last executing test programs: 2m41.803236644s ago: executing program 3 (id=6156): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}}) 2m41.545098423s ago: executing program 3 (id=6162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x4, 0x6, 0x676b9c5e4db2687b, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 2m40.367792359s ago: executing program 3 (id=6180): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 2m40.114513658s ago: executing program 3 (id=6188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x44470}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c054}, 0x0) 2m39.957587566s ago: executing program 3 (id=6194): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x4, 0x1, 0x7, 0x1, 0x100, &(0x7f0000000040)="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"}) 2m39.633741074s ago: executing program 3 (id=6204): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m23.481051815s ago: executing program 32 (id=6204): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 3.851621841s ago: executing program 4 (id=9631): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340), 0x0, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 3.661966229s ago: executing program 4 (id=9636): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 3.485673185s ago: executing program 4 (id=9639): setrlimit(0x1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') ftruncate(r0, 0x7fffffffffffffff) 3.187948184s ago: executing program 4 (id=9641): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) 2.987042402s ago: executing program 4 (id=9644): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 2.859253578s ago: executing program 4 (id=9646): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0) 2.782712996s ago: executing program 1 (id=9647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="2f8452d9f4b3dbbf97c8"], 0xffdd) 2.498716387s ago: executing program 1 (id=9651): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4bfb, 0x0) 2.355320612s ago: executing program 1 (id=9655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xc0}}, 0x0) 2.134247244s ago: executing program 1 (id=9659): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x9111, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x4000) 1.985532026s ago: executing program 5 (id=9661): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x44000) 1.928603145s ago: executing program 1 (id=9663): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x44}}, 0x0) 1.822208107s ago: executing program 1 (id=9666): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xdc7, 0x80, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x0, 0x12, 0x5, {0x5, 0xd, '\b\t\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.791892983s ago: executing program 5 (id=9667): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f0000000080)) 1.725811115s ago: executing program 2 (id=9668): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 1.560055409s ago: executing program 2 (id=9671): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 1.521456471s ago: executing program 5 (id=9672): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002160650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424060244"], 0x0) syz_usb_connect$printer(0x7, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x3, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x30, 0x40, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x7, 0x6}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 546.581033ms ago: executing program 2 (id=9681): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) 545.67387ms ago: executing program 0 (id=9682): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0x40103e05, &(0x7f00000010c0)={""/32, 0x0, 0x0, 0xfffffffffffffe6e, 0x0, 0x0}) 459.454914ms ago: executing program 0 (id=9683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x58, r1, 0x1, 0x0, 0xfffffffe, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044045}, 0x40000) 458.738246ms ago: executing program 2 (id=9684): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e00000000", 0x59) 376.739288ms ago: executing program 2 (id=9685): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 331.183021ms ago: executing program 2 (id=9686): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x3) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) 275.115876ms ago: executing program 0 (id=9687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa0017"], 0x110}, 0x1, 0x0, 0x0, 0x42845}, 0x84) 180.755329ms ago: executing program 0 (id=9688): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x800}) 177.624961ms ago: executing program 5 (id=9689): r0 = memfd_create(&(0x7f0000000640)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xe4\xa0\x8ez\xadTC\x17\x82\xdb\xbf\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N\'\xf8#\x81z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xf5n\x88Wl\x1c\x80:\xe9:\xefz\x98\xdb2\x9a\xb4[\x83(\xa3\x8a\xf9[\x14\xfe\xfdSw\xab\xe4\x83\x00\x00\x00\x00\xd8\xdbz\'*K$\x05\xa8\xf1\xbb\xe9\xd0\xf8\x8diY\x80v<#b\xa6F\xb3\xe1\xef\x9d\xd6U2\xdb\x88\x88\xda\x1f\x8d\xaf\xcf\xa1\xcb@\xc3G\xbe\xc5\xd3w\xbbB\xa0yf\x0f?\xe8D)\xf1\xe25\xa5\x01\x00\xe9\xf3\xc6\xa7l\xca\b\xd6H\xb4\xbaL\x9e\xa0K\x04\xd8\xb3\x12\x12\xa4\xf8\x8dN\x8c\xdb\xecgX\x86\xeb\x9c_L\x9d[\xd6\x96\tA\x8b/\xb5\xac]%\xbc3\x850\x8f\xc8_\xe8G\x95\xa1\xa6_\xe52\xdd\x19\x8a\xf8k\xc9\xf98\xa0\x9f\xa6\x9a&@\xe7\xad\xb9\x1b\xcfa\n\n\x8a\"G\xb1wIu\xac\xa3a\xa1\xddc\xa3\x9bT\x19\x15vV\xe5j\x89z\x12\xf7\xcb\xb8*\xa7\x00'/342, 0x1) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file1'}, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 103.154683ms ago: executing program 5 (id=9690): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x1, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff037}]}, 0x10) 71.853473ms ago: executing program 0 (id=9691): epoll_create1(0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x7, 0xc9, @any, 0x1, 0x9, 0x4, 0x0, 0x3, 0xa}}}, 0x14) openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) 595.363µs ago: executing program 0 (id=9692): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x8000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="11b3a091e063cd0d2af5d4f4f6701b4471e623b721b5ad921ce91ba9a73aef0242070dc205c91c1b99650179cc1681d5fb5e2009ceeb8dc23520e5183f153e61886d6435a1819a5574f09908cf958f1620e26d31eac90c3667f73314277ff60e41f7c01cce1162e71abc3d561aef7e898717e657a0fe7a7d9788a2829585dac6eab0f80e362eb94760d098e4069990af4fa7a44483af002b7a537f9896a4f3d7033c9611930b6e4869f5c8b35b88bf1e34cd832bf0b7933f7c84ef8a116e374e1ea5d65fd68f7935"}, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000280)={0x6, 0x7, 0x4, {0x2, @raw_data="2e05d16eb38942f4b3929e32eb4c004aa7ebf544df3e59d3777c3fbc378802427cd355736a65cda50500b7db24f8bb708d5ffb488c3b968809076903102e6555cd4f9f6abb603b3b1e9e65108e145b5fc63c655f5aeffafa83c8985f606af0ea712dd3e42ee15c0d9cb4ed37913530d8641a3b32d7df7ef28081454c62b394cf2bf133cd5a04aa1ddeaf71d1c7213f6502e7bdff029c8a4739400fdaeb03e6fb0b82648779fe27db5666a8e38edcdd12350378cc5e0950346a99a5c3eabd436b365b76a278b3fb42"}, 0xb146}) 0s ago: executing program 5 (id=9693): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) kernel console output (not intermixed with test programs): `syz.4.6813'. [ 488.789139][T20142] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 488.908082][T20149] netlink: 'syz.1.6826': attribute type 1 has an invalid length. [ 489.110913][T20160] PKCS8: Unsupported PKCS#8 version [ 489.144786][T20164] lo: entered promiscuous mode [ 489.156709][T20164] tunl0: entered promiscuous mode [ 489.158729][T20164] gre0: entered promiscuous mode [ 489.186683][T20164] gretap0: entered promiscuous mode [ 489.189158][T20164] erspan0: left allmulticast mode [ 489.191736][T20164] ip_vti0: entered promiscuous mode [ 489.213748][T20164] ip6_vti0: entered promiscuous mode [ 489.228823][T20164] sit0: entered promiscuous mode [ 489.269779][T20164] ip6tnl0: entered promiscuous mode [ 489.273179][T20164] ip6gre0: entered promiscuous mode [ 489.275465][T20164] syz_tun: entered promiscuous mode [ 489.278229][T20164] ip6gretap0: entered promiscuous mode [ 489.289994][T20164] bridge0: entered promiscuous mode [ 489.292031][T20164] vcan0: entered promiscuous mode [ 489.293953][T20164] bond0: entered promiscuous mode [ 489.293971][T20164] bond_slave_0: entered promiscuous mode [ 489.294196][T20164] bond_slave_1: entered promiscuous mode [ 489.298167][T20164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.304423][T20164] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.306390][T20164] dummy0: entered promiscuous mode [ 489.321250][T20164] nlmon0: entered promiscuous mode [ 489.364904][T20164] caif0: entered promiscuous mode [ 489.364926][T20164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.418176][ T5924] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 489.581195][ T5924] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 489.581224][ T5924] usb 1-1: config 0 has no interface number 0 [ 489.581274][ T5924] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.581299][ T5924] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.581323][ T5924] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 489.581361][ T5924] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 489.581384][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.664162][ T5924] usb 1-1: config 0 descriptor?? [ 489.683709][ T5924] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input46 [ 490.175490][ T9] usb 1-1: USB disconnect, device number 99 [ 490.819019][ T10] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 490.989978][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 490.992313][ T10] usb 2-1: config 0 has an invalid interface number: 72 but max is 0 [ 490.992338][ T10] usb 2-1: config 0 has no interface number 0 [ 490.992391][ T10] usb 2-1: config 0 interface 72 has no altsetting 0 [ 490.995441][ T10] usb 2-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 490.995468][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.995488][ T10] usb 2-1: Product: syz [ 490.995501][ T10] usb 2-1: Manufacturer: syz [ 490.995515][ T10] usb 2-1: SerialNumber: syz [ 491.059715][ T10] usb 2-1: config 0 descriptor?? [ 491.290708][T20235] dlm: no local IP address has been set [ 491.290727][T20235] dlm: cannot start dlm midcomms -107 [ 491.324301][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 491.324379][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 491.389119][ T10] usb 2-1: USB disconnect, device number 101 [ 491.685815][T19712] udevd[19712]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.72/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.262746][T20271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6887'. [ 492.262815][T20271] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 492.264726][T20271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6887'. [ 492.418696][T20277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6890'. [ 492.418741][T20277] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6890'. [ 492.487468][T20280] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6891'. [ 492.594062][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 492.645891][T20289] lo: entered promiscuous mode [ 492.646873][T20289] tunl0: entered promiscuous mode [ 492.649673][T20289] gre0: entered promiscuous mode [ 492.650627][T20289] gretap0: entered promiscuous mode [ 492.651404][T20289] erspan0: entered promiscuous mode [ 492.652175][T20289] ip_vti0: entered promiscuous mode [ 492.653226][T20289] ip6_vti0: entered promiscuous mode [ 492.669842][T20289] sit0: entered promiscuous mode [ 492.670862][T20289] ip6tnl0: entered promiscuous mode [ 492.671633][T20289] ip6gre0: entered promiscuous mode [ 492.672395][T20289] syz_tun: entered promiscuous mode [ 492.673199][T20289] ip6gretap0: entered promiscuous mode [ 492.687888][T20289] vcan0: entered promiscuous mode [ 492.688883][T20289] bond0: entered promiscuous mode [ 492.688900][T20289] bond_slave_0: entered promiscuous mode [ 492.689091][T20289] bond_slave_1: entered promiscuous mode [ 492.701902][T20289] team0: entered promiscuous mode [ 492.701924][T20289] team_slave_0: entered promiscuous mode [ 492.702137][T20289] team_slave_1: entered promiscuous mode [ 492.707410][T20289] dummy0: entered promiscuous mode [ 492.708370][T20289] nlmon0: entered promiscuous mode [ 492.797314][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 492.799673][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.802373][ T9] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 492.802401][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.802421][ T9] usb 2-1: Product: syz [ 492.802435][ T9] usb 2-1: Manufacturer: syz [ 492.802450][ T9] usb 2-1: SerialNumber: syz [ 492.861523][ T9] usb 2-1: config 0 descriptor?? [ 492.862711][T20289] caif0: entered promiscuous mode [ 492.862734][T20289] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.887168][ T5822] ip6_vti0 speed is unknown, defaulting to 1000 [ 492.887816][ T9] usb 2-1: bad CDC descriptors [ 492.889219][ T9] usb 2-1: unsupported MDLM descriptors [ 493.127986][ T5822] usb 2-1: USB disconnect, device number 102 [ 493.304210][T20311] netlink: 'syz.4.6907': attribute type 3 has an invalid length. [ 493.304557][T20311] netlink: 'syz.4.6907': attribute type 3 has an invalid length. [ 493.353241][ T37] audit: type=1326 audit(1763200192.070:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.2.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff4f6c9 code=0x7ffc0000 [ 493.365905][ T37] audit: type=1326 audit(1763200192.089:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.2.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff4f6c9 code=0x7ffc0000 [ 493.374764][ T37] audit: type=1326 audit(1763200192.089:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.2.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9c3ff4f6c9 code=0x7ffc0000 [ 493.374868][ T37] audit: type=1326 audit(1763200192.089:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.2.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff4f6c9 code=0x7ffc0000 [ 493.374913][ T37] audit: type=1326 audit(1763200192.089:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20312 comm="syz.2.6908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff4f6c9 code=0x7ffc0000 [ 493.935897][T20339] netlink: 'syz.0.6920': attribute type 1 has an invalid length. [ 493.935923][T20339] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6920'. [ 493.935938][T20339] netlink: 'syz.0.6920': attribute type 1 has an invalid length. [ 494.315824][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 494.483966][ T10] usb 3-1: config 0 has an invalid interface number: 42 but max is 8 [ 494.483995][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 494.484037][ T10] usb 3-1: config 0 has no interface number 0 [ 494.484098][ T10] usb 3-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 0.bb [ 494.484120][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.532944][ T10] usb 3-1: config 0 descriptor?? [ 494.553845][ T10] usb-storage 3-1:0.42: USB Mass Storage device detected [ 494.580124][ T10] usb-storage 3-1:0.42: Quirks match for vid 04cb pid 0100: 9 [ 494.580153][ T10] usb-storage 3-1:0.42: This device (04cb,0100,00bb S 04 P 01) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 494.580153][ T10] Please send a copy of this message to and [ 494.734575][T20383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6941'. [ 494.773983][ T5888] usb 3-1: USB disconnect, device number 90 [ 494.994192][T20395] netlink: 'syz.0.6946': attribute type 1 has an invalid length. [ 495.465717][T20419] netlink: 'syz.2.6958': attribute type 2 has an invalid length. [ 495.465741][T20419] netlink: 'syz.2.6958': attribute type 1 has an invalid length. [ 495.837270][T20441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6969'. [ 496.241496][T20461] nft_compat: unsupported protocol 15 [ 496.328192][T20466] binder: 20463:20466 unknown command 0 [ 496.328215][T20466] binder: 20463:20466 ioctl c0306201 200000000080 returned -22 [ 496.372190][T20469] xfrm0: entered allmulticast mode [ 496.433446][T20473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6984'. [ 496.433483][T20473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6984'. [ 497.010897][ T10] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 497.173426][ T10] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 497.173455][ T10] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 497.173475][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 497.173513][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 497.173553][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 497.173575][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 497.173597][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 497.178507][ T10] usb 2-1: string descriptor 0 read error: -22 [ 497.178668][ T10] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 497.178692][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.292444][ T10] usb 2-1: config 0 descriptor?? [ 497.297426][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 497.297465][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 497.330299][ T10] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input48 [ 497.417013][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 497.577429][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 497.580640][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 497.580666][ T9] usb 3-1: config 0 has no interface number 0 [ 497.580713][ T9] usb 3-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 497.580735][ T9] usb 3-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 497.583951][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 497.583979][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.583998][ T9] usb 3-1: Product: syz [ 497.584013][ T9] usb 3-1: Manufacturer: syz [ 497.584028][ T9] usb 3-1: SerialNumber: syz [ 497.670794][ T9] usb 3-1: config 0 descriptor?? [ 497.681413][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 497.808690][ T5888] usb 2-1: USB disconnect, device number 103 [ 497.907948][ T9] usb 3-1: qt2_setup_urbs - submit read urb failed -90 [ 497.908243][ T9] quatech2 3-1:0.51: probe with driver quatech2 failed with error -90 [ 498.135528][ T5822] usb 3-1: USB disconnect, device number 91 [ 498.183854][ T37] audit: type=1326 audit(1763200196.596:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.4.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573965f6c9 code=0x7ffc0000 [ 498.183907][ T37] audit: type=1326 audit(1763200196.596:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.4.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573965f6c9 code=0x7ffc0000 [ 498.196220][ T37] audit: type=1326 audit(1763200196.596:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.4.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573965f6c9 code=0x7ffc0000 [ 498.196271][ T37] audit: type=1326 audit(1763200196.605:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.4.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f573965f6c9 code=0x7ffc0000 [ 498.196313][ T37] audit: type=1326 audit(1763200196.605:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20545 comm="syz.4.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573965f6c9 code=0x7ffc0000 [ 498.566315][T20562] netlink: 'syz.0.7029': attribute type 1 has an invalid length. [ 498.626448][T20566] openvswitch: netlink: IP tunnel dst address not specified [ 499.168222][T20595] netlink: 'syz.1.7046': attribute type 10 has an invalid length. [ 499.168656][T20595] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.192343][T20595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.192785][T20595] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.192968][T20595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.198678][T20595] team0: Port device bridge0 added [ 499.286037][T20600] syz.2.7047 (20600) used greatest stack depth: 17816 bytes left [ 499.398953][T20607] No control pipe specified [ 499.780289][ T5888] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 499.947992][ T5888] usb 1-1: unable to get BOS descriptor or descriptor too short [ 499.949392][ T5888] usb 1-1: config 7 has an invalid interface number: 29 but max is 0 [ 499.949417][ T5888] usb 1-1: config 7 has no interface number 0 [ 499.949464][ T5888] usb 1-1: config 7 interface 29 altsetting 1 endpoint 0x1 has invalid maxpacket 112, setting to 8 [ 499.949490][ T5888] usb 1-1: config 7 interface 29 has no altsetting 0 [ 500.001658][ T5888] usb 1-1: string descriptor 0 read error: -22 [ 500.001821][ T5888] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=a2.36 [ 500.001851][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.071556][ T5888] i2c-tiny-usb 1-1:7.29: version a2.36 found at bus 001 address 100 [ 500.181936][T20645] i2c i2c-0: Invalid block write size 252 [ 500.513066][ T5888] (null): failure reading functionality [ 500.535938][ T5888] i2c i2c-1: failure reading functionality [ 500.559374][ T5888] i2c i2c-1: connected i2c-tiny-usb device [ 500.600124][ T5888] usb 1-1: USB disconnect, device number 100 [ 501.194838][T20689] CIFS mount error: No usable UNC path provided in device string! [ 501.194838][T20689] [ 501.194862][T20689] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 502.695331][T20767] netlink: 'syz.5.7129': attribute type 2 has an invalid length. [ 503.155720][T20799] binder: 20798:20799 ioctl c0046209 0 returned -22 [ 503.591132][T20821] __nla_validate_parse: 4 callbacks suppressed [ 503.591153][T20821] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7156'. [ 503.591464][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7157'. [ 503.591481][T20823] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7157'. [ 503.773516][T20834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.143474][ T5820] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 504.208078][T20860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.217660][T20860] batadv_slave_0: entered promiscuous mode [ 504.217686][T20860] batadv_slave_0: entered allmulticast mode [ 504.272446][T20863] syz.2.7176 (20863): /proc/20861/oom_adj is deprecated, please use /proc/20861/oom_score_adj instead. [ 504.316782][ T5820] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.316826][ T5820] usb 2-1: config 0 interface 0 has no altsetting 0 [ 504.319829][ T5820] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 504.319856][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.319876][ T5820] usb 2-1: Product: syz [ 504.319890][ T5820] usb 2-1: Manufacturer: syz [ 504.319903][ T5820] usb 2-1: SerialNumber: syz [ 504.387915][ T5820] usb 2-1: config 0 descriptor?? [ 504.402834][ T5820] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 504.425220][ T5820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 504.426179][ T5820] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 504.426339][ T5820] usb 2-1: media controller created [ 504.483670][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.581941][ T5820] DVB: Unable to find symbol tda10046_attach() [ 504.581958][ T5820] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 504.581972][ T5820] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 504.798557][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7185'. [ 504.828244][ T5820] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 504.837898][ T5820] usb 2-1: USB disconnect, device number 104 [ 505.447581][T20922] netlink: 'syz.0.7204': attribute type 10 has an invalid length. [ 505.470464][T20922] syz_tun: left promiscuous mode [ 505.569091][T20922] syz_tun: entered promiscuous mode [ 505.575850][T20922] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 505.754401][T20938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7212'. [ 505.754435][T20938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7212'. [ 505.840490][T20944] openvswitch: netlink: Unknown nsh attribute 0 [ 506.215106][T20963] delete_channel: no stack [ 506.660339][T20990] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7238'. [ 506.660366][T20990] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7238'. [ 506.660383][T20990] netlink: 492 bytes leftover after parsing attributes in process `syz.5.7238'. [ 506.789707][T20996] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7240'. [ 506.901984][T21006] program syz.2.7245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.043377][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 507.043395][ T37] audit: type=1326 audit(1763200204.881:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21014 comm="syz.1.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 507.044701][ T37] audit: type=1326 audit(1763200204.881:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21014 comm="syz.1.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 507.046874][ T37] audit: type=1326 audit(1763200204.881:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21014 comm="syz.1.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 507.047506][ T37] audit: type=1326 audit(1763200204.881:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21014 comm="syz.1.7250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 507.405754][ T37] audit: type=1326 audit(1763200205.209:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21030 comm="syz.0.7262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 507.407517][ T37] audit: type=1326 audit(1763200205.227:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21030 comm="syz.0.7262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 507.415028][ T37] audit: type=1326 audit(1763200205.227:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21030 comm="syz.0.7262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 507.415084][ T37] audit: type=1326 audit(1763200205.227:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21030 comm="syz.0.7262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 507.845560][T21058] IPv6: sit2: Disabled Multicast RS [ 507.846830][T21058] sit2: entered allmulticast mode [ 507.987863][T21067] sctp: [Deprecated]: syz.0.7278 (pid 21067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.987863][T21067] Use struct sctp_sack_info instead [ 508.378327][T21089] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 508.686435][T21110] tmpfs: Bad value for 'mpol' [ 509.328635][T21152] vivid-001: ================= START STATUS ================= [ 509.328656][T21152] vivid-001: Radio HW Seek Mode: Bounded [ 509.328685][T21152] vivid-001: Radio Programmable HW Seek: false [ 509.328704][T21152] vivid-001: RDS Rx I/O Mode: Block I/O [ 509.328723][T21152] vivid-001: Generate RBDS Instead of RDS: false [ 509.328741][T21152] vivid-001: RDS Reception: true [ 509.328759][T21152] vivid-001: RDS Program Type: 0 inactive [ 509.328782][T21152] vivid-001: RDS PS Name: inactive [ 509.328803][T21152] vivid-001: RDS Radio Text: inactive [ 509.328824][T21152] vivid-001: RDS Traffic Announcement: false inactive [ 509.328846][T21152] vivid-001: RDS Traffic Program: false inactive [ 509.328866][T21152] vivid-001: RDS Music: false inactive [ 509.328887][T21152] vivid-001: ================== END STATUS ================== [ 509.823957][ T5820] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 509.992921][ T5820] usb 1-1: Using ep0 maxpacket: 8 [ 509.995933][ T5820] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 509.995961][ T5820] usb 1-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0x55, changing to 0x5 [ 509.995987][ T5820] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 509.999173][ T5820] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 509.999201][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.999221][ T5820] usb 1-1: Product: syz [ 509.999235][ T5820] usb 1-1: Manufacturer: syz [ 509.999250][ T5820] usb 1-1: SerialNumber: syz [ 510.040121][ T5820] hso 1-1:6.0: Can't find BULK IN endpoint [ 510.376835][ T5822] usb 1-1: USB disconnect, device number 101 [ 510.991966][T21188] rdma_rxe: rxe_newlink: failed to add wg2 [ 511.201341][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 511.227911][T21192] openvswitch: netlink: IP tunnel dst address not specified [ 511.240487][T21195] __nla_validate_parse: 1 callbacks suppressed [ 511.240507][T21195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7338'. [ 511.383195][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 511.391680][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.391728][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 511.417915][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 511.417944][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.417963][ T9] usb 2-1: Product: syz [ 511.417978][ T9] usb 2-1: Manufacturer: syz [ 511.417992][ T9] usb 2-1: SerialNumber: syz [ 511.460693][ T9] usb 2-1: config 0 descriptor?? [ 511.465129][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7340'. [ 511.506993][ T9] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 511.711023][ T9] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 511.711334][ T9] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 511.713765][ T9] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 511.936204][ T31] usb 2-1: USB disconnect, device number 105 [ 512.163808][ T5822] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 512.332558][ T5822] usb 3-1: not running at top speed; connect to a high speed hub [ 512.336507][ T5822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.336612][ T5822] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 512.336634][ T5822] usb 3-1: config 1 has no interface number 1 [ 512.336711][ T5822] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 512.336752][ T5822] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 512.346034][ T5822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 512.346063][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.346082][ T5822] usb 3-1: Product: syz [ 512.346095][ T5822] usb 3-1: Manufacturer: syz [ 512.346109][ T5822] usb 3-1: SerialNumber: syz [ 512.650774][ T5822] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 512.650801][ T5822] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 512.650854][ T5822] usb 3-1: 2:1 : invalid channels 0 [ 512.686651][T21230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7355'. [ 512.745463][ T5822] usb 3-1: USB disconnect, device number 92 [ 512.915767][T17217] udevd[17217]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.115540][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 513.282708][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 513.282739][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.282759][ T9] usb 6-1: Product: syz [ 513.282774][ T9] usb 6-1: Manufacturer: syz [ 513.282788][ T9] usb 6-1: SerialNumber: syz [ 513.337328][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 513.352769][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 513.443524][T21254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7367'. [ 513.462134][T21254] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 513.819497][T21270] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 513.819497][T21270] SȘȞZ6' [ 513.831605][ T5820] usb 6-1: USB disconnect, device number 2 [ 513.992558][ T9] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 514.080900][T21282] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7381'. [ 514.154985][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 514.159826][ T9] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 514.159856][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.159876][ T9] usb 1-1: Product: syz [ 514.159891][ T9] usb 1-1: Manufacturer: syz [ 514.159905][ T9] usb 1-1: SerialNumber: syz [ 514.214422][ T9] usb 1-1: config 0 descriptor?? [ 514.318128][T21294] overlayfs: unescaped trailing colons in lowerdir mount option. [ 514.459105][ T9] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 514.459127][ T9] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 514.478089][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 514.478280][ T10] ath9k_htc: Failed to initialize the device [ 514.489482][ T5820] usb 6-1: ath9k_htc: USB layer deinitialized [ 514.685758][ T31] usb 1-1: USB disconnect, device number 102 [ 514.705157][T21310] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 514.705659][T21310] block device autoloading is deprecated and will be removed. [ 514.816977][T21314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.076737][T21329] netlink: 'syz.1.7404': attribute type 3 has an invalid length. [ 515.076761][T21329] netlink: 'syz.1.7404': attribute type 1 has an invalid length. [ 515.076774][T21329] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7404'. [ 515.152322][T21335] overlayfs: conflicting options: userxattr,redirect_dir=on [ 515.475630][T21348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7414'. [ 515.521710][T21350] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7415'. [ 516.733036][T21413] sit0: entered promiscuous mode [ 516.752219][T21413] netlink: 'syz.4.7445': attribute type 1 has an invalid length. [ 516.752241][T21413] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7445'. [ 517.491904][T21445] bond1: option ad_select: invalid value (34) [ 517.577288][T21445] bond1 (unregistering): Released all slaves [ 518.215053][T21482] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.328808][T21490] binder: 21489:21490 ioctl c018620b 0 returned -14 [ 518.488575][ T37] audit: type=1107 audit(1763200215.579:243): pid=21501 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 519.311336][T21554] QAT: Device 9 not found [ 519.571884][T21568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7522'. [ 520.066659][T21596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7535'. [ 520.555389][T21627] netlink: 'syz.4.7551': attribute type 2 has an invalid length. [ 520.611988][T21629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.727886][T21637] ip6erspan0: entered promiscuous mode [ 520.727914][T21637] ip6erspan0: entered allmulticast mode [ 520.796275][T21640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7556'. [ 520.927011][T21650] netlink: 'syz.4.7562': attribute type 21 has an invalid length. [ 520.927123][T21650] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7562'. [ 521.029014][T21655] Zero length message leads to an empty skb [ 521.098532][T21660] RDS: rds_bind could not find a transport for ::c0fe:0:0:0:1, load rds_tcp or rds_rdma? [ 521.346646][T21669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.347096][T21669] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 521.347987][T21669] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 521.583444][T21691] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7580'. [ 521.831052][ T9] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 521.906630][ T10] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 521.991347][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 521.994241][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 521.995520][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.995575][ T9] usb 1-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 521.995603][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 521.998256][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 521.998282][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.998301][ T9] usb 1-1: Product: syz [ 521.998315][ T9] usb 1-1: Manufacturer: syz [ 521.998328][ T9] usb 1-1: SerialNumber: syz [ 522.091372][ T10] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 522.091400][ T10] usb 2-1: config 0 has no interface number 0 [ 522.091450][ T10] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 522.091504][ T10] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.096165][ T10] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 522.096194][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.096213][ T10] usb 2-1: Product: syz [ 522.096227][ T10] usb 2-1: Manufacturer: syz [ 522.096241][ T10] usb 2-1: SerialNumber: syz [ 522.175923][ T10] usb 2-1: config 0 descriptor?? [ 522.177782][T21694] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 522.196107][ T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input51 [ 522.198840][ T10] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 522.232275][ T10] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 522.331850][ T5153] bcm5974 1-1:1.0: could not read from device [ 522.381798][ T9] bcm5974 1-1:1.0: could not read from device [ 522.402173][T21721] syz.5.7590 uses old SIOCAX25GETINFO [ 522.460671][ T5153] bcm5974 1-1:1.0: could not read from device [ 522.550251][ T9] input: failed to attach handler mousedev to device input51, error: -5 [ 522.574667][ T5153] bcm5974 1-1:1.0: could not read from device [ 522.587659][ T9] usb 1-1: USB disconnect, device number 103 [ 522.643249][ T5924] usb 2-1: USB disconnect, device number 106 [ 522.648876][ T37] audit: type=1326 audit(1763200219.460:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 522.649172][ T37] audit: type=1326 audit(1763200219.469:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 522.649460][ T37] audit: type=1326 audit(1763200219.469:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 522.649721][ T37] audit: type=1326 audit(1763200219.469:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21726 comm="syz.5.7592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 522.650592][T21727] ALSA: mixer_oss: invalid OSS volume 'u' [ 522.769507][ T5924] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 522.770395][ T5924] cyberjack 2-1:0.69: device disconnected [ 523.205225][T21749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7600'. [ 523.205829][T21749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7600'. [ 523.364029][T21752] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7601'. [ 523.364058][T21752] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7601'. [ 523.582086][T21768] netlink: 'syz.2.7606': attribute type 8 has an invalid length. [ 523.582111][T21768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7606'. [ 523.857255][ T37] audit: type=1326 audit(1763200220.601:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21777 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 523.859837][ T37] audit: type=1326 audit(1763200220.601:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21777 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 523.860120][ T37] audit: type=1326 audit(1763200220.601:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21777 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 523.860386][ T37] audit: type=1326 audit(1763200220.601:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21777 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 523.860639][ T37] audit: type=1326 audit(1763200220.601:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21777 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 523.963457][T21785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7614'. [ 523.963485][T21785] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7614'. [ 523.963501][T21785] netlink: 'syz.0.7614': attribute type 3 has an invalid length. [ 523.963515][T21785] netlink: 'syz.0.7614': attribute type 2 has an invalid length. [ 523.963527][T21785] netlink: 31 bytes leftover after parsing attributes in process `syz.0.7614'. [ 524.464279][ T5820] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 524.541894][T21811] bond1: option xmit_hash_policy: invalid value (34) [ 524.583007][T21811] bond1 (unregistering): Released all slaves [ 524.638105][ T5820] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 524.638133][ T5820] usb 2-1: config 0 has no interface number 0 [ 524.638183][ T5820] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x6 has invalid maxpacket 64, setting to 8 [ 524.638240][ T5820] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 524.638262][ T5820] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 524.638287][ T5820] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 524.638312][ T5820] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 524.638351][ T5820] usb 2-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 524.638373][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.669834][ T5820] usb 2-1: config 0 descriptor?? [ 524.679215][T21794] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 524.706632][ T5820] hub 2-1:0.3: bad descriptor, ignoring hub [ 524.706671][ T5820] hub 2-1:0.3: probe with driver hub failed with error -5 [ 524.729691][ T5820] sierra 2-1:0.3: Sierra USB modem converter detected [ 525.002308][T21824] gtp0: entered promiscuous mode [ 525.002334][T21824] gtp0: entered allmulticast mode [ 525.039748][ T5820] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 525.073772][ T5820] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 525.200582][ T5820] usb 2-1: USB disconnect, device number 107 [ 525.308693][ T5820] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 525.355411][ T5820] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 525.357693][ T5820] sierra 2-1:0.3: device disconnected [ 525.677003][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.677092][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.570002][T21883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.952957][T21909] IPv6: Can't replace route, no match found [ 527.085122][T21916] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7671'. [ 527.085156][T21916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7671'. [ 527.087205][T21914] netlink: 'syz.5.7670': attribute type 1 has an invalid length. [ 527.294027][T21922] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 527.332211][T21922] bond2 (unregistering): Released all slaves [ 527.465230][T21936] netlink: 'syz.5.7680': attribute type 21 has an invalid length. [ 527.882457][ T37] audit: type=1326 audit(1763200224.360:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21961 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff4f6c9 code=0x7ffc0000 [ 527.885237][ T37] audit: type=1326 audit(1763200224.360:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21961 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff4f6c9 code=0x7ffc0000 [ 527.885545][ T37] audit: type=1326 audit(1763200224.369:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21961 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f9c3ff4f6c9 code=0x7ffc0000 [ 527.885851][ T37] audit: type=1326 audit(1763200224.369:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21961 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff4f6c9 code=0x7ffc0000 [ 527.886102][ T37] audit: type=1326 audit(1763200224.369:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21961 comm="syz.2.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff4f6c9 code=0x7ffc0000 [ 527.915986][ T5924] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 527.947925][T21964] netlink: 'syz.5.7696': attribute type 16 has an invalid length. [ 528.086899][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 528.090281][ T5924] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 528.090307][ T5924] usb 2-1: config 0 has no interface number 0 [ 528.090354][ T5924] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 528.090378][ T5924] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 528.090403][ T5924] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 528.090429][ T5924] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 528.090531][ T5924] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 528.090556][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.203124][ T5924] usb 2-1: config 0 descriptor?? [ 528.222832][ T5924] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 528.549344][ T5820] usb 2-1: USB disconnect, device number 108 [ 528.561930][ T5820] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 528.989671][T22021] netlink: 'syz.0.7722': attribute type 3 has an invalid length. [ 529.475487][T22051] __nla_validate_parse: 2 callbacks suppressed [ 529.475509][T22051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7737'. [ 529.475715][T22051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7737'. [ 529.475733][T22051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.558912][T22055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7739'. [ 529.835021][T22072] delete_channel: no stack [ 530.011802][ T5924] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 530.182021][ T5924] usb 6-1: config 0 has an invalid interface number: 29 but max is 0 [ 530.182051][ T5924] usb 6-1: config 0 has no interface number 0 [ 530.182083][ T5924] usb 6-1: config 0 interface 29 has no altsetting 0 [ 530.185390][ T5924] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 530.185418][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.185438][ T5924] usb 6-1: Product: syz [ 530.185451][ T5924] usb 6-1: Manufacturer: syz [ 530.185465][ T5924] usb 6-1: SerialNumber: syz [ 530.191925][ T5924] usb 6-1: config 0 descriptor?? [ 530.417009][ T5924] peak_usb 6-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 530.417053][ T5924] peak_usb 6-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 530.554338][T22112] cgroup: Unknown subsys name 'cpuset' [ 530.603143][ T5924] peak_usb 6-1:0.29: probe with driver peak_usb failed with error -71 [ 530.647333][ T5924] usb 6-1: USB disconnect, device number 3 [ 530.979408][T22129] netlink: 'syz.1.7776': attribute type 10 has an invalid length. [ 531.003081][T22129] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 531.440610][T22158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7790'. [ 531.456992][ T5924] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 531.625577][ T5924] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 531.625605][ T5924] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 531.625624][ T5924] usb 6-1: config 220 has no interface number 2 [ 531.625720][ T5924] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 531.625747][ T5924] usb 6-1: config 220 interface 0 has no altsetting 0 [ 531.625764][ T5924] usb 6-1: config 220 interface 76 has no altsetting 0 [ 531.625783][ T5924] usb 6-1: config 220 interface 1 has no altsetting 0 [ 531.631235][ T5924] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 531.631265][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.631285][ T5924] usb 6-1: Product: syz [ 531.631299][ T5924] usb 6-1: Manufacturer: syz [ 531.631314][ T5924] usb 6-1: SerialNumber: syz [ 531.899358][ T5924] usb 6-1: selecting invalid altsetting 0 [ 531.927881][ T5924] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 531.927917][ T5924] uvcvideo 6-1:220.0: No valid video chain found. [ 531.961435][ T5924] usb 6-1: selecting invalid altsetting 0 [ 531.961472][ T5924] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 531.985802][ T5924] usb 6-1: USB disconnect, device number 4 [ 532.157763][T22188] netlink: 'syz.4.7805': attribute type 10 has an invalid length. [ 532.182287][T22188] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 532.345085][T22201] netlink: 'syz.2.7810': attribute type 1 has an invalid length. [ 532.345109][T22201] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7810'. [ 532.451195][T22199] bond1: option fail_over_mac: invalid value (15) [ 532.488154][T22199] bond1 (unregistering): Released all slaves [ 533.055362][T22234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7825'. [ 533.176010][T22243] openvswitch: netlink: IP tunnel dst address not specified [ 533.369709][ T5924] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 533.421593][T22258] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 533.466451][T22253] bond2: entered allmulticast mode [ 533.466955][T22253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 533.530095][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 533.535596][ T5924] usb 3-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config [ 533.535656][ T5924] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 533.535678][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.561477][ T5924] usb 3-1: config 0 descriptor?? [ 533.586613][ T5924] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 533.586646][ T5924] uvcvideo 3-1:0.0: No valid video chain found. [ 533.790685][ T10] usb 3-1: USB disconnect, device number 93 [ 533.836398][T22278] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7848'. [ 534.177082][T22300] bond0: option xmit_hash_policy: invalid value (9) [ 534.245602][T22302] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component [ 534.426820][ T37] audit: type=1326 audit(1763200230.485:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22313 comm="syz.5.7865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 534.430194][ T37] audit: type=1326 audit(1763200230.494:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22313 comm="syz.5.7865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 534.433388][ T37] audit: type=1326 audit(1763200230.494:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22313 comm="syz.5.7865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 534.433436][ T37] audit: type=1326 audit(1763200230.494:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22313 comm="syz.5.7865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 534.433479][ T37] audit: type=1326 audit(1763200230.494:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22313 comm="syz.5.7865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 534.433521][ T37] audit: type=1326 audit(1763200230.494:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22313 comm="syz.5.7865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 534.433565][ T37] audit: type=1326 audit(1763200230.494:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22313 comm="syz.5.7865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 534.433606][ T37] audit: type=1326 audit(1763200230.494:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22313 comm="syz.5.7865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 534.438944][ T37] audit: type=1326 audit(1763200230.494:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22313 comm="syz.5.7865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 534.957426][T22331] netlink: 5 bytes leftover after parsing attributes in process `syz.2.7876'. [ 535.855401][T22381] binder: 22378:22381 ioctl c018620c 200000000240 returned -22 [ 536.134506][T22395] netlink: 'syz.4.7906': attribute type 7 has an invalid length. [ 536.134527][T22395] netlink: 'syz.4.7906': attribute type 8 has an invalid length. [ 536.134540][T22395] netlink: 'syz.4.7906': attribute type 13 has an invalid length. [ 536.217166][T22401] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7909'. [ 536.249694][T22403] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7911'. [ 536.437013][T22417] random: crng reseeded on system resumption [ 536.642188][T22426] netlink: 'syz.1.7923': attribute type 1 has an invalid length. [ 536.642212][T22426] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7923'. [ 537.028376][T22441] netlink: 'syz.5.7929': attribute type 288 has an invalid length. [ 537.812903][T22478] kAFS: unable to lookup cell 'sy@jz1' [ 538.076403][T22495] netlink: 'syz.5.7955': attribute type 2 has an invalid length. [ 538.076426][T22495] netlink: 'syz.5.7955': attribute type 1 has an invalid length. [ 538.076440][T22495] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7955'. [ 538.128351][ T5820] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 538.257705][T22506] netlink: 'syz.5.7961': attribute type 11 has an invalid length. [ 538.257727][T22506] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7961'. [ 538.301562][ T5820] usb 1-1: config 0 has an invalid interface number: 233 but max is 0 [ 538.301592][ T5820] usb 1-1: config 0 has an invalid descriptor of length 86, skipping remainder of the config [ 538.301612][ T5820] usb 1-1: config 0 has no interface number 0 [ 538.301668][ T5820] usb 1-1: too many endpoints for config 0 interface 233 altsetting 41: 139, using maximum allowed: 30 [ 538.301711][ T5820] usb 1-1: config 0 interface 233 altsetting 41 has 0 endpoint descriptors, different from the interface descriptor's value: 139 [ 538.301738][ T5820] usb 1-1: config 0 interface 233 has no altsetting 0 [ 538.301772][ T5820] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 538.301794][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.307476][ T5820] usb 1-1: config 0 descriptor?? [ 538.527005][ T5820] usb 1-1: string descriptor 0 read error: -71 [ 538.530847][ T5820] usb 1-1: selecting invalid altsetting 0 [ 538.584288][ T5820] usb 1-1: USB disconnect, device number 104 [ 538.637210][T21689] udevd[21689]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.233/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.446089][T22561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7986'. [ 539.649023][T22576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.754472][T22579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7996'. [ 540.044085][T22602] overlayfs: missing 'lowerdir' [ 540.104198][T22606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8009'. [ 540.131693][ T5820] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 540.288515][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 540.295981][ T5820] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 540.296008][ T5820] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 540.296030][ T5820] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 540.296050][ T5820] usb 2-1: config 1 has no interface number 0 [ 540.296099][ T5820] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.296124][ T5820] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 540.296145][ T5820] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 540.296271][ T5820] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 540.296295][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.308383][T22618] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8015'. [ 540.421725][ T5820] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 540.645657][ T5820] snd_usb_pod 2-1:1.1: cannot start listening: -90 [ 540.648675][ T5820] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 540.649220][ T5820] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 540.887570][ T5820] usb 2-1: USB disconnect, device number 109 [ 540.956825][T22644] program syz.0.8027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.094797][T22652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.236084][T22661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8036'. [ 541.479831][T22676] program syz.0.8044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.719753][T22690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.366559][T22726] netlink: 'syz.5.8068': attribute type 32 has an invalid length. [ 544.061422][T22798] netlink: 'syz.0.8102': attribute type 1 has an invalid length. [ 544.061445][T22798] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8102'. [ 544.439915][ T10] IPVS: starting estimator thread 0... [ 544.534257][T22820] IPVS: using max 9 ests per chain, 21600 per kthread [ 545.007891][T22858] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8132'. [ 545.079456][ T10] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 545.254204][ T10] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 545.254232][ T10] usb 2-1: config 0 has no interface number 0 [ 545.254278][ T10] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.257798][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 545.257827][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.257851][ T10] usb 2-1: Product: syz [ 545.257866][ T10] usb 2-1: Manufacturer: syz [ 545.257879][ T10] usb 2-1: SerialNumber: syz [ 545.273414][ T10] usb 2-1: config 0 descriptor?? [ 545.326241][ T10] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 545.504296][T22880] netlink: 'syz.5.8141': attribute type 3 has an invalid length. [ 545.614834][T22883] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 545.753579][ T5888] usb 2-1: USB disconnect, device number 110 [ 545.758618][ T5888] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 546.241760][T22916] nbd: couldn't find device at index -37165402 [ 546.347971][T22922] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8163'. [ 546.636855][T22940] netlink: 'syz.2.8173': attribute type 27 has an invalid length. [ 546.636881][T22940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8173'. [ 547.118173][T22970] netlink: 'syz.0.8187': attribute type 5 has an invalid length. [ 547.118204][T22970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8187'. [ 547.129870][T22972] netlink: 'syz.2.8191': attribute type 3 has an invalid length. [ 547.355129][T22985] netlink: 'syz.0.8194': attribute type 1 has an invalid length. [ 547.528360][T22996] netlink: 'syz.4.8201': attribute type 30 has an invalid length. [ 547.651810][T23001] netlink: 'syz.1.8203': attribute type 5 has an invalid length. [ 547.651834][T23001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8203'. [ 547.915196][T23008] nvme_fabrics: missing parameter 'transport=%s' [ 547.915218][T23008] nvme_fabrics: missing parameter 'nqn=%s' [ 548.137881][T23027] netlink: 'syz.0.8212': attribute type 23 has an invalid length. [ 548.137903][T23027] netlink: 'syz.0.8212': attribute type 6 has an invalid length. [ 548.137918][T23027] IPv6: NLM_F_CREATE should be specified when creating new route [ 548.522360][T23049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8225'. [ 549.021936][T23083] libceph: resolve '0..' (ret=-3): failed [ 549.103402][T23089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8246'. [ 549.618455][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8260'. [ 549.896805][T23133] overlayfs: conflicting options: nfs_export=on,index=off [ 551.321864][T23182] netlink: 'syz.0.8290': attribute type 1 has an invalid length. [ 551.321888][T23182] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8290'. [ 552.462261][ T10] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 552.623231][ T10] usb 1-1: too many configurations: 224, using maximum allowed: 8 [ 552.648165][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 552.648196][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.648217][ T10] usb 1-1: Product: syz [ 552.648231][ T10] usb 1-1: Manufacturer: syz [ 552.648246][ T10] usb 1-1: SerialNumber: syz [ 552.697260][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 552.760443][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 553.211615][ T37] audit: type=1326 audit(1763200248.056:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23255 comm="syz.1.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 553.211674][ T37] audit: type=1326 audit(1763200248.056:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23255 comm="syz.1.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 553.215632][ T37] audit: type=1326 audit(1763200248.056:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23255 comm="syz.1.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 553.215683][ T37] audit: type=1326 audit(1763200248.056:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23255 comm="syz.1.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 553.215725][ T37] audit: type=1326 audit(1763200248.056:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23255 comm="syz.1.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 553.345952][ T31] usb 1-1: USB disconnect, device number 105 [ 553.607339][T23270] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8334'. [ 553.734809][T23277] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8338'. [ 553.937207][T23284] tmpfs: Bad value for 'size' [ 554.002540][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 554.002867][ T9] ath9k_htc: Failed to initialize the device [ 554.003786][ T31] usb 1-1: ath9k_htc: USB layer deinitialized [ 554.316562][T23298] overlay: Unknown parameter '\8vn& O~7*' [ 554.613312][T23310] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8354'. [ 555.005928][T23320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8359'. [ 555.523530][T23337] netlink: 'syz.0.8367': attribute type 13 has an invalid length. [ 555.534269][T23337] lo: left promiscuous mode [ 555.558067][T23337] tunl0: left promiscuous mode [ 555.572530][T23337] gre0: left promiscuous mode [ 555.673231][T23337] gretap0: left promiscuous mode [ 555.686516][T23337] gretap0: refused to change device tx_queue_len [ 555.686539][T23337] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 555.977436][T23353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8371'. [ 555.977463][T23353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8371'. [ 556.149318][T23356] cgroup: none used incorrectly [ 556.638507][ T37] audit: type=1326 audit(1763200251.254:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23379 comm="syz.1.8387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 556.703509][ T37] audit: type=1326 audit(1763200251.254:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23379 comm="syz.1.8387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 556.703805][ T37] audit: type=1326 audit(1763200251.319:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23379 comm="syz.1.8387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 556.703970][ T37] audit: type=1326 audit(1763200251.319:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23379 comm="syz.1.8387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 556.704104][ T37] audit: type=1326 audit(1763200251.319:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23379 comm="syz.1.8387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1e61f6c9 code=0x7ffc0000 [ 556.767819][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8389'. [ 557.030864][T23396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.679092][T23439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8415'. [ 557.704278][T23441] netlink: 'syz.5.8418': attribute type 10 has an invalid length. [ 557.704316][T23441] lo: entered promiscuous mode [ 557.704534][T23441] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 557.845790][T23448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8422'. [ 557.952894][T23456] netlink: 'syz.1.8424': attribute type 25 has an invalid length. [ 558.199198][T23471] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8432'. [ 558.390166][T23483] netlink: 'syz.2.8437': attribute type 12 has an invalid length. [ 558.613364][ T37] audit: type=1326 audit(1763200253.105:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23495 comm="syz.5.8444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 558.613419][ T37] audit: type=1326 audit(1763200253.105:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23495 comm="syz.5.8444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 558.693116][ T37] audit: type=1326 audit(1763200253.180:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23495 comm="syz.5.8444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 560.224080][T23588] binfmt_misc: register: failed to install interpreter file ./file0 [ 560.705751][T23617] IPv6: NLM_F_REPLACE set, but no existing node found! [ 560.811669][T23624] netlink: 'syz.2.8506': attribute type 1 has an invalid length. [ 560.811693][T23624] __nla_validate_parse: 1 callbacks suppressed [ 560.811704][T23624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8506'. [ 561.368344][T23659] netlink: 1108 bytes leftover after parsing attributes in process `syz.2.8524'. [ 561.605349][T23670] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8528'. [ 561.659247][T23674] overlay: ./file0 is not a directory [ 562.013770][T23696] netlink: 'syz.5.8542': attribute type 5 has an invalid length. [ 563.317044][T23765] pimreg: entered allmulticast mode [ 564.428587][T23805] syz.4.8596 (23805) used greatest stack depth: 17680 bytes left [ 564.687744][T23824] netlink: 92 bytes leftover after parsing attributes in process `syz.2.8604'. [ 564.687809][T23824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8604'. [ 565.301516][T23843] Bluetooth: MGMT ver 1.23 [ 567.041859][T23938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8656'. [ 567.084770][T23939] tmpfs: Bad value for 'mpol' [ 567.476386][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8662'. [ 567.569062][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.629820][T23965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 567.893344][T23979] netlink: 'syz.0.8675': attribute type 3 has an invalid length. [ 568.109515][T23994] sctp: [Deprecated]: syz.2.8684 (pid 23994) Use of int in max_burst socket option. [ 568.109515][T23994] Use struct sctp_assoc_value instead [ 568.414067][ T10] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 568.473264][T24012] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 568.577455][ T10] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 568.577515][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 568.577538][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 568.580808][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 568.580836][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 568.580857][ T10] usb 2-1: Product: syz [ 568.580872][ T10] usb 2-1: Manufacturer: syz [ 568.580948][ T10] usb 2-1: SerialNumber: syz [ 568.604913][ T10] usb 2-1: config 0 descriptor?? [ 568.631465][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 568.631504][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 568.673804][ T10] usb 2-1: selecting invalid altsetting 0 [ 568.917682][ T10] usb 2-1: USB disconnect, device number 111 [ 569.081098][T23567] udevd[23567]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.158446][T24025] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8697'. [ 569.455851][T24038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8704'. [ 569.862366][T24055] sp0: Synchronizing with TNC [ 571.655611][T24133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8749'. [ 572.114448][T24161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8764'. [ 572.548445][ T37] audit: type=1326 audit(1763200266.132:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24188 comm="syz.5.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 572.555422][ T37] audit: type=1326 audit(1763200266.132:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24188 comm="syz.5.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 572.589061][ T37] audit: type=1326 audit(1763200266.169:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24188 comm="syz.5.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 572.592196][ T37] audit: type=1326 audit(1763200266.169:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24188 comm="syz.5.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 572.594531][ T37] audit: type=1326 audit(1763200266.169:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24188 comm="syz.5.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 572.603607][ T37] audit: type=1326 audit(1763200266.178:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24188 comm="syz.5.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 572.603660][ T37] audit: type=1326 audit(1763200266.178:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24188 comm="syz.5.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 572.603704][ T37] audit: type=1326 audit(1763200266.178:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24188 comm="syz.5.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 572.719076][T24194] trusted_key: encrypted_key: key user:syz not found [ 572.845910][T24200] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 572.848916][T24195] IPVS: stopping backup sync thread 24200 ... [ 573.086453][ T5888] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 573.139720][T24217] netlink: 'syz.4.8790': attribute type 1 has an invalid length. [ 573.256302][ T5888] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 573.256333][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.256352][ T5888] usb 6-1: Product: syz [ 573.256366][ T5888] usb 6-1: Manufacturer: syz [ 573.256378][ T5888] usb 6-1: SerialNumber: syz [ 573.295986][ T5888] usb 6-1: config 0 descriptor?? [ 573.542344][ T5924] usb 6-1: USB disconnect, device number 5 [ 574.209324][ T5888] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 574.372527][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 574.372561][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.372583][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 574.372625][ T5888] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 574.372655][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.436762][ T5888] usb 3-1: config 0 descriptor?? [ 574.733784][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 574.897389][ T5888] plantronics 0003:047F:FFFF.0001: unbalanced collection at end of report description [ 574.898478][ T5888] plantronics 0003:047F:FFFF.0001: parse failed [ 574.898591][ T5888] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22 [ 574.922211][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 574.924891][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 574.924915][ T10] usb 6-1: config 0 has no interface number 0 [ 574.930956][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 574.930984][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.931003][ T10] usb 6-1: Product: syz [ 574.931017][ T10] usb 6-1: Manufacturer: syz [ 574.931031][ T10] usb 6-1: SerialNumber: syz [ 575.005250][ T10] usb 6-1: config 0 descriptor?? [ 575.023387][ T10] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 575.023426][ T10] usb 6-1: selecting invalid altsetting 1 [ 575.023442][ T10] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 575.046118][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 575.046572][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 575.046645][ T10] usb 6-1: media controller created [ 575.110853][ T5888] usb 3-1: USB disconnect, device number 94 [ 575.185326][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 575.330886][ T10] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 575.330945][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 575.331671][ T10] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 575.432053][ T10] usb 6-1: USB disconnect, device number 6 [ 575.610910][T24302] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 575.610938][T24302] bond0: (slave lo): Error: Device type is different from other slaves [ 575.768274][T24311] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 576.090101][T24330] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8842'. [ 576.136280][ T5888] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 576.170232][T24332] netlink: 264 bytes leftover after parsing attributes in process `syz.5.8844'. [ 576.177128][ T31] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 576.294738][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 576.297227][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.297283][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 576.297310][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 576.297335][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 576.297356][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 576.327643][ T5888] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 576.327672][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 576.327691][ T5888] usb 3-1: Product: syz [ 576.327704][ T5888] usb 3-1: Manufacturer: syz [ 576.327718][ T5888] usb 3-1: SerialNumber: syz [ 576.411903][ T5888] usb 3-1: config 0 descriptor?? [ 576.422986][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 576.427677][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 11: 129, using maximum allowed: 30 [ 576.427724][ T31] usb 2-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 576.427749][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 576.427782][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00 [ 576.427803][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.496029][ T31] usb 2-1: config 0 descriptor?? [ 576.596250][T24347] netem: change failed [ 576.644861][ T5888] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 576.644944][ T5888] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 576.857453][ T5888] radio-si470x 3-1:0.0: software version 116, hardware version 35 [ 576.857480][ T5888] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 576.982148][ T31] wacom 0003:056A:00D8.0002: Unknown device_type for 'HID 056a:00d8'. Assuming pen. [ 577.073107][ T5888] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 577.073163][ T5888] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 577.073587][ T5888] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 577.073898][ T5888] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 577.113737][ T31] wacom 0003:056A:00D8.0002: hidraw0: USB HID v0.24 Device [HID 056a:00d8] on usb-dummy_hcd.1-1/input0 [ 577.117282][ T5888] usb 3-1: USB disconnect, device number 95 [ 577.147500][ T31] input: Wacom Bamboo Comic 2FG Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D8.0002/input/input53 [ 577.412581][ T31] usb 2-1: USB disconnect, device number 112 [ 577.432918][ T37] audit: type=1326 audit(1763200270.704:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24372 comm="syz.4.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f573965f6c9 code=0x7ffc0000 [ 577.442233][ T37] audit: type=1326 audit(1763200270.714:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24372 comm="syz.4.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f573965f6c9 code=0x7ffc0000 [ 577.502173][T24365] fido_id[24365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 578.528226][T24410] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8882'. [ 579.020857][T24427] tipc: Enabling of bearer rejected, failed to enable media [ 579.172572][T24434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8893'. [ 579.721485][T24466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8909'. [ 579.953358][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 580.115586][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 580.115621][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.115658][ T10] usb 6-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 580.115682][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.137938][ T10] usb 6-1: config 0 descriptor?? [ 580.593986][T24498] netlink: 'syz.1.8925': attribute type 195 has an invalid length. [ 580.647549][ T10] aquacomputer_d5next 0003:0C70:F012.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.5-1/input0 [ 580.838885][ T10] usb 6-1: USB disconnect, device number 7 [ 581.018759][T24512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8931'. [ 581.056448][ T9] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 581.217631][ T9] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 581.217659][ T9] usb 3-1: config 0 has no interface number 0 [ 581.223687][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 581.223718][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.223739][ T9] usb 3-1: Product: syz [ 581.223753][ T9] usb 3-1: Manufacturer: syz [ 581.223768][ T9] usb 3-1: SerialNumber: syz [ 581.234803][ T9] usb 3-1: config 0 descriptor?? [ 581.486959][ T9] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 581.496498][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 581.496657][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 581.496809][ T9] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 581.505010][ T9] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 581.914458][T24543] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 581.914516][T24543] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 581.914567][T24543] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 581.914696][T24543] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 581.914744][T24543] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 581.915096][T24543] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 581.915283][T24543] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 581.915330][T24543] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 581.915377][T24543] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 581.915464][T24543] comedi comedi3: 8255: I/O port conflict (0x13352f60,4) [ 581.923855][ T5822] usb 3-1: USB disconnect, device number 96 [ 582.004201][ T5822] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 582.014680][ T5822] keyspan 3-1:0.133: device disconnected [ 582.517697][T24566] tipc: Started in network mode [ 582.517730][T24566] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 582.517798][T24566] tipc: Enabling of bearer rejected, failed to enable media [ 583.382111][T24613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8979'. [ 583.625054][T24620] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 583.994370][ T5820] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 584.045915][T24640] syz.0.8992: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 584.046177][T24640] CPU: 1 UID: 0 PID: 24640 Comm: syz.0.8992 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 584.046202][T24640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.046218][T24640] Call Trace: [ 584.046231][T24640] [ 584.046240][T24640] dump_stack_lvl+0x189/0x250 [ 584.046283][T24640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.046313][T24640] ? __pfx__printk+0x10/0x10 [ 584.046339][T24640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 584.046363][T24640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 584.046388][T24640] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 584.046415][T24640] warn_alloc+0x22e/0x3b0 [ 584.046447][T24640] ? stack_depot_save_flags+0x40/0x860 [ 584.046479][T24640] ? __pfx_warn_alloc+0x10/0x10 [ 584.046508][T24640] ? kasan_save_track+0x3e/0x80 [ 584.046531][T24640] ? __kasan_kmalloc+0x93/0xb0 [ 584.046558][T24640] ? xsk_setsockopt+0x4dc/0x8d0 [ 584.046582][T24640] ? do_sock_setsockopt+0x17c/0x1b0 [ 584.046604][T24640] ? __x64_sys_setsockopt+0x145/0x1b0 [ 584.046626][T24640] ? do_syscall_64+0xfa/0xfa0 [ 584.046654][T24640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.046694][T24640] __vmalloc_node_range_noprof+0x125/0x12d0 [ 584.046770][T24640] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 584.046803][T24640] ? __kasan_kmalloc+0x93/0xb0 [ 584.046833][T24640] vmalloc_user_noprof+0xad/0xf0 [ 584.046860][T24640] ? xskq_create+0xbf/0x170 [ 584.046888][T24640] xskq_create+0xbf/0x170 [ 584.046916][T24640] xsk_init_queue+0xb0/0x110 [ 584.046944][T24640] xsk_setsockopt+0x4dc/0x8d0 [ 584.046972][T24640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 584.047005][T24640] ? __fget_files+0x2a/0x420 [ 584.047035][T24640] ? __fget_files+0x2a/0x420 [ 584.047060][T24640] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 584.047087][T24640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 584.047113][T24640] do_sock_setsockopt+0x17c/0x1b0 [ 584.047141][T24640] __x64_sys_setsockopt+0x145/0x1b0 [ 584.047170][T24640] do_syscall_64+0xfa/0xfa0 [ 584.047196][T24640] ? lockdep_hardirqs_on+0x9c/0x150 [ 584.047224][T24640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.047243][T24640] ? clear_bhb_loop+0x60/0xb0 [ 584.047267][T24640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.047286][T24640] RIP: 0033:0x7f61dbd5f6c9 [ 584.047312][T24640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.047329][T24640] RSP: 002b:00007f61d9fbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 584.047350][T24640] RAX: ffffffffffffffda RBX: 00007f61dbfb5fa0 RCX: 00007f61dbd5f6c9 [ 584.047366][T24640] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 584.047378][T24640] RBP: 00007f61dbde1f91 R08: 0000000000000004 R09: 0000000000000000 [ 584.047392][T24640] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.047406][T24640] R13: 00007f61dbfb6038 R14: 00007f61dbfb5fa0 R15: 00007ffe9fdcb1a8 [ 584.047441][T24640] [ 584.054750][T24640] Mem-Info: [ 584.054769][T24640] active_anon:262 inactive_anon:7174 isolated_anon:0 [ 584.054769][T24640] active_file:6570 inactive_file:48678 isolated_file:0 [ 584.054769][T24640] unevictable:768 dirty:295 writeback:0 [ 584.054769][T24640] slab_reclaimable:13201 slab_unreclaimable:129927 [ 584.054769][T24640] mapped:35030 shmem:1355 pagetables:1574 [ 584.054769][T24640] sec_pagetables:0 bounce:0 [ 584.054769][T24640] kernel_misc_reclaimable:0 [ 584.054769][T24640] free:1272182 free_pcp:3440 free_cma:0 [ 584.054831][T24640] Node 0 active_anon:1048kB inactive_anon:28696kB active_file:25972kB inactive_file:194712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140008kB dirty:1176kB writeback:0kB shmem:3884kB kernel_stack:13104kB pagetables:6160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 584.054880][T24640] Node 1 active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 584.054932][T24640] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.054994][T24640] lowmem_reserve[]: 0 2515 2517 2517 2517 [ 584.055028][T24640] Node 0 DMA32 free:1165848kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1048kB inactive_anon:28696kB active_file:25972kB inactive_file:194712kB unevictable:1536kB writepending:1176kB zspages:0kB present:3129332kB managed:2576080kB mlocked:0kB bounce:0kB free_pcp:13760kB local_pcp:7300kB free_cma:0kB [ 584.055092][T24640] lowmem_reserve[]: 0 0 1 1 1 [ 584.055123][T24640] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.055180][T24640] lowmem_reserve[]: 0 0 0 0 0 [ 584.055212][T24640] Node 1 Normal free:3907520kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.055271][T24640] lowmem_reserve[]: 0 0 0 0 0 [ 584.055302][T24640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 584.055416][T24640] Node 0 DMA32: 1400*4kB (UM) 778*8kB (UME) 349*16kB (UME) 390*32kB (UME) 100*64kB (UME) 474*128kB (UM) 453*256kB (UME) 295*512kB (UM) 135*1024kB (UME) 4*2048kB (UME) 160*4096kB (M) = 1165760kB [ 584.055564][T24640] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 584.055675][T24640] Node 1 Normal: 186*4kB (UME) 49*8kB (UME) 25*16kB (UE) 188*32kB (UE) 87*64kB (UE) 25*128kB (UME) 10*256kB (UM) 5*512kB (UM) 5*1024kB (UME) 3*2048kB (ME) 946*4096kB (UM) = 3907520kB [ 584.055833][T24640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 584.055850][T24640] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 584.055866][T24640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 584.055882][T24640] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 584.055899][T24640] 56599 total pagecache pages [ 584.055916][T24640] 0 pages in swap cache [ 584.055923][T24640] Free swap = 124996kB [ 584.055931][T24640] Total swap = 124996kB [ 584.055940][T24640] 2097051 pages RAM [ 584.055947][T24640] 0 pages HighMem/MovableOnly [ 584.055955][T24640] 421005 pages reserved [ 584.055962][T24640] 0 pages cma reserved [ 584.197353][ T5820] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 584.197387][ T5820] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.197428][ T5820] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 584.197452][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.335784][T24645] netlink: 'syz.4.8995': attribute type 298 has an invalid length. [ 584.351895][T24648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8996'. [ 584.822446][ T5820] hub 2-1:4.0: USB hub found [ 585.055424][ T5820] hub 2-1:4.0: 13 ports detected [ 585.055489][ T5820] usb 2-1: selecting invalid altsetting 1 [ 585.055506][ T5820] hub 2-1:4.0: Using single TT (err -22) [ 585.056012][ T5820] hub 2-1:4.0: insufficient power available to use all downstream ports [ 585.368597][T24676] bond0: option miimon: invalid value (18446744071651274468) [ 585.368624][T24676] bond0: option miimon: allowed values 0 - 2147483647 [ 585.504279][T24680] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9012'. [ 585.529123][ T5820] usb 2-1: USB disconnect, device number 113 [ 585.697481][T24686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9014'. [ 585.965909][T24690] bridge0: port 3(team0) entered disabled state [ 585.966423][T24690] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 586.225980][T24705] netlink: 'syz.4.9024': attribute type 3 has an invalid length. [ 586.371694][T24714] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9027'. [ 587.948360][T24751] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 587.948380][T24751] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 588.513347][T24829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9083'. [ 588.625309][T24834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9085'. [ 588.661738][T24837] tipc: Enabling of bearer rejected, failed to enable media [ 589.212183][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 589.212201][ T37] audit: type=1326 audit(1763200281.711:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.0.9102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 589.212268][ T37] audit: type=1326 audit(1763200281.711:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.0.9102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 589.231305][ T37] audit: type=1326 audit(1763200281.729:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.0.9102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 589.234219][ T37] audit: type=1326 audit(1763200281.729:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.0.9102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 589.234273][ T37] audit: type=1326 audit(1763200281.729:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.0.9102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 589.234319][ T37] audit: type=1326 audit(1763200281.729:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.0.9102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 589.234362][ T37] audit: type=1326 audit(1763200281.729:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.0.9102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 589.234407][ T37] audit: type=1326 audit(1763200281.729:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24867 comm="syz.0.9102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbd5f6c9 code=0x7ffc0000 [ 589.464307][T24877] netlink: 80 bytes leftover after parsing attributes in process `syz.0.9106'. [ 589.464333][T24877] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9106'. [ 589.557550][T24885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9109'. [ 589.724898][T24893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9113'. [ 589.809374][ T37] audit: type=1326 audit(1763200282.272:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24898 comm="syz.2.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff4f6c9 code=0x7ffc0000 [ 589.809512][ T37] audit: type=1326 audit(1763200282.272:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24898 comm="syz.2.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ff4f6c9 code=0x7ffc0000 [ 590.259192][T24919] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 590.582518][T24927] block device autoloading is deprecated and will be removed. [ 591.210252][T24966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9149'. [ 591.211035][T24966] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9149'. [ 591.382397][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 591.770258][ T5820] IPVS: starting estimator thread 0... [ 591.843980][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 591.877935][T24997] IPVS: using max 8 ests per chain, 19200 per kthread [ 592.004453][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 592.010175][ T9] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 592.010205][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.010223][ T9] usb 3-1: Product: syz [ 592.010236][ T9] usb 3-1: Manufacturer: syz [ 592.010250][ T9] usb 3-1: SerialNumber: syz [ 592.031063][ T9] usb 3-1: config 0 descriptor?? [ 592.051095][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 592.051161][ T9] usb 3-1: setting power ON [ 592.051183][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 592.093944][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 592.109329][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 592.109387][ T9] usb 3-1: media controller created [ 592.205295][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 592.297482][ T9] usb 3-1: selecting invalid altsetting 6 [ 592.297505][ T9] usb 3-1: digital interface selection failed (-22) [ 592.297519][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 592.298384][ T9] usb 3-1: setting power OFF [ 592.298407][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 592.298423][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 592.298435][ T9] (NULL device *): no alternate interface [ 592.400178][ T61] Bluetooth: hci3: command tx timeout [ 592.481608][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 592.503175][ T9] usb 3-1: USB disconnect, device number 97 [ 592.567029][T25027] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9176'. [ 592.567058][T25027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9176'. [ 592.862508][T25033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9180'. [ 593.103817][T25046] tipc: Started in network mode [ 593.103851][T25046] tipc: Node identity 00000000000000000000007ade000001, cluster identity 4711 [ 593.103907][T25046] tipc: Enabling of bearer rejected, failed to enable media [ 593.515260][T25068] netlink: 'syz.0.9197': attribute type 49 has an invalid length. [ 594.068008][ T9] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 594.103779][T25098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9212'. [ 594.247583][ T9] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 594.247614][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.247633][ T9] usb 1-1: config 0 has no interface number 0 [ 594.247706][ T9] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 3942, setting to 64 [ 594.247743][ T9] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.247770][ T9] usb 1-1: config 0 interface 52 has no altsetting 0 [ 594.252227][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 594.252257][ T9] usb 1-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 594.252277][ T9] usb 1-1: Product: syz [ 594.252291][ T9] usb 1-1: SerialNumber: syz [ 594.259011][ T9] usb 1-1: config 0 descriptor?? [ 594.581710][ T1229] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 594.612480][ T9] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input56 [ 594.753437][ T1229] usb 6-1: Using ep0 maxpacket: 16 [ 594.757785][ T1229] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.757811][ T1229] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.779891][ T1229] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.779922][ T1229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.779942][ T1229] usb 6-1: Product: syz [ 594.780079][ T1229] usb 6-1: Manufacturer: syz [ 594.780092][ T1229] usb 6-1: SerialNumber: syz [ 594.895706][ T9] usb 1-1: USB disconnect, device number 106 [ 594.895802][ C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 595.121395][ T1229] usb 6-1: 0:2 : does not exist [ 595.144588][ T1229] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 595.265130][ T1229] usb 6-1: USB disconnect, device number 8 [ 595.433913][T23569] udevd[23569]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.537944][T25124] xt_l2tp: missing protocol rule (udp|l2tpip) [ 595.588282][T25126] ipvlan2: entered promiscuous mode [ 595.588309][T25126] ipvlan2: entered allmulticast mode [ 595.588321][T25126] geneve1: entered allmulticast mode [ 596.139667][T25154] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9238'. [ 596.397994][T25167] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9244'. [ 596.975404][T25195] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9258'. [ 597.112753][T25203] netlink: 'syz.4.9262': attribute type 1 has an invalid length. [ 597.671659][ T5888] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 597.831963][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 597.834847][ T5888] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.834873][ T5888] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 597.838225][ T5888] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 597.838253][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.838273][ T5888] usb 3-1: Product: syz [ 597.838287][ T5888] usb 3-1: Manufacturer: syz [ 597.838363][ T5888] usb 3-1: SerialNumber: syz [ 598.137410][ T5888] usb 3-1: 0:2 : does not exist [ 598.161354][ T5888] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 598.209509][ T5888] usb 3-1: USB disconnect, device number 98 [ 598.393369][T23569] udevd[23569]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.662079][T25259] usb usb5: usbfs: process 25259 (syz.0.9289) did not claim interface 0 before use [ 599.148000][ T1229] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 599.312638][ T1229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.312669][ T1229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 599.312711][ T1229] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 599.312734][ T1229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.329764][ T1229] usb 1-1: config 0 descriptor?? [ 599.500269][ T5888] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 599.602171][T25298] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 599.602980][T25298] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 599.664953][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.664986][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 599.665024][ T5888] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 599.665047][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.711967][ T5888] usb 6-1: config 0 descriptor?? [ 599.834198][ T1229] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 600.000774][ T1229] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 600.000829][ T1229] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 600.008780][ T1229] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -71 [ 600.018440][ T1229] usb 1-1: USB disconnect, device number 107 [ 600.194039][ T5888] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 600.194081][ T5888] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 600.194109][ T5888] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 600.194160][ T5888] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 600.194188][ T5888] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 600.194213][ T5888] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 600.194240][ T5888] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 600.249200][ T5888] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 600.405416][ T5888] arvo 0003:1E7D:30D4.0005: couldn't init struct arvo_device [ 600.405481][ T5888] arvo 0003:1E7D:30D4.0005: couldn't install keyboard [ 600.429861][ T5888] arvo 0003:1E7D:30D4.0005: probe with driver arvo failed with error -71 [ 600.445732][ T5888] usb 6-1: USB disconnect, device number 9 [ 600.927813][T25339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9327'. [ 601.279279][ T5888] IPVS: starting estimator thread 0... [ 601.375282][T25357] IPVS: using max 9 ests per chain, 21600 per kthread [ 601.724859][ T5888] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 601.884977][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 601.892230][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.892261][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.892284][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 601.892325][ T5888] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 601.892347][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.954873][ T5888] usb 1-1: config 0 descriptor?? [ 601.955082][T25390] openvswitch: netlink: Message has 536 unknown bytes. [ 601.955114][T25390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.976175][T25391] netlink: 'syz.2.9353': attribute type 10 has an invalid length. [ 602.120231][ T5822] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 602.280669][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 602.286078][ T5822] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 602.286103][ T5822] usb 2-1: config 0 has no interface number 0 [ 602.311720][ T5822] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 602.312047][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.312068][ T5822] usb 2-1: Product: syz [ 602.312137][ T5822] usb 2-1: Manufacturer: syz [ 602.312151][ T5822] usb 2-1: SerialNumber: syz [ 602.366001][ T5822] usb 2-1: config 0 descriptor?? [ 602.383518][ T5822] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 602.465339][ T5888] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 602.465769][ T5888] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 602.465802][ T5888] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 602.521455][ T5888] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 602.521487][ T5888] microsoft 0003:045E:07DA.0006: no inputs found [ 602.521499][ T5888] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 602.631136][ T5888] usb 1-1: USB disconnect, device number 108 [ 602.674801][ T5822] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 602.723988][ T5822] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 602.898892][T25410] fido_id[25410]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 602.924756][T25415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9364'. [ 602.924782][T25415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9364'. [ 603.088139][T25417] netlink: 104 bytes leftover after parsing attributes in process `syz.5.9365'. [ 603.097193][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 603.106868][ T10] usb 2-1: USB disconnect, device number 114 [ 603.141615][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 603.182163][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 603.194428][ T10] quatech2 2-1:0.51: device disconnected [ 603.613437][T25435] QAT: Invalid ioctl 1075883590 [ 603.613546][T25435] QAT: Invalid ioctl 1075883590 [ 603.613637][T25435] QAT: Invalid ioctl 1075883590 [ 603.613738][T25435] QAT: Invalid ioctl 1075883590 [ 603.613845][T25435] QAT: Invalid ioctl 1075883590 [ 603.613946][T25435] QAT: Invalid ioctl 1075883590 [ 603.614039][T25435] QAT: Invalid ioctl 1075883590 [ 603.614126][T25435] QAT: Invalid ioctl 1075883590 [ 603.614226][T25435] QAT: Invalid ioctl 1075883590 [ 603.614312][T25435] QAT: Invalid ioctl 1075883590 [ 604.529349][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9394'. [ 604.529411][T25477] nbd: socks must be embedded in a SOCK_ITEM attr [ 604.538556][T25480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9396'. [ 604.758950][T25484] [U] 8 [ 604.952834][T25492] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 604.952890][T25492] comedi comedi3: 8255: I/O port conflict (0x10005,4) [ 604.952937][T25492] comedi comedi3: 8255: I/O port conflict (0xffffffff80000001,4) [ 604.952998][T25492] comedi comedi3: 8255: I/O port conflict (0xf0084,4) [ 604.953045][T25492] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 604.953092][T25492] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 604.953206][T25492] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4) [ 604.953255][T25492] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 604.953293][T25492] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 604.953396][T25492] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 604.953456][T25492] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 604.953557][T25492] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff9,4) [ 604.953600][T25492] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 604.953647][T25492] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 605.069526][T25489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.213597][T25498] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9404'. [ 605.335473][T25505] xt_limit: Overflow, try lower: 271964/0 [ 605.554790][T25518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9414'. [ 605.801541][T25530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9420'. [ 606.136151][T25549] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9429'. [ 606.176719][T25550] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 606.376945][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 606.537323][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 606.539708][ T9] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 606.539734][ T9] usb 3-1: config 2 has no interface number 0 [ 606.539784][ T9] usb 3-1: config 2 interface 31 has no altsetting 0 [ 606.543156][ T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 606.543185][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.543205][ T9] usb 3-1: Product: syz [ 606.543220][ T9] usb 3-1: Manufacturer: syz [ 606.543235][ T9] usb 3-1: SerialNumber: syz [ 606.779004][T25568] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 606.779033][T25568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 606.877026][T25568] vhci_hcd vhci_hcd.0: Device attached [ 607.149573][ T1229] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 607.266101][ T9] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 607.299748][ T9] usb 3-1: USB disconnect, device number 99 [ 607.414121][T25580] IPv6: NLM_F_CREATE should be specified when creating new route [ 607.414278][T25580] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 607.414290][T25580] IPv6: NLM_F_CREATE should be set when creating new route [ 607.414325][T25580] IPv6: NLM_F_CREATE should be set when creating new route [ 608.494934][T25626] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 608.591839][T25631] EXT4-fs: Conflicting test_dummy_encryption options [ 608.861434][T25645] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9474'. [ 609.103891][ T5924] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 609.263863][ T5822] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 609.266749][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 609.266781][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 609.266813][ T5924] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 609.266825][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.271350][ T5924] usb 3-1: config 0 descriptor?? [ 609.435109][ T5822] usb 6-1: Using ep0 maxpacket: 16 [ 609.437671][ T5822] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.437696][ T5822] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 609.445124][ T5822] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.445153][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.445173][ T5822] usb 6-1: Product: syz [ 609.445187][ T5822] usb 6-1: Manufacturer: syz [ 609.445201][ T5822] usb 6-1: SerialNumber: syz [ 609.742704][ T5924] hid_parser_main: 8 callbacks suppressed [ 609.742730][ T5924] sony 0003:1345:3008.0007: unknown main item tag 0x0 [ 609.801036][ T5924] sony 0003:1345:3008.0007: hiddev0,hidraw0: USB HID v80.00 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 609.801070][ T5924] sony 0003:1345:3008.0007: failed to claim input [ 609.957177][ T9] usb 3-1: USB disconnect, device number 100 [ 609.962346][ T5822] usb 6-1: cannot find UAC_HEADER [ 610.055563][T25570] vhci_hcd: connection reset by peer [ 610.077802][ T1459] vhci_hcd: stop threads [ 610.078937][ T1459] vhci_hcd: release socket [ 610.095230][ T1459] vhci_hcd: disconnect device [ 610.121962][ T5822] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 610.139928][ T5822] usb 6-1: USB disconnect, device number 10 [ 610.150678][T25666] MPI: mpi too large (130952 bits) [ 610.188353][T23569] udevd[23569]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.206653][ T5924] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 610.244284][ C1] vkms_vblank_simulate: vblank timer overrun [ 610.376381][ T5924] usb 1-1: Using ep0 maxpacket: 32 [ 610.380092][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 42, changing to 9 [ 610.380141][ T5924] usb 1-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 610.380164][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.391887][ T5924] usb 1-1: config 0 descriptor?? [ 610.466053][T25676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9489'. [ 610.729240][ T5822] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 610.880191][ T5924] magicmouse 0003:05AC:0323.0008: item fetching failed at offset 0/2 [ 610.881041][ T5924] magicmouse 0003:05AC:0323.0008: magicmouse hid parse failed [ 610.881150][ T5924] magicmouse 0003:05AC:0323.0008: probe with driver magicmouse failed with error -22 [ 610.899896][ T5822] usb 2-1: Using ep0 maxpacket: 8 [ 610.902542][ T5822] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.902574][ T5822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 610.902609][ T5822] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 610.902632][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.967653][ T5822] usb 2-1: config 0 descriptor?? [ 611.103003][ T5888] usb 1-1: USB disconnect, device number 109 [ 611.199316][ T5822] usbhid 2-1:0.0: can't add hid device: -71 [ 611.199448][ T5822] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 611.210156][ T5822] usb 2-1: USB disconnect, device number 115 [ 612.771916][ T1229] vhci_hcd: vhci_device speed not set [ 612.778729][T25754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9525'. [ 612.827334][T25754] ip6gretap0: left promiscuous mode [ 613.997439][T25812] CIFS: Unable to determine destination address [ 614.114307][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.123463][T25819] netlink: 'syz.1.9553': attribute type 83 has an invalid length. [ 614.184815][ C1] vkms_vblank_simulate: vblank timer overrun [ 614.450995][T25831] devpts: Bad value for 'max' [ 614.564782][T25838] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 614.678868][T25843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9565'. [ 614.678891][T25843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9565'. [ 615.177993][ T1229] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 615.338460][ T1229] usb 1-1: Using ep0 maxpacket: 8 [ 615.341227][ T1229] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.341253][ T1229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 615.341281][ T1229] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 615.341300][ T1229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.346789][ T1229] usb 1-1: config 0 descriptor?? [ 615.801485][ T1229] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 615.801526][ T1229] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 615.801555][ T1229] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 615.801579][ T1229] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 615.801607][ T1229] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 615.801631][ T1229] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 615.801657][ T1229] holtek 0003:1241:5015.0009: unknown main item tag 0x0 [ 615.842728][ T1229] holtek 0003:1241:5015.0009: hidraw0: USB HID v54.8a Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 615.842761][ T1229] holtek 0003:1241:5015.0009: no inputs found [ 616.029301][ T1229] usb 1-1: USB disconnect, device number 110 [ 616.701384][T25937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9609'. [ 616.701406][T25937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9609'. [ 617.254706][T25963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9622'. [ 617.410763][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 617.410781][ T37] audit: type=1326 audit(1763200308.081:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25969 comm="syz.5.9624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 617.410826][ T37] audit: type=1326 audit(1763200308.081:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25969 comm="syz.5.9624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 617.411379][ T37] audit: type=1326 audit(1763200308.081:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25969 comm="syz.5.9624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 617.411669][ T37] audit: type=1326 audit(1763200308.081:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25969 comm="syz.5.9624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 617.412101][ T37] audit: type=1326 audit(1763200308.081:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25969 comm="syz.5.9624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 617.412146][ T37] audit: type=1326 audit(1763200308.081:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25969 comm="syz.5.9624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 617.550436][ T37] audit: type=1326 audit(1763200308.146:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25969 comm="syz.5.9624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f235a1b1f85 code=0x7ffc0000 [ 617.550879][ T37] audit: type=1326 audit(1763200308.212:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25969 comm="syz.5.9624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 617.551035][ T37] audit: type=1326 audit(1763200308.212:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25969 comm="syz.5.9624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 617.562049][ T37] audit: type=1326 audit(1763200308.221:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25969 comm="syz.5.9624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f235a17f6c9 code=0x7ffc0000 [ 617.813747][T25985] tipc: Enabled bearer , priority 0 [ 617.866032][T25990] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9635'. [ 617.990562][ T1229] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 618.105557][T25994] could not allocate digest TFM handle cryptd(blake2b-160) [ 618.353990][ T1229] usb 1-1: device not accepting address 111, error -71 [ 618.893648][ T5822] tipc: Node number set to 3724542075 [ 619.166682][T26040] GUP no longer grows the stack in syz.0.9656 (26040): 200000005000-200000008000 (200000004000) [ 619.166727][T26040] CPU: 0 UID: 0 PID: 26040 Comm: syz.0.9656 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 619.166750][T26040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.166763][T26040] Call Trace: [ 619.166771][T26040] [ 619.166781][T26040] dump_stack_lvl+0x189/0x250 [ 619.166824][T26040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 619.166854][T26040] ? __pfx__printk+0x10/0x10 [ 619.166877][T26040] ? find_vma+0xe7/0x160 [ 619.166917][T26040] fixup_user_fault+0x661/0x720 [ 619.166951][T26040] fault_in_user_writeable+0x72/0xe0 [ 619.166975][T26040] futex_lock_pi+0x765/0xa70 [ 619.167013][T26040] ? __pfx_futex_lock_pi+0x10/0x10 [ 619.167072][T26040] ? __pfx_futex_wake_mark+0x10/0x10 [ 619.167117][T26040] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 619.167154][T26040] do_futex+0x292/0x420 [ 619.167184][T26040] ? __pfx_do_futex+0x10/0x10 [ 619.167209][T26040] ? __vm_munmap+0x2c1/0x380 [ 619.167238][T26040] __se_sys_futex+0x36f/0x400 [ 619.167269][T26040] ? __pfx___se_sys_futex+0x10/0x10 [ 619.167303][T26040] ? __x64_sys_futex+0x21/0xf0 [ 619.167331][T26040] do_syscall_64+0xfa/0xfa0 [ 619.167358][T26040] ? lockdep_hardirqs_on+0x9c/0x150 [ 619.167387][T26040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.167407][T26040] ? clear_bhb_loop+0x60/0xb0 [ 619.167431][T26040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.167451][T26040] RIP: 0033:0x7f61dbd5f6c9 [ 619.167469][T26040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.167487][T26040] RSP: 002b:00007f61d9fbe038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 619.167509][T26040] RAX: ffffffffffffffda RBX: 00007f61dbfb5fa0 RCX: 00007f61dbd5f6c9 [ 619.167525][T26040] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 619.167539][T26040] RBP: 00007f61dbde1f91 R08: 0000000000000000 R09: 0000000000000000 [ 619.167553][T26040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.167566][T26040] R13: 00007f61dbfb6038 R14: 00007f61dbfb5fa0 R15: 00007ffe9fdcb1a8 [ 619.167601][T26040] [ 619.451437][T26046] bond0: option ad_select: unable to set because the bond device is up [ 620.000918][ T31] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 620.171877][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 620.177392][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 620.177433][ T31] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 620.177454][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.224414][ T31] usb 2-1: config 0 descriptor?? [ 620.236200][ T5822] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 620.287698][T26083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9677'. [ 620.306869][T26083] vlan2: entered promiscuous mode [ 620.306892][T26083] gretap0: entered promiscuous mode [ 620.431068][ T5822] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 620.431089][ T5822] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 620.431099][ T5822] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 620.431109][ T5822] usb 6-1: config 220 has no interface number 2 [ 620.431154][ T5822] usb 6-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 620.431201][ T5822] usb 6-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 620.431215][ T5822] usb 6-1: config 220 interface 0 has no altsetting 0 [ 620.431232][ T5822] usb 6-1: config 220 interface 76 has no altsetting 0 [ 620.431242][ T5822] usb 6-1: config 220 interface 1 has no altsetting 0 [ 620.434108][ T5822] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 620.434192][ T5822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.434211][ T5822] usb 6-1: Product: syz [ 620.434225][ T5822] usb 6-1: Manufacturer: syz [ 620.434239][ T5822] usb 6-1: SerialNumber: syz [ 620.689816][ T5822] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 620.689852][ T5822] uvcvideo 6-1:220.0: No valid video chain found. [ 620.690045][ T5822] usb 6-1: selecting invalid altsetting 0 [ 620.726500][ C1] vkms_vblank_simulate: vblank timer overrun [ 620.744316][ T5822] usb 6-1: selecting invalid altsetting 0 [ 620.744409][ T5822] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 620.759087][ T5822] usb 6-1: USB disconnect, device number 11 [ 620.796470][ T31] dragonrise 0003:0079:0011.000A: hidraw0: USB HID vd.c7 Device [HID 0079:0011] on usb-dummy_hcd.1-1/input0 [ 620.981613][ T5822] usb 2-1: USB disconnect, device number 116 [ 621.202936][T26103] netlink: 'syz.0.9687': attribute type 23 has an invalid length. [ 621.487453][ T38] INFO: task syz.3.6204:18854 blocked for more than 143 seconds. [ 621.487478][ T38] Not tainted syzkaller #0 [ 621.487521][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.487531][ T38] task:syz.3.6204 state:D stack:23608 pid:18854 tgid:18853 ppid:5811 task_flags:0x400140 flags:0x00080003 [ 621.487601][ T38] Call Trace: [ 621.487609][ T38] [ 621.487622][ T38] __schedule+0x16f3/0x4c20 [ 621.487665][ T38] ? validate_chain+0x897/0x2140 [ 621.487696][ T38] ? __lock_acquire+0xab9/0xd20 [ 621.487723][ T38] ? __pfx___schedule+0x10/0x10 [ 621.487768][ T38] ? schedule+0x91/0x360 [ 621.487795][ T38] schedule+0x165/0x360 [ 621.487824][ T38] schedule_timeout+0x9a/0x270 [ 621.487851][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 621.487886][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 621.487914][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.487938][ T38] ? wait_for_completion+0x267/0x5d0 [ 621.487964][ T38] wait_for_completion+0x2bf/0x5d0 [ 621.488004][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 621.488036][ T38] ? disable_device+0x137/0x320 [ 621.488066][ T38] disable_device+0x1c6/0x320 [ 621.488088][ T38] ? __pfx_disable_device+0x10/0x10 [ 621.488113][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 621.488133][ T38] ? __ib_unregister_device+0x284/0x3f0 [ 621.488155][ T38] __ib_unregister_device+0x2cb/0x3f0 [ 621.488176][ T38] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 621.488208][ T38] ib_unregister_device_and_put+0xb8/0xf0 [ 621.488230][ T38] nldev_dellink+0x2d1/0x320 [ 621.488261][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 621.488458][ T38] ? rcu_is_watching+0x15/0xb0 [ 621.488479][ T38] ? cap_capable+0x11f/0x460 [ 621.488506][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 621.488528][ T38] ? bpf_lsm_capable+0x9/0x20 [ 621.488548][ T38] ? security_capable+0x7e/0x2e0 [ 621.488574][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 621.488602][ T38] rdma_nl_rcv+0x6ae/0x980 [ 621.488640][ T38] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 621.488665][ T38] ? __lock_acquire+0xab9/0xd20 [ 621.488710][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 621.488738][ T38] netlink_unicast+0x846/0xa10 [ 621.488773][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 621.488803][ T38] ? netlink_sendmsg+0x642/0xb30 [ 621.488823][ T38] ? skb_put+0x11b/0x210 [ 621.488849][ T38] netlink_sendmsg+0x805/0xb30 [ 621.488882][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.488913][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 621.488941][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.488964][ T38] __sock_sendmsg+0x21c/0x270 [ 621.489009][ T38] ____sys_sendmsg+0x508/0x820 [ 621.489761][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.489802][ T38] ? import_iovec+0x74/0xa0 [ 621.489828][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 621.489856][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.489920][ T38] ? __fget_files+0x2a/0x420 [ 621.489947][ T38] ? __fget_files+0x3a6/0x420 [ 621.489984][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 621.490009][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 621.490050][ T38] ? do_syscall_64+0xbe/0xfa0 [ 621.490082][ T38] do_syscall_64+0xfa/0xfa0 [ 621.490106][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.490131][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.490149][ T38] ? clear_bhb_loop+0x60/0xb0 [ 621.490173][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.490190][ T38] RIP: 0033:0x7f149663f6c9 [ 621.490206][ T38] RSP: 002b:00007f14948a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.490228][ T38] RAX: ffffffffffffffda RBX: 00007f1496895fa0 RCX: 00007f149663f6c9 [ 621.490242][ T38] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 621.490262][ T38] RBP: 00007f14966c1f91 R08: 0000000000000000 R09: 0000000000000000 [ 621.490275][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.490286][ T38] R13: 00007f1496896038 R14: 00007f1496895fa0 R15: 00007ffcbf5ea9d8 [ 621.490318][ T38] [ 621.490354][ T38] [ 621.490354][ T38] Showing all locks held in the system: [ 621.490370][ T38] 1 lock held by khungtaskd/38: [ 621.490382][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 621.490459][ T38] 2 locks held by getty/5557: [ 621.490471][ T38] #0: ffff88823bf348a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 621.490605][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 621.490670][ T38] 2 locks held by syz.3.6204/18854: [ 621.490681][ T38] #0: ffffffff98f09318 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 621.490731][ T38] #1: ffff888020bc8750 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 621.490778][ T38] 2 locks held by syz.0.9692/26114: [ 621.490791][ T38] 2 locks held by syz-executor/26116: [ 621.490803][ T38] [ 621.490809][ T38] ============================================= [ 621.490809][ T38] [ 621.490818][ T38] NMI backtrace for cpu 1 [ 621.490835][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 621.490862][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.490874][ T38] Call Trace: [ 621.490882][ T38] [ 621.490890][ T38] dump_stack_lvl+0x189/0x250 [ 621.490921][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 621.490948][ T38] ? __pfx__printk+0x10/0x10 [ 621.490983][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 621.491008][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 621.491032][ T38] ? __pfx__printk+0x10/0x10 [ 621.491061][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 621.491086][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 621.491113][ T38] watchdog+0xf60/0xfa0 [ 621.491145][ T38] ? watchdog+0x1e2/0xfa0 [ 621.491176][ T38] kthread+0x711/0x8a0 [ 621.491208][ T38] ? __pfx_watchdog+0x10/0x10 [ 621.491232][ T38] ? __pfx_kthread+0x10/0x10 [ 621.491257][ T38] ? rt_spin_unlock+0x150/0x200 [ 621.491284][ T38] ? rt_spin_unlock+0x161/0x200 [ 621.491305][ T38] ? __pfx_kthread+0x10/0x10 [ 621.491334][ T38] ret_from_fork+0x4bc/0x870 [ 621.491361][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 621.491389][ T38] ? __switch_to_asm+0x39/0x70 [ 621.491406][ T38] ? __switch_to_asm+0x33/0x70 [ 621.491424][ T38] ? __pfx_kthread+0x10/0x10 [ 621.491454][ T38] ret_from_fork_asm+0x1a/0x30 [ 621.491507][ T38] [ 621.491515][ T38] Sending NMI from CPU 1 to CPUs 0: [ 621.491540][ C0] NMI backtrace for cpu 0 [ 621.491565][ C0] CPU: 0 UID: 0 PID: 26116 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 621.491587][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 621.491598][ C0] RIP: 0010:percpu_counter_add_batch+0x0/0x1e0 [ 621.491624][ C0] Code: 41 5e 41 5f 5d e9 10 56 14 06 e8 cb 01 0f fd eb ba 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 41 89 d4 49 [ 621.491640][ C0] RSP: 0018:ffffc9001f6f78d0 EFLAGS: 00000246 [ 621.491657][ C0] RAX: 0000000000000000 RBX: ffff88802f0f8600 RCX: dffffc0000000000 [ 621.491671][ C0] RDX: 0000000000000020 RSI: 0000000000000001 RDI: ffffffff8d21e880 [ 621.491684][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 621.491695][ C0] R10: dffffc0000000000 R11: ffffed1005e1f0f3 R12: ffffc9001f6f7de0 [ 621.491710][ C0] R13: ffff88807a7ac4e0 R14: ffff88801ff03700 R15: 000000000009c44a [ 621.491724][ C0] FS: 000055559351b500(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 621.491754][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.491768][ C0] CR2: 00007f235a1a7460 CR3: 000000007f218000 CR4: 00000000003526f0 [ 621.491784][ C0] Call Trace: [ 621.491791][ C0] [ 621.491798][ C0] alloc_empty_file+0xba/0x1d0 [ 621.491818][ C0] path_openat+0x10d/0x3840 [ 621.491842][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 621.491872][ C0] ? rtlock_slowlock_locked+0xd8/0x4010 [ 621.491894][ C0] ? look_up_lock_class+0x74/0x170 [ 621.491925][ C0] ? __pfx_path_openat+0x10/0x10 [ 621.491946][ C0] ? do_raw_spin_lock+0x121/0x290 [ 621.491973][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 621.491999][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.492024][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 621.492053][ C0] do_filp_open+0x1fa/0x410 [ 621.492075][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 621.492094][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 621.492144][ C0] ? alloc_fd+0x64f/0x6c0 [ 621.492175][ C0] do_sys_openat2+0x121/0x1c0 [ 621.492195][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 621.492215][ C0] ? exc_page_fault+0x82/0x100 [ 621.492248][ C0] ? do_user_addr_fault+0xc85/0x1380 [ 621.492271][ C0] __x64_sys_openat+0x138/0x170 [ 621.492293][ C0] do_syscall_64+0xfa/0xfa0 [ 621.492318][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 621.492343][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.492362][ C0] ? clear_bhb_loop+0x60/0xb0 [ 621.492383][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.492401][ C0] RIP: 0033:0x7f235a17df10 [ 621.492417][ C0] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 621.492433][ C0] RSP: 002b:00007ffdbb1a99e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 621.492452][ C0] RAX: ffffffffffffffda RBX: 0000000000080001 RCX: 00007f235a17df10 [ 621.492467][ C0] RDX: 0000000000080001 RSI: 00007f235a2038aa RDI: 00000000ffffff9c [ 621.492480][ C0] RBP: 00007f235a2038aa R08: 0000000000000000 R09: 0000000000000000 [ 621.492492][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 621.492504][ C0] R13: 00007ffdbb1a9a80 R14: 0000000000090449 R15: 00007ffdbb1a9ff0 [ 621.492527][ C0]