) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000007100)="5802009400140091d491323b478925450db4564df63e79dbf050a10004226c1add024bf752e31ad096339c5e74a48d52a42b3ecbad9c50ff11025395", 0x3c}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 737.910973ms ago: executing program 0 (id=2115): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x22000) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000007100)="5802009400140091d491323b478925450db4", 0x12}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 724.657096ms ago: executing program 3 (id=2116): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xdc1, &(0x7f0000000780)=ANY=[], 0x0) 647.087994ms ago: executing program 1 (id=2117): unshare(0x24060400) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 530.188639ms ago: executing program 3 (id=2118): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000000)=0x9) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000100)=[{0x50, 0x0, 0x8, 0xe10}, {0x6, 0x60}]}) write$ppp(r0, &(0x7f0000000440)='f#', 0x2) 411.246148ms ago: executing program 0 (id=2119): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4498, 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 286.153625ms ago: executing program 3 (id=2120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) 218.072585ms ago: executing program 4 (id=2121): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0xbd21, @local, 0x0, 0x3}, 0x80, 0x0}, 0x20000000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) 113.217342ms ago: executing program 3 (id=2122): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x18d4733407b0e4e1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) 53.467043ms ago: executing program 4 (id=2123): r0 = timerfd_create(0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 0s ago: executing program 2 (id=2124): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') unlinkat(r1, &(0x7f0000000040)='./file0/../file0\x00', 0x0) kernel console output (not intermixed with test programs): id=6125 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602a58d169 code=0x7ffc0000 [ 111.428048][ T30] audit: type=1326 audit(1743693966.324:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f602a58d169 code=0x7ffc0000 [ 111.504365][ T30] audit: type=1326 audit(1743693966.324:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602a58d169 code=0x7ffc0000 [ 111.569186][ T30] audit: type=1326 audit(1743693966.324:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602a58d169 code=0x7ffc0000 [ 111.647447][ T30] audit: type=1326 audit(1743693966.364:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f602a58d169 code=0x7ffc0000 [ 111.698363][ T30] audit: type=1326 audit(1743693966.364:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602a58d169 code=0x7ffc0000 [ 111.729370][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.770038][ T30] audit: type=1326 audit(1743693966.364:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6125 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602a58d169 code=0x7ffc0000 [ 111.902165][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 111.919039][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.973402][ T24] usb 1-1: config 0 descriptor?? [ 112.006017][ T24] cp210x 1-1:0.0: cp210x converter detected [ 112.402268][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 112.434024][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 112.631146][ T9] usb 1-1: USB disconnect, device number 3 [ 112.650484][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 112.695779][ T9] cp210x 1-1:0.0: device disconnected [ 113.953192][ T9] IPVS: starting estimator thread 0... [ 114.083735][ T6188] IPVS: using max 24 ests per chain, 57600 per kthread [ 114.871064][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.130'. [ 114.969945][ T6213] @: renamed from vlan0 (while UP) [ 115.459032][ T6225] tap0: tun_chr_ioctl cmd 1074025677 [ 115.475843][ T6225] tap0: linktype set to 768 [ 115.758837][ T30] audit: type=1326 audit(1743693970.814:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6232 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548cf8d169 code=0x7ffc0000 [ 115.839198][ T30] audit: type=1326 audit(1743693970.814:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6232 comm="syz.1.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548cf8d169 code=0x7ffc0000 [ 115.885585][ T6239] overlayfs: missing 'workdir' [ 116.443340][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.154'. [ 116.545233][ T6263] netlink: 'syz.3.155': attribute type 6 has an invalid length. [ 116.626649][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 116.626670][ T30] audit: type=1326 audit(1743693971.694:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6266 comm="syz.0.157" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4b78d169 code=0x0 [ 116.915136][ T6275] netlink: 104 bytes leftover after parsing attributes in process `syz.4.160'. [ 118.205028][ T6312] xt_CT: No such helper "snmp" [ 118.679949][ T5902] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.854092][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 118.867404][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 118.888362][ T5902] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 118.909861][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.918103][ T5902] usb 5-1: Product: syz [ 118.941340][ T5902] usb 5-1: Manufacturer: syz [ 118.959192][ T5902] usb 5-1: SerialNumber: syz [ 118.983621][ T5902] usb 5-1: config 0 descriptor?? [ 119.404221][ T6352] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 119.439299][ T5902] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 119.636683][ T5902] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 119.702825][ T5902] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 119.729802][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.848131][ T5879] usb 5-1: USB disconnect, device number 2 [ 119.909306][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 119.917521][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.943186][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 119.962550][ T24] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 119.995106][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.033160][ T24] usb 1-1: config 0 descriptor?? [ 120.358230][ T6374] random: crng reseeded on system resumption [ 120.500691][ T24] elecom 0003:056E:010D.0002: unknown main item tag 0x0 [ 120.508434][ T24] elecom 0003:056E:010D.0002: unknown main item tag 0x0 [ 120.529597][ T24] elecom 0003:056E:010D.0002: unexpected long global item [ 120.538933][ T24] elecom 0003:056E:010D.0002: probe with driver elecom failed with error -22 [ 120.702998][ T24] usb 1-1: USB disconnect, device number 4 [ 120.711400][ T6386] netlink: 72 bytes leftover after parsing attributes in process `syz.4.208'. [ 121.742989][ T6417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.812886][ T6417] bond0: (slave bond1): Enslaving as an active interface with an up link [ 121.884878][ T5902] IPVS: starting estimator thread 0... [ 121.985769][ T6427] IPVS: using max 30 ests per chain, 72000 per kthread [ 122.427973][ T6446] netlink: 'syz.4.232': attribute type 10 has an invalid length. [ 122.513616][ T6446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.537016][ T6446] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 122.592419][ T6451] bond0: entered promiscuous mode [ 122.597582][ T6451] bond_slave_0: entered promiscuous mode [ 122.648177][ T6451] bond_slave_1: entered promiscuous mode [ 122.670744][ T6451] batadv0: entered promiscuous mode [ 123.177466][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 123.286233][ T6478] syz.2.247 uses obsolete (PF_INET,SOCK_PACKET) [ 124.323014][ T6517] macsec1: entered allmulticast mode [ 124.349207][ T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 124.364982][ T6517] macvlan0: entered allmulticast mode [ 124.388870][ T6517] veth1_vlan: entered allmulticast mode [ 124.444245][ T6517] macvlan0: left allmulticast mode [ 124.450214][ T6517] veth1_vlan: left allmulticast mode [ 124.558579][ T24] usb 2-1: config 0 has no interfaces? [ 124.565663][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 124.605964][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.647967][ T24] usb 2-1: config 0 descriptor?? [ 124.968006][ T10] usb 2-1: USB disconnect, device number 3 [ 125.073453][ T6544] batman_adv: batadv0: Adding interface: ip6gretap1 [ 125.113281][ T6544] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.182094][ T6544] batman_adv: batadv0: Interface activated: ip6gretap1 [ 125.919600][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.106512][ T9] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 126.128524][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.181175][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.205128][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.217171][ T9] usb 3-1: Product: syz [ 126.225654][ T9] usb 3-1: Manufacturer: syz [ 126.230916][ T9] usb 3-1: SerialNumber: syz [ 126.241001][ T9] usb 3-1: config 0 descriptor?? [ 126.260792][ T9] usb 3-1: selecting invalid altsetting 0 [ 126.612867][ T52] usb 3-1: USB disconnect, device number 2 [ 127.431212][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.599439][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 127.616247][ T24] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 127.626001][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.649346][ T24] usb 5-1: Product: syz [ 127.653591][ T24] usb 5-1: Manufacturer: syz [ 127.658218][ T24] usb 5-1: SerialNumber: syz [ 127.673967][ T24] usb 5-1: config 0 descriptor?? [ 127.692946][ T24] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 127.919825][ T24] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 127.932720][ T24] visor 5-1:0.0: probe with driver visor failed with error -5 [ 128.133976][ T9] usb 5-1: USB disconnect, device number 3 [ 128.189851][ T6655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.326'. [ 128.659596][ T6673] hsr0: entered promiscuous mode [ 129.456650][ T6699] mkiss: ax0: crc mode is auto. [ 129.738650][ T30] audit: type=1326 audit(1743693984.794:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6707 comm="syz.0.351" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x0 [ 130.113588][ T6718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.355'. [ 130.138649][ T6718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.355'. [ 130.176194][ T6718] gretap0: entered promiscuous mode [ 130.199477][ T6718] gretap0: left promiscuous mode [ 130.649664][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.816412][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.834756][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 130.856895][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.875350][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.889389][ T24] usb 3-1: Product: syz [ 130.902845][ T24] usb 3-1: Manufacturer: syz [ 130.928372][ T24] usb 3-1: SerialNumber: syz [ 130.946957][ T24] usb 3-1: config 0 descriptor?? [ 130.987671][ T24] usb 3-1: selecting invalid altsetting 0 [ 130.995188][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 131.046555][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.237442][ T5879] usb 3-1: USB disconnect, device number 3 [ 131.299930][ T5834] Bluetooth: hci2: command tx timeout [ 131.610130][ T30] audit: type=1326 audit(1743693986.674:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6768 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 131.666641][ T30] audit: type=1326 audit(1743693986.704:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6768 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 131.728015][ T30] audit: type=1326 audit(1743693986.704:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6768 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 131.815513][ T30] audit: type=1326 audit(1743693986.704:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6768 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 131.871627][ T6777] netlink: 'syz.4.383': attribute type 4 has an invalid length. [ 131.879507][ T30] audit: type=1326 audit(1743693986.704:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6768 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 131.950014][ T30] audit: type=1326 audit(1743693986.704:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6768 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 132.006805][ T30] audit: type=1326 audit(1743693986.704:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6768 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 132.069193][ T30] audit: type=1326 audit(1743693986.704:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6768 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 132.159494][ T30] audit: type=1326 audit(1743693986.704:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6768 comm="syz.0.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 132.205052][ T6787] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 132.875715][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.905230][ T6813] netlink: 88 bytes leftover after parsing attributes in process `syz.0.398'. [ 133.051760][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 165, changing to 11 [ 133.075272][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50610, setting to 1024 [ 133.087102][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 133.096406][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.110418][ T9] usb 3-1: config 0 descriptor?? [ 133.118620][ T6805] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 133.257384][ T6819] loop4: detected capacity change from 0 to 8 [ 133.289265][ T6823] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 133.314082][ T6823] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 133.338946][ T6819] Dev loop4: unable to read RDB block 8 [ 133.356764][ T6819] loop4: unable to read partition table [ 133.384926][ T6819] loop4: partition table beyond EOD, truncated [ 133.399784][ T6819] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 133.546693][ T6829] use of bytesused == 0 is deprecated and will be removed in the future, [ 133.576495][ T6829] use the actual size instead. [ 133.579018][ T9] hid-generic 0003:05AC:4262.0003: unbalanced delimiter at end of report description [ 133.618853][ T9] hid-generic 0003:05AC:4262.0003: probe with driver hid-generic failed with error -22 [ 133.790848][ T5879] usb 3-1: USB disconnect, device number 4 [ 133.858791][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 133.900837][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.413'. [ 134.134767][ T6855] input: syz0 as /devices/virtual/input/input8 [ 134.391228][ T6862] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 134.480565][ T6862] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 135.135280][ T6889] netlink: 632 bytes leftover after parsing attributes in process `syz.3.434'. [ 135.181173][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 135.216512][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 135.267333][ T6892] bridge0: port 3(vlan2) entered blocking state [ 135.287530][ T6892] bridge0: port 3(vlan2) entered disabled state [ 135.318049][ T6892] vlan2: entered allmulticast mode [ 135.358338][ T6892] bridge0: entered allmulticast mode [ 135.398175][ T6892] vlan2: left allmulticast mode [ 135.405586][ T6892] bridge0: left allmulticast mode [ 135.735021][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'. [ 136.136107][ T6924] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.329232][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.509409][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 137.520177][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.549252][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 137.578804][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.630405][ T9] usb 5-1: config 0 descriptor?? [ 138.062938][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 138.089178][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 138.106654][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 138.127001][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 138.137180][ T9] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 138.176148][ T9] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 138.190463][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.200941][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.257881][ C0] usb 5-1: input irq status -75 received [ 138.506383][ T9] usb 5-1: USB disconnect, device number 4 [ 139.709275][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.895610][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.929991][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 139.954548][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.974668][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 139.999249][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 140.030334][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 140.049857][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.068158][ T9] usb 4-1: Product: syz [ 140.086394][ T9] usb 4-1: Manufacturer: syz [ 140.126924][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 140.140380][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 140.166518][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 140.180995][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 140.391392][ T5879] usb 4-1: USB disconnect, device number 3 [ 140.562914][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.502'. [ 140.570073][ T7063] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[7063] [ 140.587034][ T7061] netlink: 'syz.2.502': attribute type 15 has an invalid length. [ 140.596488][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 140.645866][ T7061] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.656372][ T7061] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.666486][ T7061] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.676169][ T7061] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.944607][ T7072] syz.2.508 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 141.781361][ T7100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 142.084116][ T7115] input: syz0 as /devices/virtual/input/input9 [ 143.089328][ T5879] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 143.264838][ T5879] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.277938][ T5879] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 143.291991][ T5879] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.302081][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.327130][ T7151] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 143.362638][ T5879] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.697978][ T9] usb 4-1: USB disconnect, device number 4 [ 144.159980][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.346907][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.371698][ T10] usb 2-1: config 0 has no interface number 0 [ 144.384212][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.398931][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.413976][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 144.426638][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.448224][ T10] usb 2-1: config 0 descriptor?? [ 144.931761][ T7177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.961178][ T7177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.005961][ T10] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 145.025679][ T10] prodikeys 0003:041E:2801.0005: unknown main item tag 0x2 [ 145.041022][ T10] prodikeys 0003:041E:2801.0005: item fetching failed at offset 5/7 [ 145.061926][ T10] prodikeys 0003:041E:2801.0005: hid parse failed [ 145.068541][ T10] prodikeys 0003:041E:2801.0005: probe with driver prodikeys failed with error -22 [ 145.201843][ T10] usb 2-1: USB disconnect, device number 4 [ 145.352526][ T7215] process 'syz.3.571' launched './file2' with NULL argv: empty string added [ 145.689192][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 145.851894][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.883796][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.910046][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 145.930920][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.959922][ T10] usb 3-1: config 0 descriptor?? [ 146.049492][ T5971] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 146.219478][ T5971] usb 5-1: Using ep0 maxpacket: 32 [ 146.232291][ T5971] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 146.243449][ T5971] usb 5-1: config 0 has no interface number 0 [ 146.260799][ T5971] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 146.275931][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.294388][ T5971] usb 5-1: Product: syz [ 146.304761][ T5971] usb 5-1: Manufacturer: syz [ 146.315537][ T5971] usb 5-1: SerialNumber: syz [ 146.351975][ T5971] usb 5-1: config 0 descriptor?? [ 146.364566][ T5971] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 146.401061][ T10] isku 0003:1E7D:319C.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 146.589893][ T5971] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 146.645437][ T5971] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 146.806336][ T5971] usb 3-1: USB disconnect, device number 5 [ 147.066687][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 147.068754][ T5879] usb 5-1: USB disconnect, device number 5 [ 147.113571][ T5879] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 147.173794][ T5879] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 147.207362][ T5879] quatech2 5-1:0.51: device disconnected [ 147.898305][ T7289] netlink: 'syz.2.593': attribute type 1 has an invalid length. [ 147.915194][ T7289] netlink: 'syz.2.593': attribute type 2 has an invalid length. [ 148.138232][ T7294] Bluetooth: MGMT ver 1.23 [ 148.409196][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 148.579510][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 148.604322][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 148.649246][ T10] usb 5-1: config 0 has no interface number 0 [ 148.684840][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 148.718118][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.752955][ T10] usb 5-1: Product: syz [ 148.757202][ T10] usb 5-1: Manufacturer: syz [ 148.792151][ T10] usb 5-1: SerialNumber: syz [ 148.804138][ T10] usb 5-1: config 0 descriptor?? [ 148.822174][ T10] smsc95xx v2.0.0 [ 149.444896][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 149.489260][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 149.536373][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 149.573006][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 149.631650][ T10] usb 5-1: USB disconnect, device number 6 [ 149.699969][ T7329] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.160926][ T10] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 151.341353][ T10] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 151.359687][ T10] usb 2-1: config 150 has no interface number 0 [ 151.378747][ T10] usb 2-1: config 150 interface 204 has no altsetting 0 [ 151.388195][ T7397] Illegal XDP return value 96 on prog (id 71) dev syz_tun, expect packet loss! [ 151.397304][ T10] usb 2-1: config 150 interface 1 has no altsetting 0 [ 151.401340][ T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 151.434539][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.459170][ T10] usb 2-1: Product: syz [ 151.463415][ T10] usb 2-1: Manufacturer: syz [ 151.484571][ T10] usb 2-1: SerialNumber: syz [ 151.724100][ T10] xr_serial 2-1:150.204: xr_serial converter detected [ 152.197214][ T7418] syzkaller1: entered promiscuous mode [ 152.238337][ T7418] syzkaller1: entered allmulticast mode [ 152.277333][ T7422] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 152.320652][ T7428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.526335][ T10] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 152.534359][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 152.588695][ T10] usb 2-1: USB disconnect, device number 5 [ 152.611163][ T10] xr_serial 2-1:150.204: device disconnected [ 153.654401][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 153.779245][ T52] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.846597][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 153.939220][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 153.956131][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.978655][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.001298][ T52] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.019255][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.050682][ T52] usb 3-1: config 0 descriptor?? [ 154.069963][ T52] hub 3-1:0.0: USB hub found [ 154.271850][ T52] hub 3-1:0.0: 1 port detected [ 154.478863][ T52] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 154.506681][ T52] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 154.540305][ T52] usbhid 3-1:0.0: can't add hid device: -71 [ 154.546470][ T52] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 154.624396][ T52] usb 3-1: USB disconnect, device number 6 [ 155.130327][ T52] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 155.300117][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.410913][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.431538][ T52] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 155.449454][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.480916][ T52] usb 4-1: config 0 descriptor?? [ 155.529430][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.696912][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 155.728195][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.749236][ T10] usb 1-1: Product: syz [ 155.754766][ T10] usb 1-1: Manufacturer: syz [ 155.809322][ T10] usb 1-1: SerialNumber: syz [ 155.850315][ T10] usb 1-1: config 0 descriptor?? [ 155.890710][ T5834] Bluetooth: hci4: Dropping invalid advertising data [ 155.899537][ T5834] Bluetooth: hci4: Malformed LE Event: 0x02 [ 155.923820][ T52] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 155.941320][ T52] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 155.948407][ T52] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 155.967321][ T52] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 155.975402][ T52] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 155.987626][ T52] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 156.123971][ T52] lenovo 0003:17EF:6047.0007: Failed to switch F7/9/11 mode: -71 [ 156.147315][ T52] lenovo 0003:17EF:6047.0007: Failed to switch middle button: -71 [ 156.170131][ T52] lenovo 0003:17EF:6047.0007: Fn-lock setting failed: -71 [ 156.192013][ T52] lenovo 0003:17EF:6047.0007: Sensitivity setting failed: -71 [ 156.241545][ T52] usb 4-1: USB disconnect, device number 5 [ 156.275249][ T10] usb 1-1: f81604_write: reg: 105 data: 1 failed: -EPROTO [ 156.299479][ T10] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 156.338531][ T10] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 156.402057][ T10] usb 1-1: USB disconnect, device number 5 [ 156.830323][ T5971] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 156.947461][ T7532] Zero length message leads to an empty skb [ 157.016683][ T5971] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.066052][ T5971] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 157.106428][ T5971] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.141879][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.188529][ T7525] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 157.228905][ T5971] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.717712][ T978] usb 3-1: USB disconnect, device number 7 [ 159.148077][ T7587] loop4: detected capacity change from 0 to 8 [ 159.169543][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.178755][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 159.188373][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.197612][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 159.208413][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 159.217703][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 159.226768][ T7587] Dev loop4: unable to read RDB block 8 [ 159.233018][ T2989] loop: Write error at byte offset 1, length 4096. [ 159.265069][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 159.274632][ C0] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 159.283479][ T7587] loop4: unable to read partition table [ 159.324370][ T7587] loop4: partition table beyond EOD, truncated [ 159.336428][ T7587] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 159.582146][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 159.598163][ T7597] netlink: 'syz.0.733': attribute type 2 has an invalid length. [ 160.373634][ T7623] loop4: detected capacity change from 0 to 8 [ 160.400197][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.409469][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.421203][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.430546][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.441170][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.450601][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.460969][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.470527][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.480672][ T7623] Dev loop4: unable to read RDB block 8 [ 160.495123][ T36] loop: Write error at byte offset 1, length 4096. [ 160.503888][ T7623] loop4: unable to read partition table [ 160.514371][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 160.525269][ C1] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 160.529607][ T7623] loop4: partition table beyond EOD, truncated [ 160.560627][ T7623] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 160.616404][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 160.625793][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 160.649550][ T5202] ldm_validate_partition_table(): Disk read failed. [ 160.685383][ T5202] Dev loop4: unable to read RDB block 0 [ 160.700019][ T5202] loop4: unable to read partition table [ 160.713544][ T5202] loop4: partition table beyond EOD, truncated [ 161.518486][ T7648] netlink: 64 bytes leftover after parsing attributes in process `syz.3.755'. [ 161.648641][ T7653] loop9: detected capacity change from 0 to 8 [ 161.715437][ T7653] Dev loop9: unable to read RDB block 8 [ 161.730057][ T7653] loop9: unable to read partition table [ 161.736262][ T7653] loop9: partition table beyond EOD, truncated [ 161.769254][ T7653] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 162.370978][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 162.543494][ T24] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 162.558975][ T24] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.576086][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.593333][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.615229][ T7669] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 162.635835][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.016018][ T52] usb 1-1: USB disconnect, device number 6 [ 163.559194][ T52] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 163.684769][ T7703] loop6: detected capacity change from 0 to 524287997 [ 163.764747][ T52] usb 4-1: Using ep0 maxpacket: 32 [ 163.797048][ T52] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 163.852429][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.901010][ T7709] loop2: detected capacity change from 0 to 7 [ 163.916808][ T7709] Dev loop2: unable to read RDB block 7 [ 163.929475][ T52] usb 4-1: config 0 descriptor?? [ 163.944355][ T52] gspca_main: sq930x-2.14.0 probing 041e:403c [ 163.949240][ T7709] loop2: AHDI p2 p3 [ 163.957059][ T7709] loop2: partition table partially beyond EOD, truncated [ 163.989294][ T7709] loop2: p2 start 2507366258 is beyond EOD, truncated [ 164.800737][ T52] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 164.859257][ T52] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 164.896994][ T52] usb 4-1: USB disconnect, device number 6 [ 166.399342][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 166.399362][ T30] audit: type=1326 audit(1743694021.464:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7775 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 166.403457][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 166.455673][ T30] audit: type=1326 audit(1743694021.464:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7775 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c22929359 code=0x7ffc0000 [ 166.526328][ T30] audit: type=1326 audit(1743694021.464:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7775 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 166.539418][ T5879] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 166.552765][ T30] audit: type=1326 audit(1743694021.464:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7775 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c22929359 code=0x7ffc0000 [ 166.668565][ T30] audit: type=1326 audit(1743694021.464:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7775 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c22929359 code=0x7ffc0000 [ 166.788646][ T30] audit: type=1326 audit(1743694021.464:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7775 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 166.854613][ T30] audit: type=1326 audit(1743694021.504:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7775 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c22929359 code=0x7ffc0000 [ 166.898583][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 166.912476][ T5879] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 166.933021][ T5879] usb 1-1: config 0 has no interface number 0 [ 166.941753][ T5879] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 166.949217][ T30] audit: type=1326 audit(1743694021.504:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7775 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 166.967102][ T5879] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 167.035944][ T5879] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 167.044088][ T30] audit: type=1326 audit(1743694021.504:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7775 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 167.053906][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 167.076861][ T5879] usb 1-1: Product: syz [ 167.082410][ T5879] usb 1-1: SerialNumber: syz [ 167.093055][ T5879] usb 1-1: config 0 descriptor?? [ 167.098445][ T30] audit: type=1326 audit(1743694021.504:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7775 comm="syz.3.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 167.102921][ T5879] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 167.135618][ T5879] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input13 [ 167.329625][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 167.737625][ T978] usb 1-1: USB disconnect, device number 7 [ 167.775276][ T978] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 167.883100][ T7812] vxcan1: tx address claim with different name [ 168.779321][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 168.949225][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 168.961757][ T24] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 169.024572][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.066777][ T24] usb 1-1: config 0 descriptor?? [ 169.104085][ T7856] loop2: detected capacity change from 0 to 7 [ 169.113290][ T7854] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 169.134577][ T7856] Dev loop2: unable to read RDB block 7 [ 169.144481][ T7856] loop2: unable to read partition table [ 169.154515][ T7856] loop2: partition table beyond EOD, truncated [ 169.173234][ T7856] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.830273][ T7869] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.095141][ T24] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 170.119476][ T24] asix 1-1:0.0: probe with driver asix failed with error -71 [ 170.169768][ T24] usb 1-1: USB disconnect, device number 8 [ 170.342444][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.351352][ T5834] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 171.272174][ T7884] Invalid ELF header magic: != ELF [ 172.049434][ T5879] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.222361][ T5879] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 172.308350][ T5879] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 172.343394][ T5879] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 172.387405][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.444538][ T7914] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 172.526835][ T5879] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.600611][ T52] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.769227][ T52] usb 1-1: Using ep0 maxpacket: 16 [ 172.781776][ T52] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 172.813039][ T52] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.855555][ T52] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.872496][ T5879] usb 5-1: USB disconnect, device number 7 [ 172.899914][ T52] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 172.912350][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.923978][ T52] usb 1-1: Product: syz [ 172.928272][ T52] usb 1-1: Manufacturer: syz [ 172.941357][ T52] usb 1-1: SerialNumber: syz [ 173.415067][ T52] usb 1-1: 0:2 : does not exist [ 173.576255][ T7948] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 173.679599][ T5971] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 173.891706][ T5971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.919276][ T5971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.949384][ T5879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.951274][ T5971] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.999770][ T5971] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.019559][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.037260][ T5971] usb 3-1: config 0 descriptor?? [ 174.068394][ T52] usb 1-1: USB disconnect, device number 9 [ 174.131070][ T5879] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.143065][ T5879] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.154145][ T5879] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 174.163945][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.172473][ T5879] usb 5-1: SerialNumber: syz [ 174.271600][ T7930] udevd[7930]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.399482][ T5879] usb 5-1: 0:2 : does not exist [ 174.428881][ T5879] usb 5-1: USB disconnect, device number 8 [ 174.482145][ T5971] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 174.551443][ T5971] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 174.652314][ T7930] udevd[7930]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.896022][ T7966] netlink: 64 bytes leftover after parsing attributes in process `syz.0.892'. [ 176.314236][ T8018] loop2: detected capacity change from 0 to 7 [ 176.428406][ T8018] Dev loop2: unable to read RDB block 7 [ 176.465523][ T8018] loop2: unable to read partition table [ 176.493406][ T8018] loop2: partition table beyond EOD, truncated [ 176.549281][ T8018] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 176.567221][ T5879] usb 3-1: USB disconnect, device number 8 [ 178.224447][ T5971] kernel read not supported for file /sequencer (pid: 5971 comm: kworker/0:6) [ 179.077257][ T8106] usb usb1: usbfs: process 8106 (syz.4.936) did not claim interface 0 before use [ 179.219353][ T978] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 179.404052][ T978] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.423380][ T978] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 179.456577][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 179.487245][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 179.523179][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 179.562909][ T978] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 179.582507][ T978] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.615656][ T978] usb 2-1: Product: syz [ 179.645759][ T978] usb 2-1: Manufacturer: syz [ 179.699202][ T978] cdc_wdm 2-1:1.0: skipping garbage [ 179.704515][ T978] cdc_wdm 2-1:1.0: skipping garbage [ 179.727878][ T978] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 179.744105][ T978] cdc_wdm 2-1:1.0: Unknown control protocol [ 179.930029][ T978] usb 2-1: USB disconnect, device number 6 [ 180.361635][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.947'. [ 180.667841][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.949'. [ 180.692044][ T8141] netlink: 112 bytes leftover after parsing attributes in process `syz.3.949'. [ 180.714107][ T8141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.949'. [ 180.909995][ T8145] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 181.600621][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 181.779538][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 181.788553][ T5879] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 181.801567][ T5879] usb 5-1: config 0 has no interface number 0 [ 181.807961][ T5879] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.826588][ T5879] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 181.852408][ T5879] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 181.867732][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 181.876585][ T5879] usb 5-1: Product: syz [ 181.885659][ T5879] usb 5-1: SerialNumber: syz [ 181.912641][ T5879] usb 5-1: config 0 descriptor?? [ 181.922802][ T5879] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 181.937037][ T5879] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input15 [ 182.154014][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 182.156010][ T978] usb 5-1: USB disconnect, device number 9 [ 182.161122][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 182.207551][ T978] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 183.519249][ T5879] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.709904][ T5879] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 183.757896][ T5879] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 183.799327][ T5879] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 183.837239][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.862845][ T8180] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.882913][ T5879] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.171687][ T8207] program syz.2.978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.329977][ T10] usb 2-1: USB disconnect, device number 7 [ 184.613784][ T8213] syzkaller1: entered promiscuous mode [ 184.624707][ T8213] syzkaller1: entered allmulticast mode [ 185.082018][ T8229] sock: sock_set_timeout: `syz.1.988' (pid 8229) tries to set negative timeout [ 185.416300][ T8240] loop8: detected capacity change from 0 to 1 [ 185.468190][ T8240] Dev loop8: unable to read RDB block 1 [ 185.515961][ T8240] loop8: unable to read partition table [ 185.532957][ T8240] loop8: partition table beyond EOD, truncated [ 185.546600][ T8240] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 186.012259][ T8258] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1002'. [ 187.780493][ T5832] Bluetooth: hci5: command 0x1003 tx timeout [ 187.787772][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 187.889691][ T8310] input: syz1 as /devices/virtual/input/input16 [ 188.276482][ T8326] vcan0: tx drop: invalid da for name 0x000000000000f000 [ 188.713075][ T8345] vlan2: entered promiscuous mode [ 188.718291][ T8345] bond0: entered promiscuous mode [ 188.755664][ T8345] bond_slave_0: entered promiscuous mode [ 188.779494][ T8345] bond_slave_1: entered promiscuous mode [ 188.785906][ T8345] bond1: entered promiscuous mode [ 188.836936][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1044'. [ 189.336072][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 189.336094][ T30] audit: type=1326 audit(1743694044.404:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 189.403288][ T30] audit: type=1326 audit(1743694044.404:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 189.433763][ T30] audit: type=1326 audit(1743694044.404:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 189.457083][ T30] audit: type=1326 audit(1743694044.404:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 189.482059][ T5879] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 189.522158][ T30] audit: type=1326 audit(1743694044.414:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8359 comm="syz.0.1048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x7ffc0000 [ 189.679268][ T5879] usb 4-1: Using ep0 maxpacket: 8 [ 189.687814][ T5879] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.725256][ T5879] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.770362][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.813288][ T5879] usb 4-1: config 0 descriptor?? [ 190.072194][ T5879] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 190.282847][ T8388] syz_tun: entered promiscuous mode [ 190.317179][ T8388] syz_tun: left promiscuous mode [ 190.434702][ T8386] syzkaller1: entered promiscuous mode [ 190.453300][ T8386] syzkaller1: entered allmulticast mode [ 190.482048][ T5879] usb 4-1: USB disconnect, device number 7 [ 191.762483][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.173560][ T10] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 192.186388][ T10] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 192.200547][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 192.211590][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.228234][ T8432] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 192.268973][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 192.668959][ T52] usb 2-1: USB disconnect, device number 8 [ 193.509999][ T52] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 193.759265][ T52] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.771330][ T52] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.826287][ T52] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 193.838445][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.847750][ T52] usb 3-1: Product: syz [ 193.863086][ T52] usb 3-1: Manufacturer: syz [ 193.868231][ T52] usb 3-1: SerialNumber: syz [ 194.144839][ T24] usb 3-1: USB disconnect, device number 9 [ 195.316229][ T30] audit: type=1326 audit(1743694050.384:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 195.401544][ T30] audit: type=1326 audit(1743694050.424:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 195.486496][ T30] audit: type=1326 audit(1743694050.424:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 195.513296][ T30] audit: type=1326 audit(1743694050.424:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 195.618555][ T30] audit: type=1326 audit(1743694050.424:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 195.724185][ T30] audit: type=1326 audit(1743694050.424:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 195.754805][ T30] audit: type=1326 audit(1743694050.424:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 195.816109][ T30] audit: type=1326 audit(1743694050.424:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 195.883007][ T8515] input: syz1 as /devices/virtual/input/input17 [ 195.932482][ T30] audit: type=1326 audit(1743694050.424:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 196.118836][ T30] audit: type=1326 audit(1743694050.424:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8506 comm="syz.3.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2298d169 code=0x7ffc0000 [ 196.959513][ T5879] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 197.119446][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 197.141085][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.166049][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.196597][ T5879] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.216999][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.240739][ T5879] usb 3-1: Product: syz [ 197.245412][ T5879] usb 3-1: Manufacturer: syz [ 197.277224][ T5879] usb 3-1: SerialNumber: syz [ 197.574395][ T52] IPVS: starting estimator thread 0... [ 197.575656][ T8550] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 197.669671][ T8552] IPVS: using max 27 ests per chain, 64800 per kthread [ 197.719444][ T5879] usb 3-1: 0:2 : does not exist [ 198.079288][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 198.249405][ T5971] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 198.265575][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.294429][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.320419][ T978] usb 3-1: USB disconnect, device number 10 [ 198.365487][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.379816][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.395532][ T9] usb 1-1: Product: syz [ 198.406447][ T9] usb 1-1: Manufacturer: syz [ 198.422847][ T9] usb 1-1: SerialNumber: syz [ 198.458138][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.514739][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.569489][ T5971] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 198.608740][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.656517][ T5971] usb 4-1: config 0 descriptor?? [ 198.683254][ T9] usb 1-1: 0:2 : does not exist [ 198.710048][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 198.751861][ T9] usb 1-1: USB disconnect, device number 10 [ 198.933143][ T8580] loop8: detected capacity change from 0 to 7 [ 198.945807][ T8580] Dev loop8: unable to read RDB block 7 [ 198.959369][ T8580] loop8: unable to read partition table [ 198.966268][ T8580] loop8: partition table beyond EOD, truncated [ 198.993241][ T8580] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 199.023908][ T8585] 9pnet: p9_errstr2errno: server reported unknown error [ 199.107836][ T5971] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 199.130714][ T5971] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 199.164442][ T5971] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 199.419728][ T8601] batadv_slave_0: entered promiscuous mode [ 199.458002][ T8600] batadv_slave_0: left promiscuous mode [ 199.538605][ T52] usb 4-1: USB disconnect, device number 8 [ 199.624460][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.631989][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.779220][ T5971] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.971628][ T5971] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 199.989229][ T5971] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.999551][ T978] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 200.020565][ T5971] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 200.030834][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 200.039277][ T5971] usb 2-1: Product: syz [ 200.044858][ T5971] usb 2-1: Manufacturer: syz [ 200.049267][ T52] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 200.049663][ T5971] usb 2-1: SerialNumber: syz [ 200.073504][ T5971] usb 2-1: config 0 descriptor?? [ 200.091463][ T5971] usb 2-1: selecting invalid altsetting 0 [ 200.181396][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.209206][ T978] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 200.218783][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.222519][ T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.248718][ T978] usb 3-1: config 0 descriptor?? [ 200.257220][ T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.300834][ T52] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 200.319234][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 200.336449][ T24] usb 2-1: USB disconnect, device number 9 [ 200.349629][ T52] usb 5-1: SerialNumber: syz [ 200.596029][ T52] usb 5-1: 0:2 : does not exist [ 200.653368][ T52] usb 5-1: USB disconnect, device number 10 [ 200.679872][ T978] cherry 0003:046A:0023.000A: unknown main item tag 0x0 [ 200.701238][ T978] cherry 0003:046A:0023.000A: hidraw0: USB HID v0.00 Device [HID 046a:0023] on usb-dummy_hcd.2-1/input0 [ 200.893760][ T978] usb 3-1: USB disconnect, device number 11 [ 201.935303][ T8668] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 201.946537][ T8664] IPVS: stopping master sync thread 8668 ... [ 202.512399][ T8690] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 202.534090][ T8690] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 202.795658][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'. [ 203.007699][ T8709] loop6: detected capacity change from 0 to 63 [ 203.037728][ C1] blk_print_req_error: 15 callbacks suppressed [ 203.037753][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 203.061718][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.071446][ C1] buffer_io_error: 15 callbacks suppressed [ 203.071462][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.086416][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.096197][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 203.104338][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.115311][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 203.123473][ C1] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.133506][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 203.143929][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.153493][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.163170][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.172793][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 203.181442][ C0] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.191642][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 203.199757][ C0] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.209674][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 203.220457][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 203.229921][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 203.238868][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 204.051436][ T8742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.281989][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 204.282011][ T30] audit: type=1326 audit(1743694059.354:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8754 comm="syz.1.1227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f548cf8d169 code=0x0 [ 204.286443][ T8752] tun0: tun_chr_ioctl cmd 1074025675 [ 204.317610][ T8752] tun0: persist enabled [ 204.337910][ T8752] tun0: tun_chr_ioctl cmd 1074025675 [ 204.345184][ T8752] tun0: persist enabled [ 204.424658][ T8761] input: syz1 as /devices/virtual/input/input18 [ 204.718943][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 205.989225][ T978] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 206.161358][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 206.183506][ T978] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 206.198963][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.214783][ T978] usb 2-1: Product: syz [ 206.223035][ T978] usb 2-1: Manufacturer: syz [ 206.228161][ T978] usb 2-1: SerialNumber: syz [ 206.250601][ T978] usb 2-1: config 0 descriptor?? [ 206.673008][ T978] airspy 2-1:0.0: Board ID: 00 [ 206.698333][ T978] airspy 2-1:0.0: Firmware version: [ 206.799396][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 206.991684][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 207.036516][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.194770][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.214428][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.225314][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 207.269194][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.292378][ T9] usb 3-1: config 0 descriptor?? [ 207.384137][ T978] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 207.396315][ T978] airspy 2-1:0.0: Registered as swradio24 [ 207.402975][ T978] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 207.416792][ T978] usb 2-1: USB disconnect, device number 10 [ 207.764613][ T9] hid (null): unknown global tag 0xd [ 207.799209][ T9] hid (null): global environment stack underflow [ 207.813416][ T9] hid (null): unknown global tag 0xd [ 207.827850][ T9] hid (null): invalid report_size 20669 [ 207.943054][ T9] usb 3-1: USB disconnect, device number 12 [ 208.119469][ T978] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 210.387368][ T8892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.033084][ T30] audit: type=1326 audit(1743694066.094:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8901 comm="syz.1.1293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f548cf8d169 code=0x0 [ 211.747012][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.789502][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.209360][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 212.376752][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.395439][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.425037][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 212.452270][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.484148][ T10] usb 5-1: config 0 descriptor?? [ 212.809960][ T5834] block nbd1: Receive control failed (result -32) [ 212.832630][ T8925] block nbd1: shutting down sockets [ 212.960418][ T10] logitech 0003:046D:C293.000C: unbalanced collection at end of report description [ 212.987019][ T10] logitech 0003:046D:C293.000C: parse failed [ 213.014429][ T10] logitech 0003:046D:C293.000C: probe with driver logitech failed with error -22 [ 213.177450][ T10] usb 5-1: USB disconnect, device number 11 [ 213.767571][ T8816] Set syz1 is full, maxelem 65536 reached [ 214.712513][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 214.916292][ T8988] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 214.922218][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.923723][ T24] IPVS: starting estimator thread 0... [ 214.942124][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.970526][ T9] usb 3-1: config 0 descriptor?? [ 214.994247][ T9] cp210x 3-1:0.0: cp210x converter detected [ 215.042292][ T8994] IPVS: using max 28 ests per chain, 67200 per kthread [ 215.483591][ T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 215.724533][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 216.179638][ T9011] could not open pipe file descriptor [ 216.225305][ T24] usb 3-1: USB disconnect, device number 13 [ 216.237943][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 216.359718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 216.435259][ T24] cp210x 3-1:0.0: device disconnected [ 217.063980][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 217.064002][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 217.064047][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 217.070806][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 217.226907][ T9031] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 217.228429][ T5879] IPVS: starting estimator thread 0... [ 217.379633][ T9035] IPVS: using max 26 ests per chain, 62400 per kthread [ 217.619258][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 217.799300][ T10] usb 5-1: config 0 has no interfaces? [ 217.805532][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 217.858379][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.903377][ T10] usb 5-1: config 0 descriptor?? [ 218.142848][ T9037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.155664][ T9037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.174831][ T9037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.183939][ T9037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.193932][ T24] usb 5-1: USB disconnect, device number 12 [ 218.649353][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 218.812699][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.839971][ T24] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 218.873400][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.894708][ T24] usb 5-1: Product: syz [ 218.900275][ T24] usb 5-1: Manufacturer: syz [ 218.905228][ T24] usb 5-1: SerialNumber: syz [ 218.933184][ T30] audit: type=1326 audit(1743694074.004:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548cf8d169 code=0x7ffc0000 [ 218.988564][ T30] audit: type=1326 audit(1743694074.004:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548cf8d169 code=0x7ffc0000 [ 219.046736][ T30] audit: type=1326 audit(1743694074.004:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f548cf8d169 code=0x7ffc0000 [ 219.131565][ T24] usb 5-1: selecting invalid altsetting 1 [ 219.150526][ T30] audit: type=1326 audit(1743694074.004:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548cf8d169 code=0x7ffc0000 [ 219.174521][ T24] cdc_ncm 5-1:1.0: bind() failure [ 219.228654][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 219.259550][ T30] audit: type=1326 audit(1743694074.004:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548cf8d169 code=0x7ffc0000 [ 219.353574][ T30] audit: type=1326 audit(1743694074.024:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f548cf8d169 code=0x7ffc0000 [ 219.403391][ T24] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 219.431774][ T24] usb 5-1: USB disconnect, device number 13 [ 219.437887][ T30] audit: type=1326 audit(1743694074.024:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548cf8d169 code=0x7ffc0000 [ 219.508955][ T30] audit: type=1326 audit(1743694074.024:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f548cf8d169 code=0x7ffc0000 [ 219.557773][ T30] audit: type=1326 audit(1743694074.154:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548cf8d169 code=0x7ffc0000 [ 219.620338][ T30] audit: type=1326 audit(1743694074.154:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9045 comm="syz.1.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548cf8d169 code=0x7ffc0000 [ 219.945112][ T9084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1348'. [ 220.689262][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 220.692879][ T9125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1367'. [ 220.849317][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 220.869308][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 220.878077][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.910774][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.928385][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.942922][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.964371][ T24] usb 2-1: Product: syz [ 220.968828][ T24] usb 2-1: Manufacturer: syz [ 221.002524][ T24] usb 2-1: SerialNumber: syz [ 221.138697][ T9143] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 221.375614][ T9151] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 221.435684][ T24] usb 2-1: 0:2 : does not exist [ 222.093751][ T24] usb 2-1: USB disconnect, device number 11 [ 222.771573][ T9176] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 223.619457][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 223.619564][ T9157] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 223.794977][ T9207] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 224.146991][ T9219] fuse: Bad value for 'fd' [ 224.489021][ T9157] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 224.524550][ T9157] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 224.530826][ T9157] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 224.541826][ T9157] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.547923][ T9157] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 224.557740][ T9157] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 224.563915][ T9157] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 224.575158][ T9157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.582679][ T9157] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.592929][ T9157] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.606134][ T9157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.852573][ T5879] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 224.870030][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 224.928241][ T9230] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1413'. [ 225.039252][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 225.049526][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 225.051756][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 225.068901][ T10] usb 2-1: config 0 has no interface number 0 [ 225.079995][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 225.090381][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.099038][ T10] usb 2-1: Product: syz [ 225.107274][ T10] usb 2-1: Manufacturer: syz [ 225.107468][ T5879] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 225.114116][ T10] usb 2-1: SerialNumber: syz [ 225.131441][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.145415][ T10] usb 2-1: config 0 descriptor?? [ 225.150819][ T978] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 225.159166][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.169900][ T10] smsc95xx v2.0.0 [ 225.177029][ T5879] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.210233][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.218567][ T5879] usb 3-1: Product: syz [ 225.250015][ T5879] usb 3-1: Manufacturer: syz [ 225.256040][ T5879] usb 3-1: SerialNumber: syz [ 225.338861][ T978] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 225.351929][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.363616][ T978] usb 5-1: Product: syz [ 225.379313][ T978] usb 5-1: Manufacturer: syz [ 225.388268][ T978] usb 5-1: SerialNumber: syz [ 225.400633][ T978] usb 5-1: config 0 descriptor?? [ 225.413484][ T978] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 225.695567][ T5879] usb 3-1: 0:2 : does not exist [ 225.709179][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 226.183555][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 226.205987][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 226.231883][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 226.255559][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 226.290509][ T10] usb 2-1: USB disconnect, device number 12 [ 226.370846][ T5879] usb 3-1: USB disconnect, device number 14 [ 226.435185][ T978] gspca_sunplus: reg_r err -71 [ 226.440433][ T978] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 226.466893][ T978] usb 5-1: USB disconnect, device number 14 [ 226.579379][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 226.586465][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 226.586514][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 226.594071][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 226.614099][ T9253] kernel read not supported for file /!selinuxselinux (pid: 9253 comm: syz.3.1424) [ 226.628520][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 226.628540][ T30] audit: type=1800 audit(1743694081.694:101): pid=9253 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1424" name="!selinuxselinux" dev="mqueue" ino=24338 res=0 errno=0 [ 227.051527][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 227.096512][ T9268] overlayfs: workdir and upperdir must reside under the same mount [ 227.539699][ T9286] TCP: tcp_parse_options: Illegal window scaling value 224 > 14 received [ 227.779737][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 227.835539][ T9298] batadv_slave_1: entered promiscuous mode [ 227.870589][ T9297] batadv_slave_1: left promiscuous mode [ 228.116583][ T9315] syz.0.1453 (9315): /proc/9312/oom_adj is deprecated, please use /proc/9312/oom_score_adj instead. [ 228.263310][ T9320] lo speed is unknown, defaulting to 1000 [ 228.269992][ T9320] lo speed is unknown, defaulting to 1000 [ 228.294642][ T9320] lo speed is unknown, defaulting to 1000 [ 228.378969][ T9320] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 228.489988][ T9320] lo speed is unknown, defaulting to 1000 [ 228.510234][ T9320] lo speed is unknown, defaulting to 1000 [ 228.532635][ T9320] lo speed is unknown, defaulting to 1000 [ 228.553739][ T9320] lo speed is unknown, defaulting to 1000 [ 228.573689][ T9320] lo speed is unknown, defaulting to 1000 [ 228.659471][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 228.659503][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 228.665583][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 228.677832][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 228.705160][ T9339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1463'. [ 229.489260][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 229.647615][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.675333][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.724753][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.754494][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.779432][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.810143][ T10] usb 1-1: config 0 descriptor?? [ 230.159547][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 230.276767][ T10] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 230.303987][ T10] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 230.316786][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 230.334381][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.335891][ T9395] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1489'. [ 230.384787][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 230.415696][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 230.426982][ T9] usb 4-1: Product: syz [ 230.437433][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 230.437515][ T9] usb 4-1: Manufacturer: syz [ 230.458793][ T9] usb 4-1: SerialNumber: syz [ 230.469797][ T9] usb 4-1: config 0 descriptor?? [ 230.708730][ T52] usb 4-1: USB disconnect, device number 10 [ 230.739310][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 231.109313][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.119749][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 231.260861][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 231.277052][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.292128][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 231.293015][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.304527][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.322281][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 231.325357][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.334932][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.345279][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 231.367750][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 231.378414][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.391350][ T9] usb 3-1: config 0 descriptor?? [ 231.392179][ T24] usb 5-1: config 0 descriptor?? [ 231.402301][ T9] hub 3-1:0.0: USB hub found [ 231.602817][ T9] hub 3-1:0.0: 6 ports detected [ 231.609325][ T9] hub 3-1:0.0: insufficient power available to use all downstream ports [ 231.630810][ T9426] Falling back ldisc for ttyS3. [ 231.813926][ T9] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 231.823627][ T24] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 231.827589][ T9] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 231.841484][ T24] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 231.859440][ T24] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 231.864909][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 231.871371][ T24] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 231.879556][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 231.890834][ T24] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 231.898302][ T24] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 231.926338][ T24] hid-picolcd 0003:04D8:C002.000E: unknown main item tag 0x0 [ 231.941728][ T9] usb 3-1: USB disconnect, device number 15 [ 232.009709][ T24] hid-picolcd 0003:04D8:C002.000E: No report with id 0x11 found [ 232.030456][ T24] usb 5-1: USB disconnect, device number 15 [ 232.269240][ T3084] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 232.342504][ T10] usb 1-1: USB disconnect, device number 11 [ 232.429319][ T3084] usb 2-1: Using ep0 maxpacket: 16 [ 232.458412][ T3084] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.471651][ T3084] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.481640][ T3084] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 232.494783][ T3084] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 232.505130][ T3084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.585351][ T3084] usb 2-1: config 0 descriptor?? [ 233.002120][ T3084] microsoft 0003:045E:07DA.000F: unknown main item tag 0x1 [ 233.043278][ T3084] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000F/input/input20 [ 233.095799][ T9474] block device autoloading is deprecated and will be removed. [ 233.129183][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 233.155588][ T3084] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 233.179800][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 233.205974][ T3084] usb 2-1: USB disconnect, device number 13 [ 233.283798][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 233.299567][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.346823][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.359784][ T10] usb 5-1: config 0 descriptor?? [ 233.368939][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.372501][ T9481] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 233.387865][ T10] cp210x 5-1:0.0: cp210x converter detected [ 233.394894][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.408576][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.420568][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.437199][ T9] usb 4-1: config 0 descriptor?? [ 233.521329][ T30] audit: type=1326 audit(1743694088.584:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efdee729359 code=0x7ffc0000 [ 233.564445][ T30] audit: type=1326 audit(1743694088.584:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdee78d169 code=0x7ffc0000 [ 233.598244][ T30] audit: type=1326 audit(1743694088.584:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efdee729359 code=0x7ffc0000 [ 233.630605][ T30] audit: type=1326 audit(1743694088.584:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdee78d169 code=0x7ffc0000 [ 233.661329][ T30] audit: type=1326 audit(1743694088.594:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efdee729359 code=0x7ffc0000 [ 233.683126][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.690086][ T30] audit: type=1326 audit(1743694088.594:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efdee729359 code=0x7ffc0000 [ 233.737571][ T30] audit: type=1326 audit(1743694088.594:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efdee729359 code=0x7ffc0000 [ 233.763722][ T30] audit: type=1326 audit(1743694088.594:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efdee729359 code=0x7ffc0000 [ 233.800968][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 233.827696][ T30] audit: type=1326 audit(1743694088.594:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efdee729359 code=0x7ffc0000 [ 233.861170][ T30] audit: type=1326 audit(1743694088.594:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9482 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efdee729359 code=0x7ffc0000 [ 233.885162][ T9] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 233.914263][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 234.025460][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 234.223391][ T10] usb 5-1: USB disconnect, device number 16 [ 234.236987][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 234.263407][ T10] cp210x 5-1:0.0: device disconnected [ 234.807863][ T9529] nullb0: AHDI p1 p2 [ 234.818095][ T9529] nullb0: p1 start 795240812 is beyond EOD, truncated [ 235.961074][ T3084] usb 4-1: USB disconnect, device number 11 [ 236.070234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 236.400540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 236.969212][ T52] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 237.144793][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.171817][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.198221][ T52] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.229295][ T52] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.250500][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.272102][ T52] usb 2-1: config 0 descriptor?? [ 237.718084][ T52] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 237.763400][ T52] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 238.867586][ T9646] veth3: entered promiscuous mode [ 238.904157][ T9649] capability: warning: `syz.0.1598' uses 32-bit capabilities (legacy support in use) [ 238.933506][ T9649] program syz.0.1598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.040715][ T9651] sctp: [Deprecated]: syz.4.1599 (pid 9651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.040715][ T9651] Use struct sctp_sack_info instead [ 239.213619][ T9657] input: syz0 as /devices/virtual/input/input23 [ 239.801028][ T3084] usb 2-1: USB disconnect, device number 14 [ 240.083315][ T30] kauditd_printk_skb: 174 callbacks suppressed [ 240.083336][ T30] audit: type=1326 audit(1743694095.154:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9690 comm="syz.0.1618" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c4b78d169 code=0x0 [ 240.169396][ T3084] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 240.331648][ T3084] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 240.346044][ T3084] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 240.358677][ T3084] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.376428][ T3084] usb 2-1: config 0 descriptor?? [ 240.383021][ T9685] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.601972][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'. [ 240.759231][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 240.843286][ T3084] elan 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 240.944521][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.972067][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.999280][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 241.036352][ T3084] usb 2-1: USB disconnect, device number 15 [ 241.044925][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.073495][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.103396][ T24] usb 5-1: config 0 descriptor?? [ 241.171260][ T9710] Bluetooth: MGMT ver 1.23 [ 241.534282][ T24] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 241.594285][ T24] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 242.488799][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 242.657607][ T9748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.665306][ T9748] IPv6: NLM_F_CREATE should be set when creating new route [ 242.962867][ T9758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1648'. [ 243.440876][ T5971] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 243.640878][ T5971] usb 3-1: Using ep0 maxpacket: 8 [ 243.660002][ T5971] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.671794][ T10] usb 5-1: USB disconnect, device number 17 [ 243.709566][ T5971] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 243.728481][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.750825][ T5971] usb 3-1: config 0 descriptor?? [ 243.770890][ T5971] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 244.196307][ T9793] KVM: debugfs: duplicate directory 9793-4 [ 244.370819][ T5971] gspca_vc032x: reg_r err -71 [ 244.376299][ T5971] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 244.388095][ T5971] usb 3-1: USB disconnect, device number 16 [ 244.399684][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 244.559374][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 244.570691][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.588345][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.598621][ T24] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 244.608131][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.616471][ T3084] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 244.642571][ T24] usb 1-1: config 0 descriptor?? [ 244.779213][ T3084] usb 4-1: Using ep0 maxpacket: 16 [ 244.787466][ T3084] usb 4-1: config 0 interface 0 has no altsetting 0 [ 244.800694][ T3084] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 244.813118][ T3084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.825757][ T3084] usb 4-1: config 0 descriptor?? [ 245.065190][ T24] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 245.279906][ T24] ft260 0003:0403:6030.0014: chip code: 0000 0000 [ 245.305212][ T3084] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0015/input/input25 [ 245.480675][ T24] ft260 0003:0403:6030.0014: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 245.510759][ T3084] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0015/input/input26 [ 245.620300][ T3084] kye 0003:0458:5013.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 245.683123][ T3084] usb 4-1: USB disconnect, device number 12 [ 245.702896][ T24] ft260 0003:0403:6030.0014: failed to retrieve status: -71, no wakeup [ 245.727166][ T24] ft260 0003:0403:6030.0014: failed to retrieve status: -71 [ 245.747513][ T24] ft260 0003:0403:6030.0014: failed to reset I2C controller: -71 [ 245.807088][ T24] usb 1-1: USB disconnect, device number 12 [ 245.916675][ T9828] sctp: [Deprecated]: syz.4.1673 (pid 9828) Use of int in max_burst socket option deprecated. [ 245.916675][ T9828] Use struct sctp_assoc_value instead [ 246.327962][ T9838] input: syz1 as /devices/virtual/input/input27 [ 246.367159][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 246.806519][ T3084] kernel read not supported for file /video7 (pid: 3084 comm: kworker/1:2) [ 247.112883][ T9879] input: syz1 as /devices/virtual/input/input28 [ 247.368706][ T9888] lo speed is unknown, defaulting to 1000 [ 248.701749][ T9933] sctp: [Deprecated]: syz.0.1718 (pid 9933) Use of int in max_burst socket option deprecated. [ 248.701749][ T9933] Use struct sctp_assoc_value instead [ 249.274350][ T9955] netlink: 'syz.0.1725': attribute type 29 has an invalid length. [ 249.314904][ T9955] netlink: 'syz.0.1725': attribute type 29 has an invalid length. [ 249.350463][ T9955] netlink: 'syz.0.1725': attribute type 29 has an invalid length. [ 249.379586][ T3084] kernel read not supported for file /video7 (pid: 3084 comm: kworker/1:2) [ 249.389638][ T9955] netlink: 'syz.0.1725': attribute type 29 has an invalid length. [ 250.068088][ T9982] sctp: [Deprecated]: syz.3.1737 (pid 9982) Use of int in max_burst socket option deprecated. [ 250.068088][ T9982] Use struct sctp_assoc_value instead [ 250.923726][ T5971] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 250.992782][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 251.022433][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 251.123373][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.165524][ T5971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.185821][ T5971] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.201721][ T5971] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.215781][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 251.221418][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.232068][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.240551][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.252990][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 251.266914][ T5971] usb 4-1: config 0 descriptor?? [ 251.272167][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.282514][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.295857][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 251.307608][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.317101][ T9] usb 2-1: config 0 descriptor?? [ 251.338915][ T10] usb 3-1: config 0 descriptor?? [ 251.707436][ T5971] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 251.723467][ T5971] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 251.766227][ T10] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 251.781639][ T10] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 251.790851][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0018/input/input29 [ 251.804093][ T10] arvo 0003:1E7D:30D4.0017: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 251.936835][ T9] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0018/input/input30 [ 251.976779][ T3084] usb 4-1: USB disconnect, device number 13 [ 252.008798][ T9] kye 0003:0458:5013.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 252.171562][ T9] usb 2-1: USB disconnect, device number 16 [ 252.188664][ T3084] usb 3-1: USB disconnect, device number 17 [ 252.789945][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 252.959748][ T3084] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 252.961063][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 252.988278][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.013002][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.025506][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 253.035849][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.048895][ T9] usb 5-1: config 0 descriptor?? [ 253.132111][ T3084] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 253.147634][ T3084] usb 1-1: config 0 interface 0 has no altsetting 0 [ 253.165541][ T3084] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 253.193634][ T3084] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 253.212723][ T3084] usb 1-1: Product: syz [ 253.227866][ T3084] usb 1-1: Manufacturer: syz [ 253.235556][ T3084] usb 1-1: SerialNumber: syz [ 253.248392][T10044] lo speed is unknown, defaulting to 1000 [ 253.263155][ T3084] usb 1-1: config 0 descriptor?? [ 253.276468][ T3084] usb 1-1: selecting invalid altsetting 0 [ 253.480217][ T9] ft260 0003:0403:6030.0019: unknown main item tag 0x0 [ 253.526674][ T3084] usb 1-1: USB disconnect, device number 13 [ 253.677500][ T9] ft260 0003:0403:6030.0019: chip code: 0000 0000 [ 253.881547][ T9] ft260 0003:0403:6030.0019: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 254.039203][ T3084] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 254.084107][ T9] ft260 0003:0403:6030.0019: failed to retrieve status: -71, no wakeup [ 254.102155][ T9] ft260 0003:0403:6030.0019: failed to retrieve status: -71 [ 254.127355][ T9] ft260 0003:0403:6030.0019: failed to reset I2C controller: -71 [ 254.148584][ T9] usb 5-1: USB disconnect, device number 18 [ 254.197273][ T3084] usb 3-1: Using ep0 maxpacket: 16 [ 254.211610][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 254.221570][ T3084] usb 3-1: config 0 interface 0 has no altsetting 0 [ 254.228312][ T3084] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 254.251293][ T3084] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.270221][ T3084] usb 3-1: config 0 descriptor?? [ 254.371234][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.386832][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.397092][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 254.406841][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.419020][ T10] usb 2-1: config 0 descriptor?? [ 254.727897][ T3084] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.001A/input/input31 [ 254.845877][ T10] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0 [ 254.855229][ T10] arvo 0003:1E7D:30D4.001B: unknown main item tag 0x0 [ 254.862092][ T3084] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.001A/input/input32 [ 254.893012][ T3084] kye 0003:0458:5013.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 254.895410][ T10] arvo 0003:1E7D:30D4.001B: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 255.136931][ T3084] usb 3-1: USB disconnect, device number 18 [ 255.296689][ T10] usb 2-1: USB disconnect, device number 17 [ 255.494049][T10093] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 255.879220][ T3084] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 256.036856][ T3084] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 256.051774][ T3084] usb 5-1: config 0 interface 0 has no altsetting 0 [ 256.062661][ T3084] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 256.076805][ T3084] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 256.088392][ T3084] usb 5-1: Product: syz [ 256.096045][ T3084] usb 5-1: Manufacturer: syz [ 256.103821][ T3084] usb 5-1: SerialNumber: syz [ 256.115493][ T3084] usb 5-1: config 0 descriptor?? [ 256.128028][ T3084] usb 5-1: selecting invalid altsetting 0 [ 256.349187][ T3084] usb 5-1: USB disconnect, device number 19 [ 256.956137][ T30] audit: type=1400 audit(1743694112.024:287): lsm=SMACK fn=smack_task_movememory action=denied subject="y" object="_" requested=w pid=10115 comm="syz.1.1800" opid=10115 ocomm="syz.1.1800" [ 257.349264][ T30] audit: type=1326 audit(1743694112.414:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10131 comm="syz.0.1792" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x0 [ 258.603115][T10159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1809'. [ 258.668558][T10165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1809'. [ 258.699735][T10164] syzkaller1: entered promiscuous mode [ 258.719148][T10164] syzkaller1: entered allmulticast mode [ 258.747886][T10164] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 25 [ 259.126668][T10188] vivid-000: disconnect [ 259.135155][T10187] vivid-000: reconnect [ 259.473049][T10203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1829'. [ 259.512730][T10205] kvm: kvm [10204]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x100000000000000 [ 259.808399][ T30] audit: type=1326 audit(1743694114.874:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10212 comm="syz.4.1834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f602a58d169 code=0x0 [ 260.169462][T10233] IPVS: stopping master sync thread 10236 ... [ 260.178068][T10236] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 260.348030][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1848'. [ 260.993113][T10275] tun0: tun_chr_ioctl cmd 1074025675 [ 260.998594][T10275] tun0: persist enabled [ 261.004885][T10275] tun0: tun_chr_ioctl cmd 1074025675 [ 261.010387][T10275] tun0: persist enabled [ 261.063629][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.070968][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.308853][T10288] loop6: detected capacity change from 0 to 63 [ 261.333615][ C1] blk_print_req_error: 1979 callbacks suppressed [ 261.333644][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 261.354738][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.364051][ C1] buffer_io_error: 1978 callbacks suppressed [ 261.364069][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.378021][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.387268][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 261.395220][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.404523][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 261.412483][ C1] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.422029][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 261.452531][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.461800][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.469762][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.478945][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 261.486949][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.496241][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 261.504208][ C1] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.513509][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 261.533224][T10293] lo speed is unknown, defaulting to 1000 [ 261.543411][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 261.552735][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 261.560693][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 261.908249][T10306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1873'. [ 262.046666][ T5832] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 262.765702][T10331] could not open pipe file descriptor [ 263.069878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 263.079180][T10316] block nbd4: shutting down sockets [ 263.080130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 263.190856][T10344] block device autoloading is deprecated and will be removed. [ 263.358237][T10347] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 263.432101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 263.443387][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 263.459587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 263.523797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 263.559845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 263.893440][ T30] audit: type=1326 audit(1743694118.964:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10339 comm="syz.0.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c4b78d169 code=0x7fc00000 [ 264.318646][T10372] vlan2: entered allmulticast mode [ 264.335987][T10372] bond0: entered allmulticast mode [ 264.349920][T10372] bond_slave_0: entered allmulticast mode [ 264.378913][T10372] bond_slave_1: entered allmulticast mode [ 265.098280][T10404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1916'. [ 265.169894][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 265.284774][T10410] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.354693][T10414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1921'. [ 265.369540][ T10] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.384898][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 265.416733][ T10] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 265.436340][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.461128][ T10] usb 4-1: config 0 descriptor?? [ 265.901705][ T10] hid-alps 0003:044E:1215.001C: unknown main item tag 0x0 [ 265.920717][ T10] hid-alps 0003:044E:1215.001C: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.3-1/input0 [ 265.996547][T10443] sctp: [Deprecated]: syz.2.1935 (pid 10443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 265.996547][T10443] Use struct sctp_sack_info instead [ 266.049632][T10445] veth3: entered promiscuous mode [ 266.109972][ T10] usb 4-1: USB disconnect, device number 14 [ 266.449610][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 266.634712][ T9] usb 1-1: config 0 has no interfaces? [ 266.641280][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 266.677521][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.723536][ T9] usb 1-1: config 0 descriptor?? [ 266.965451][T10451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.988134][T10451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.013209][T10451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.032062][T10451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.053216][ T24] usb 1-1: USB disconnect, device number 14 [ 267.539296][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 267.576688][T10485] overlayfs: workdir and upperdir must reside under the same mount [ 267.692873][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.712991][ T24] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 267.729152][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.747599][ T24] usb 1-1: Product: syz [ 267.752254][ T24] usb 1-1: Manufacturer: syz [ 267.756905][ T24] usb 1-1: SerialNumber: syz [ 268.063636][ T24] usb 1-1: selecting invalid altsetting 1 [ 268.088049][ T24] cdc_ncm 1-1:1.0: bind() failure [ 268.101114][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 268.206840][ T24] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 268.245423][ T24] usb 1-1: USB disconnect, device number 15 [ 268.329407][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 268.509213][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 268.519678][ T10] usb 2-1: config 0 has no interfaces? [ 268.528731][T10501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1961'. [ 268.530773][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice=ea.52 [ 268.568288][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.584410][ T10] usb 2-1: config 0 descriptor?? [ 268.765862][T10509] batadv_slave_1: entered promiscuous mode [ 268.808060][T10508] batadv_slave_1: left promiscuous mode [ 268.816335][ T10] usb 2-1: USB disconnect, device number 18 [ 270.819527][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 270.845518][T10507] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 271.708013][T10507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.728186][T10507] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 271.748763][T10507] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.769482][T10507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.795018][T10507] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.987237][T10449] Set syz1 is full, maxelem 65536 reached [ 272.287974][T10572] ======================================================= [ 272.287974][T10572] WARNING: The mand mount option has been deprecated and [ 272.287974][T10572] and is ignored by this kernel. Remove the mand [ 272.287974][T10572] option from the mount to silence this warning. [ 272.287974][T10572] ======================================================= [ 272.759139][ T5902] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 272.900068][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 272.939108][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 272.953683][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 272.994874][ T5902] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.005177][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.031077][ T5902] usb 2-1: Product: syz [ 273.046156][ T5902] usb 2-1: Manufacturer: syz [ 273.069909][ T5902] usb 2-1: SerialNumber: syz [ 273.091782][ T5902] usb 2-1: config 0 descriptor?? [ 273.357041][ T52] usb 2-1: USB disconnect, device number 19 [ 273.779404][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 273.785605][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 273.789007][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 273.859404][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 274.005744][T10609] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 274.012523][T10609] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 274.046016][T10609] vhci_hcd vhci_hcd.0: Device attached [ 274.069277][ T52] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 274.100083][T10615] nullb0: AHDI p1 p2 [ 274.107318][T10615] nullb0: p1 start 795240812 is beyond EOD, truncated [ 274.221719][ T5971] vhci_hcd: vhci_device speed not set [ 274.229205][ T52] usb 4-1: Using ep0 maxpacket: 32 [ 274.241943][ T52] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 274.260372][ T52] usb 4-1: config 0 has no interface number 0 [ 274.270852][ T52] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 274.284251][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.295091][ T52] usb 4-1: Product: syz [ 274.303557][ T52] usb 4-1: Manufacturer: syz [ 274.308688][ T52] usb 4-1: SerialNumber: syz [ 274.309460][ T5971] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 274.320962][ T5902] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 274.332717][ T52] usb 4-1: config 0 descriptor?? [ 274.354177][ T52] smsc95xx v2.0.0 [ 274.482332][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.500517][ T5902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.529199][ T5902] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 274.548862][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.570653][ T5902] usb 5-1: config 0 descriptor?? [ 274.729256][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 274.781145][T10610] usb 41-1: recv xbuf, 0 [ 274.801338][ T5902] usbhid 5-1:0.0: can't add hid device: -71 [ 274.807437][ T5902] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 274.815775][ T63] vhci_hcd: stop threads [ 274.821937][ T63] vhci_hcd: release socket [ 274.828546][ T63] vhci_hcd: disconnect device [ 274.837694][ T5902] usb 5-1: USB disconnect, device number 20 [ 274.859204][ T5971] vhci_hcd: vhci_device speed not set [ 274.909123][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 274.923091][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.941602][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.951700][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 274.969314][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 274.984263][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 274.993578][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.010895][ T10] usb 3-1: config 0 descriptor?? [ 275.170973][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 275.189400][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.210648][ T9] usb 2-1: config 0 descriptor?? [ 275.218627][ T9] cp210x 2-1:0.0: cp210x converter detected [ 275.395533][ T52] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 275.413494][ T52] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 275.423565][ T52] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 275.439541][ T52] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 275.442800][ T10] microsoft 0003:045E:07DA.001D: unknown main item tag 0x1 [ 275.451754][ T52] usb 4-1: USB disconnect, device number 15 [ 275.487618][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001D/input/input33 [ 275.537641][ T30] audit: type=1400 audit(1743694130.604:291): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=rw pid=10658 comm="syz.0.2032" dev="pipefs" ino=31755 [ 275.587446][ T10] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 275.656687][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 275.666134][ T24] usb 3-1: USB disconnect, device number 19 [ 275.877272][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 276.086644][ T24] usb 2-1: USB disconnect, device number 20 [ 276.105637][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 276.125191][ T24] cp210x 2-1:0.0: device disconnected [ 276.476983][T10695] input: syz0 as /devices/virtual/input/input34 [ 276.599513][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 276.761037][ T24] usb 1-1: config 0 has no interfaces? [ 276.766612][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 276.779441][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.791269][ T24] usb 1-1: config 0 descriptor?? [ 276.936590][T10717] program syz.2.2058 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.004833][T10689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.038740][T10689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.080544][T10689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.093112][T10689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.132302][ T24] usb 1-1: USB disconnect, device number 16 [ 277.639148][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 277.821536][ T24] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x7C, changing to 0xC [ 277.849264][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 277.893564][ T24] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 277.914371][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.923313][ T24] usb 1-1: Product: syz [ 277.934982][ T24] usb 1-1: Manufacturer: syz [ 277.939808][ T24] usb 1-1: SerialNumber: syz [ 278.155527][ T24] cdc_ncm 1-1:1.0: bind() failure [ 278.329331][ T24] usb 1-1: USB disconnect, device number 17 [ 278.404593][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2087'. [ 278.584413][T10786] KVM: debugfs: duplicate directory 10786-4 [ 279.839365][ T5971] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 280.016052][ T5971] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 280.025585][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.033863][ T5971] usb 3-1: Product: syz [ 280.038198][ T5971] usb 3-1: Manufacturer: syz [ 280.042855][ T5971] usb 3-1: SerialNumber: syz [ 280.050698][ T5971] usb 3-1: config 0 descriptor?? [ 280.241442][T10823] syzkaller1: entered promiscuous mode [ 280.247128][T10823] syzkaller1: entered allmulticast mode [ 280.366883][T10828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.870480][T10851] program syz.0.2114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.084060][T10855] program syz.0.2115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.099245][ T5971] usb 3-1: Firmware version (0.0) predates our first public release. [ 281.127814][ T5971] usb 3-1: Please update to version 0.2 or newer [ 281.246479][ T5971] usb 3-1: USB disconnect, device number 20 [ 281.522364][T10867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.889018][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 386.896060][ C0] rcu: 1-...!: (1 GPs behind) idle=7b6c/1/0x4000000000000000 softirq=51265/51269 fqs=0 [ 386.906816][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5839/1:b..l [ 386.914761][ C0] rcu: (detected by 0, t=10505 jiffies, g=41617, q=208 ncpus=2) [ 386.922513][ C0] Sending NMI from CPU 0 to CPUs 1: [ 386.922550][ C1] NMI backtrace for cpu 1 [ 386.922585][ C1] CPU: 1 UID: 0 PID: 10871 Comm: syz.1.2117 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 386.922607][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 386.922619][ C1] RIP: 0010:lock_acquire+0x152/0x2f0 [ 386.922651][ C1] Code: ff ff ff 65 0f c1 05 4d 9d c6 11 83 f8 01 0f 85 f9 00 00 00 48 c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 <0f> 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 48 [ 386.922667][ C1] RSP: 0018:ffffc90000a08be0 EFLAGS: 00000046 [ 386.922682][ C1] RAX: 0000000000000001 RBX: ffff88806022e300 RCX: 996290c524b66300 [ 386.922694][ C1] RDX: 0000000000000001 RSI: ffffffff8e4e9221 RDI: ffffffff8ca0dd80 [ 386.922706][ C1] RBP: ffffffff93654020 R08: 0000000000000001 R09: 0000000000000001 [ 386.922717][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 386.922726][ C1] R13: 0000000000000000 R14: 0000000000000046 R15: 0000000000000000 [ 386.922737][ C1] FS: 0000000000000000(0000) GS:ffff8881250cc000(0000) knlGS:0000000000000000 [ 386.922751][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.922763][ C1] CR2: 000000110c3c6b37 CR3: 000000002a08c000 CR4: 00000000003526f0 [ 386.922777][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.922787][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.922798][ C1] Call Trace: [ 386.922806][ C1] [ 386.922825][ C1] ? __pfx_advance_sched+0x10/0x10 [ 386.922856][ C1] _raw_spin_lock+0x2e/0x40 [ 386.922882][ C1] ? advance_sched+0xab/0xca0 [ 386.922903][ C1] advance_sched+0xab/0xca0 [ 386.922927][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 386.922953][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 386.922983][ C1] ? __pfx_advance_sched+0x10/0x10 [ 386.923005][ C1] ? __pfx_advance_sched+0x10/0x10 [ 386.923027][ C1] __hrtimer_run_queues+0x5a6/0xd40 [ 386.923047][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 386.923082][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 386.923101][ C1] ? sched_clock_cpu+0x77/0x4d0 [ 386.923119][ C1] ? read_tsc+0x9/0x20 [ 386.923143][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 386.923172][ C1] hrtimer_interrupt+0x403/0xa40 [ 386.923205][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 386.923228][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 386.923246][ C1] [ 386.923252][ C1] [ 386.923258][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.923276][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 386.923301][ C1] Code: 89 fb e8 23 00 00 00 48 8b 3d 94 ed b4 0c 48 89 de 5b e9 53 21 5c 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 40 65 93 65 8b 15 58 f9 [ 386.923321][ C1] RSP: 0018:ffffc9001a9870b8 EFLAGS: 00000246 [ 386.923335][ C1] RAX: 1ffff110170e6574 RBX: ffff8880b8732ba0 RCX: ffffffff9a705603 [ 386.923348][ C1] RDX: ffff88807ea50000 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.923358][ C1] RBP: ffffc9001a9871c0 R08: ffffffff8201845b R09: 0000000000000000 [ 386.923370][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff93654020 [ 386.923381][ C1] R13: ffffea0001e3b500 R14: ffff8880b8732b78 R15: dffffc0000000000 [ 386.923398][ C1] ? __folio_batch_add_and_move+0x28b/0xdb0 [ 386.923424][ C1] ? __folio_batch_add_and_move+0x260/0xdb0 [ 386.923443][ C1] __folio_batch_add_and_move+0x384/0xdb0 [ 386.923465][ C1] ? __pfx_lru_activate+0x10/0x10 [ 386.923485][ C1] ? __pfx___folio_batch_add_and_move+0x10/0x10 [ 386.923513][ C1] ? folio_activate+0x10d/0x180 [ 386.923534][ C1] folio_mark_accessed+0x418/0xa40 [ 386.923558][ C1] unmap_page_range+0x2397/0x44d0 [ 386.923608][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 386.923641][ C1] ? mas_next_slot+0xdc6/0xea0 [ 386.923660][ C1] ? uprobe_munmap+0x180/0x460 [ 386.923686][ C1] ? unmap_single_vma+0x1ba/0x2a0 [ 386.923714][ C1] unmap_vmas+0x3ce/0x5f0 [ 386.923741][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 386.923776][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 386.923800][ C1] exit_mmap+0x2bc/0xde0 [ 386.923823][ C1] ? uprobe_clear_state+0x20e/0x290 [ 386.923848][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 386.923874][ C1] ? __pfx_exit_aio+0x10/0x10 [ 386.923896][ C1] ? uprobe_clear_state+0x271/0x290 [ 386.923917][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 386.923940][ C1] __mmput+0x115/0x410 [ 386.923966][ C1] exit_mm+0x221/0x310 [ 386.923987][ C1] ? __pfx_exit_mm+0x10/0x10 [ 386.924006][ C1] ? taskstats_exit+0x326/0xa60 [ 386.924035][ C1] do_exit+0x994/0x27f0 [ 386.924058][ C1] ? do_raw_spin_lock+0x151/0x370 [ 386.924082][ C1] ? __pfx_do_exit+0x10/0x10 [ 386.924101][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 386.924134][ C1] do_group_exit+0x207/0x2c0 [ 386.924153][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 386.924177][ C1] ? lockdep_hardirqs_on+0x9d/0x150 [ 386.924196][ C1] get_signal+0x1696/0x1730 [ 386.924231][ C1] ? __pfx_get_signal+0x10/0x10 [ 386.924261][ C1] arch_do_signal_or_restart+0x98/0x840 [ 386.924288][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 386.924327][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 386.924347][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 386.924367][ C1] do_syscall_64+0x100/0x230 [ 386.924386][ C1] ? clear_bhb_loop+0x45/0xa0 [ 386.924404][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.924421][ C1] RIP: 0033:0x7f548cf8d169 [ 386.924439][ C1] Code: Unable to access opcode bytes at 0x7f548cf8d13f. [ 386.924448][ C1] RSP: 002b:00007f548de480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 386.924464][ C1] RAX: fffffffffffffe00 RBX: 00007f548d1a6088 RCX: 00007f548cf8d169 [ 386.924476][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f548d1a6088 [ 386.924487][ C1] RBP: 00007f548d1a6080 R08: 0000000000000000 R09: 0000000000000000 [ 386.924498][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f548d1a608c [ 386.924508][ C1] R13: 0000000000000000 R14: 00007ffc6c468d80 R15: 00007ffc6c468e68 [ 386.924529][ C1] [ 386.924540][ C0] task:syz-executor state:R running task stack:20696 pid:5839 tgid:5839 ppid:5825 task_flags:0x400140 flags:0x00000000 [ 387.529492][ C0] Call Trace: [ 387.533131][ C0] [ 387.536094][ C0] __schedule+0x1b33/0x51f0 [ 387.540626][ C0] ? __lock_acquire+0xad5/0xd80 [ 387.545504][ C0] ? __lock_acquire+0xad5/0xd80 [ 387.550387][ C0] ? __lock_acquire+0xad5/0xd80 [ 387.555259][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 387.560656][ C0] ? __pfx___schedule+0x10/0x10 [ 387.565550][ C0] ? __lock_acquire+0xad5/0xd80 [ 387.570432][ C0] ? __lock_acquire+0xad5/0xd80 [ 387.575326][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 387.580660][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 387.585825][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 387.591669][ C0] irqentry_exit+0x5e/0x90 [ 387.596135][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 387.602149][ C0] RIP: 0010:lock_release+0x0/0x3e0 [ 387.607289][ C0] Code: e6 b5 99 03 48 8b 7c 24 18 e9 92 f9 ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 48 89 f5 49 [ 387.626918][ C0] RSP: 0018:ffffc90003fcf540 EFLAGS: 00000202 [ 387.633010][ C0] RAX: 0000000000000001 RBX: ffffc90003fcf620 RCX: ffff88802a7b3c00 [ 387.640999][ C0] RDX: dffffc0000000000 RSI: ffffffff816debc8 RDI: ffffffff8ed3dfe0 [ 387.649009][ C0] RBP: dffffc0000000001 R08: ffffc90003fcfd58 R09: 0000000000000000 [ 387.657099][ C0] R10: ffffc90003fcf670 R11: fffff520007f9ed0 R12: ffffc90003fcf630 [ 387.665098][ C0] R13: dffffc0000000000 R14: ffffc90003fcfd68 R15: ffffffff816debc8 [ 387.673098][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 387.678257][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 387.683397][ C0] unwind_next_frame+0x1a9f/0x23b0 [ 387.688543][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 387.693679][ C0] ? tomoyo_path_unlink+0xd1/0x110 [ 387.699253][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 387.705443][ C0] arch_stack_walk+0x11e/0x150 [ 387.710245][ C0] ? security_path_unlink+0x169/0x360 [ 387.715649][ C0] stack_trace_save+0x11a/0x1d0 [ 387.720559][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 387.725985][ C0] ? do_raw_spin_lock+0x151/0x370 [ 387.731098][ C0] kasan_save_track+0x3f/0x80 [ 387.735820][ C0] ? kasan_save_track+0x3f/0x80 [ 387.740705][ C0] ? kasan_save_free_info+0x40/0x50 [ 387.745931][ C0] ? __kasan_slab_free+0x59/0x70 [ 387.750901][ C0] ? kfree+0x198/0x430 [ 387.754990][ C0] ? tomoyo_path_perm+0x512/0x640 [ 387.760045][ C0] ? tomoyo_path_unlink+0xd1/0x110 [ 387.765321][ C0] kasan_save_free_info+0x40/0x50 [ 387.770376][ C0] __kasan_slab_free+0x59/0x70 [ 387.775178][ C0] kfree+0x198/0x430 [ 387.779122][ C0] ? tomoyo_path_perm+0x512/0x640 [ 387.784193][ C0] ? tomoyo_path_permission+0x297/0x360 [ 387.789770][ C0] tomoyo_path_perm+0x512/0x640 [ 387.794734][ C0] ? bpf_lsm_inode_permission+0x9/0x10 [ 387.800223][ C0] ? security_inode_permission+0xbc/0x320 [ 387.805972][ C0] ? tomoyo_path_perm+0x28c/0x640 [ 387.811043][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 387.816452][ C0] ? terminate_walk+0x37d/0x450 [ 387.821356][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 387.827543][ C0] ? __d_lookup+0x64/0x7b0 [ 387.831988][ C0] ? __d_lookup+0x64/0x7b0 [ 387.836440][ C0] tomoyo_path_unlink+0xd1/0x110 [ 387.841412][ C0] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 387.846994][ C0] security_path_unlink+0x169/0x360 [ 387.852219][ C0] do_unlinkat+0x397/0x7b0 [ 387.856678][ C0] ? __pfx_do_unlinkat+0x10/0x10 [ 387.861652][ C0] ? strncpy_from_user+0x143/0x280 [ 387.866805][ C0] ? getname_flags+0x1e2/0x530 [ 387.871599][ C0] __x64_sys_unlink+0x47/0x50 [ 387.876309][ C0] do_syscall_64+0xf3/0x230 [ 387.880837][ C0] ? clear_bhb_loop+0x45/0xa0 [ 387.885541][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.891454][ C0] RIP: 0033:0x7efdee78c717 [ 387.895886][ C0] RSP: 002b:00007ffcf6e41d48 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 387.904324][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efdee78c717 [ 387.912423][ C0] RDX: 00007ffcf6e41d70 RSI: 00007ffcf6e41e00 RDI: 00007ffcf6e41e00 [ 387.920415][ C0] RBP: 00007ffcf6e41e00 R08: 0000000000000000 R09: 0000000000000000 [ 387.928411][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffcf6e42e90 [ 387.936406][ C0] R13: 00007efdee80e08c R14: 0000000000044c60 R15: 00007ffcf6e42ed0 [ 387.944422][ C0] [ 387.947457][ C0] rcu: rcu_preempt kthread starved for 10505 jiffies! g41617 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 387.958669][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 387.968654][ C0] rcu: RCU grace-period kthread stack dump: [ 387.974552][ C0] task:rcu_preempt state:R running task stack:26688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 387.988076][ C0] Call Trace: [ 387.991370][ C0] [ 387.994327][ C0] __schedule+0x1b33/0x51f0 [ 387.998863][ C0] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 388.004795][ C0] ? rcu_is_watching+0x15/0xb0 [ 388.009586][ C0] ? schedule+0x163/0x360 [ 388.013942][ C0] ? __pfx___schedule+0x10/0x10 [ 388.018835][ C0] ? schedule+0x90/0x360 [ 388.023094][ C0] ? schedule+0x90/0x360 [ 388.027352][ C0] schedule+0x163/0x360 [ 388.031530][ C0] schedule_timeout+0x15b/0x2b0 [ 388.036413][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 388.041818][ C0] ? __pfx_process_timeout+0x10/0x10 [ 388.047134][ C0] ? prepare_to_swait_event+0x1e5/0x340 [ 388.052708][ C0] ? prepare_to_swait_event+0x308/0x340 [ 388.058285][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 388.063502][ C0] rcu_gp_fqs_loop+0x2e1/0x1340 [ 388.068394][ C0] ? rcu_gp_init+0x1279/0x1690 [ 388.073182][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 388.078138][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 388.084140][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 388.089443][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 388.095424][ C0] ? finish_swait+0xdb/0x200 [ 388.100038][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 388.105256][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 388.109872][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 388.115183][ C0] ? __kthread_parkme+0x1a8/0x200 [ 388.120237][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 388.125453][ C0] kthread+0x7b7/0x940 [ 388.129575][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 388.134793][ C0] ? __pfx_kthread+0x10/0x10 [ 388.139412][ C0] ? __pfx_kthread+0x10/0x10 [ 388.144025][ C0] ? __pfx_kthread+0x10/0x10 [ 388.148638][ C0] ? __pfx_kthread+0x10/0x10 [ 388.153264][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.158488][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 388.163882][ C0] ? __pfx_kthread+0x10/0x10 [ 388.168506][ C0] ret_from_fork+0x4b/0x80 [ 388.172939][ C0] ? __pfx_kthread+0x10/0x10 [ 388.177557][ C0] ret_from_fork_asm+0x1a/0x30 [ 388.182613][ C0] [ 388.185707][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 388.192052][ C0] CPU: 0 UID: 0 PID: 79 Comm: kworker/u8:5 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 388.203723][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 388.213805][ C0] Workqueue: events_unbound toggle_allocation_gate [ 388.220437][ C0] RIP: 0010:smp_call_function_many_cond+0x1bac/0x2d40 [ 388.227228][ C0] Code: 03 84 c0 75 7e 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 b8 e2 0b 00 41 83 e4 01 4c 8b 64 24 68 75 07 e8 68 de 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00 [ 388.246853][ C0] RSP: 0018:ffffc9000222f640 EFLAGS: 00000293 [ 388.252943][ C0] RAX: ffffffff81b7687d RBX: 1ffff110170e7e61 RCX: ffff88801d72bc00 [ 388.260936][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 388.268921][ C0] RBP: ffffc9000222f840 R08: ffffffff81b76848 R09: 1ffffffff20bd4ae [ 388.276997][ C0] R10: dffffc0000000000 R11: fffffbfff20bd4af R12: ffff8880b863ab88 [ 388.284986][ C0] R13: ffff8880b873f308 R14: ffff8880b863ab80 R15: 0000000000000001 [ 388.293084][ C0] FS: 0000000000000000(0000) GS:ffff888124fcc000(0000) knlGS:0000000000000000 [ 388.302046][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.308664][ C0] CR2: 000055556940d5c8 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 388.316684][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.324677][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 388.332673][ C0] Call Trace: [ 388.335970][ C0] [ 388.338925][ C0] ? __text_poke+0xb83/0xe20 [ 388.343549][ C0] ? kmem_cache_alloc_bulk_noprof+0x15a/0x7c0 [ 388.349645][ C0] ? kmem_cache_alloc_bulk_noprof+0x15a/0x7c0 [ 388.355739][ C0] ? __pfx___text_poke+0x10/0x10 [ 388.360707][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 388.367057][ C0] ? __pfx___might_resched+0x10/0x10 [ 388.372367][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 388.378389][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 388.383445][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 388.388604][ C0] text_poke_bp_batch+0x354/0xb30 [ 388.393677][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 388.399709][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 388.405930][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 388.411547][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 388.417837][ C0] text_poke_finish+0x30/0x50 [ 388.422544][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 388.428554][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 388.434479][ C0] static_key_enable+0x1a/0x20 [ 388.439267][ C0] toggle_allocation_gate+0xc0/0x250 [ 388.444582][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 388.450532][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 388.456309][ C0] process_scheduled_works+0xac3/0x18e0 [ 388.462081][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.468090][ C0] ? assign_work+0x367/0x3d0 [ 388.472704][ C0] worker_thread+0x870/0xd50 [ 388.477331][ C0] ? __kthread_parkme+0x1a8/0x200 [ 388.482378][ C0] ? __pfx_worker_thread+0x10/0x10 [ 388.487605][ C0] kthread+0x7b7/0x940 [ 388.491701][ C0] ? __pfx_worker_thread+0x10/0x10 [ 388.496835][ C0] ? __pfx_kthread+0x10/0x10 [ 388.501451][ C0] ? __pfx_kthread+0x10/0x10 [ 388.506080][ C0] ? __pfx_kthread+0x10/0x10 [ 388.510693][ C0] ? __pfx_kthread+0x10/0x10 [ 388.515309][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.520536][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 388.525754][ C0] ? __pfx_kthread+0x10/0x10 [ 388.530373][ C0] ret_from_fork+0x4b/0x80 [ 388.534806][ C0] ? __pfx_kthread+0x10/0x10 [ 388.539420][ C0] ret_from_fork_asm+0x1a/0x30 [ 388.544234][ C0] [ 388.547632][ C0] vkms_vblank_simulate: vblank timer overrun