last executing test programs: 1m55.077295481s ago: executing program 2 (id=625): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m54.868955113s ago: executing program 2 (id=627): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x9}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast1}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m54.662816069s ago: executing program 2 (id=630): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x2}, 0x7ff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) 1m54.404556215s ago: executing program 2 (id=634): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x11a) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m53.341323912s ago: executing program 2 (id=637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 1m52.757565561s ago: executing program 2 (id=643): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c476cdbedebbe34904cbe0d5808cf5892aa1e563f949f38cd2ebaa2c46464183ead798b1af0ba7ad5db77736a5329e7297e674242854f87ef03b0fba724523033529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0975e7fa5e421fe7ec12a8bbd7714076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717ed76b43f7c235fae47730ff2d435ed29d062451ab74bd9f65d9bf96e1afc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c7271364bd6d144160e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba1966d73aa0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69bce3c4022c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4bcb20e0517c03e7b46839f4e3601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50111bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa1557cfcfe1cb3a1d61b4b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865074e5dde3177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8bfdf65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e161c82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36ff84ae82a679e4e062461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309877816048f24"}, 0x418, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) 1m51.703883597s ago: executing program 32 (id=643): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000140)={&(0x7f0000001080)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6}) close_range(r0, 0xffffffffffffffff, 0x0) 20.19791651s ago: executing program 3 (id=1163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r1}, 0x38) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r5, 0x0, r3}) 20.082442737s ago: executing program 3 (id=1164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000380)={'pimreg0\x00', 0xc00}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) 17.976633428s ago: executing program 3 (id=1170): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='\\eiserfs\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xc, 0x80005, 0xed, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 17.015863977s ago: executing program 3 (id=1181): open(0x0, 0x60102, 0xc) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x8) 16.214790113s ago: executing program 3 (id=1184): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.789640672s ago: executing program 3 (id=1190): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 4.375230563s ago: executing program 1 (id=1237): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217", @ANYBLOB="3ff4"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4.281193799s ago: executing program 4 (id=1239): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2f}}) io_uring_enter(r1, 0x2def, 0x0, 0x20, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 4.151677445s ago: executing program 4 (id=1241): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 4.027036006s ago: executing program 5 (id=1242): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000f000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x0, 0x0) ptrace$cont(0x1f, r1, 0x16d, 0x0) 3.61430245s ago: executing program 5 (id=1243): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001e80)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x94}]}, @TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x3, 0x3, 0x3}, {0xfffffff7, 0x3, 0xf, 0x7}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 3.22667664s ago: executing program 5 (id=1244): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r2) 3.145709529s ago: executing program 4 (id=1245): syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240080c5}, 0x800) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6, 0x3, 0x0, 0x0, 0x9c9, 0x1, 0x6, 0x7, 0x2e, 0x4d, 0x0, 0x33, 0x0, 0x7, 0x5, 0x2, 0x7f, 0x3, 0x6, '\x00', 0x4, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) 2.444687527s ago: executing program 0 (id=1246): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x102) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) 2.370380824s ago: executing program 4 (id=1247): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb3de6f89a6272ddc63ce532e270bc6cba3d229a96e108026bf64d48efc0435d52", 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000002700)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635af71dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e661725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d70581691a79a4678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae99200000062635399677c089645ecee7fdddf4f74597a84ed4f77", 0xe8}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.247398857s ago: executing program 0 (id=1248): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.016950392s ago: executing program 1 (id=1249): openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x43, 0x40) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x6c801, 0x0) pwritev2(r2, &(0x7f0000000380)=[{&(0x7f00000000c0)="e3", 0x1}], 0x1, 0x8, 0x3ff, 0x15) close(r0) 1.818901858s ago: executing program 0 (id=1250): mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0xffffffffffffffff, 0x7, 0x0, 0x0, 0x6, 0x3, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.722428023s ago: executing program 1 (id=1251): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.325485844s ago: executing program 0 (id=1252): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x20, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x19, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x7, 0x1, 0x84, 0x4, @private=0xa010102, @local}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1.276616009s ago: executing program 4 (id=1253): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0xff7c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x1, 0x0, @val=@perf_event}, 0x40) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.110548709s ago: executing program 5 (id=1254): sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x800) 957.861374ms ago: executing program 1 (id=1255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x42600, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 909.613805ms ago: executing program 4 (id=1256): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)=0xfe) 846.266133ms ago: executing program 5 (id=1257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0xc011, r1, 0x10000000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) 534.591182ms ago: executing program 0 (id=1258): getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0xdd6d2685fb8af204, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x33}, {@in6=@mcast2, 0x4d6, 0x6c}, @in6=@empty, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f}, {0xffffffff, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x74}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x0) 501.546291ms ago: executing program 5 (id=1259): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x80, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000003800)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@nodevmap}], [], 0x6b}}) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 446.506486ms ago: executing program 1 (id=1260): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) 232.65108ms ago: executing program 1 (id=1261): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000080)='securityfs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ptrace$peeksig(0x4209, r2, &(0x7f0000000280)={0x9, 0x0, 0xfffffffffffffe3c}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x200080, &(0x7f0000000080)) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) 0s ago: executing program 0 (id=1262): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 154.991414][ T119] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 154.999765][ T119] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 155.020836][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 155.034047][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 155.046391][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 155.061252][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.070753][ T9] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 155.079308][ T9] usb 4-1: Product: syz [ 155.083507][ T9] usb 4-1: Manufacturer: syz [ 155.089288][ T9] usb 4-1: SerialNumber: syz [ 155.100489][ T9] cdc_mbim 4-1:1.0: skipping garbage [ 155.195199][ T119] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 155.202965][ T119] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 155.215363][ T119] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 155.308272][ T6875] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 155.409364][ T119] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 155.622439][ T5907] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 155.648449][ T5907] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 155.975315][ T6875] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 156.121449][ T119] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 156.325263][ T9] cdc_mbim 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 156.333922][ T119] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 156.346747][ T9] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 156.355015][ T9] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 156.489854][ T119] usb 5-1: USB disconnect, device number 12 [ 156.509721][ T5907] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 156.527928][ T9] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 156.548776][ T5907] usb 1-1: USB disconnect, device number 12 [ 156.571847][ T9] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 156.597926][ T9] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 156.616152][ T6897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.624216][ T5907] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 156.647261][ T9] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 156.699955][ T9] usb 4-1: USB disconnect, device number 12 [ 156.788406][ T2147] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 156.947545][ T6905] vivid-004: disconnect [ 156.959974][ T6905] vivid-004: reconnect [ 156.976591][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.000439][ T2147] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.018120][ T2147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.036662][ T2147] usb 2-1: config 0 descriptor?? [ 157.089131][ T5906] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 157.261170][ T5906] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.288372][ T5906] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 157.306637][ T5906] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.316570][ T5906] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 157.334055][ T5906] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 157.360240][ T5906] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.379889][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.408743][ T5906] usb 3-1: Product: syz [ 157.423455][ T5906] usb 3-1: Manufacturer: syz [ 157.523695][ T5906] cdc_wdm 3-1:1.0: skipping garbage [ 157.560250][ T5906] cdc_wdm 3-1:1.0: skipping garbage [ 157.571166][ T2147] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 157.590303][ T2147] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000D/input/input16 [ 157.620128][ T5906] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 157.664952][ T5906] cdc_wdm 3-1:1.0: Unknown control protocol [ 158.338073][ T2147] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 158.354035][ T2147] usb 2-1: USB disconnect, device number 16 [ 158.387405][ T5901] usb 3-1: USB disconnect, device number 14 [ 159.195016][ T6945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.398'. [ 159.257537][ T6945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.398'. [ 160.764907][ T6990] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 162.586259][ T7007] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 162.878405][ T5907] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 163.051227][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 163.069767][ T5907] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.083000][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 163.102535][ T5907] usb 5-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 163.129143][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.154261][ T5907] usb 5-1: config 0 descriptor?? [ 163.170885][ T2147] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 163.356326][ T2147] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.376965][ T2147] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.398083][ T2147] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.418126][ T2147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.428212][ T2147] usb 2-1: Product: syz [ 163.440283][ T2147] usb 2-1: Manufacturer: syz [ 163.451856][ T2147] usb 2-1: SerialNumber: syz [ 163.607503][ T5907] usbhid 5-1:0.0: can't add hid device: -71 [ 163.624789][ T5907] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 163.642038][ T5907] usb 5-1: USB disconnect, device number 13 [ 163.695744][ T2147] usb 2-1: 0:2 : does not exist [ 163.711564][ T2147] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 164.437313][ T2147] usb 2-1: USB disconnect, device number 17 [ 164.825734][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.399283][ T7070] netlink: 1076 bytes leftover after parsing attributes in process `syz.3.440'. [ 165.465923][ T7077] input: syz1 as /devices/virtual/input/input17 [ 166.118485][ T5907] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 166.239186][ T7102] block nbd0: shutting down sockets [ 166.298414][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 166.315110][ T5907] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.325880][ T5907] usb 3-1: config 0 has no interface number 0 [ 166.338491][ T5907] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.355996][ T7105] kvm: emulating exchange as write [ 166.372143][ T5907] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.393890][ T5907] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 166.410437][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.427783][ T5907] usb 3-1: config 0 descriptor?? [ 166.629402][ T5901] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 166.800377][ T5901] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 166.810001][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.826079][ T5901] usb 1-1: config 0 descriptor?? [ 167.067959][ T5907] uclogic 0003:28BD:0071.000E: pen parameters not found [ 167.079362][ T5907] uclogic 0003:28BD:0071.000E: interface is invalid, ignoring [ 167.248398][ T2147] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 167.284148][ T5864] usb 3-1: USB disconnect, device number 15 [ 167.411387][ T2147] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.422172][ T2147] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.435628][ T2147] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.444797][ T2147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.677313][ T2147] usb 5-1: usb_control_msg returned -32 [ 167.694491][ T2147] usbtmc 5-1:16.0: can't read capabilities [ 168.074384][ T5901] pegasus 1-1:0.0: can't reset MAC [ 168.087679][ T5901] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 168.111979][ T5901] usb 1-1: USB disconnect, device number 13 [ 168.201816][ T2147] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 169.132375][ T7139] overlayfs: missing 'workdir' [ 169.514042][ T2147] usb 4-1: config index 0 descriptor too short (expected 36, got 21) [ 169.535078][ T2147] usb 4-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 169.583447][ T2147] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.583676][ T7147] capability: warning: `syz.1.470' uses 32-bit capabilities (legacy support in use) [ 169.605518][ T2147] usb 4-1: config 0 interface 0 has no altsetting 0 [ 169.618885][ T2147] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 169.631355][ T2147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.659970][ T2147] usb 4-1: config 0 descriptor?? [ 169.684741][ T2147] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 169.898589][ T7131] loop8: detected capacity change from 0 to 7 [ 169.910280][ T7131] Dev loop8: unable to read RDB block 7 [ 169.915904][ T7131] loop8: unable to read partition table [ 169.948614][ T7131] loop8: partition table beyond EOD, truncated [ 169.954915][ T7131] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 169.954915][ T7131] ) failed (rc=-5) [ 170.018127][ T5907] usb 4-1: USB disconnect, device number 13 [ 170.044282][ T5901] usb 5-1: USB disconnect, device number 14 [ 170.338215][ T7167] loop9: detected capacity change from 0 to 7 [ 170.348676][ T2147] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 170.358205][ T7167] Dev loop9: unable to read RDB block 7 [ 170.364526][ T7167] loop9: unable to read partition table [ 170.370731][ T7167] loop9: partition table beyond EOD, truncated [ 170.376929][ T7167] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 170.662564][ T5901] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 170.688386][ T2147] usb 2-1: Using ep0 maxpacket: 8 [ 170.695342][ T2147] usb 2-1: config 0 has no interfaces? [ 170.702777][ T2147] usb 2-1: config 0 has no interfaces? [ 170.709490][ T2147] usb 2-1: config 0 has no interfaces? [ 170.717540][ T2147] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 170.726936][ T2147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.738640][ T5907] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 170.999976][ T5907] usb 3-1: Using ep0 maxpacket: 8 [ 171.121767][ T5907] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 171.246457][ T5907] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.304156][ T2147] usb 2-1: Product: syz [ 171.308585][ T2147] usb 2-1: Manufacturer: syz [ 171.313213][ T2147] usb 2-1: SerialNumber: syz [ 171.350476][ T5907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.364904][ T5907] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.377517][ T5907] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.395456][ T5907] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 171.405012][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.452025][ T2147] usb 2-1: config 0 descriptor?? [ 171.457215][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 171.467138][ T5901] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 171.479798][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.493387][ T5901] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 171.502818][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.527226][ T5901] usb 5-1: Product: syz [ 171.533071][ T5901] usb 5-1: Manufacturer: syz [ 171.537755][ T5901] usb 5-1: SerialNumber: syz [ 171.613969][ T7180] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1491149184 (190867095552 ns) > initial count (176694493312 ns). Using initial count to start timer. [ 171.682329][ T5907] usb 3-1: usb_control_msg returned -32 [ 171.696101][ T9] usb 2-1: USB disconnect, device number 18 [ 171.703223][ T5907] usbtmc 3-1:16.0: can't read capabilities [ 171.803657][ T5901] usb 5-1: 0:2 : does not exist [ 171.818699][ T5901] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 171.868101][ T5901] usb 5-1: USB disconnect, device number 15 [ 171.956700][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.447654][ T7202] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 172.507325][ T7204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.495'. [ 172.533910][ T7204] Zero length message leads to an empty skb [ 172.658395][ T5907] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 172.659001][ T5901] usb 3-1: USB disconnect, device number 16 [ 172.828694][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 172.850547][ T5907] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.868383][ T5907] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.888384][ T119] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 172.904568][ T5907] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 172.928522][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 172.937004][ T5907] usb 1-1: Product: syz [ 172.948403][ T5907] usb 1-1: Manufacturer: syz [ 172.953051][ T5907] usb 1-1: SerialNumber: syz [ 172.992511][ T5907] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input18 [ 173.058376][ T119] usb 5-1: Using ep0 maxpacket: 16 [ 173.088696][ T119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.104800][ T119] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.128378][ T119] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 173.258781][ T119] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 173.276273][ T119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.309383][ T119] usb 5-1: config 0 descriptor?? [ 173.316519][ T5901] usb 1-1: USB disconnect, device number 14 [ 173.443079][ T5901] appletouch 1-1:1.0: input: appletouch disconnected [ 173.491451][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 173.496741][ T7216] capability: warning: `syz.1.500' uses deprecated v2 capabilities in a way that may be insecure [ 173.511339][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.526078][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.536249][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.544314][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.757382][ T119] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 173.771754][ T119] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 173.805919][ T119] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 173.821712][ T119] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 173.969039][ T7207] random: crng reseeded on system resumption [ 174.011591][ T119] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 174.033059][ T119] input: HID 0955:7214 Haptics as /devices/virtual/input/input19 [ 174.664789][ T119] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 174.673703][ T119] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 174.874719][ T7213] chnl_net:caif_netlink_parms(): no params data found [ 174.892981][ T7228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.935491][ T7228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.087411][ T5864] usb 5-1: USB disconnect, device number 16 [ 175.089034][ T5907] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 175.128440][ T5901] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 175.155263][ T30] audit: type=1800 audit(1746162316.470:2): pid=7239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.505" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 175.179169][ T5907] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 175.210032][ T5907] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 175.233669][ T5907] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 175.315111][ T5901] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.326938][ T5901] usb 1-1: config 0 has no interface number 0 [ 175.348169][ T7244] loop6: detected capacity change from 0 to 63 [ 175.351933][ T5901] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.364145][ T5920] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.376334][ T7244] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.382311][ T5901] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.384990][ T5920] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.398356][ T7245] fuse: root generation should be zero [ 175.402846][ T7244] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.411923][ T5901] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 175.422393][ T5920] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.435583][ T7213] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.439138][ T5920] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.443184][ T7213] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.467887][ T5920] Buffer I/O error on dev loop6, logical block 0, async page read [ 175.468381][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.485806][ T7213] bridge_slave_0: entered allmulticast mode [ 175.496909][ T7213] bridge_slave_0: entered promiscuous mode [ 175.506392][ T5901] usb 1-1: config 0 descriptor?? [ 175.515882][ T7213] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.545064][ T7213] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.569488][ T55] Bluetooth: hci2: command tx timeout [ 175.575487][ T7213] bridge_slave_1: entered allmulticast mode [ 175.607180][ T7213] bridge_slave_1: entered promiscuous mode [ 175.778662][ T7213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.831340][ T7213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.973655][ T5901] prodikeys 0003:041E:2801.0010: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 175.999305][ T5901] hid_prodikeys: hid-prodikeys: failed to find output report [ 175.999305][ T5901] [ 176.013013][ T7213] team0: Port device team_slave_0 added [ 176.070897][ T7213] team0: Port device team_slave_1 added [ 176.100004][ T2147] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 176.216789][ T7267] vivid-003: disconnect [ 176.239709][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.253166][ T7267] vivid-003: reconnect [ 176.258120][ T5901] usb 1-1: USB disconnect, device number 15 [ 176.261385][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.295722][ T7213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.300874][ T2147] usb 3-1: config 2 has an invalid interface number: 74 but max is 0 [ 176.312397][ T7213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.322848][ T7213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.328014][ T2147] usb 3-1: config 2 has no interface number 0 [ 176.348758][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.350860][ T7213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.361112][ T2147] usb 3-1: config 2 interface 74 has no altsetting 0 [ 176.378727][ T2147] usb 3-1: New USB device found, idVendor=1b80, idProduct=e411, bcdDevice=84.e3 [ 176.396341][ T2147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.404918][ T2147] usb 3-1: Product: syz [ 176.409497][ T2147] usb 3-1: Manufacturer: syz [ 176.414118][ T2147] usb 3-1: SerialNumber: syz [ 176.478740][ T119] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 176.540139][ T7213] hsr_slave_0: entered promiscuous mode [ 176.546814][ T7213] hsr_slave_1: entered promiscuous mode [ 176.561110][ T7213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.575437][ T7213] Cannot create hsr debugfs directory [ 176.639430][ T119] usb 2-1: Using ep0 maxpacket: 32 [ 176.667670][ T119] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 176.688175][ T119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.714448][ T2147] usb 3-1: USB disconnect, device number 17 [ 176.746946][ T119] usb 2-1: config 0 descriptor?? [ 177.133081][ T119] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 177.578101][ T7278] netlink: 'syz.0.518': attribute type 4 has an invalid length. [ 177.648750][ T55] Bluetooth: hci2: command tx timeout [ 177.725116][ T7213] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.868379][ T2147] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 177.913611][ T7213] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.939220][ T7288] program syz.2.522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.986881][ T7213] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.044955][ T7213] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.057596][ T2147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.069269][ T2147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.081422][ T2147] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 178.091323][ T2147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.103871][ T2147] usb 1-1: config 0 descriptor?? [ 178.135513][ T119] gspca_nw80x: reg_w err -71 [ 178.141073][ T119] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 178.148483][ T5901] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 178.163880][ T119] usb 2-1: USB disconnect, device number 19 [ 178.333099][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.343104][ T7213] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.353675][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.364343][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.377799][ T5901] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.387438][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.406023][ T7213] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.409318][ T5901] usb 5-1: config 0 descriptor?? [ 178.430688][ T7213] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.453502][ T7213] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.544316][ T2147] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 178.564192][ T2147] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 178.584509][ T2147] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 178.602338][ T2147] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 178.611801][ T2147] lenovo 0003:17EF:6047.0011: unknown main item tag 0x0 [ 178.658458][ T2147] lenovo 0003:17EF:6047.0011: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 178.685446][ T7213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.747758][ T7213] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.785192][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.792432][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.821625][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.828855][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.841870][ T5901] plantronics 0003:047F:FFFF.0012: reserved main item tag 0xd [ 178.865707][ T5901] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 178.937701][ T5901] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 179.130719][ T5901] usb 5-1: USB disconnect, device number 17 [ 179.363416][ T7213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.510514][ T7213] veth0_vlan: entered promiscuous mode [ 179.562513][ T7213] veth1_vlan: entered promiscuous mode [ 179.606441][ T2147] usb 1-1: USB disconnect, device number 16 [ 179.635872][ T7213] veth0_macvtap: entered promiscuous mode [ 179.674657][ T7213] veth1_macvtap: entered promiscuous mode [ 179.729168][ T55] Bluetooth: hci2: command tx timeout [ 179.752524][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.784054][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.809839][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.821458][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.836970][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.847860][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.858221][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.869895][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.879890][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.891374][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.904959][ T7322] loop2: detected capacity change from 0 to 7 [ 179.923042][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.937594][ T7322] Dev loop2: unable to read RDB block 7 [ 179.944378][ T7322] loop2: unable to read partition table [ 179.967501][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.985692][ T7322] loop2: partition table beyond EOD, truncated [ 179.995072][ T7322] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 180.021142][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.037129][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.062515][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.075788][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.086583][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.096772][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.107545][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.117726][ T7213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.808341][ T7213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.825800][ T7213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.881057][ T7318] macvlan2: entered promiscuous mode [ 180.897595][ T7318] macvlan2: entered allmulticast mode [ 180.912218][ T7318] bond_slave_0: entered promiscuous mode [ 180.918251][ T7318] bond_slave_1: entered promiscuous mode [ 180.934673][ T7318] bond0: entered allmulticast mode [ 180.941825][ T7318] bond_slave_0: entered allmulticast mode [ 180.947770][ T7318] bond_slave_1: entered allmulticast mode [ 180.958430][ T7318] bond0: entered promiscuous mode [ 180.985871][ T7318] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 181.014727][ T7318] team0: Port device macvlan2 added [ 181.030511][ T5907] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 181.033992][ T7213] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.082129][ T7213] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.128633][ T7213] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.145872][ T7213] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.243271][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.267754][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.290460][ T5907] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 181.318916][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.344402][ T5907] usb 5-1: config 0 descriptor?? [ 181.394297][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.420807][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.460576][ T3065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.470403][ T3065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.579551][ T119] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 181.722118][ T55] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 181.738490][ T119] usb 1-1: Using ep0 maxpacket: 32 [ 181.750776][ T119] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 181.768193][ T119] usb 1-1: config 0 has no interface number 0 [ 181.780085][ T5907] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 181.794648][ T119] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 181.806686][ T119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.816818][ T55] Bluetooth: hci2: command tx timeout [ 181.823215][ T5907] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 181.840100][ T119] usb 1-1: Product: syz [ 181.844350][ T119] usb 1-1: Manufacturer: syz [ 181.849763][ T119] usb 1-1: SerialNumber: syz [ 181.857370][ T119] usb 1-1: config 0 descriptor?? [ 181.869095][ T119] smsc95xx v2.0.0 [ 181.977651][ T5907] cp2112 0003:10C4:EA90.0013: error requesting version [ 182.002932][ T5907] cp2112 0003:10C4:EA90.0013: probe with driver cp2112 failed with error -71 [ 182.019145][ T5907] usb 5-1: USB disconnect, device number 18 [ 182.459167][ T5906] kernel write not supported for file /snd/midiC2D0 (pid: 5906 comm: kworker/0:5) [ 182.498763][ T30] audit: type=1326 audit(1746162323.810:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7359 comm="syz.2.550" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57fe38e969 code=0x0 [ 182.895634][ T119] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 182.960339][ T119] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 183.101342][ T119] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 183.266685][ T119] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 183.410639][ T7373] trusted_key: encrypted_key: insufficient parameters specified [ 183.499113][ T119] usb 1-1: USB disconnect, device number 17 [ 184.114315][ T7379] loop2: detected capacity change from 0 to 7 [ 184.144373][ T7379] Dev loop2: unable to read RDB block 7 [ 184.176019][ T7379] loop2: unable to read partition table [ 184.194374][ T7379] loop2: partition table beyond EOD, truncated [ 184.207048][ T7379] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 184.447659][ T6019] Bluetooth: hci5: Frame reassembly failed (-84) [ 184.718945][ T119] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 184.880882][ T119] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 184.897674][ T119] usb 4-1: config 220 descriptor has 1 excess byte, ignoring [ 184.919494][ T119] usb 4-1: config 220 has no interface number 2 [ 184.929294][ T119] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 184.945059][ T119] usb 4-1: config 220 interface 0 has no altsetting 0 [ 184.956177][ T119] usb 4-1: config 220 interface 76 has no altsetting 0 [ 184.966144][ T119] usb 4-1: config 220 interface 1 has no altsetting 0 [ 184.977671][ T119] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 184.989867][ T119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.998059][ T119] usb 4-1: Product: syz [ 185.005846][ T119] usb 4-1: Manufacturer: syz [ 185.015771][ T119] usb 4-1: SerialNumber: syz [ 185.264610][ T119] usb 4-1: selecting invalid altsetting 0 [ 185.275902][ T119] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 185.290654][ T119] usb 4-1: No valid video chain found. [ 185.312378][ T119] usb 4-1: selecting invalid altsetting 0 [ 185.327574][ T119] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 185.356483][ T119] usb 4-1: USB disconnect, device number 14 [ 185.809987][ T5825] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 185.819083][ T5825] Bluetooth: hci3: Injecting HCI hardware error event [ 185.827729][ T5823] Bluetooth: hci3: hardware error 0x00 [ 186.258427][ T119] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 186.421892][ T119] usb 3-1: Using ep0 maxpacket: 16 [ 186.448935][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 186.457060][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 186.464132][ T119] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 186.475594][ T119] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.511134][ T119] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.520469][ T119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.539370][ T119] usb 3-1: Product: syz [ 186.543616][ T119] usb 3-1: Manufacturer: syz [ 186.548239][ T119] usb 3-1: SerialNumber: syz [ 186.797274][ T119] usb 3-1: 0:2 : does not exist [ 186.876155][ T119] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 186.956718][ T119] usb 3-1: USB disconnect, device number 18 [ 187.145516][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.968902][ T5823] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 188.130093][ T7457] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.398331][ T7471] loop9: detected capacity change from 0 to 7 [ 188.409114][ T7471] Dev loop9: unable to read RDB block 7 [ 188.437389][ T7471] loop9: unable to read partition table [ 188.452507][ T7471] loop9: partition table beyond EOD, truncated [ 188.486980][ T7471] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 188.713755][ T7481] trusted_key: syz.3.594 sent an empty control message without MSG_MORE. [ 190.791461][ T7511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.022553][ T5907] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 191.218428][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 191.236439][ T5907] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 191.254750][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.285776][ T5907] usb 1-1: config 0 descriptor?? [ 191.499514][ T5907] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 191.550064][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.577751][ T5907] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 191.599083][ T5907] usb 1-1: media controller created [ 191.663634][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.733043][ T5907] az6027: usb out operation failed. (-71) [ 191.770658][ T5907] az6027: usb out operation failed. (-71) [ 191.793477][ T5907] stb0899_attach: Driver disabled by Kconfig [ 191.813702][ T5907] az6027: no front-end attached [ 191.813702][ T5907] [ 191.853413][ T5907] az6027: usb out operation failed. (-71) [ 191.881823][ T5907] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 191.903148][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 191.928006][ T5907] dvb-usb: schedule remote query interval to 400 msecs. [ 191.936124][ T5907] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 191.964658][ T5907] usb 1-1: USB disconnect, device number 18 [ 192.137806][ T5907] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 192.396491][ T5901] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 192.660809][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 192.730506][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.852982][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.990945][ T5901] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 193.078772][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.099377][ T5901] usb 5-1: config 0 descriptor?? [ 193.557186][ T5901] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 193.764624][ T5901] ft260 0003:0403:6030.0014: chip code: 0000 0000 [ 193.967843][ T5901] ft260 0003:0403:6030.0014: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 194.186698][ T5901] ft260 0003:0403:6030.0014: failed to retrieve status: -32, no wakeup [ 194.303443][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348652][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.488486][ T5901] ft260 0003:0403:6030.0014: failed to reset I2C controller: -71 [ 194.908820][ T5901] usb 5-1: USB disconnect, device number 19 [ 195.026403][ T2147] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 195.162937][ T2147] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.786520][ T5901] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 195.874292][ T7143] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.029957][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 196.164968][ T7601] evm: overlay not supported [ 196.333217][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64 [ 196.468617][ T5901] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 196.488970][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.525158][ T5901] usb 2-1: config 0 descriptor?? [ 196.587574][ T7143] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.752904][ T5901] ath6kl: Failed to submit usb control message: -71 [ 196.769318][ T5901] ath6kl: unable to send the bmi data to the device: -71 [ 196.776417][ T5901] ath6kl: Unable to send get target info: -71 [ 196.788662][ T5901] ath6kl: Failed to init ath6kl core: -71 [ 196.808016][ T5901] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 196.841357][ T5901] usb 2-1: USB disconnect, device number 20 [ 196.964467][ T7143] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.092017][ T7143] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.498083][ T7143] bridge_slave_1: left allmulticast mode [ 197.514083][ T7143] bridge_slave_1: left promiscuous mode [ 197.546609][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.550931][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.566316][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.575182][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.585260][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.593052][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.650730][ T7143] bridge_slave_0: left allmulticast mode [ 197.667824][ T7143] bridge_slave_0: left promiscuous mode [ 197.678692][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.853363][ T7641] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 198.381132][ T7660] loop9: detected capacity change from 0 to 7 [ 198.400938][ T7660] Dev loop9: unable to read RDB block 7 [ 198.421955][ T7660] loop9: AHDI p1 p2 [ 198.426094][ T7660] loop9: partition table partially beyond EOD, truncated [ 198.446873][ T7660] loop9: p1 start 118489088 is beyond EOD, truncated [ 199.017520][ T7143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.061560][ T7143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.090742][ T7143] bond0 (unregistering): Released all slaves [ 199.116071][ T7659] netlink: 'syz.1.660': attribute type 12 has an invalid length. [ 199.145731][ T7659] netlink: 'syz.1.660': attribute type 29 has an invalid length. [ 199.158500][ T7659] netlink: 148 bytes leftover after parsing attributes in process `syz.1.660'. [ 199.193455][ T7659] netlink: 'syz.1.660': attribute type 1 has an invalid length. [ 199.222982][ T7659] netlink: 'syz.1.660': attribute type 2 has an invalid length. [ 199.247378][ T7659] netlink: 39 bytes leftover after parsing attributes in process `syz.1.660'. [ 199.648444][ T55] Bluetooth: hci0: command tx timeout [ 199.726678][ T7681] syzkaller0: entered allmulticast mode [ 199.908381][ T5906] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 200.078467][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 200.092381][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.110158][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.133209][ T5906] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 200.143859][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.195320][ T5906] usb 1-1: config 0 descriptor?? [ 200.218633][ T5864] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 200.411190][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 200.418975][ T5864] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.438934][ T5864] usb 2-1: config 0 interface 0 has no altsetting 0 [ 200.448727][ T5864] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 200.456444][ T7689] loop9: detected capacity change from 0 to 7 [ 200.460057][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.473373][ T5864] usb 2-1: Product: syz [ 200.477638][ T5864] usb 2-1: Manufacturer: syz [ 200.482788][ T5864] usb 2-1: SerialNumber: syz [ 200.484705][ T7689] Dev loop9: unable to read RDB block 7 [ 200.494656][ T5864] usb 2-1: config 0 descriptor?? [ 200.508077][ T7689] loop9: unable to read partition table [ 200.528757][ T7689] loop9: partition table beyond EOD, truncated [ 200.532653][ T5864] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 200.543041][ T7689] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 200.593355][ T5906] usbhid 1-1:0.0: can't add hid device: -71 [ 200.607193][ T5906] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 200.656844][ T5906] usb 1-1: USB disconnect, device number 19 [ 200.763921][ T5864] usb 2-1: USB disconnect, device number 21 [ 200.770419][ T7144] usb 2-1: Failed to submit usb control message: -71 [ 200.777471][ T7144] usb 2-1: unable to send the bmi data to the device: -71 [ 200.804824][ T7144] usb 2-1: unable to get target info from device [ 200.825652][ T7144] usb 2-1: could not get target info (-71) [ 200.834097][ T7144] usb 2-1: could not probe fw (-71) [ 201.125686][ T7720] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 201.491942][ T5864] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 201.728468][ T55] Bluetooth: hci0: command tx timeout [ 201.731864][ T5864] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.758594][ T5864] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.822432][ T5864] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.847347][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.113522][ T5864] usb 1-1: usb_control_msg returned -32 [ 202.126731][ T5864] usbtmc 1-1:16.0: can't read capabilities [ 202.381399][ T7735] Bluetooth: MGMT ver 1.23 [ 202.697976][ T5901] usb 1-1: USB disconnect, device number 20 [ 202.999281][ T7143] hsr_slave_0: left promiscuous mode [ 203.022251][ T7143] hsr_slave_1: left promiscuous mode [ 203.059794][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.067374][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.128345][ T7143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.137568][ T7143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.224060][ T7143] veth1_macvtap: left promiscuous mode [ 203.254558][ T7143] veth0_macvtap: left promiscuous mode [ 203.268567][ T7143] veth1_vlan: left promiscuous mode [ 203.283420][ T7143] veth0_vlan: left promiscuous mode [ 203.819548][ T55] Bluetooth: hci0: command tx timeout [ 204.570925][ T5907] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 204.738524][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 204.749810][ T5907] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 204.762842][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.771763][ T7143] team0 (unregistering): Port device team_slave_1 removed [ 204.788450][ T5907] usb 2-1: config 0 descriptor?? [ 204.825438][ T7143] team0 (unregistering): Port device team_slave_0 removed [ 205.010130][ T5907] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 205.035362][ T5907] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 205.050902][ T5907] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 205.062253][ T5907] usb 2-1: media controller created [ 205.104201][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 205.224953][ T5907] az6027: usb out operation failed. (-71) [ 205.233514][ T5907] az6027: usb out operation failed. (-71) [ 205.249679][ T5907] stb0899_attach: Driver disabled by Kconfig [ 205.255889][ T5907] az6027: no front-end attached [ 205.255889][ T5907] [ 205.273483][ T5907] az6027: usb out operation failed. (-71) [ 205.279567][ T5907] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 205.298464][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 205.326864][ T5907] dvb-usb: schedule remote query interval to 400 msecs. [ 205.343949][ T5907] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 205.362217][ T5907] usb 2-1: USB disconnect, device number 22 [ 205.446388][ T5907] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 205.562969][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.693'. [ 205.826565][ T7783] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 205.888693][ T55] Bluetooth: hci0: command tx timeout [ 206.041658][ T7629] chnl_net:caif_netlink_parms(): no params data found [ 208.031848][ T7831] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 208.062518][ T2147] IPVS: starting estimator thread 0... [ 208.197655][ T7836] IPVS: using max 28 ests per chain, 67200 per kthread [ 208.265182][ T7629] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.287960][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.301589][ T7629] bridge_slave_0: entered allmulticast mode [ 208.321079][ T7629] bridge_slave_0: entered promiscuous mode [ 208.346115][ T7629] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.367858][ T7847] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 208.383003][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.383211][ T7629] bridge_slave_1: entered allmulticast mode [ 208.385210][ T7629] bridge_slave_1: entered promiscuous mode [ 208.665819][ T7629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.724609][ T7629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.091356][ T7629] team0: Port device team_slave_0 added [ 209.114701][ T7629] team0: Port device team_slave_1 added [ 209.148485][ T2147] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 209.318470][ T2147] usb 5-1: Using ep0 maxpacket: 32 [ 209.516399][ T2147] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 209.817172][ T2147] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 209.844522][ T2147] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 209.881654][ T2147] usb 5-1: Product: syz [ 209.885919][ T2147] usb 5-1: Manufacturer: syz [ 209.906562][ T2147] usb 5-1: SerialNumber: syz [ 209.943883][ T2147] usb 5-1: config 0 descriptor?? [ 209.966706][ T7856] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.008985][ T2147] usb 5-1: USB disconnect, device number 20 [ 211.059240][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.081741][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.192100][ T7629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.229480][ T7629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.245740][ T7629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.360810][ T7629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.604646][ T7629] hsr_slave_0: entered promiscuous mode [ 211.676793][ T7629] hsr_slave_1: entered promiscuous mode [ 211.730539][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 212.107190][ T7898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 212.478172][ T7629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.504375][ T7629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.525427][ T7629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.564822][ T7629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.935003][ T7629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.983468][ T7629] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.054213][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.061451][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.192676][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.199993][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.677894][ T7946] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 213.698561][ T5906] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 213.885139][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.914241][ T7629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.922562][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 213.963174][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65296, setting to 64 [ 213.992110][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.022936][ T5906] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 214.039592][ T5906] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 214.108714][ T5906] usb 1-1: Manufacturer: syz [ 214.118371][ T5901] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 214.164790][ T5906] usb 1-1: config 0 descriptor?? [ 214.301942][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 214.344034][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.367825][ T5901] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 214.415538][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.470891][ T5901] usb 4-1: config 0 descriptor?? [ 214.518484][ T5901] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24 [ 214.613007][ T5906] rc_core: IR keymap rc-hauppauge not found [ 214.649688][ T5906] Registered IR keymap rc-empty [ 214.669030][ T5906] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 214.731010][ T5906] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 214.776892][ T5906] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 214.854000][ T5906] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 214.902143][ T5906] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 214.939546][ T5906] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 214.986871][ T5906] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 215.055978][ T7952] input: syz1 as /devices/virtual/input/input25 [ 215.072295][ T5906] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 215.106698][ T5906] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 215.141375][ T5906] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 215.228206][ T5906] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 215.273534][ T5864] usb 4-1: USB disconnect, device number 15 [ 215.281735][ T5174] bcm5974 4-1:0.0: could not read from device [ 215.349465][ T5831] bcm5974 4-1:0.0: could not read from device [ 215.368830][ T5906] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 215.418816][ T5906] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 215.472749][ T5906] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 215.550652][ T5906] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 215.614714][ T5906] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 215.636917][ T7629] veth0_vlan: entered promiscuous mode [ 215.699095][ T5906] usb 1-1: USB disconnect, device number 21 [ 215.714984][ T7629] veth1_vlan: entered promiscuous mode [ 215.884248][ T7629] veth0_macvtap: entered promiscuous mode [ 215.985316][ T7629] veth1_macvtap: entered promiscuous mode [ 216.044908][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.058989][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.069204][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.080018][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.090175][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.117962][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.165262][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.208449][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.233314][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.243933][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.256658][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.267261][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.281638][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.292031][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.320710][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.757144][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.916986][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.938554][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.988671][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.035203][ T7629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.061231][ T119] hid-generic FFFC:0003:0000.0016: unknown main item tag 0x0 [ 217.069585][ T7629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.090952][ T119] hid-generic FFFC:0003:0000.0016: unknown main item tag 0x0 [ 217.101648][ T7629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.119036][ T119] hid-generic FFFC:0003:0000.0016: unknown main item tag 0x0 [ 217.167215][ T119] hid-generic FFFC:0003:0000.0016: unknown main item tag 0x0 [ 217.187085][ T119] hid-generic FFFC:0003:0000.0016: unknown main item tag 0x0 [ 217.216210][ T119] hid-generic FFFC:0003:0000.0016: unknown main item tag 0x0 [ 217.246792][ T119] hid-generic FFFC:0003:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 217.371094][ T7629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.419561][ T7629] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.438570][ T7629] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.447321][ T7629] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.734933][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.792217][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.891478][ T3065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.910288][ T5906] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 217.921294][ T3065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.002976][ T8038] loop2: detected capacity change from 0 to 7 [ 218.026889][ T5920] Dev loop2: unable to read RDB block 7 [ 218.041425][ T5920] loop2: unable to read partition table [ 218.064211][ T5920] loop2: partition table beyond EOD, truncated [ 218.075105][ T8036] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 218.108397][ T8038] Dev loop2: unable to read RDB block 7 [ 218.117660][ T8038] loop2: unable to read partition table [ 218.134207][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 218.134521][ T8038] loop2: partition table beyond EOD, truncated [ 218.177057][ T8038] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 218.241261][ T5906] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 218.278526][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.346511][ T5906] usb 4-1: config 0 descriptor?? [ 218.594767][ T5906] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 219.229812][ T8066] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 220.237153][ T5906] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 220.281563][ T5906] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 220.324414][ T5906] asix 4-1:0.0: probe with driver asix failed with error -71 [ 220.386686][ T5906] usb 4-1: USB disconnect, device number 16 [ 220.401020][ T8082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.281298][ T5901] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 221.453650][ T5901] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.497461][ T5901] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.527990][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.554803][ T5901] usb 1-1: Product: syz [ 221.559579][ T5901] usb 1-1: Manufacturer: syz [ 221.571501][ T5901] usb 1-1: SerialNumber: syz [ 222.827024][ T5901] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 222.839370][ T5901] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 223.092313][ T5901] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 223.142454][ T5901] usb 1-1: USB disconnect, device number 22 [ 223.164785][ T5901] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 223.967890][ T8190] block nbd0: shutting down sockets [ 225.148848][ T5907] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 226.028458][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.046350][ T5907] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 226.106030][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.153486][ T5907] usb 4-1: config 0 descriptor?? [ 226.388560][ T5864] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 226.563559][ T5864] usb 2-1: Using ep0 maxpacket: 32 [ 226.570897][ T5864] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.582941][ T5864] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.594991][ T5864] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 226.604775][ T5864] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 226.613525][ T5864] usb 2-1: Product: syz [ 226.617415][ T5907] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 226.617836][ T5864] usb 2-1: Manufacturer: syz [ 226.645959][ T5864] hub 2-1:4.0: USB hub found [ 226.682804][ T5907] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0017/input/input26 [ 226.798060][ T5907] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 226.876275][ T5864] hub 2-1:4.0: 2 ports detected [ 227.123804][ T8246] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.294407][ T5864] hub 2-1:4.0: set hub depth failed [ 227.324786][ T5864] usb 2-1: USB disconnect, device number 23 [ 228.539018][ T5864] usb 4-1: USB disconnect, device number 17 [ 228.758825][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.818'. [ 229.324343][ T8299] overlayfs: invalid redirect ((null)) [ 229.439333][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 229.603001][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 229.622933][ T10] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 229.631921][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.650560][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 229.669004][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 229.678149][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.687943][ T10] usb 4-1: Product: syz [ 229.692386][ T10] usb 4-1: Manufacturer: syz [ 229.705698][ T10] usb 4-1: SerialNumber: syz [ 229.819637][ T5901] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 229.982244][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.995550][ T5901] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 230.006255][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.040258][ T5901] usb 1-1: config 0 descriptor?? [ 230.092118][ T5907] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 230.143791][ T10] usb 4-1: 0:2 : does not exist [ 230.257545][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.282661][ T5907] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 230.293524][ T5907] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 230.327160][ T5907] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 230.336862][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.345801][ T5907] usb 6-1: Product: syz [ 230.352664][ T5907] usb 6-1: Manufacturer: syz [ 230.357335][ T5907] usb 6-1: SerialNumber: syz [ 230.369190][ T5907] usb 6-1: config 0 descriptor?? [ 230.385745][ T5907] usb 6-1: Found UVC 34.00 device syz (8086:0b5b) [ 230.396536][ T5907] usb 6-1: No valid video chain found. [ 230.487607][ T5901] keytouch 0003:0926:3333.0018: fixing up Keytouch IEC report descriptor [ 230.518586][ T5901] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0018/input/input27 [ 230.608563][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.829'. [ 230.670249][ T5901] keytouch 0003:0926:3333.0018: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 230.779343][ T10] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 230.840523][ T10] usb 4-1: USB disconnect, device number 18 [ 230.905877][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.158135][ T10] usb 1-1: USB disconnect, device number 23 [ 231.838116][ T5864] usb 6-1: USB disconnect, device number 2 [ 232.502781][ T8346] syz_tun: entered allmulticast mode [ 232.555286][ T8344] syz_tun: left allmulticast mode [ 232.698720][ T7144] Bluetooth: hci5: Frame reassembly failed (-84) [ 233.079046][ T5907] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 233.870366][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.918430][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.935870][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.957790][ T5907] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.967395][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.019634][ T5907] usb 1-1: config 0 descriptor?? [ 234.396008][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.856'. [ 234.423029][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.856'. [ 234.477796][ T5907] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 234.555613][ T5907] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 234.747257][ T8397] netlink: 'syz.3.858': attribute type 1 has an invalid length. [ 234.768464][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 234.770992][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 234.932878][ T8397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.047842][ T8401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.055395][ T8401] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 235.069757][ T8401] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 235.276432][ T8413] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 237.429472][ T5901] usb 1-1: USB disconnect, device number 24 [ 237.598410][ T2147] IPVS: starting estimator thread 0... [ 237.708872][ T8442] IPVS: using max 27 ests per chain, 64800 per kthread [ 238.938463][ T5901] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 239.101025][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.122219][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.147199][ T5901] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 239.197403][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.236184][ T5901] usb 4-1: config 0 descriptor?? [ 239.606783][ T8503] kvm: MONITOR instruction emulated as NOP! [ 239.700665][ T8471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.750657][ T8471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.774154][ T5901] sony 0003:054C:024B.001A: unexpected long global item [ 239.796613][ T5901] sony 0003:054C:024B.001A: parse failed [ 239.812254][ T5901] sony 0003:054C:024B.001A: probe with driver sony failed with error -22 [ 239.834495][ T8385] syz.4.855 (8385): drop_caches: 3 [ 239.868483][ T119] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 239.995516][ T5901] usb 4-1: USB disconnect, device number 19 [ 240.064395][ T119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.112568][ T119] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.132800][ T119] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 240.162936][ T119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.215461][ T119] usb 1-1: config 0 descriptor?? [ 241.461413][ T119] uclogic 0003:256C:006D.001B: v1 frame probing failed: -71 [ 241.480251][ T119] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 241.496693][ T119] uclogic 0003:256C:006D.001B: probe with driver uclogic failed with error -71 [ 241.537684][ T119] usb 1-1: USB disconnect, device number 25 [ 242.088505][ T2147] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 242.199726][ T8583] syz.0.903: attempt to access beyond end of device [ 242.199726][ T8583] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 242.239433][ T8583] exFAT-fs (nbd0): unable to read boot sector [ 242.251375][ T2147] usb 6-1: not running at top speed; connect to a high speed hub [ 242.258405][ T8583] exFAT-fs (nbd0): failed to read boot sector [ 242.264338][ T2147] usb 6-1: config 1 interface 0 has no altsetting 0 [ 242.272895][ T8583] exFAT-fs (nbd0): failed to recognize exfat type [ 242.284050][ T2147] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 242.294398][ T2147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.326171][ T2147] usb 6-1: Product: syz [ 242.353895][ T2147] usb 6-1: Manufacturer: syz [ 242.369842][ T2147] usb 6-1: SerialNumber: syz [ 242.449381][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 242.635940][ T2147] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input29 [ 242.686554][ T5174] bcm5974 6-1:1.0: could not read from device [ 242.810010][ T2147] usb 6-1: USB disconnect, device number 3 [ 242.817374][ T5174] bcm5974 6-1:1.0: could not read from device [ 244.721325][ T119] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 244.850523][ T5906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.904329][ T119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.929169][ T119] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.959620][ T119] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 244.979965][ T119] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 244.989381][ T119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.011169][ T119] usb 6-1: config 0 descriptor?? [ 245.462389][ T119] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 246.037242][ T119] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 246.189241][ T119] usb 6-1: USB disconnect, device number 4 [ 246.646539][ T8687] gtp0: entered promiscuous mode [ 247.347882][ T5907] IPVS: starting estimator thread 0... [ 247.448822][ T8694] IPVS: using max 28 ests per chain, 67200 per kthread [ 247.607853][ T8702] xt_hashlimit: size too large, truncated to 1048576 [ 247.938715][ T5901] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 248.112996][ T5901] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 248.131108][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.152620][ T5901] usb 5-1: Product: syz [ 248.161340][ T5901] usb 5-1: Manufacturer: syz [ 248.170692][ T5901] usb 5-1: SerialNumber: syz [ 248.186114][ T5901] usb 5-1: config 0 descriptor?? [ 248.207663][ T5901] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 248.729392][ T5901] gspca_sunplus: reg_r err -110 [ 248.767026][ T5901] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 249.100254][ T5901] usb 5-1: USB disconnect, device number 21 [ 249.338143][ T8741] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 249.378595][ T5906] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 249.488399][ T5864] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 249.585943][ T5906] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 249.688876][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.743513][ T5906] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.797060][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.894351][ T5864] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 249.939225][ T5906] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 250.034731][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.040453][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.173783][ T5906] hub 6-1:4.0: USB hub found [ 250.181778][ T5864] usb 2-1: config 0 descriptor?? [ 250.374356][ T5906] hub 6-1:4.0: 12 ports detected [ 250.388413][ T5906] usb 6-1: selecting invalid altsetting 1 [ 250.411794][ T5906] hub 6-1:4.0: Using single TT (err -22) [ 250.438022][ T5906] hub 6-1:4.0: insufficient power available to use all downstream ports [ 250.615705][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.638781][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.794187][ T5906] usb 6-1: USB disconnect, device number 5 [ 251.703334][ T5864] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001D/input/input30 [ 251.805550][ T5864] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001D/input/input31 [ 251.968790][ T5901] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 252.021473][ T5864] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001D/input/input32 [ 252.047014][ T30] audit: type=1804 audit(1746162393.370:4): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.965" name="/newroot/188/bus/file0" dev="overlay" ino=1079 res=1 errno=0 [ 252.136921][ T5864] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.001D/input/input33 [ 252.175726][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.196019][ T5901] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 252.218010][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.281271][ T5823] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 252.298993][ T8771] input: syz0 as /devices/virtual/input/input34 [ 252.319341][ T5901] usb 1-1: config 0 descriptor?? [ 252.387042][ T5864] uclogic 0003:256C:006D.001D: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 252.462929][ T5864] usb 2-1: USB disconnect, device number 24 [ 252.740206][ T5901] usbhid 1-1:0.0: can't add hid device: -71 [ 252.751828][ T5901] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 252.773062][ T5901] usb 1-1: USB disconnect, device number 26 [ 253.150233][ T8804] loop8: detected capacity change from 0 to 7 [ 253.160950][ T5920] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 253.166336][ T5920] loop8: partition table partially beyond EOD, truncated [ 253.175562][ T7143] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.178020][ T5920] loop8: p1 size 2916235312 extends beyond EOD, truncated [ 253.241247][ T8804] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 253.256311][ T8804] loop8: partition table partially beyond EOD, truncated [ 253.290143][ T8804] loop8: p1 size 2916235312 extends beyond EOD, truncated [ 253.401398][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 253.474346][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 253.828402][ T5864] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 253.848647][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 253.988379][ T5864] usb 6-1: Using ep0 maxpacket: 32 [ 253.996665][ T5864] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 254.024007][ T5864] usb 6-1: config 0 has no interface number 0 [ 254.042882][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 254.048632][ T5864] usb 6-1: config 0 interface 184 has no altsetting 0 [ 254.061308][ T5864] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 254.071010][ T10] usb 1-1: config 1 has no interface number 0 [ 254.076019][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.077846][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.101665][ T5864] usb 6-1: Product: syz [ 254.103708][ T5907] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 254.105863][ T5864] usb 6-1: Manufacturer: syz [ 254.120152][ T10] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 254.134705][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 237, changing to 11 [ 254.151886][ T5864] usb 6-1: SerialNumber: syz [ 254.154596][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 58681, setting to 1024 [ 254.168720][ T5864] usb 6-1: config 0 descriptor?? [ 254.173060][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.179730][ T5864] smsc75xx v1.0.0 [ 254.186910][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.195081][ T10] usb 1-1: Product: syz [ 254.202034][ T10] usb 1-1: Manufacturer: syz [ 254.206681][ T10] usb 1-1: SerialNumber: syz [ 254.284914][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.302039][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.317455][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.338137][ T5907] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.347606][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.367276][ T5907] usb 5-1: config 0 descriptor?? [ 254.369758][ T5818] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 254.438081][ T8812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 254.449635][ T5906] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.455042][ T2147] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 254.488572][ T119] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.503543][ T2147] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.548713][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 254.562107][ T5818] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.589435][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 254.596138][ T5818] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 254.605316][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.618234][ T5818] usb 2-1: config 0 descriptor?? [ 254.803958][ T5907] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 254.820822][ T5907] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 254.831776][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 254.833738][ T5907] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 254.852167][ T5907] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 254.860576][ T5907] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 254.870640][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 254.876743][ T5907] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 254.891192][ T5907] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 254.928612][ T5907] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 255.056786][ T5818] bigben 0003:146B:0902.0020: unexpected rdesc, please submit for review [ 255.084894][ T5818] bigben 0003:146B:0902.0020: unknown main item tag 0x0 [ 255.098102][ T5818] bigben 0003:146B:0902.0020: item fetching failed at offset 3/5 [ 255.107279][ T5818] bigben 0003:146B:0902.0020: parse failed [ 255.113968][ T5818] bigben 0003:146B:0902.0020: probe with driver bigben failed with error -22 [ 255.121922][ T8812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.170069][ T10] cdc_ncm 1-1:1.1: bind() failure [ 255.256907][ T5818] usb 2-1: USB disconnect, device number 25 [ 255.410800][ T5901] usb 1-1: USB disconnect, device number 27 [ 255.695990][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 255.717735][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 255.729375][ T5864] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 255.736307][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.746160][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.749731][ T5864] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 255.782739][ T5864] usb 6-1: USB disconnect, device number 6 [ 255.812018][ T6020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.006210][ T8847] loop9: detected capacity change from 0 to 7 [ 256.015498][ T8847] loop9: [POWERTEC] p1 p2 p3 p4 [ 256.021679][ T8847] loop9: p1 start 1600481121 is beyond EOD, truncated [ 256.029496][ T8847] loop9: p2 start 4294910286 is beyond EOD, truncated [ 256.036517][ T8847] loop9: p3 size 1680801792 extends beyond EOD, truncated [ 256.045968][ T8847] loop9: p4 start 131072 is beyond EOD, truncated [ 256.100636][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 256.181215][ T8849] usb usb8: usbfs: process 8849 (syz.0.994) did not claim interface 0 before use [ 256.932123][ T10] usb 5-1: USB disconnect, device number 22 [ 258.928847][ T3448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.492270][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.059036][ T8969] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 263.067063][ T8969] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 263.075416][ T8969] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 263.083432][ T8969] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 263.091521][ T8969] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 263.099503][ T8969] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 263.107360][ T8969] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 263.115343][ T8969] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 263.124529][ T8969] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 263.142597][ T8969] netlink: 'syz.4.1030': attribute type 3 has an invalid length. [ 263.268576][ T119] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 263.495901][ T119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.511996][ T119] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.546207][ T119] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.587815][ T119] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.624324][ T119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.692334][ T119] usb 4-1: config 0 descriptor?? [ 264.386197][ T119] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 264.395366][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.454940][ T119] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 264.548946][ T119] usb 4-1: USB disconnect, device number 20 [ 264.699984][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.216597][ T9007] bridge: RTM_NEWNEIGH with invalid ether address [ 265.818550][ T2147] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 265.980463][ T2147] usb 4-1: unable to get BOS descriptor or descriptor too short [ 265.992005][ T2147] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 266.003506][ T2147] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x82 is Bulk; changing to Interrupt [ 266.013840][ T2147] usb 4-1: config 1 interface 0 altsetting 210 endpoint 0x3 has invalid wMaxPacketSize 0 [ 266.023710][ T2147] usb 4-1: config 1 interface 0 has no altsetting 0 [ 266.035560][ T2147] usb 4-1: string descriptor 0 read error: -22 [ 266.043090][ T2147] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 266.052541][ T2147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.066269][ T9019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.077107][ T9019] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.100106][ T2147] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 266.341678][ T5823] Bluetooth: Wrong link type (-22) [ 266.355557][ T2147] usb 4-1: USB disconnect, device number 21 [ 266.758596][ T5901] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 266.841224][ T9036] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.910596][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 266.924998][ T5901] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 266.935167][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.945476][ T5901] usb 2-1: Product: syz [ 266.950234][ T5901] usb 2-1: Manufacturer: syz [ 266.954862][ T5901] usb 2-1: SerialNumber: syz [ 266.987312][ T5901] usb 2-1: config 0 descriptor?? [ 267.003339][ T5901] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 267.228752][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 267.253476][ T3506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.391167][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 267.400949][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 267.415224][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 267.426715][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 267.438128][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 267.451605][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 267.460925][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 267.469091][ T10] usb 4-1: Product: syz [ 267.473380][ T10] usb 4-1: Manufacturer: syz [ 267.478378][ T119] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 267.502308][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 267.508042][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 267.516350][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 267.524056][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 267.648960][ T119] usb 6-1: Using ep0 maxpacket: 8 [ 267.657526][ T119] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 267.667229][ T119] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.679156][ T119] usb 6-1: config 0 descriptor?? [ 267.895776][ T119] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 268.318545][ T5864] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 268.426726][ T5901] gspca_stk1135: reg_w 0xf err -71 [ 268.436093][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 268.448375][ T5901] gspca_stk1135: Sensor write failed [ 268.453732][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 268.463700][ T5901] gspca_stk1135: Sensor write failed [ 268.470557][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 268.477137][ T5901] gspca_stk1135: Sensor read failed [ 268.482680][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 268.490961][ T5901] gspca_stk1135: Sensor read failed [ 268.496276][ T5901] gspca_stk1135: Detected sensor type unknown (0x0) [ 268.504712][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 268.516401][ T5901] gspca_stk1135: Sensor read failed [ 268.521992][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.533636][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 268.548365][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.558384][ T5901] gspca_stk1135: Sensor read failed [ 268.563642][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 268.575104][ T5901] gspca_stk1135: Sensor write failed [ 268.581922][ T5864] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 268.591505][ T5901] gspca_stk1135: serial bus timeout: status=0x00 [ 268.597877][ T5901] gspca_stk1135: Sensor write failed [ 268.603366][ T5864] usb 1-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 268.613428][ T5864] usb 1-1: Manufacturer: syz [ 268.618461][ T5901] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 268.629609][ T5864] usb 1-1: config 0 descriptor?? [ 268.637828][ T5901] usb 2-1: USB disconnect, device number 26 [ 268.663928][ T5864] hub 1-1:0.0: USB hub found [ 268.844833][ T5864] hub 1-1:0.0: 1 port detected [ 269.306802][ T119] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 269.331004][ T119] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 269.351404][ T119] asix 6-1:0.0: probe with driver asix failed with error -71 [ 269.384351][ T119] usb 6-1: USB disconnect, device number 7 [ 269.458995][ T5901] hub 1-1:0.0: activate --> -90 [ 269.678693][ T30] audit: type=1326 audit(1746162411.000:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9077 comm="syz.4.1077" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9076b8e969 code=0x0 [ 269.810007][ T1005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.001768][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 270.004442][ T2147] usb 4-1: USB disconnect, device number 22 [ 270.008417][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 270.008438][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 270.468829][ T5901] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 270.477700][ T5907] usb 1-1: USB disconnect, device number 28 [ 270.648943][ T9089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 271.175703][ T9109] validate_nla: 43 callbacks suppressed [ 271.175725][ T9109] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 271.264061][ T9106] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3781544950 (3781544950 ns) > initial count (699260337 ns). Using initial count to start timer. [ 271.309646][ T9109] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.465294][ T9115] bond2: (slave veth3): Enslaving as an active interface with a down link [ 271.506343][ T9116] bond2: (slave veth0_to_bond): making interface the new active one [ 271.519174][ T9116] veth0_to_bond: entered promiscuous mode [ 271.525673][ T9116] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 271.998400][ T2147] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 272.080434][ T5864] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 272.148373][ T2147] usb 6-1: Using ep0 maxpacket: 32 [ 272.156221][ T2147] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 272.167158][ T2147] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 272.178419][ T2147] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 272.188356][ T2147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 272.198023][ T2147] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 272.207848][ T2147] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 272.221380][ T2147] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 272.247352][ T2147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.263329][ T2147] usb 6-1: config 0 descriptor?? [ 272.275946][ T5864] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 272.285097][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.308837][ T5864] usb 1-1: Product: syz [ 272.313079][ T5864] usb 1-1: Manufacturer: syz [ 272.317690][ T5864] usb 1-1: SerialNumber: syz [ 272.327331][ T5864] usb 1-1: config 0 descriptor?? [ 272.341428][ T5864] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 029 [ 272.478115][ T2147] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 272.495122][ T2147] usb 6-1: USB disconnect, device number 8 [ 272.510141][ T2147] usblp0: removed [ 272.745708][ T5864] (null): failure reading functionality [ 272.756295][ T5864] i2c i2c-3: connected i2c-tiny-usb device [ 272.957645][ T5818] usb 1-1: USB disconnect, device number 29 [ 273.010275][ T2147] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 273.018363][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.188323][ T2147] usb 6-1: Using ep0 maxpacket: 32 [ 273.195066][ T2147] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 273.203510][ T2147] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 273.212318][ T2147] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 273.221511][ T2147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.232277][ T2147] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 273.241993][ T2147] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 273.269155][ T2147] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 273.286379][ T2147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.297843][ T2147] usb 6-1: config 0 descriptor?? [ 273.526347][ T2147] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 273.654247][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.666452][ T5907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.383603][ C0] usblp0: nonzero read bulk status received: -71 [ 274.407183][ T10] usb 6-1: USB disconnect, device number 9 [ 274.413585][ T9125] usblp0: error -71 reading from printer [ 274.693922][ T9124] usblp0: removed [ 274.703323][ T9155] input: syz0 as /devices/virtual/input/input35 [ 275.571885][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.878470][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 275.898027][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fa12c00: rx timeout, send abort [ 275.909374][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fa12c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 275.954246][ T5823] Bluetooth: hci1: unexpected event for opcode 0x2036 [ 276.061296][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 276.071028][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.081250][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.093632][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.104014][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.118631][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.136690][ T9177] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 276.158922][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.398451][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 276.408126][ T10] usbtmc 5-1:16.0: can't read capabilities [ 276.605837][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.628233][ T10] usb 5-1: USB disconnect, device number 23 [ 278.019074][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 278.055849][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.652191][ T9225] syzkaller0: entered promiscuous mode [ 278.657886][ T9225] syzkaller0: entered allmulticast mode [ 279.318528][ T5907] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 279.598700][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 280.031470][ T5907] usb 5-1: config 6 has no interfaces? [ 280.135791][ T5907] usb 5-1: string descriptor 0 read error: -71 [ 280.164685][ T5907] usb 5-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c [ 280.196051][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.231043][ T5907] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 280.249139][ T5907] usb 5-1: no configuration chosen from 1 choice [ 280.270546][ T5907] usb 5-1: USB disconnect, device number 24 [ 281.359643][ T1005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.914098][ T66] bridge_slave_1: left allmulticast mode [ 281.942899][ T66] bridge_slave_1: left promiscuous mode [ 281.953266][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.129064][ T66] bridge_slave_0: left allmulticast mode [ 282.134775][ T66] bridge_slave_0: left promiscuous mode [ 282.178711][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.256610][ T119] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.302019][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 283.563701][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.575636][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.591381][ T66] bond0 (unregistering): Released all slaves [ 283.850437][ T6020] veth0_to_bond: left promiscuous mode [ 283.896612][ T6020] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.587056][ T9301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1148'. [ 285.915029][ T9323] binder: BINDER_SET_CONTEXT_MGR bad uid 3327 != 0 [ 285.977662][ T9323] binder: 9321:9323 ioctl 4018620d 200000000040 returned -1 [ 286.072251][ T66] hsr_slave_0: left promiscuous mode [ 286.102649][ T66] hsr_slave_1: left promiscuous mode [ 286.123546][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.143380][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.171079][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.182441][ T5823] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 286.189271][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.300904][ T66] veth1_macvtap: left promiscuous mode [ 286.306526][ T66] veth0_macvtap: left promiscuous mode [ 286.318552][ T66] veth1_vlan: left promiscuous mode [ 286.325309][ T66] veth0_vlan: left promiscuous mode [ 286.338374][ T2147] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 286.423514][ T9341] 9pnet_fd: Insufficient options for proto=fd [ 286.508773][ T2147] usb 2-1: Using ep0 maxpacket: 16 [ 286.554372][ T2147] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 286.701406][ T2147] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 286.754929][ T2147] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.901807][ T2147] usb 2-1: Product: syz [ 286.911360][ T2147] usb 2-1: Manufacturer: syz [ 286.916007][ T2147] usb 2-1: SerialNumber: syz [ 286.931778][ T2147] usb 2-1: config 0 descriptor?? [ 286.954946][ T2147] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 286.979104][ T2147] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 287.092296][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.881008][ T2147] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 288.194230][ T9359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 288.443936][ T66] team0 (unregistering): Port device team_slave_1 removed [ 288.484803][ T66] team0 (unregistering): Port device team_slave_0 removed [ 288.847202][ T2147] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 288.864821][ T2147] em28xx 2-1:0.0: board has no eeprom [ 288.940494][ T2147] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 288.948930][ T2147] em28xx 2-1:0.0: dvb set to bulk mode. [ 288.956332][ T5864] em28xx 2-1:0.0: Binding DVB extension [ 288.978635][ T2147] usb 2-1: USB disconnect, device number 27 [ 288.998685][ T2147] em28xx 2-1:0.0: Disconnecting em28xx [ 289.044242][ T9333] netlink: 'syz.5.1157': attribute type 5 has an invalid length. [ 289.062724][ T5864] em28xx 2-1:0.0: Registering input extension [ 289.099712][ T2147] em28xx 2-1:0.0: Closing input extension [ 289.155266][ T2147] em28xx 2-1:0.0: Freeing device [ 289.669713][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.177949][ T9378] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 290.252346][ T9373] syz.0.1167 (9373) used greatest stack depth: 18440 bytes left [ 290.960498][ T9405] netlink: 'syz.1.1176': attribute type 15 has an invalid length. [ 291.223051][ T5907] hid-generic 0005:16C0:5505.0022: item fetching failed at offset 0/3 [ 291.253236][ T5907] hid-generic 0005:16C0:5505.0022: probe with driver hid-generic failed with error -22 [ 292.594158][ T7144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.603525][ T5864] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 292.639112][ T5818] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 292.691068][ T7144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.698531][ T2147] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 292.776805][ T7144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.790396][ T5864] usb 6-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 292.802389][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.813502][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 292.823859][ T5864] usb 6-1: config 0 descriptor?? [ 292.834665][ T5818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.850454][ T119] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.855041][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.862596][ T5907] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.872521][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 292.914399][ T5818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 292.918020][ T7144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.943020][ T5818] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.956375][ T2147] usb 5-1: config 0 has no interfaces? [ 292.964978][ T5818] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 292.974664][ T2147] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 292.987401][ T2147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 292.995852][ T5818] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 293.005518][ T2147] usb 5-1: SerialNumber: syz [ 293.012917][ T5818] usb 1-1: Manufacturer: syz [ 293.023861][ T5818] usb 1-1: config 0 descriptor?? [ 293.039652][ T2147] usb 5-1: config 0 descriptor?? [ 293.231831][ T7144] bridge_slave_1: left allmulticast mode [ 293.246617][ T7144] bridge_slave_1: left promiscuous mode [ 293.271694][ T7144] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.286054][ T7144] bridge_slave_0: left allmulticast mode [ 293.293426][ T7144] bridge_slave_0: left promiscuous mode [ 293.305164][ T7144] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.344708][ T5906] usb 5-1: USB disconnect, device number 25 [ 293.485440][ T5864] uclogic 0003:28BD:0055.0023: interface is invalid, ignoring [ 293.616673][ T10] usb 6-1: USB disconnect, device number 10 [ 293.828460][ T5818] rc_core: IR keymap rc-hauppauge not found [ 293.834536][ T5818] Registered IR keymap rc-empty [ 293.848412][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.868384][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.909751][ T5818] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 293.950739][ T5818] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37 [ 293.993315][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.038808][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.198512][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.229354][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.248604][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.261343][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.269233][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.279563][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.295544][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.308742][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.316303][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.326495][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.341400][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.371981][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.398654][ T5818] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 294.441753][ T9464] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 294.600630][ T5818] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 294.628443][ T5818] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 294.663903][ T5818] usb 1-1: USB disconnect, device number 30 [ 295.388348][ T5907] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 296.180408][ T5907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.190797][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.234828][ T5907] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 296.248279][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 296.270914][ T5907] usb 2-1: SerialNumber: syz [ 296.377774][ T7144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.421359][ T7144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.447952][ T7144] bond0 (unregistering): Released all slaves [ 296.528530][ T55] Bluetooth: hci2: command tx timeout [ 296.565620][ T5907] usb 2-1: 0:2 : does not exist [ 296.664995][ T5907] usb 2-1: USB disconnect, device number 28 [ 296.805334][ T7144] bond1 (unregistering): Released all slaves [ 298.415183][ T9460] chnl_net:caif_netlink_parms(): no params data found [ 298.610708][ T5823] Bluetooth: hci2: command tx timeout [ 298.646014][ T7144] hsr_slave_0: left promiscuous mode [ 298.653785][ T7144] hsr_slave_1: left promiscuous mode [ 298.661072][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.678350][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.695234][ T7144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.713221][ T7144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.772083][ T7144] veth1_macvtap: left promiscuous mode [ 298.777632][ T7144] veth0_macvtap: left promiscuous mode [ 298.789878][ T7144] veth1_vlan: left promiscuous mode [ 298.795608][ T7144] veth0_vlan: left promiscuous mode [ 299.518560][ T5901] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 299.692083][ T5901] usb 1-1: config 1 interface 0 has no altsetting 0 [ 299.701575][ T5901] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 299.711016][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.727072][ T5901] usb 1-1: Product: syz [ 299.749375][ T5901] usb 1-1: Manufacturer: syz [ 299.754235][ T5901] usb 1-1: SerialNumber: syz [ 299.868654][ T119] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 299.968755][ T7144] team0 (unregistering): Port device team_slave_1 removed [ 300.035901][ T119] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 300.068372][ T119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.095225][ T119] usb 5-1: Product: syz [ 300.099690][ T9569] overlayfs: failed to clone upperpath [ 300.100093][ T119] usb 5-1: Manufacturer: syz [ 300.114921][ T7144] team0 (unregistering): Port device team_slave_0 removed [ 300.148362][ T119] usb 5-1: SerialNumber: syz [ 300.163668][ T119] usb 5-1: config 0 descriptor?? [ 300.204930][ T119] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 300.563992][ T5901] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 300.688476][ T5823] Bluetooth: hci2: command tx timeout [ 301.895039][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.904511][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.913336][ T9460] bridge_slave_0: entered allmulticast mode [ 301.928325][ T9460] bridge_slave_0: entered promiscuous mode [ 301.937428][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.945266][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.961047][ T9460] bridge_slave_1: entered allmulticast mode [ 301.969404][ T9460] bridge_slave_1: entered promiscuous mode [ 302.019711][ T9591] overlayfs: failed to clone upperpath [ 302.048153][ T9460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.088418][ T9460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.097737][ T7144] IPVS: stop unused estimator thread 0... [ 302.217144][ T9598] xt_hashlimit: size too large, truncated to 1048576 [ 302.259279][ T119] usb 1-1: USB disconnect, device number 31 [ 302.283513][ T119] usblp0: removed [ 302.331621][ T9460] team0: Port device team_slave_0 added [ 302.364344][ T5906] usb 5-1: USB disconnect, device number 26 [ 302.380543][ T9460] team0: Port device team_slave_1 added [ 302.448724][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.545491][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1230'. [ 302.635489][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1230'. [ 302.695248][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.715173][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.775184][ T5823] Bluetooth: hci2: command tx timeout [ 302.779057][ T9460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.835489][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.877509][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.945463][ T9460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.055560][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1233'. [ 303.181849][ T9460] hsr_slave_0: entered promiscuous mode [ 303.196663][ T9460] hsr_slave_1: entered promiscuous mode [ 303.209272][ T9460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.216957][ T9460] Cannot create hsr debugfs directory [ 304.288609][ T5906] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 304.369601][ T5901] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 304.458427][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 304.471961][ T9460] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.477941][ T5906] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 304.496158][ T9460] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.499135][ T5906] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 304.522416][ T9460] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.538210][ T5906] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 304.554744][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 304.562149][ T5906] usb 2-1: config 1 has no interface number 0 [ 304.562713][ T9460] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.581800][ T5901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.584100][ T5906] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.613450][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.645749][ T5901] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.675666][ T5906] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 58431, setting to 1024 [ 304.677348][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.703047][ T5906] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 304.734439][ T5901] usb 1-1: Product: syz [ 304.749558][ T5901] usb 1-1: Manufacturer: syz [ 304.754225][ T5901] usb 1-1: SerialNumber: syz [ 304.756132][ T5906] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 304.805502][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.830181][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1243'. [ 304.834703][ T9645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 304.890041][ T5906] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 304.915533][ T9460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.989650][ T9460] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.014106][ T5901] usb 1-1: 0:2 : does not exist [ 305.035186][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.042441][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.057451][ T5901] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 305.078673][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.085843][ T7143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.107422][ T9645] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 305.144830][ T5906] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 305.155713][ T5901] usb 1-1: USB disconnect, device number 32 [ 305.289084][ T9460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.317468][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.361772][ T9460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.739721][ T2147] usb 2-1: USB disconnect, device number 29 [ 305.770061][ T2147] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 306.221068][ T9460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.443561][ T9460] veth0_vlan: entered promiscuous mode [ 306.556823][ T9460] veth1_vlan: entered promiscuous mode [ 306.720924][ T9460] veth0_macvtap: entered promiscuous mode [ 306.765983][ T9460] veth1_macvtap: entered promiscuous mode [ 306.897376][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.977562][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.008050][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.031907][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.083128][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.118453][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.145761][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.190999][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.235418][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.248045][ T9725] syz_tun: entered allmulticast mode [ 307.266948][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.296810][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.307134][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.327416][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.342121][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.392533][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.408773][ T9460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.427514][ T9460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.443614][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.502098][ T9460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.521168][ T9460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.537403][ T9460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.612145][ T9460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.657236][ T9717] syz_tun: left allmulticast mode [ 307.689484][ T9736] Bluetooth: hci5: Frame reassembly failed (-90) [ 307.716899][ T6020] Bluetooth: hci5: Frame reassembly failed (-84) [ 307.839137][ T30] audit: type=1800 audit(1746162449.130:6): pid=9732 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.5.1257" name="/newroot/112/bus" dev="tmpfs" ino=682 res=0 errno=0 [ 307.974287][ T3065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.003238][ T3065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.114942][ T3065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.249744][ T3065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.445788][ T9460] ================================================================== [ 308.453906][ T9460] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0 [ 308.461687][ T9460] Write of size 8 at addr ffff88802d7d8408 by task syz-executor/9460 [ 308.469781][ T9460] [ 308.472147][ T9460] CPU: 1 UID: 0 PID: 9460 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 308.472171][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 308.472191][ T9460] Call Trace: [ 308.472199][ T9460] [ 308.472219][ T9460] dump_stack_lvl+0x189/0x250 [ 308.472255][ T9460] ? __kasan_check_byte+0x12/0x40 [ 308.472287][ T9460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.472314][ T9460] ? lock_release+0x4b/0x3e0 [ 308.472339][ T9460] ? lock_release+0x4b/0x3e0 [ 308.472367][ T9460] ? __virt_addr_valid+0x469/0x540 [ 308.472393][ T9460] print_report+0xb4/0x290 [ 308.472417][ T9460] ? binder_add_device+0x5f/0xa0 [ 308.472440][ T9460] kasan_report+0x118/0x150 [ 308.472470][ T9460] ? binder_add_device+0x5f/0xa0 [ 308.472498][ T9460] binder_add_device+0x5f/0xa0 [ 308.472523][ T9460] binderfs_binder_device_create+0x8b7/0xaf0 [ 308.472553][ T9460] binderfs_fill_super+0xa0e/0xe90 [ 308.472579][ T9460] ? __pfx_binderfs_fill_super+0x10/0x10 [ 308.472615][ T9460] ? shrinker_register+0x16b/0x230 [ 308.472641][ T9460] ? sget_fc+0x962/0xa40 [ 308.472666][ T9460] ? __pfx_set_anon_super_fc+0x10/0x10 [ 308.472690][ T9460] ? __pfx_binderfs_fill_super+0x10/0x10 [ 308.472714][ T9460] get_tree_nodev+0xb8/0x150 [ 308.472741][ T9460] vfs_get_tree+0x8f/0x2b0 [ 308.472769][ T9460] do_new_mount+0x24a/0xa40 [ 308.472803][ T9460] __se_sys_mount+0x317/0x410 [ 308.472836][ T9460] ? __pfx___se_sys_mount+0x10/0x10 [ 308.472868][ T9460] ? do_syscall_64+0xba/0x210 [ 308.472890][ T9460] ? __x64_sys_mount+0x20/0xc0 [ 308.472920][ T9460] do_syscall_64+0xf6/0x210 [ 308.472942][ T9460] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.472964][ T9460] ? clear_bhb_loop+0x45/0xa0 [ 308.472986][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.473006][ T9460] RIP: 0033:0x7febb779010a [ 308.473036][ T9460] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.473053][ T9460] RSP: 002b:00007ffc49711d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 308.473074][ T9460] RAX: ffffffffffffffda RBX: 00007febb7810e74 RCX: 00007febb779010a [ 308.473089][ T9460] RDX: 00007febb78208cb RSI: 00007febb7810e74 RDI: 00007febb78208cb [ 308.473104][ T9460] RBP: 00007febb78110bd R08: 0000000000000000 R09: 00007febb79b6738 [ 308.473117][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 00007febb77ec1a8 [ 308.473130][ T9460] R13: 00007febb77ec180 R14: 0000000000000009 R15: 0000000000000000 [ 308.473152][ T9460] [ 308.473159][ T9460] [ 308.722749][ T9460] Allocated by task 7629: [ 308.727106][ T9460] kasan_save_track+0x3e/0x80 [ 308.731807][ T9460] __kasan_kmalloc+0x93/0xb0 [ 308.736406][ T9460] __kmalloc_cache_noprof+0x230/0x3d0 [ 308.741820][ T9460] binderfs_binder_device_create+0x17f/0xaf0 [ 308.747819][ T9460] binderfs_fill_super+0xa0e/0xe90 [ 308.752934][ T9460] get_tree_nodev+0xb8/0x150 [ 308.757527][ T9460] vfs_get_tree+0x8f/0x2b0 [ 308.761950][ T9460] do_new_mount+0x24a/0xa40 [ 308.766476][ T9460] __se_sys_mount+0x317/0x410 [ 308.771176][ T9460] do_syscall_64+0xf6/0x210 [ 308.775698][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.781595][ T9460] [ 308.783919][ T9460] Freed by task 5907: [ 308.787897][ T9460] kasan_save_track+0x3e/0x80 [ 308.792585][ T9460] kasan_save_free_info+0x46/0x50 [ 308.797612][ T9460] __kasan_slab_free+0x62/0x70 [ 308.802384][ T9460] kfree+0x193/0x440 [ 308.806285][ T9460] binder_proc_dec_tmpref+0x228/0x4f0 [ 308.811663][ T9460] binder_deferred_func+0x13a5/0x1520 [ 308.817037][ T9460] process_scheduled_works+0xadb/0x17a0 [ 308.822592][ T9460] worker_thread+0x8a0/0xda0 [ 308.827189][ T9460] kthread+0x70e/0x8a0 [ 308.831258][ T9460] ret_from_fork+0x4b/0x80 [ 308.835673][ T9460] ret_from_fork_asm+0x1a/0x30 [ 308.840457][ T9460] [ 308.842782][ T9460] The buggy address belongs to the object at ffff88802d7d8400 [ 308.842782][ T9460] which belongs to the cache kmalloc-512 of size 512 [ 308.856857][ T9460] The buggy address is located 8 bytes inside of [ 308.856857][ T9460] freed 512-byte region [ffff88802d7d8400, ffff88802d7d8600) [ 308.870500][ T9460] [ 308.872834][ T9460] The buggy address belongs to the physical page: [ 308.879257][ T9460] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d7d8 [ 308.888038][ T9460] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 308.896547][ T9460] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 308.904125][ T9460] page_type: f5(slab) [ 308.908120][ T9460] raw: 00fff00000000040 ffff88801a041c80 ffffea0000a09c00 dead000000000002 [ 308.916711][ T9460] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 308.925304][ T9460] head: 00fff00000000040 ffff88801a041c80 ffffea0000a09c00 dead000000000002 [ 308.934066][ T9460] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 308.942741][ T9460] head: 00fff00000000002 ffffea0000b5f601 00000000ffffffff 00000000ffffffff [ 308.951411][ T9460] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 308.960077][ T9460] page dumped because: kasan: bad access detected [ 308.966513][ T9460] page_owner tracks the page as allocated [ 308.972239][ T9460] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 66, tgid 66 (kworker/u8:4), ts 94819263647, free_ts 94702501703 [ 308.993313][ T9460] post_alloc_hook+0x1d8/0x230 [ 308.998104][ T9460] get_page_from_freelist+0x21c7/0x22a0 [ 309.003657][ T9460] __alloc_frozen_pages_noprof+0x181/0x370 [ 309.009595][ T9460] alloc_pages_mpol+0x232/0x4a0 [ 309.014502][ T9460] allocate_slab+0x8a/0x3b0 [ 309.019027][ T9460] ___slab_alloc+0xbfc/0x1480 [ 309.023706][ T9460] __kmalloc_cache_noprof+0x296/0x3d0 [ 309.029086][ T9460] __ipv6_dev_mc_inc+0x420/0xaf0 [ 309.034037][ T9460] addrconf_dad_work+0x3d0/0x14b0 [ 309.039073][ T9460] process_scheduled_works+0xadb/0x17a0 [ 309.044638][ T9460] worker_thread+0x8a0/0xda0 [ 309.049237][ T9460] kthread+0x70e/0x8a0 [ 309.053306][ T9460] ret_from_fork+0x4b/0x80 [ 309.057721][ T9460] ret_from_fork_asm+0x1a/0x30 [ 309.062494][ T9460] page last free pid 66 tgid 66 stack trace: [ 309.068469][ T9460] __free_frozen_pages+0xb05/0xcd0 [ 309.073583][ T9460] __put_partials+0x161/0x1c0 [ 309.078267][ T9460] put_cpu_partial+0x17c/0x250 [ 309.083031][ T9460] __slab_free+0x2f7/0x400 [ 309.087450][ T9460] qlist_free_all+0x9a/0x140 [ 309.092075][ T9460] kasan_quarantine_reduce+0x148/0x160 [ 309.097538][ T9460] __kasan_slab_alloc+0x22/0x80 [ 309.102401][ T9460] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 309.108307][ T9460] __alloc_skb+0x112/0x2d0 [ 309.112723][ T9460] mld_newpack+0x13c/0xc40 [ 309.117153][ T9460] add_grhead+0x5a/0x2a0 [ 309.121395][ T9460] add_grec+0x13b2/0x1670 [ 309.125726][ T9460] mld_send_initial_cr+0x22d/0x4c0 [ 309.130870][ T9460] ipv6_mc_dad_complete+0x88/0x4b0 [ 309.135992][ T9460] addrconf_dad_completed+0x6d5/0xd60 [ 309.141372][ T9460] addrconf_dad_work+0xc36/0x14b0 [ 309.146423][ T9460] [ 309.148759][ T9460] Memory state around the buggy address: [ 309.154391][ T9460] ffff88802d7d8300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 309.162463][ T9460] ffff88802d7d8380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 309.170526][ T9460] >ffff88802d7d8400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.178591][ T9460] ^ [ 309.182919][ T9460] ffff88802d7d8480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.190999][ T9460] ffff88802d7d8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.199078][ T9460] ================================================================== [ 309.229050][ T9460] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 309.236406][ T9460] CPU: 1 UID: 0 PID: 9460 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 309.248581][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 309.258656][ T9460] Call Trace: [ 309.261944][ T9460] [ 309.264877][ T9460] dump_stack_lvl+0x99/0x250 [ 309.269481][ T9460] ? __asan_memcpy+0x40/0x70 [ 309.274103][ T9460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.279311][ T9460] ? __pfx__printk+0x10/0x10 [ 309.283933][ T9460] panic+0x2db/0x790 [ 309.287839][ T9460] ? __pfx_preempt_schedule+0x10/0x10 [ 309.293216][ T9460] ? __pfx_panic+0x10/0x10 [ 309.297655][ T9460] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 309.303560][ T9460] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 309.309905][ T9460] ? binder_add_device+0x5f/0xa0 [ 309.314879][ T9460] check_panic_on_warn+0x89/0xb0 [ 309.319826][ T9460] ? binder_add_device+0x5f/0xa0 [ 309.324769][ T9460] end_report+0x78/0x160 [ 309.329026][ T9460] kasan_report+0x129/0x150 [ 309.333545][ T9460] ? binder_add_device+0x5f/0xa0 [ 309.338489][ T9460] binder_add_device+0x5f/0xa0 [ 309.343257][ T9460] binderfs_binder_device_create+0x8b7/0xaf0 [ 309.349246][ T9460] binderfs_fill_super+0xa0e/0xe90 [ 309.354362][ T9460] ? __pfx_binderfs_fill_super+0x10/0x10 [ 309.360009][ T9460] ? shrinker_register+0x16b/0x230 [ 309.365133][ T9460] ? sget_fc+0x962/0xa40 [ 309.369380][ T9460] ? __pfx_set_anon_super_fc+0x10/0x10 [ 309.374843][ T9460] ? __pfx_binderfs_fill_super+0x10/0x10 [ 309.380485][ T9460] get_tree_nodev+0xb8/0x150 [ 309.385083][ T9460] vfs_get_tree+0x8f/0x2b0 [ 309.389512][ T9460] do_new_mount+0x24a/0xa40 [ 309.394026][ T9460] __se_sys_mount+0x317/0x410 [ 309.398727][ T9460] ? __pfx___se_sys_mount+0x10/0x10 [ 309.403940][ T9460] ? do_syscall_64+0xba/0x210 [ 309.408627][ T9460] ? __x64_sys_mount+0x20/0xc0 [ 309.413436][ T9460] do_syscall_64+0xf6/0x210 [ 309.417953][ T9460] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 309.424110][ T9460] ? clear_bhb_loop+0x45/0xa0 [ 309.428799][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.434703][ T9460] RIP: 0033:0x7febb779010a [ 309.439126][ T9460] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.458824][ T9460] RSP: 002b:00007ffc49711d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 309.467245][ T9460] RAX: ffffffffffffffda RBX: 00007febb7810e74 RCX: 00007febb779010a [ 309.475232][ T9460] RDX: 00007febb78208cb RSI: 00007febb7810e74 RDI: 00007febb78208cb [ 309.483207][ T9460] RBP: 00007febb78110bd R08: 0000000000000000 R09: 00007febb79b6738 [ 309.491181][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 00007febb77ec1a8 [ 309.499158][ T9460] R13: 00007febb77ec180 R14: 0000000000000009 R15: 0000000000000000 [ 309.507142][ T9460] [ 309.510486][ T9460] Kernel Offset: disabled [ 309.514816][ T9460] Rebooting in 86400 seconds..