last executing test programs: 4m23.108745164s ago: executing program 4 (id=3969): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 4m23.006217636s ago: executing program 4 (id=3970): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000200)={{0x2, @addr=0x9}, "8f7eb5112f898f635de9626c9f2a4a0e8623b743095107729eae0b6d635827e0", 0x3}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m22.26418891s ago: executing program 4 (id=3982): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4m22.135936868s ago: executing program 4 (id=3984): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 4m21.245877747s ago: executing program 4 (id=3995): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000200)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x1}, 0xffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100)) 4m20.90783482s ago: executing program 4 (id=3996): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a00)="b011d08afc99cf6754d4c259d71c7596afc4a76608a319a454412a02a4c22930", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/45, 0x2d}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1}}], 0x2, 0x0, 0x0) 4m20.730418671s ago: executing program 32 (id=3996): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000a00)="b011d08afc99cf6754d4c259d71c7596afc4a76608a319a454412a02a4c22930", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/45, 0x2d}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1}}], 0x2, 0x0, 0x0) 5.213214984s ago: executing program 2 (id=6888): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x1}) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='\x00!', 0x2}], 0x1, 0x73a, 0x1) 5.072061558s ago: executing program 2 (id=6889): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3e, 0x64, 0x83, 0x8, 0x5ac, 0x219, 0x9ebc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9a, 0x0, 0x1, 0x3, 0xa4, 0x2, 0x0, [], [{{0x9, 0x5, 0x3, 0x3}}]}}]}}]}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) ppoll(&(0x7f0000000340)=[{r1, 0x4038}], 0x1, 0x0, 0x0, 0x0) 3.467855949s ago: executing program 2 (id=6899): r0 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34d}, &(0x7f00000012c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x12b, 0x0, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x12}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.215446392s ago: executing program 2 (id=6902): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 2.635846347s ago: executing program 2 (id=6904): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.951821133s ago: executing program 5 (id=6911): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000002100)=""/104, 0x68}], 0x1}, 0x3}], 0x1, 0x0, 0x0) 1.841950008s ago: executing program 3 (id=6912): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000082"], 0x34}}, 0x0) r0 = syz_io_uring_setup(0xc58, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x40000002, 0x1af}, &(0x7f00000004c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.727738152s ago: executing program 3 (id=6913): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) 1.518703685s ago: executing program 3 (id=6915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd26, 0x8000007, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x3, 0x2}}}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}, '\"'}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 1.311888373s ago: executing program 1 (id=6917): sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0xc, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x4008000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000008000080"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000008000080"]) 1.306205551s ago: executing program 3 (id=6918): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) io_setup(0x9, &(0x7f00000000c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x20001, 0x2e) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x2000000, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000100)='9', 0x20000101}]) 1.276273733s ago: executing program 0 (id=6919): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000047, r2, 0x0) r3 = dup(r1) write$binfmt_elf64(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000000001000500380001000200b10600040300000081000000ff00000000000000f50f00000000000005000000000000000500000000000000"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.190622673s ago: executing program 0 (id=6920): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x8}], 0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 1.137859819s ago: executing program 1 (id=6921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0xc8f}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.137413112s ago: executing program 3 (id=6922): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2a020480) umount2(&(0x7f0000000140)='./file0\x00', 0x8) 1.047068593s ago: executing program 0 (id=6923): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000006040)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfe42, @loopback, 0xf5ef}, 0x1c, 0x0}}], 0x1, 0x1) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0) 1.032763954s ago: executing program 5 (id=6924): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x9, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffaf4025", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000e00)=0x4) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 964.144059ms ago: executing program 1 (id=6925): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008100)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002080)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x5, 0x0, {0xfffffffffffffffc, 0x8e, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x7, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chroot(&(0x7f0000000100)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 842.265243ms ago: executing program 0 (id=6926): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x42, 0xfffffffa}, 0x10) sendmsg$tipc(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x845}, 0x10) 791.539219ms ago: executing program 5 (id=6927): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 715.698035ms ago: executing program 1 (id=6928): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x9, 0x1], 0x8000000, 0x141200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000070c200003000004000"]) 659.041804ms ago: executing program 0 (id=6929): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000280), 0x0, 0x18) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) 648.561583ms ago: executing program 5 (id=6930): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffd, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x67f, 0x64, 0x0, 0x0) 439.091796ms ago: executing program 1 (id=6931): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2e8}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) 367.803297ms ago: executing program 0 (id=6932): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$vsock_stream(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000001000010405d600000200000000000000", @ANYRES32=0x0, @ANYBLOB="211a0000000000006c00128008000100687372006000028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r2], 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 307.135881ms ago: executing program 2 (id=6933): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) close_range(r1, 0xffffffffffffffff, 0x0) 256.982135ms ago: executing program 1 (id=6934): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) socket$kcm(0x2, 0x4, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 196.727669ms ago: executing program 5 (id=6935): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x1, 0x20, r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) 165.830081ms ago: executing program 3 (id=6936): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x9132, 0xffffffffffffffff, 0x9aa9b000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0xffffffb2) 0s ago: executing program 5 (id=6937): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @local}, {0x306, @remote}, 0x40, {0x2, 0x4e22, @local}, 'lo\x00'}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}], 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000300)={r2, 0x3}, 0x8) kernel console output (not intermixed with test programs): lNumber: syz [ 540.888225][ T43] usb 2-1: config 0 descriptor?? [ 540.901436][ T43] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 540.914594][T18641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.936013][T18641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 540.946165][T18641] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 540.956084][T18641] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.976088][T18641] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 540.985289][T18641] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 541.003994][T18641] usb 4-1: Manufacturer: syz [ 541.030872][T18641] usb 4-1: config 0 descriptor?? [ 541.308703][T18657] usb 6-1: USB disconnect, device number 27 [ 541.377991][T18641] rc_core: IR keymap rc-hauppauge not found [ 541.384060][T18641] Registered IR keymap rc-empty [ 541.389951][T18641] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.426868][T18641] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.465982][T18641] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 541.503764][T18641] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input115 [ 541.537210][T18641] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.577100][T18641] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.596751][T18641] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.616868][T18641] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.636679][T18641] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.656753][T18641] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.690356][T18641] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.722583][T19692] input: syz0 as /devices/virtual/input/input116 [ 541.729431][T18641] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.767632][T18641] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.806648][T18641] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.840442][T18641] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 541.856501][T18641] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 541.909649][T18641] usb 4-1: USB disconnect, device number 76 [ 542.013015][T19696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.130705][ T43] gspca_sunplus: reg_w_riv err -71 [ 542.142325][ T43] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 542.182512][ T43] usb 2-1: USB disconnect, device number 86 [ 542.316633][ T5880] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 542.478966][ T5880] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 542.490563][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.502201][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.512453][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 542.527598][ T5880] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 542.536913][ T5880] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 542.545005][ T5880] usb 3-1: Manufacturer: syz [ 542.554466][ T5880] usb 3-1: config 0 descriptor?? [ 542.646603][T18653] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 542.756102][T19722] loop4: detected capacity change from 0 to 7 [ 542.771983][T19722] Dev loop4: unable to read RDB block 7 [ 542.779307][T19722] loop4: unable to read partition table [ 542.785274][T19722] loop4: partition table beyond EOD, truncated [ 542.799066][T18653] usb 4-1: Using ep0 maxpacket: 32 [ 542.802518][T19722] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 542.810574][T18653] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 542.830390][T18653] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 542.842958][T18653] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.854922][T18653] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 542.874091][T18653] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 542.884533][T18653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.903892][T18653] usb 4-1: Product: syz [ 542.926837][T18653] usb 4-1: Manufacturer: syz [ 542.944464][T18653] usb 4-1: SerialNumber: syz [ 542.970462][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 542.980512][T18653] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input117 [ 543.014844][ T5880] appleir 0003:05AC:8243.0055: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 543.085916][T19730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5821'. [ 543.181692][T19733] geneve4: entered promiscuous mode [ 543.187166][T18653] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 543.195592][T18653] (id 0x00) [ 543.236746][ T1317] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 36569 - 0 [ 543.254201][ T1317] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 36569 - 0 [ 543.293046][ T1317] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 36569 - 0 [ 543.309793][ T1317] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 36569 - 0 [ 543.329563][T18653] rc_core: IR keymap rc-imon-pad not found [ 543.358896][T18653] Registered IR keymap rc-empty [ 543.363945][T18653] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 543.405503][T18653] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 543.449656][T18653] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 543.570482][T18653] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input118 [ 543.643538][T18653] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:77> initialized [ 543.722545][T18653] usb 4-1: USB disconnect, device number 77 [ 544.586685][T18657] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 544.736603][T18657] usb 6-1: Using ep0 maxpacket: 16 [ 544.743631][T18657] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 544.753011][T18657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.766929][T18657] usb 6-1: config 0 descriptor?? [ 544.777585][T18657] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 544.917839][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5841'. [ 544.927508][T19785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5841'. [ 545.039736][T19790] netlink: 'syz.2.5842': attribute type 25 has an invalid length. [ 545.050453][T19790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5842'. [ 545.100843][T18641] usb 3-1: USB disconnect, device number 75 [ 545.119155][T19790] netlink: 'syz.2.5842': attribute type 25 has an invalid length. [ 545.129550][T19790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5842'. [ 545.651790][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 545.651811][ T30] audit: type=1804 audit(1763519247.996:386): pid=19803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5849" name="/newroot/1021/file1" dev="tmpfs" ino=5184 res=1 errno=0 [ 545.928357][T19816] ALSA: seq fatal error: cannot create timer (-16) [ 545.966459][T18653] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 546.013145][T18657] gspca_sonixj: reg_w1 err -71 [ 546.037349][T18657] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 546.050635][T18657] usb 6-1: USB disconnect, device number 28 [ 546.120222][T18653] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.147758][T18653] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.157640][T18653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.165794][T18653] usb 4-1: Product: syz [ 546.173775][T18653] usb 4-1: Manufacturer: syz [ 546.179766][T18653] usb 4-1: SerialNumber: syz [ 546.233795][T19829] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 547.213512][T18653] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 547.240574][T18653] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 547.267974][T18653] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 547.452519][T18653] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 547.520653][T18653] usb 4-1: USB disconnect, device number 78 [ 547.542520][T18653] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 547.626683][T18641] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 547.731389][T19860] kvm: kvm [19859]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 547.740674][T19860] kvm: kvm [19859]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 547.779945][T18641] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.792390][T18641] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.802440][T18641] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 547.815839][T18641] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 547.825304][T18641] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.839646][T18641] usb 6-1: config 0 descriptor?? [ 548.278951][T18641] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 548.487077][T19875] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 548.504368][T19875] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 549.126681][T18641] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 549.284973][T18641] usb 3-1: Using ep0 maxpacket: 32 [ 549.295969][T18641] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 549.312346][T18641] usb 3-1: config 0 has no interface number 0 [ 549.327707][T18641] usb 3-1: config 0 interface 12 has no altsetting 0 [ 549.339405][T18641] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 549.348808][T18641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.360642][T18641] usb 3-1: Product: syz [ 549.373574][T18641] usb 3-1: Manufacturer: syz [ 549.381021][T18641] usb 3-1: SerialNumber: syz [ 549.405008][T18641] usb 3-1: config 0 descriptor?? [ 549.597211][ C1] plantronics 0003:047F:FFFF.0056: usb_submit_urb(ctrl) failed: -1 [ 550.388520][ T43] usb 6-1: USB disconnect, device number 29 [ 550.462690][ T30] audit: type=1326 audit(1763519252.806:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.3.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958f6c9 code=0x7fc00000 [ 550.645955][T18641] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71 [ 550.654537][T18641] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 550.662815][T18641] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 550.670723][T18641] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 550.685540][T18641] usb 3-1: USB disconnect, device number 76 [ 550.876670][ T43] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 551.028332][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.038743][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.049205][ T43] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 551.058570][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 551.067460][ T43] usb 6-1: SerialNumber: syz [ 551.147514][ T30] audit: type=1326 audit(1763519253.496:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.3.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958f6c9 code=0x7fc00000 [ 551.176631][ T30] audit: type=1326 audit(1763519253.496:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19932 comm="syz.3.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe51958f6c9 code=0x7fc00000 [ 551.293402][ T43] usb 6-1: 0:2 : does not exist [ 551.341291][ T43] usb 6-1: USB disconnect, device number 30 [ 551.396108][T19953] loop9: detected capacity change from 0 to 7 [ 551.400965][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.411633][T19953] Dev loop9: unable to read RDB block 7 [ 551.426007][T19953] loop9: AHDI p3 p4 [ 551.432163][T19953] loop9: partition table partially beyond EOD, truncated [ 551.442012][T19953] loop9: p3 size 4227858431 extends beyond EOD, truncated [ 551.489751][ T6013] udevd[6013]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 551.528530][T18653] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 551.708986][T18653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.720119][T18653] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.729943][T18653] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 551.739127][T18653] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.750233][T18653] usb 3-1: config 0 descriptor?? [ 552.181981][T18653] hid_parser_main: 23 callbacks suppressed [ 552.182005][T18653] cm6533_jd 0003:0D8C:0022.0057: unknown main item tag 0x0 [ 552.208158][T18653] cm6533_jd 0003:0D8C:0022.0057: unknown main item tag 0x0 [ 552.222680][T18653] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0057/input/input119 [ 552.262044][T18653] cm6533_jd 0003:0D8C:0022.0057: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 552.408253][T18641] usb 3-1: USB disconnect, device number 77 [ 552.437744][ T43] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 552.616698][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 552.623659][ T43] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 552.632148][ T43] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 552.642995][ T43] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 552.652540][ T43] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 552.660909][ T43] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 552.669841][ T43] usb 2-1: config 0 has no interface number 0 [ 552.675968][ T43] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 552.687093][ T43] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 552.697052][ T43] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 552.707128][ T43] usb 2-1: config 0 interface 125 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 552.724682][ T43] usb 2-1: config 0 interface 125 has no altsetting 0 [ 552.731994][ T43] usb 2-1: config 0 interface 125 has no altsetting 1 [ 552.742264][ T43] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 552.752197][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.761377][ T43] usb 2-1: Product: syz [ 552.765570][ T43] usb 2-1: Manufacturer: syz [ 552.770328][ T43] usb 2-1: SerialNumber: syz [ 552.787585][ T43] usb 2-1: config 0 descriptor?? [ 552.822357][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5927'. [ 553.259549][T18641] usb 2-1: USB disconnect, device number 87 [ 553.291046][ T43] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 553.458855][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.476684][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.516573][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 553.553952][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 553.570209][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.599346][ T43] usb 4-1: config 0 descriptor?? [ 553.879623][T20017] netlink: 'syz.2.5942': attribute type 14 has an invalid length. [ 553.891399][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5942'. [ 553.912591][T20017] netlink: 'syz.2.5942': attribute type 14 has an invalid length. [ 553.936868][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5942'. [ 554.056831][ T43] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 555.267919][T18657] usb 4-1: USB disconnect, device number 79 [ 555.536633][ T43] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 555.696547][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 555.703866][ T43] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 555.713412][ T43] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 555.725034][ T43] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 555.737905][ T43] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 555.751351][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 555.761869][ T43] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 555.785533][ T43] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 555.802980][ T43] usb 6-1: Product: syz [ 555.809233][ T43] usb 6-1: Manufacturer: syz [ 555.815427][ T43] usb 6-1: SerialNumber: syz [ 555.831577][ T43] usb 6-1: config 0 descriptor?? [ 555.849872][ T43] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 555.874948][ T43] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 555.886519][T18641] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 556.038800][T18641] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 556.060674][T18641] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 556.075738][T18641] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 556.088713][T18641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.090914][T18657] usb 6-1: USB disconnect, device number 31 [ 556.097138][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 556.136490][T18657] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 556.363184][T18641] usb 3-1: usb_control_msg returned -32 [ 556.376902][T18641] usbtmc 3-1:16.0: can't read capabilities [ 556.806524][T18641] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 556.937874][ T43] usb 3-1: USB disconnect, device number 78 [ 556.963983][T18641] usb 2-1: config 0 has no interfaces? [ 556.975514][T18641] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 556.995857][T18641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.020844][T18641] usb 2-1: config 0 descriptor?? [ 557.253547][T18657] usb 2-1: USB disconnect, device number 88 [ 557.382087][T18641] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 557.562782][T18641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.602353][T20092] bridge_slave_0: left allmulticast mode [ 557.609346][T20092] bridge_slave_0: left promiscuous mode [ 557.614253][T18641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.615146][T20092] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.635123][T18641] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 557.656545][T18641] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.665780][T20094] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 557.688248][T18641] usb 4-1: config 0 descriptor?? [ 557.694019][T20092] bond0: (slave bond_slave_0): Releasing backup interface [ 557.719335][T20092] bond0: (slave bond_slave_1): Releasing backup interface [ 557.764639][T20092] team0: Port device team_slave_0 removed [ 557.773559][T20092] team0: Port device team_slave_1 removed [ 557.780418][T20092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.798606][T20092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 558.095360][T20106] netlink: 'syz.1.5977': attribute type 29 has an invalid length. [ 558.110136][T20107] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5978'. [ 558.120723][T20106] netlink: 'syz.1.5977': attribute type 29 has an invalid length. [ 558.140138][T18641] cm6533_jd 0003:0D8C:0022.0059: unknown main item tag 0x0 [ 558.143701][T20106] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5977'. [ 558.160747][T18641] cm6533_jd 0003:0D8C:0022.0059: unknown main item tag 0x0 [ 558.190329][T18641] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0059/input/input120 [ 558.268803][T18641] cm6533_jd 0003:0D8C:0022.0059: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 558.347682][T18641] usb 4-1: USB disconnect, device number 80 [ 558.450985][T20117] netlink: 'syz.1.5981': attribute type 10 has an invalid length. [ 558.474010][T20112] fido_id[20112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 558.507866][T20117] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 558.717364][T20128] input: syz1 as /devices/virtual/input/input121 [ 558.988710][T20134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 559.346683][T18653] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 559.536513][T18653] usb 6-1: Using ep0 maxpacket: 8 [ 559.547380][T18653] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 559.570418][T18653] usb 6-1: config 179 has no interface number 0 [ 559.720866][T18657] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 559.769860][T18653] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 559.798911][T18653] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 559.818503][T18653] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 559.841997][T18653] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 559.878745][T18653] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 559.906743][T18653] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 559.925841][T18653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.941786][T18657] usb 3-1: config 0 has no interfaces? [ 559.950001][T18657] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 559.963852][T18657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.980709][T20172] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 559.980731][T20140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 559.990391][T18657] usb 3-1: Product: syz [ 560.050045][T18657] usb 3-1: Manufacturer: syz [ 560.063811][T18657] usb 3-1: SerialNumber: syz [ 560.102721][T18657] usb 3-1: config 0 descriptor?? [ 560.211897][T18656] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input122 [ 560.418555][T18641] usb 3-1: USB disconnect, device number 79 [ 560.438650][T18639] usb 6-1: USB disconnect, device number 32 [ 560.438727][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 560.453275][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 560.676623][ T5880] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 560.848501][ T5880] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 560.866576][ T5880] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 560.900436][ T5880] usb 2-1: config 0 interface 0 has no altsetting 0 [ 560.916769][ T5880] usb 2-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 560.925917][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.973872][ T5880] usb 2-1: config 0 descriptor?? [ 560.997235][T20179] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 561.238356][T20179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.258473][T20179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.317656][ T5880] usbhid 2-1:0.0: can't add hid device: -71 [ 561.324942][ T5880] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 561.345449][T20199] bridge_slave_0: left allmulticast mode [ 561.349171][ T5880] usb 2-1: USB disconnect, device number 89 [ 561.361475][T20199] bridge_slave_0: left promiscuous mode [ 561.376837][T20199] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.413464][T20199] bridge_slave_1: left allmulticast mode [ 561.421239][T18656] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 561.438144][T20199] bridge_slave_1: left promiscuous mode [ 561.444659][T20199] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.476101][T20199] bond0: (slave bond_slave_0): Releasing backup interface [ 561.486362][T20199] bond0: (slave bond_slave_1): Releasing backup interface [ 561.522598][T20199] team0: Port device team_slave_0 removed [ 561.531579][T20199] team0: Port device team_slave_1 removed [ 561.538661][T20199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.547424][T20199] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 561.600188][T18656] usb 4-1: config 4 has an invalid interface number: 28 but max is 0 [ 561.610026][T18656] usb 4-1: config 4 has no interface number 0 [ 561.628807][T18656] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 561.638801][T18656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.656620][T18656] usb 4-1: Product: syz [ 561.665296][T18656] usb 4-1: Manufacturer: syz [ 561.677724][T18656] usb 4-1: SerialNumber: syz [ 561.703794][T18656] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.28/input/input123 [ 561.836912][ T5880] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 561.912732][ T5182] bcm5974 4-1:4.28: could not read from device [ 561.929418][T18656] bcm5974 4-1:4.28: could not read from device [ 561.939314][ T5182] bcm5974 4-1:4.28: could not read from device [ 561.961429][T18656] input: failed to attach handler mousedev to device input123, error: -5 [ 561.986629][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 561.990905][ T5182] bcm5974 4-1:4.28: could not read from device [ 561.995940][ T5880] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 562.004250][T18656] usb 4-1: USB disconnect, device number 81 [ 562.039978][ T5880] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.050511][ T5182] bcm5974 4-1:4.28: could not read from device [ 562.068503][ T5880] usb 2-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 562.106357][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.131065][ T5880] usb 2-1: config 0 descriptor?? [ 562.146080][ T5823] udevd[5823]: Error opening device "/dev/input/event4": No such file or directory [ 562.147824][ T5880] hub 2-1:0.0: USB hub found [ 562.174311][ T5823] udevd[5823]: Unable to EVIOCGABS device "/dev/input/event4" [ 562.202080][ T5823] udevd[5823]: Unable to EVIOCGABS device "/dev/input/event4" [ 562.210560][ T5823] udevd[5823]: Unable to EVIOCGABS device "/dev/input/event4" [ 562.218861][ T5823] udevd[5823]: Unable to EVIOCGABS device "/dev/input/event4" [ 562.354930][ T5880] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 562.501541][T20228] loop5: detected capacity change from 0 to 7 [ 562.567133][ T5880] usbhid 2-1:0.0: can't add hid device: -71 [ 562.579390][ T5880] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 562.666033][ T5880] usb 2-1: USB disconnect, device number 90 [ 562.960206][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.966848][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.993782][ T30] audit: type=1326 audit(1763519265.336:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20242 comm="syz.2.6034" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf4138f6c9 code=0x0 [ 563.015508][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.149387][T20251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 563.306751][T18657] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 563.489342][T18657] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.499721][T18657] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 563.511287][T18657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.524865][T18657] usb 6-1: config 0 descriptor?? [ 563.538776][T18657] pwc: Askey VC010 type 2 USB webcam detected. [ 563.949943][T18657] pwc: recv_control_msg error -32 req 02 val 2b00 [ 563.967926][T18657] pwc: recv_control_msg error -32 req 02 val 2700 [ 563.978584][T18657] pwc: recv_control_msg error -32 req 02 val 2c00 [ 564.194617][T18657] pwc: recv_control_msg error -71 req 04 val 1300 [ 564.212204][T18657] pwc: recv_control_msg error -71 req 04 val 1400 [ 564.229948][T18657] pwc: recv_control_msg error -71 req 02 val 2000 [ 564.248881][T18657] pwc: recv_control_msg error -71 req 02 val 2100 [ 564.266959][T18657] pwc: recv_control_msg error -71 req 04 val 1500 [ 564.346573][T18657] pwc: recv_control_msg error -71 req 02 val 2500 [ 564.366538][T18657] pwc: recv_control_msg error -71 req 02 val 2400 [ 564.373424][T18657] pwc: recv_control_msg error -71 req 02 val 2600 [ 564.386857][T18657] pwc: recv_control_msg error -71 req 02 val 2900 [ 564.401378][T18657] pwc: recv_control_msg error -71 req 02 val 2800 [ 564.414951][T18657] pwc: recv_control_msg error -71 req 04 val 1100 [ 564.449075][T18657] pwc: recv_control_msg error -71 req 04 val 1200 [ 564.459550][T18657] pwc: Registered as video103. [ 564.479041][T18657] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input124 [ 564.510917][T18657] usb 6-1: USB disconnect, device number 33 [ 564.616307][T20278] input: syz0 as /devices/virtual/input/input125 [ 565.157205][T18657] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 565.310137][ T30] audit: type=1326 audit(1763519267.656:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20303 comm="syz.5.6059" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faaab18f6c9 code=0x0 [ 565.331902][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.349672][T18657] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 565.388738][T18657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.414857][T18657] usb 4-1: Product: syz [ 565.420281][T18657] usb 4-1: Manufacturer: syz [ 565.424987][T18657] usb 4-1: SerialNumber: syz [ 565.432811][T18657] usb 4-1: config 0 descriptor?? [ 566.382325][T20321] input: syz0 as /devices/virtual/input/input126 [ 566.655830][T18657] usb 4-1: f81604_read: reg: 100e failed: -EPROTO [ 566.685150][T18657] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 566.700547][T18657] usb 4-1: USB disconnect, device number 82 [ 566.723532][T18657] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 566.774366][ T5492] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 566.809141][T18657] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 567.466857][ T5880] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 567.494003][ T30] audit: type=1326 audit(1763519269.816:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 567.574947][ T30] audit: type=1326 audit(1763519269.816:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 567.639218][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 567.649685][ T30] audit: type=1326 audit(1763519269.816:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 567.688984][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.707008][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.708594][T20374] loop4: detected capacity change from 0 to 2560 [ 567.733470][ T30] audit: type=1326 audit(1763519269.816:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 567.743077][ T5880] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 567.766234][ T6013] buffer_io_error: 25 callbacks suppressed [ 567.766253][ T6013] Buffer I/O error on dev loop4, logical block 0, async page read [ 567.797779][ T30] audit: type=1326 audit(1763519269.816:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 567.809308][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.828601][T20374] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 567.849300][T20379] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 567.878799][T20374] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 567.899559][ T5880] usb 2-1: config 0 descriptor?? [ 567.901220][ T30] audit: type=1326 audit(1763519269.816:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 567.939045][T20374] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 567.954165][T20374] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 567.964337][T20374] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 567.973966][ T30] audit: type=1326 audit(1763519269.816:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 568.006860][T20374] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 568.032354][T20374] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 568.041194][T20374] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 568.061982][ T30] audit: type=1326 audit(1763519269.816:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 568.141131][ T30] audit: type=1326 audit(1763519269.816:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 568.172850][ T30] audit: type=1326 audit(1763519269.816:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 568.195221][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.259032][ T30] audit: type=1326 audit(1763519269.816:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 568.333700][ T30] audit: type=1326 audit(1763519269.816:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 568.359062][ T30] audit: type=1326 audit(1763519269.816:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 568.409954][ T30] audit: type=1326 audit(1763519269.816:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 568.465469][ T5880] savu 0003:1E7D:2D5A.005A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 568.519239][ T30] audit: type=1326 audit(1763519269.816:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fe51958f6c9 code=0x7ffc0000 [ 568.541789][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.626700][T18641] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 568.637579][ T30] audit: type=1326 audit(1763519269.816:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe519586567 code=0x7ffc0000 [ 568.659837][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.716769][ T30] audit: type=1326 audit(1763519269.816:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20368 comm="syz.3.6081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe51952b789 code=0x7ffc0000 [ 568.746747][ T5880] usb 2-1: USB disconnect, device number 91 [ 568.805007][T20403] fido_id[20403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 568.849950][T18641] usb 3-1: Using ep0 maxpacket: 16 [ 568.857774][T18641] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 568.866238][T18641] usb 3-1: config 4 has no interface number 0 [ 568.881974][T18641] usb 3-1: config 4 interface 51 has no altsetting 0 [ 568.917875][T18641] usb 3-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b [ 568.938887][T18641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.968736][T18641] usb 3-1: Product: syz [ 568.985348][T18641] usb 3-1: Manufacturer: syz [ 568.996543][T18641] usb 3-1: SerialNumber: syz [ 569.048143][T18641] upd78f0730 3-1:4.51: upd78f0730 converter detected [ 569.102029][T18641] usb 3-1: upd78f0730 converter now attached to ttyUSB0 [ 569.337063][T18641] usb 3-1: USB disconnect, device number 80 [ 569.381247][T18641] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 569.411163][T18641] upd78f0730 3-1:4.51: device disconnected [ 570.996541][T18657] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 571.170977][T18657] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.191386][T18657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.258529][T18657] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 571.268470][T18657] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 571.282057][T18657] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 571.292169][T18657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.304562][T18657] usb 6-1: config 0 descriptor?? [ 571.737397][T18657] plantronics 0003:047F:FFFF.005B: ignoring exceeding usage max [ 571.777276][T18656] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 571.790292][T18657] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 571.987025][T18656] usb 3-1: Using ep0 maxpacket: 8 [ 571.997318][T18656] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.010461][T18656] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 572.032382][T18656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.061016][T18656] usb 3-1: config 0 descriptor?? [ 572.091629][T18656] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 572.797570][T20516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.301232][T18656] gspca_vc032x: reg_w err -71 [ 573.317049][T18656] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 573.338499][T18656] usb 3-1: USB disconnect, device number 81 [ 573.778549][T18641] usb 6-1: USB disconnect, device number 34 [ 574.185216][T20572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6159'. [ 575.978812][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6178'. [ 576.021055][T20611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6178'. [ 576.439921][T18641] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 576.534827][T20636] loop4: detected capacity change from 0 to 2560 [ 576.551062][ T6013] buffer_io_error: 312 callbacks suppressed [ 576.551080][ T6013] Buffer I/O error on dev loop4, logical block 0, async page read [ 576.557206][T18655] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 576.579931][T20636] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 576.597077][T18641] usb 3-1: Using ep0 maxpacket: 8 [ 576.599581][T20636] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 576.610197][T18641] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 576.636735][T18641] usb 3-1: config 0 has no interface number 0 [ 576.637173][T20637] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 576.642866][T18641] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 576.642895][T18641] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 576.675042][T20636] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 576.694717][T18641] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 576.698712][T20636] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 576.713087][T18641] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 576.729122][T18641] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 576.741309][T18641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.746597][T18655] usb 4-1: Using ep0 maxpacket: 16 [ 576.750816][T20637] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 576.765557][T20636] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 576.768431][T18655] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.774589][T20636] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 576.806909][T18641] usb 3-1: config 0 descriptor?? [ 576.807978][T18655] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 576.820756][T18641] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 576.848173][T18655] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 576.857645][T20636] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 576.870002][T18655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.881238][T18655] usb 4-1: config 0 descriptor?? [ 576.926532][T18653] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 577.078611][T18653] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.106855][T18653] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 577.116061][T18653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.153939][T18653] usb 6-1: config 0 descriptor?? [ 577.224134][T20653] netlink: 'syz.1.6197': attribute type 22 has an invalid length. [ 577.235441][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6197'. [ 577.260011][T20653] netlink: 'syz.1.6197': attribute type 22 has an invalid length. [ 577.260059][ T65] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.269009][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6197'. [ 577.280938][ T65] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.298861][ T65] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.308777][ T65] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.395227][T18653] usbhid 6-1:0.0: can't add hid device: -71 [ 577.409158][T18653] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 577.430720][T18653] usb 6-1: USB disconnect, device number 35 [ 577.665707][T18655] usbhid 4-1:0.0: can't add hid device: -71 [ 577.678071][T18655] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 577.706935][T18655] usb 4-1: USB disconnect, device number 83 [ 577.916597][T18653] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 578.076704][T18653] usb 6-1: Using ep0 maxpacket: 32 [ 578.087955][T18653] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.105462][T18653] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 578.114710][T18653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.128488][T18653] usb 6-1: config 0 descriptor?? [ 578.139361][T18653] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 578.151423][T18653] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 578.554680][T20686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.821989][T18656] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 578.836515][T18656] hid-generic 0000:0000:0000.005C: unknown main item tag 0x2 [ 578.843961][T18656] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 578.852051][T18656] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 578.859949][T18656] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 578.867764][T18656] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 578.875178][T18656] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 578.887233][T18656] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 578.907212][T18656] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 578.918677][T18656] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 578.931020][T18656] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 579.040496][T20698] fido_id[20698]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 579.122532][T18656] usb 6-1: USB disconnect, device number 36 [ 579.125670][T18641] usb 3-1: USB disconnect, device number 82 [ 579.134512][T18656] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 579.148254][T18641] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 579.434648][ T5832] Bluetooth: hci1: unexpected event for opcode 0x2035 [ 580.148533][T18656] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 580.306644][T18656] usb 4-1: Using ep0 maxpacket: 16 [ 580.313613][T18656] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 580.324136][T18656] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 580.334381][T18656] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.347676][T18656] usb 4-1: config 1 interface 0 has no altsetting 0 [ 580.355984][T18656] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 580.365174][T18656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.373232][T18656] usb 4-1: Product: syz [ 580.377540][T18656] usb 4-1: Manufacturer: syz [ 580.382144][T18656] usb 4-1: SerialNumber: syz [ 580.604329][T18656] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 580.818916][T18656] usb 4-1: USB disconnect, device number 84 [ 580.837099][T18656] usblp0: removed [ 581.126601][T18639] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 581.286541][T18639] usb 6-1: Using ep0 maxpacket: 32 [ 581.293330][T18639] usb 6-1: config 0 has an invalid interface number: 247 but max is 0 [ 581.301869][T18639] usb 6-1: config 0 has no interface number 0 [ 581.310175][T18639] usb 6-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=77.d6 [ 581.319448][T18639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.327522][T18639] usb 6-1: Product: syz [ 581.331811][T18639] usb 6-1: Manufacturer: syz [ 581.336732][T18639] usb 6-1: SerialNumber: syz [ 581.355499][T18639] usb 6-1: config 0 descriptor?? [ 582.552731][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6257'. [ 582.565966][T20799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6257'. [ 582.577088][T20799] netlink: 'syz.1.6257': attribute type 6 has an invalid length. [ 582.658346][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6257'. [ 582.671021][T20799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6257'. [ 582.681965][T20799] netlink: 'syz.1.6257': attribute type 6 has an invalid length. [ 583.440521][ T5832] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 583.449445][ T5832] Bluetooth: hci1: Injecting HCI hardware error event [ 583.458736][ T5832] Bluetooth: hci1: hardware error 0x00 [ 583.794079][T18656] usb 6-1: USB disconnect, device number 37 [ 584.021708][T20825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6268'. [ 584.049639][T20825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6268'. [ 584.655995][T20839] fuse: Bad value for 'fd' [ 585.436582][T20811] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 585.446543][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 585.516968][ T5832] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 586.158546][T20811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 586.164823][T20811] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 586.171644][T20811] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 586.180450][T20811] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 586.186626][T20811] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 586.446698][T18641] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 586.506690][T20862] netlink: 'syz.3.6285': attribute type 29 has an invalid length. [ 586.522434][T20862] netlink: 'syz.3.6285': attribute type 29 has an invalid length. [ 586.533342][T20862] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6285'. [ 586.639126][T18641] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.671621][T20869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 586.677453][T18641] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 586.796557][T18641] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.819545][T18641] usb 6-1: config 0 descriptor?? [ 587.016561][T18656] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 587.029018][T18641] usbhid 6-1:0.0: can't add hid device: -71 [ 587.041756][T18641] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 587.066932][T18641] usb 6-1: USB disconnect, device number 38 [ 587.196636][T18656] usb 2-1: Using ep0 maxpacket: 32 [ 587.206172][T18656] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 587.220474][T18656] usb 2-1: config 0 has no interface number 0 [ 587.233111][T18656] usb 2-1: config 0 interface 12 has no altsetting 0 [ 587.257770][T18656] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 587.277199][T18656] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.296585][T18656] usb 2-1: Product: syz [ 587.301046][T18656] usb 2-1: Manufacturer: syz [ 587.316243][T18656] usb 2-1: SerialNumber: syz [ 587.329052][T18656] usb 2-1: config 0 descriptor?? [ 587.521181][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 587.802502][T20887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.236714][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 588.244581][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 588.614954][T18656] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 588.629319][T18656] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 588.651389][T18656] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 588.672970][T18656] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 588.735003][T18656] usb 2-1: USB disconnect, device number 92 [ 589.385844][T20924] binder: 20923:20924 ioctl c0306201 200000000040 returned -22 [ 589.567255][T18641] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 589.746758][T18641] usb 2-1: Using ep0 maxpacket: 16 [ 589.762495][T18641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.801886][T18641] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.839406][T18641] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 589.884627][T18641] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 589.924307][T18641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.961982][T18641] usb 2-1: config 0 descriptor?? [ 590.316809][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 590.322893][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 590.407801][T18641] hid_parser_main: 24 callbacks suppressed [ 590.407827][T18641] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 590.426939][T18641] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 590.435910][T18641] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 590.443342][T18641] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 590.462454][T18641] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 590.470099][T18641] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 590.478465][T18641] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 590.485714][T18641] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 590.493623][T18641] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 590.501194][T18641] microsoft 0003:045E:07DA.005D: unknown main item tag 0x0 [ 590.542390][T18641] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.005D/input/input127 [ 590.718571][T18641] microsoft 0003:045E:07DA.005D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 590.775498][T18641] usb 2-1: USB disconnect, device number 93 [ 590.942880][T20952] fido_id[20952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 591.744422][T20977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 591.886544][ T5880] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 592.053375][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 592.065348][ T5880] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 592.085315][ T5880] usb 2-1: config 0 has no interface number 0 [ 592.119894][ T5880] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 592.129861][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.146911][ T5880] usb 2-1: Product: syz [ 592.177268][ T5880] usb 2-1: Manufacturer: syz [ 592.187013][ T5880] usb 2-1: SerialNumber: syz [ 592.209044][ T5880] usb 2-1: config 0 descriptor?? [ 592.227384][ T5880] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 592.462854][ T5880] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 592.501892][ T5880] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 592.671694][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 593.280048][T21010] netlink: 'syz.2.6344': attribute type 4 has an invalid length. [ 593.318302][T21010] netlink: 'syz.2.6344': attribute type 4 has an invalid length. [ 593.419313][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 593.427867][T18641] usb 2-1: USB disconnect, device number 94 [ 593.438689][T18641] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 593.463397][T18641] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 593.503156][T21016] misc userio: Can't change port type on an already running userio instance [ 593.512709][T18641] quatech2 2-1:0.51: device disconnected [ 593.887597][T18641] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 594.053180][T21031] ip6gre1: entered allmulticast mode [ 594.071277][T18641] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 594.098403][T18641] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 594.115152][T18641] usb 2-1: config 0 interface 0 has no altsetting 0 [ 594.144811][T18641] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 594.155762][T18641] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 594.165246][T18641] usb 2-1: Product: syz [ 594.174324][T18641] usb 2-1: Manufacturer: syz [ 594.179608][T18641] usb 2-1: SerialNumber: syz [ 594.236919][T18641] usb 2-1: config 0 descriptor?? [ 594.251876][T18641] hub 2-1:0.0: bad descriptor, ignoring hub [ 594.263673][T18641] hub 2-1:0.0: probe with driver hub failed with error -5 [ 594.286226][T18641] usb 2-1: selecting invalid altsetting 0 [ 594.698243][T21018] usb 2-1: reset high-speed USB device number 95 using dummy_hcd [ 594.870190][T21018] usb 2-1: device firmware changed [ 594.879803][T18656] usb 2-1: USB disconnect, device number 95 [ 595.056722][T18656] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 595.231509][T18656] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 595.239871][T18656] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 595.253655][T18656] usb 2-1: config 0 interface 0 has no altsetting 0 [ 595.273088][T18656] usb 2-1: string descriptor 0 read error: -22 [ 595.280641][T18656] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 595.290396][T18656] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 595.310632][T18656] usb 2-1: config 0 descriptor?? [ 595.326597][T18656] hub 2-1:0.0: bad descriptor, ignoring hub [ 595.349179][T21062] vlan2: entered promiscuous mode [ 595.350020][T18656] hub 2-1:0.0: probe with driver hub failed with error -5 [ 595.354446][T21062] gretap0: entered promiscuous mode [ 595.365401][T18656] usb 2-1: selecting invalid altsetting 0 [ 595.386863][T18657] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 595.588201][T18657] usb 4-1: Using ep0 maxpacket: 8 [ 595.602924][T18657] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 595.628183][T18657] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 595.638623][T18641] usb 2-1: USB disconnect, device number 96 [ 595.644189][T18657] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 595.657361][T18657] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.673559][T18657] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 595.682979][T18657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.927523][T18657] usb 4-1: usb_control_msg returned -32 [ 595.934708][T18657] usbtmc 4-1:16.0: can't read capabilities [ 596.245541][T21091] tipc: Started in network mode [ 596.254432][T21091] tipc: Node identity ac1414aa, cluster identity 4711 [ 596.265218][T21091] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 596.285201][T21091] tipc: Enabled bearer , priority 10 [ 596.298881][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 596.396682][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 596.536579][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 596.676503][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 596.816493][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 596.956656][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 597.096544][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 597.236476][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 597.376589][T18657] tipc: Node number set to 2886997162 [ 597.516597][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 597.531134][T21136] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 597.626544][T18657] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 597.742740][T21143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6402'. [ 597.779070][T18657] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 597.788298][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 597.797293][T18657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.809416][T18657] usb 6-1: config 0 descriptor?? [ 597.831950][T18657] gspca_main: spca508-2.14.0 probing 8086:0110 [ 598.038082][T18657] gspca_spca508: reg_read err -32 [ 598.051069][T18657] gspca_spca508: reg_read err -32 [ 598.064205][T18657] gspca_spca508: reg_read err -32 [ 598.079602][T18657] gspca_spca508: reg_read err -32 [ 598.149272][T18639] usb 4-1: USB disconnect, device number 85 [ 598.295366][T18657] gspca_spca508: reg write: error -71 [ 598.309399][T18657] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 598.349059][T18657] usb 6-1: USB disconnect, device number 39 [ 599.036733][T18639] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 599.186547][T18639] usb 4-1: Using ep0 maxpacket: 32 [ 599.193239][T18639] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 599.203868][T18639] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 599.215659][T18639] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 599.226982][T18639] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 599.242259][T18639] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 599.251761][T18639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.260768][T18639] usb 4-1: Product: syz [ 599.264930][T18639] usb 4-1: Manufacturer: syz [ 599.269733][T18639] usb 4-1: SerialNumber: syz [ 599.285017][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 599.295021][T18639] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input129 [ 599.507219][T18639] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 599.530335][T18639] (id 0x00) [ 599.606653][T18639] rc_core: IR keymap rc-imon-pad not found [ 599.630319][T18639] Registered IR keymap rc-empty [ 599.642004][T18639] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 599.672953][T18639] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 599.750030][T18639] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 599.782928][T18639] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input130 [ 599.827432][T18639] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:86> initialized [ 599.989053][T18653] usb 4-1: USB disconnect, device number 86 [ 600.567824][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6432'. [ 600.597593][T21215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6432'. [ 600.896568][T18639] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 601.059495][T18639] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 601.076999][T18639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.102886][T18639] usb 4-1: config 0 descriptor?? [ 601.119002][T18639] cp210x 4-1:0.0: cp210x converter detected [ 601.256539][T18653] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 601.286525][T18657] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 601.420314][T18653] usb 2-1: Using ep0 maxpacket: 8 [ 601.436539][ C0] net_ratelimit: 3 callbacks suppressed [ 601.436559][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 601.459060][T18657] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 601.477493][T18657] usb 6-1: config 0 has no interface number 0 [ 601.489047][T18653] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 601.499057][T18657] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 601.508488][T18653] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.517668][T18653] usb 2-1: Product: syz [ 601.521949][T18653] usb 2-1: Manufacturer: syz [ 601.528844][T18657] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.533700][T18639] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 601.538316][T18653] usb 2-1: SerialNumber: syz [ 601.550849][T18657] usb 6-1: config 0 descriptor?? [ 601.571006][T18657] cp210x 6-1:0.1: cp210x converter detected [ 601.577763][T18639] usb 4-1: cp210x converter now attached to ttyUSB0 [ 601.581708][T18653] usb 2-1: config 0 descriptor?? [ 601.612441][T18653] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 601.790722][T18655] usb 4-1: USB disconnect, device number 87 [ 601.812232][T18655] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 601.842488][T18655] cp210x 4-1:0.0: device disconnected [ 601.970770][T18657] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 602.188380][T18657] usb 6-1: cp210x converter now attached to ttyUSB0 [ 602.383600][T18639] usb 6-1: USB disconnect, device number 40 [ 602.423519][T18639] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 602.457669][T18653] gspca_sonixj: reg_r err -71 [ 602.462566][T18653] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 602.481066][T18639] cp210x 6-1:0.1: device disconnected [ 602.486562][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 602.539184][T18653] usb 2-1: USB disconnect, device number 97 [ 603.516471][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 604.146509][T18639] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 604.323905][T18639] usb 6-1: Using ep0 maxpacket: 8 [ 604.335874][T18639] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 604.357609][T18639] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 604.372049][T18639] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 604.409145][T18639] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 604.420770][T18639] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.435008][T18639] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 604.446756][T18639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.566553][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 604.671480][T18639] usb 6-1: GET_CAPABILITIES returned 0 [ 604.677642][T18639] usbtmc 6-1:16.0: can't read capabilities [ 605.024712][T18639] usb 6-1: USB disconnect, device number 41 [ 605.033732][T21300] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 605.596562][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 606.622453][T21362] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6496'. [ 606.636517][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 606.708297][T18657] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 606.927091][T18657] usb 4-1: Using ep0 maxpacket: 16 [ 606.934154][T18657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.946838][T18657] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.967168][T18657] usb 4-1: config 0 interface 0 has no altsetting 0 [ 606.974672][T18657] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 606.985531][T18657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.003796][T18657] usb 4-1: config 0 descriptor?? [ 607.420028][T18657] apple 0003:05AC:0247.005E: unexpected long global item [ 607.447032][T18657] apple 0003:05AC:0247.005E: parse failed [ 607.456786][T18657] apple 0003:05AC:0247.005E: probe with driver apple failed with error -22 [ 607.632401][T18653] usb 4-1: USB disconnect, device number 88 [ 607.676585][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 608.487068][T21410] syz.5.6515: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 608.487454][T21410] CPU: 1 UID: 0 PID: 21410 Comm: syz.5.6515 Not tainted syzkaller #0 PREEMPT(full) [ 608.487478][T21410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 608.487551][T21410] Call Trace: [ 608.487560][T21410] [ 608.487570][T21410] dump_stack_lvl+0x189/0x250 [ 608.487608][T21410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.487636][T21410] ? __pfx__printk+0x10/0x10 [ 608.487657][T21410] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 608.487686][T21410] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 608.487716][T21410] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 608.487745][T21410] warn_alloc+0x214/0x310 [ 608.487776][T21410] ? stack_depot_save_flags+0x41b/0x860 [ 608.487813][T21410] ? __pfx_warn_alloc+0x10/0x10 [ 608.487844][T21410] ? kasan_save_track+0x3e/0x80 [ 608.487873][T21410] ? __kasan_kmalloc+0x93/0xb0 [ 608.487904][T21410] ? xsk_setsockopt+0x4dc/0x8d0 [ 608.487928][T21410] ? do_sock_setsockopt+0x17c/0x1b0 [ 608.487948][T21410] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 608.487967][T21410] ? do_syscall_64+0xfa/0xfa0 [ 608.487995][T21410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.488026][T21410] __vmalloc_node_range_noprof+0x125/0x12d0 [ 608.488087][T21410] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 608.488121][T21410] ? __kasan_kmalloc+0x93/0xb0 [ 608.488158][T21410] vmalloc_user_noprof+0xad/0xf0 [ 608.488187][T21410] ? xskq_create+0xbf/0x170 [ 608.488214][T21410] xskq_create+0xbf/0x170 [ 608.488245][T21410] xsk_init_queue+0xb0/0x110 [ 608.488275][T21410] xsk_setsockopt+0x4dc/0x8d0 [ 608.488302][T21410] ? __pfx_xsk_setsockopt+0x10/0x10 [ 608.488331][T21410] ? __pfx_aa_sk_perm+0x10/0x10 [ 608.488361][T21410] ? aa_sock_opt_perm+0xff/0x1b0 [ 608.488395][T21410] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 608.488416][T21410] ? __pfx_xsk_setsockopt+0x10/0x10 [ 608.488442][T21410] do_sock_setsockopt+0x17c/0x1b0 [ 608.488468][T21410] __x64_sys_setsockopt+0x13f/0x1b0 [ 608.488502][T21410] do_syscall_64+0xfa/0xfa0 [ 608.488530][T21410] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.488559][T21410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.488580][T21410] ? clear_bhb_loop+0x60/0xb0 [ 608.488605][T21410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.488625][T21410] RIP: 0033:0x7faaab18f6c9 [ 608.488645][T21410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.488663][T21410] RSP: 002b:00007faaabfe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 608.488684][T21410] RAX: ffffffffffffffda RBX: 00007faaab3e6090 RCX: 00007faaab18f6c9 [ 608.488700][T21410] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 608.488714][T21410] RBP: 00007faaab211f91 R08: 0000000000000004 R09: 0000000000000000 [ 608.488727][T21410] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.488740][T21410] R13: 00007faaab3e6128 R14: 00007faaab3e6090 R15: 00007faaab50fa28 [ 608.488768][T21410] [ 608.488777][T21410] Mem-Info: [ 608.488789][T21410] active_anon:21271 inactive_anon:788 isolated_anon:0 [ 608.488789][T21410] active_file:19938 inactive_file:40162 isolated_file:0 [ 608.488789][T21410] unevictable:768 dirty:3303 writeback:0 [ 608.488789][T21410] slab_reclaimable:11474 slab_unreclaimable:105156 [ 608.488789][T21410] mapped:30336 shmem:12132 pagetables:1972 [ 608.488789][T21410] sec_pagetables:0 bounce:0 [ 608.488789][T21410] kernel_misc_reclaimable:0 [ 608.488789][T21410] free:1273928 free_pcp:15023 free_cma:0 [ 608.488846][T21410] Node 0 active_anon:85084kB inactive_anon:3152kB active_file:79596kB inactive_file:160444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121188kB dirty:13200kB writeback:0kB shmem:46992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13888kB pagetables:7772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 608.488902][T21410] Node 1 active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 608.488954][T21410] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 608.489017][T21410] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 608.489064][T21410] Node 0 DMA32 free:1192252kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:85084kB inactive_anon:3152kB active_file:79596kB inactive_file:160444kB unevictable:1536kB writepending:13200kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:37888kB local_pcp:20364kB free_cma:0kB [ 608.489131][T21410] lowmem_reserve[]: 0 0 0 0 0 [ 608.489175][T21410] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 608.489235][T21410] lowmem_reserve[]: 0 0 0 0 0 [ 608.489278][T21410] Node 1 Normal free:3888100kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:204kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22304kB local_pcp:7408kB free_cma:0kB [ 608.489342][T21410] lowmem_reserve[]: 0 0 0 0 0 [ 608.489387][T21410] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 608.489587][T21410] Node 0 DMA32: 11*4kB (UME) 409*8kB (ME) 210*16kB (ME) 255*32kB (UME) 149*64kB (UME) 142*128kB (UME) 99*256kB (UME) 46*512kB (UM) 27*1024kB (UM) 10*2048kB (UM) 257*4096kB (UM) = 1192244kB [ 608.489759][T21410] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 608.489866][T21410] Node 1 Normal: 226*4kB (UME) 52*8kB (UME) 47*16kB (UME) 230*32kB (UME) 87*64kB (UME) 23*128kB (UME) 4*256kB (UM) 3*512kB (UME) 3*1024kB (UME) 3*2048kB (UME) 942*4096kB (UM) = 3888152kB [ 608.490044][T21410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 608.490062][T21410] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 608.490077][T21410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 608.490094][T21410] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 608.490111][T21410] 73016 total pagecache pages [ 608.490122][T21410] 788 pages in swap cache [ 608.490130][T21410] Free swap = 121844kB [ 608.490139][T21410] Total swap = 124996kB [ 608.490149][T21410] 2097051 pages RAM [ 608.490159][T21410] 0 pages HighMem/MovableOnly [ 608.490168][T21410] 424122 pages reserved [ 608.490176][T21410] 0 pages cma reserved [ 608.631513][T21415] netlink: 'syz.1.6517': attribute type 11 has an invalid length. [ 608.731110][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 608.966969][T18653] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 609.486945][T18641] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 609.634569][T18653] usb 4-1: Using ep0 maxpacket: 32 [ 609.656808][T18641] usb 2-1: Using ep0 maxpacket: 16 [ 609.660994][T18653] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 609.673759][T18641] usb 2-1: unable to get BOS descriptor or descriptor too short [ 609.677548][T18653] usb 4-1: config 0 has no interface number 0 [ 609.702901][T18653] usb 4-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=77.d6 [ 609.707835][T18641] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 609.715517][T18653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.728753][T18653] usb 4-1: Product: syz [ 609.743902][T18641] usb 2-1: can't read configurations, error -71 [ 609.746857][T18653] usb 4-1: Manufacturer: syz [ 609.756659][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 609.763947][T18653] usb 4-1: SerialNumber: syz [ 609.771783][T18653] usb 4-1: config 0 descriptor?? [ 610.103045][ T5880] usb 4-1: USB disconnect, device number 89 [ 610.158024][T18639] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 610.319448][T18639] usb 3-1: Using ep0 maxpacket: 8 [ 610.338975][T18639] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 610.366522][T18639] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 610.378700][T18639] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 610.392675][T18639] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.408374][T18639] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 610.421258][T18639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.601306][T21456] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.6533'. [ 610.659729][T18639] usb 3-1: usb_control_msg returned -32 [ 610.669846][T18639] usbtmc 3-1:16.0: can't read capabilities [ 610.796551][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 611.046917][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 611.056052][T21473] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 611.486588][T18655] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 611.659019][T18655] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.670583][T18655] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 611.684185][T18655] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 611.694660][T18655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.703688][T18655] usb 2-1: Product: syz [ 611.708210][T18655] usb 2-1: Manufacturer: syz [ 611.712895][T18655] usb 2-1: SerialNumber: syz [ 611.846553][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 611.945059][T21483] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 612.466674][T18639] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 612.557658][T21483] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 612.616545][T18639] usb 4-1: Using ep0 maxpacket: 32 [ 612.623922][T18639] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 612.633115][T18639] usb 4-1: config 0 has no interface number 0 [ 612.639862][T18639] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.651025][T18639] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.660937][T18639] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 612.671790][T18639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.683754][T18639] usb 4-1: config 0 descriptor?? [ 612.772663][T18655] cdc_ncm 2-1:1.0: failed to get mac address [ 612.876647][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 612.943236][T18641] usb 3-1: USB disconnect, device number 83 [ 612.980348][T18655] cdc_ncm 2-1:1.0: bind() failure [ 613.031713][T18655] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 613.053717][T18655] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 613.081534][T18655] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 613.097601][T18655] usb 2-1: USB disconnect, device number 100 [ 613.314273][T18639] input: HID 28bd:0094 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0094.005F/input/input131 [ 613.421805][T18639] uclogic 0003:28BD:0094.005F: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.3-1/input1 [ 613.513956][T18655] usb 4-1: USB disconnect, device number 90 [ 613.926603][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 614.086925][T21546] vlan2: entered allmulticast mode [ 614.092086][T21546] dummy0: entered allmulticast mode [ 614.454823][T21552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 614.924821][T21569] delete_channel: no stack [ 614.966531][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 616.006468][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 617.026602][ T5880] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 617.036466][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 617.057599][T21626] syzkaller1: entered promiscuous mode [ 617.063100][T21626] syzkaller1: entered allmulticast mode [ 617.196666][ T5880] usb 6-1: Using ep0 maxpacket: 8 [ 617.203833][ T5880] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 617.218465][ T5880] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 617.238800][ T5880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 617.266095][ T5880] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 617.319817][ T5880] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 617.351876][ T5880] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 617.373198][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.629667][ T5880] usb 6-1: GET_CAPABILITIES returned 0 [ 617.650223][T21642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6609'. [ 617.663142][ T5880] usbtmc 6-1:16.0: can't read capabilities [ 617.921356][T21655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6615'. [ 617.967243][T21655] vlan2: left promiscuous mode [ 617.971242][T21619] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 617.978294][T21655] bridge0: port 3(vlan2) entered disabled state [ 617.986030][ T5880] usb 6-1: USB disconnect, device number 42 [ 618.014750][T21655] bridge_slave_1: left allmulticast mode [ 618.037938][T21655] bridge_slave_1: left promiscuous mode [ 618.048948][T21655] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.076639][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 618.114314][T21655] bridge_slave_0: left promiscuous mode [ 618.131418][T21655] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.210032][T21655] bond0: (slave bridge0): Releasing backup interface [ 618.683895][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 618.683914][ T30] audit: type=1326 audit(1763519321.026:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21670 comm="syz.3.6621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe51958f6c9 code=0x0 [ 619.039908][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6629'. [ 619.052247][T21695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6629'. [ 619.116621][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 619.843423][T21722] input: syz1 as /devices/virtual/input/input132 [ 620.083980][T21728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6643'. [ 620.109537][T21729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6642'. [ 620.140634][T21729] netlink: 'syz.0.6642': attribute type 18 has an invalid length. [ 620.157182][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 620.715613][T21752] vlan2: entered allmulticast mode [ 620.726549][T21752] dummy0: entered allmulticast mode [ 621.046555][ T5880] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 621.084080][T21762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.196600][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 621.225640][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.266835][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.294597][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 621.329734][ T5880] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 621.361422][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.394236][T21772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6661'. [ 621.406552][T21772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6661'. [ 621.415142][ T5880] usb 2-1: config 0 descriptor?? [ 621.588115][T21779] netlink: 'syz.0.6664': attribute type 9 has an invalid length. [ 621.596127][T21779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6664'. [ 621.617364][T21779] hsr0: entered promiscuous mode [ 621.623252][T21779] macvlan0: entered promiscuous mode [ 621.629679][T21779] macvlan0: entered allmulticast mode [ 621.640811][T21779] hsr0: entered allmulticast mode [ 621.647396][T21781] netlink: 'syz.0.6664': attribute type 9 has an invalid length. [ 621.655372][T21779] hsr_slave_0: entered allmulticast mode [ 621.661423][T21779] hsr_slave_1: entered allmulticast mode [ 621.667323][T18639] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 621.684326][T21781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6664'. [ 621.713080][T21781] macvlan1: entered promiscuous mode [ 621.720185][T21781] macvlan1: entered allmulticast mode [ 621.816904][T18639] usb 6-1: Using ep0 maxpacket: 32 [ 621.830577][T18639] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 621.847025][T18639] usb 6-1: config 0 has no interface number 0 [ 621.847695][ T5880] acrux 0003:1A34:0802.0060: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 621.865137][T18639] usb 6-1: config 0 interface 184 has no altsetting 0 [ 621.885857][ T5880] acrux 0003:1A34:0802.0060: no inputs found [ 621.893711][T18639] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 621.906718][T18639] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.925021][ T5880] acrux 0003:1A34:0802.0060: Failed to enable force feedback support, error: -19 [ 621.936571][T18639] usb 6-1: Product: syz [ 621.941197][T18639] usb 6-1: Manufacturer: syz [ 621.962375][T18639] usb 6-1: SerialNumber: syz [ 621.975246][T18639] usb 6-1: config 0 descriptor?? [ 621.995951][T18639] smsc75xx v1.0.0 [ 622.060995][ T5880] usb 2-1: USB disconnect, device number 101 [ 622.236531][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 622.397833][T18641] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 622.558986][T18641] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 622.579495][T18641] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.619466][T18641] usb 3-1: config 0 descriptor?? [ 622.645682][T18641] cp210x 3-1:0.0: cp210x converter detected [ 622.663883][T21806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6674'. [ 622.914006][T21817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6679'. [ 623.013560][T18639] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 623.040814][T21793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.051792][T18641] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 623.078136][T21793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.129473][T18641] usb 3-1: cp210x converter now attached to ttyUSB0 [ 623.215254][T18639] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 623.254121][T18639] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 623.264902][T18639] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 623.276649][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 623.288276][T18639] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 623.298433][T18639] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 623.324191][T18655] usb 3-1: USB disconnect, device number 84 [ 623.341167][T18655] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 623.345979][T18639] usb 6-1: USB disconnect, device number 43 [ 623.384592][T18655] cp210x 3-1:0.0: device disconnected [ 623.786695][T18641] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 623.863304][T21847] gre0: entered allmulticast mode [ 623.888886][T21846] gre0: left allmulticast mode [ 623.977597][T18641] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 623.978293][T21851] netlink: 'syz.2.6694': attribute type 4 has an invalid length. [ 623.987148][T18641] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 624.037499][T21856] netlink: 'syz.2.6694': attribute type 4 has an invalid length. [ 624.045364][T18641] usb 2-1: config 150 has no interface number 0 [ 624.051878][T18641] usb 2-1: config 150 interface 204 has no altsetting 0 [ 624.062738][T18641] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 624.072297][T18641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.092797][T18641] usb 2-1: Product: syz [ 624.116720][T18641] usb 2-1: Manufacturer: syz [ 624.121355][T18641] usb 2-1: SerialNumber: syz [ 624.326486][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 624.350854][T18641] xr_serial 2-1:150.204: skipping garbage [ 624.363571][T18641] xr_serial 2-1:150.204: xr_serial converter detected [ 624.401303][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.409617][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.155805][T18641] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 625.266777][T21886] syz.3.6709: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 625.316560][T21886] CPU: 1 UID: 0 PID: 21886 Comm: syz.3.6709 Not tainted syzkaller #0 PREEMPT(full) [ 625.316589][T21886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.316604][T21886] Call Trace: [ 625.316613][T21886] [ 625.316623][T21886] dump_stack_lvl+0x189/0x250 [ 625.316661][T21886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.316690][T21886] ? __pfx__printk+0x10/0x10 [ 625.316713][T21886] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 625.316750][T21886] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 625.316780][T21886] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 625.316812][T21886] warn_alloc+0x214/0x310 [ 625.316844][T21886] ? stack_depot_save_flags+0x40/0x860 [ 625.316880][T21886] ? __pfx_warn_alloc+0x10/0x10 [ 625.316911][T21886] ? kasan_save_track+0x3e/0x80 [ 625.316939][T21886] ? __kasan_kmalloc+0x93/0xb0 [ 625.316970][T21886] ? xsk_setsockopt+0x4dc/0x8d0 [ 625.316994][T21886] ? do_sock_setsockopt+0x17c/0x1b0 [ 625.317014][T21886] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 625.317033][T21886] ? do_syscall_64+0xfa/0xfa0 [ 625.317061][T21886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.317093][T21886] __vmalloc_node_range_noprof+0x125/0x12d0 [ 625.317154][T21886] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 625.317187][T21886] ? __kasan_kmalloc+0x93/0xb0 [ 625.317224][T21886] vmalloc_user_noprof+0xad/0xf0 [ 625.317253][T21886] ? xskq_create+0xbf/0x170 [ 625.317282][T21886] xskq_create+0xbf/0x170 [ 625.317313][T21886] xsk_init_queue+0xb0/0x110 [ 625.317343][T21886] xsk_setsockopt+0x4dc/0x8d0 [ 625.317372][T21886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 625.317405][T21886] ? __pfx_aa_sk_perm+0x10/0x10 [ 625.317436][T21886] ? aa_sock_opt_perm+0xff/0x1b0 [ 625.317469][T21886] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 625.317490][T21886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 625.317518][T21886] do_sock_setsockopt+0x17c/0x1b0 [ 625.317545][T21886] __x64_sys_setsockopt+0x13f/0x1b0 [ 625.317573][T21886] do_syscall_64+0xfa/0xfa0 [ 625.317600][T21886] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.317630][T21886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.317651][T21886] ? clear_bhb_loop+0x60/0xb0 [ 625.317676][T21886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.317697][T21886] RIP: 0033:0x7fe51958f6c9 [ 625.317715][T21886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.317734][T21886] RSP: 002b:00007fe51a4e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 625.317762][T21886] RAX: ffffffffffffffda RBX: 00007fe5197e6090 RCX: 00007fe51958f6c9 [ 625.317778][T21886] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 625.317791][T21886] RBP: 00007fe519611f91 R08: 0000000000000004 R09: 0000000000000000 [ 625.317805][T21886] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.317819][T21886] R13: 00007fe5197e6128 R14: 00007fe5197e6090 R15: 00007fe51990fa28 [ 625.317854][T21886] [ 625.317949][T21886] Mem-Info: [ 625.366459][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 625.422190][T18641] usb 2-1: USB disconnect, device number 102 [ 625.557688][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.625045][T21886] active_anon:21308 inactive_anon:788 isolated_anon:0 [ 625.625045][T21886] active_file:19076 inactive_file:40190 isolated_file:0 [ 625.625045][T21886] unevictable:768 dirty:345 writeback:0 [ 625.625045][T21886] slab_reclaimable:11613 slab_unreclaimable:106177 [ 625.625045][T21886] mapped:30331 shmem:12107 pagetables:1961 [ 625.625045][T21886] sec_pagetables:0 bounce:0 [ 625.625045][T21886] kernel_misc_reclaimable:0 [ 625.625045][T21886] free:1274403 free_pcp:14290 free_cma:0 [ 625.631680][T18641] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 625.677831][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.694314][T18641] xr_serial 2-1:150.204: device disconnected [ 625.717384][T21886] Node 0 active_anon:85232kB inactive_anon:3152kB active_file:76148kB inactive_file:160556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121212kB dirty:1368kB writeback:0kB shmem:46892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13996kB pagetables:7728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 625.749630][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.772194][T21886] Node 1 active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 625.844032][T21886] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 625.874171][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.884344][T21886] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 625.890941][T21886] Node 0 DMA32 free:1191668kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:85332kB inactive_anon:3152kB active_file:76148kB inactive_file:160556kB unevictable:1536kB writepending:1368kB zspages:0kB present:3129332kB managed:2565148kB mlocked:0kB bounce:0kB free_pcp:37984kB local_pcp:18620kB free_cma:0kB [ 625.931290][T21886] lowmem_reserve[]: 0 0 0 0 0 [ 625.964590][T21886] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 625.995230][T21886] lowmem_reserve[]: 0 0 0 0 0 [ 626.010635][T21886] Node 1 Normal free:3890456kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:156kB inactive_file:204kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20000kB local_pcp:13888kB free_cma:0kB [ 626.049102][T21886] lowmem_reserve[]: 0 0 0 0 0 [ 626.053868][T21886] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 626.067168][T21886] Node 0 DMA32: 605*4kB (UM) 222*8kB (UME) 37*16kB (UM) 197*32kB (ME) 112*64kB (UME) 157*128kB (UME) 103*256kB (UME) 45*512kB (UM) 30*1024kB (UM) 12*2048kB (UM) 256*4096kB (M) = 1191636kB [ 626.087751][T21886] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 626.100158][T21886] Node 1 Normal: 162*4kB (UME) 52*8kB (UME) 47*16kB (UME) 234*32kB (UME) 95*64kB (UME) 22*128kB (UME) 6*256kB (UM) 4*512kB (UME) 4*1024kB (UME) 3*2048kB (UME) 942*4096kB (UM) = 3890456kB [ 626.120743][T21886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 626.126655][T18655] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 626.131671][T21886] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 626.148610][T21886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 626.161138][T21886] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 626.171382][T21886] 72159 total pagecache pages [ 626.176092][T21886] 788 pages in swap cache [ 626.180814][T21886] Free swap = 121844kB [ 626.185067][T21886] Total swap = 124996kB [ 626.189392][T21886] 2097051 pages RAM [ 626.193206][T21886] 0 pages HighMem/MovableOnly [ 626.198028][T21886] 424122 pages reserved [ 626.202194][T21886] 0 pages cma reserved [ 626.289631][T18655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.311911][T18655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.324005][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6716'. [ 626.330304][T18655] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 626.336202][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6716'. [ 626.355852][T18655] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 626.367082][T18655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.382363][T18655] usb 3-1: config 0 descriptor?? [ 626.396485][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 626.496648][T18653] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 626.646996][T18653] usb 6-1: Using ep0 maxpacket: 8 [ 626.659112][T18653] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 626.668607][T18653] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.676944][T18653] usb 6-1: Product: syz [ 626.681447][T18653] usb 6-1: Manufacturer: syz [ 626.689011][T18653] usb 6-1: SerialNumber: syz [ 626.698484][T18653] usb 6-1: config 0 descriptor?? [ 626.714777][T18653] option 6-1:0.0: GSM modem (1-port) converter detected [ 626.794564][T18655] plantronics 0003:047F:FFFF.0061: unbalanced collection at end of report description [ 626.806301][T18655] plantronics 0003:047F:FFFF.0061: parse failed [ 626.813713][T18655] plantronics 0003:047F:FFFF.0061: probe with driver plantronics failed with error -22 [ 626.913338][ T5880] usb 6-1: USB disconnect, device number 44 [ 626.922312][ T5880] option 6-1:0.0: device disconnected [ 626.997990][T18655] usb 3-1: USB disconnect, device number 85 [ 627.436505][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 627.648018][T21932] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6726'. [ 627.779569][ T30] audit: type=1326 audit(1763519330.126:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21936 comm="syz.5.6728" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faaab18f6c9 code=0x0 [ 628.254083][T21951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 628.486566][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 628.566687][T18653] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 628.721251][T18653] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.732929][T18653] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.744305][T18653] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 628.770209][T18653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 628.792975][T18653] usb 4-1: SerialNumber: syz [ 629.058378][T18653] usb 4-1: 0:2 : does not exist [ 629.100452][T18653] usb 4-1: USB disconnect, device number 91 [ 629.128052][T21969] netlink: 'syz.2.6741': attribute type 3 has an invalid length. [ 629.166550][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6741'. [ 629.179603][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.464369][ T5197] Dev loop6: unable to read RDB block 1 [ 629.471145][ T5197] loop6: unable to read partition table [ 629.481841][ T5197] loop6: partition table beyond EOD, truncated [ 629.520106][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 629.748506][T18641] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 629.851057][T21999] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6755'. [ 629.919127][T18641] usb 2-1: config 0 has an invalid interface number: 101 but max is 0 [ 629.930308][T18641] usb 2-1: config 0 has no interface number 0 [ 629.959474][T18641] usb 2-1: config 0 interface 101 has no altsetting 0 [ 629.993238][T18641] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 630.031776][T18641] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.056259][T18641] usb 2-1: config 0 descriptor?? [ 630.084848][T18641] cp210x 2-1:0.101: cp210x converter detected [ 630.116794][T18655] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 630.137734][T18655] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 630.152646][T18655] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 630.166610][T18655] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 630.175254][T18655] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 630.188483][T18655] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 630.200104][T18655] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 630.212722][T18655] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 630.224035][T18655] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 630.246547][T18655] hid-generic 0003:0004:0000.0062: unknown main item tag 0x0 [ 630.274902][T18655] hid-generic 0003:0004:0000.0062: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 630.490622][T18641] cp210x 2-1:0.101: failed to get vendor val 0x000e size 3: -32 [ 630.532195][T22014] fido_id[22014]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 630.556459][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 630.700394][T18641] cp210x 2-1:0.101: GPIO initialisation failed: -19 [ 630.714483][T18641] usb 2-1: cp210x converter now attached to ttyUSB0 [ 630.917607][T18641] usb 2-1: USB disconnect, device number 103 [ 630.997892][T18641] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 631.092485][T18641] cp210x 2-1:0.101: device disconnected [ 631.237607][ T5880] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 631.426490][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 631.498712][ T5880] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 631.516717][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.531707][ T5880] usb 4-1: config 0 descriptor?? [ 631.540584][ T5880] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 631.596529][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 631.996621][T18641] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 632.084844][T18655] hid-generic 0000:0000:0000.0063: hidraw0: HID v0.00 Device [syz1] on syz0 [ 632.137219][T18639] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 632.146641][T18641] usb 3-1: Using ep0 maxpacket: 16 [ 632.157280][T18641] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 632.173512][T18641] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 632.199600][T18641] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 632.210124][T18641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.227165][T18641] usb 3-1: Product: syz [ 632.236639][T18641] usb 3-1: Manufacturer: syz [ 632.241314][T18641] usb 3-1: SerialNumber: syz [ 632.254442][T18641] usb 3-1: config 0 descriptor?? [ 632.267584][T18641] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 632.278696][T18641] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 632.288741][T18639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.302242][T18639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.312503][T18639] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 632.325896][T18639] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 632.335124][T18639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.349382][T18639] usb 6-1: config 0 descriptor?? [ 632.574368][ T5880] gspca_vc032x: reg_w err -71 [ 632.580372][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.585814][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.592011][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.597489][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.602923][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.608761][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.614319][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.619994][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.625547][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.631131][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.636553][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 632.647319][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.652628][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.658495][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.663872][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.669464][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.674874][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.680960][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.686273][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.691720][ T5880] gspca_vc032x: Unknown sensor... [ 632.696947][ T5880] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 632.712059][ T5880] usb 4-1: USB disconnect, device number 92 [ 632.788096][T18639] plantronics 0003:047F:FFFF.0064: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 632.881703][T18641] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 632.893364][T18641] em28xx 3-1:0.0: Config register raw data: 0x36 [ 632.902644][T18641] em28xx 3-1:0.0: I2S Audio (3 sample rate(s)) [ 632.910910][T18641] em28xx 3-1:0.0: No AC97 audio processor [ 633.310563][T18641] usb 3-1: USB disconnect, device number 86 [ 633.676525][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 633.716694][ T5880] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 633.876936][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 633.889849][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.900967][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.911382][ T5880] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 633.921158][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.931731][ T5880] usb 2-1: config 0 descriptor?? [ 633.941769][ T5880] hub 2-1:0.0: USB hub found [ 634.096535][T18641] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 634.144275][ T5880] hub 2-1:0.0: 1 port detected [ 634.256507][T18641] usb 4-1: Using ep0 maxpacket: 16 [ 634.264027][T18641] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 634.273225][T18641] usb 4-1: config 0 has no interface number 0 [ 634.280921][T18641] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 634.294962][T18641] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 634.304702][T18641] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.314362][T18641] usb 4-1: Product: syz [ 634.321370][T18641] usb 4-1: Manufacturer: syz [ 634.326225][T18641] usb 4-1: SerialNumber: syz [ 634.335690][T18641] usb 4-1: config 0 descriptor?? [ 634.716517][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 634.723002][T22103] input: syz0 as /devices/virtual/input/input134 [ 634.770426][ T5880] hub 2-1:0.0: activate --> -90 [ 634.858754][T18655] usb 6-1: USB disconnect, device number 45 [ 634.952213][T18641] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 634.996236][T18641] usb 4-1: USB disconnect, device number 93 [ 635.185247][ T5880] usb 2-1: USB disconnect, device number 104 [ 635.756485][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 636.033223][ T5880] hid_parser_main: 9 callbacks suppressed [ 636.033245][ T5880] hid-generic 0000:0000:0000.0065: unknown main item tag 0x0 [ 636.169920][ T5880] hid-generic 0000:0000:0000.0065: hidraw0: HID v0.00 Device [syz1] on syz0 [ 636.264119][T22149] loop9: detected capacity change from 0 to 7 [ 636.282436][T22149] Dev loop9: unable to read RDB block 7 [ 636.297424][T22149] loop9: unable to read partition table [ 636.309804][T22149] loop9: partition table beyond EOD, truncated [ 636.339449][T22149] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 636.383157][T22151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.644997][T22161] netlink: 'syz.5.6823': attribute type 2 has an invalid length. [ 636.653365][T22161] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6823'. [ 636.796474][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 637.035842][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6828'. [ 637.054863][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6828'. [ 637.836642][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 637.982364][T22212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6847'. [ 638.246794][T18641] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 638.400612][T18641] usb 6-1: Using ep0 maxpacket: 8 [ 638.414454][T18641] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 638.445717][T18641] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 638.469142][T18641] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 638.484871][T18641] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.499119][T18641] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 638.509250][T18641] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.606505][T18657] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 638.752147][T18641] usb 6-1: GET_CAPABILITIES returned 0 [ 638.762120][T18641] usbtmc 6-1:16.0: can't read capabilities [ 638.788792][T18657] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 638.807107][T18657] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.830246][T18657] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 638.848918][T18657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.876522][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 638.957031][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 638.966471][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 638.975585][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 638.984702][ C1] vkms_vblank_simulate: vblank timer overrun [ 639.012840][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 639.021990][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 639.031115][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 639.040238][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 639.049360][ C1] vkms_vblank_simulate: vblank timer overrun [ 639.080188][T18657] usb 4-1: GET_CAPABILITIES returned 0 [ 639.090757][T18657] usbtmc 4-1:16.0: can't read capabilities [ 639.126790][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 639.136084][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 639.145208][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 639.154348][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 639.163630][ C1] vkms_vblank_simulate: vblank timer overrun [ 639.211517][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 639.220650][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 639.229753][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 639.238909][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 639.251894][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 639.297313][T18657] usb 4-1: USB disconnect, device number 94 [ 639.333871][T18641] usb 6-1: USB disconnect, device number 46 [ 639.846686][T18641] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 639.916526][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 640.012204][T18641] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.039049][T18641] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 640.054969][T18641] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.080915][T18641] usb 2-1: Product: syz [ 640.090966][T18641] usb 2-1: Manufacturer: syz [ 640.095933][T18641] usb 2-1: SerialNumber: syz [ 640.591862][T22282] netem: incorrect gi model size [ 640.602591][T22282] netem: change failed [ 640.629336][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6877'. [ 640.956461][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 641.072632][ T5880] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 641.245879][T18641] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 641.256536][ T5880] usb 6-1: Using ep0 maxpacket: 16 [ 641.279368][ T5880] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 641.301710][T18641] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 641.320943][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.331931][ T5880] usb 6-1: Product: syz [ 641.336161][ T5880] usb 6-1: Manufacturer: syz [ 641.361379][ T5880] usb 6-1: SerialNumber: syz [ 641.379186][ T5880] usb 6-1: config 0 descriptor?? [ 641.399212][ T5880] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 641.489317][T18641] usb 2-1: USB disconnect, device number 105 [ 641.505893][T18641] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 641.816572][ T43] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 641.989997][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 641.996499][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 642.006778][ T43] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 642.019411][ T43] usb 3-1: config 0 has no interface number 0 [ 642.030998][ T43] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 642.045456][ T43] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 642.059113][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 642.073139][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.083822][ T43] usb 3-1: Product: syz [ 642.102038][ T43] usb 3-1: Manufacturer: syz [ 642.116653][ T43] usb 3-1: SerialNumber: syz [ 642.129766][ T43] usb 3-1: config 0 descriptor?? [ 642.163341][ T43] appletouch 3-1:0.154: Could not find int-in endpoint [ 642.177628][ T43] appletouch 3-1:0.154: probe with driver appletouch failed with error -5 [ 642.198258][ T43] usbhid 3-1:0.154: couldn't find an input interrupt endpoint [ 642.400449][T18657] usb 3-1: USB disconnect, device number 87 [ 642.406642][T18653] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 642.595931][T18653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 642.613936][ T5880] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 642.626535][T18653] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 642.646757][ T5880] usb 6-1: USB disconnect, device number 47 [ 642.663045][T18653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.706819][T18653] usb 2-1: config 0 descriptor?? [ 643.036468][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 643.402353][T22367] netlink: 'syz.2.6902': attribute type 1 has an invalid length. [ 643.552825][T22367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 643.623666][T22369] bond2: option tlb_dynamic_lb: unable to set because the bond device is up [ 643.637070][T18653] usbhid 2-1:0.0: can't add hid device: -71 [ 643.643128][T18653] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 643.725995][T18653] usb 2-1: USB disconnect, device number 106 [ 644.076507][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 644.126875][T18657] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 644.161969][T22380] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 644.299387][T18657] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.333843][T18657] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 644.360321][T18657] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 644.392036][T18657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.412321][T18657] usb 3-1: Product: syz [ 644.430729][T18657] usb 3-1: Manufacturer: syz [ 644.440856][T18657] usb 3-1: SerialNumber: syz [ 644.474467][T18657] cdc_mbim 3-1:1.0: skipping garbage [ 644.671637][T22374] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 645.013965][T22404] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 645.116544][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 645.317072][T22374] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 645.331229][T18657] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 645.359529][T18657] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 645.395163][T18657] wwan wwan0: port wwan0mbim0 attached [ 645.484341][T18657] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 06:bf:19:d0:2f:69 [ 645.574216][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 645.580944][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 645.587435][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 645.594139][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 645.601521][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 645.608495][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 645.614750][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 645.658210][ T5880] usb 3-1: USB disconnect, device number 88 [ 645.673083][ T5880] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 645.821293][ T5880] wwan wwan0: port wwan0mbim0 disconnected [ 645.947436][T22442] kvm: kvm [22439]: vcpu0, guest rIP: 0x8000000 Unhandled WRMSR(0x40000030) = 0x0 [ 646.156619][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 646.192775][T22456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6932'. [ 646.246642][T22456] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6932'. [ 646.356019][T22456] batadv0: entered promiscuous mode [ 646.378102][T22456] hsr1: entered allmulticast mode [ 646.393694][T22456] batadv0: entered allmulticast mode [ 646.546551][ C1] [ 646.548917][ C1] ============================================ [ 646.555056][ C1] WARNING: possible recursive locking detected [ 646.561287][ C1] syzkaller #0 Not tainted [ 646.565691][ C1] -------------------------------------------- [ 646.571821][ C1] syz.3.6936/22473 is trying to acquire lock: [ 646.577869][ C1] ffff888032236f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 646.587009][ C1] [ 646.587009][ C1] but task is already holding lock: [ 646.594358][ C1] ffff888053ff2f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 646.604626][ C1] [ 646.604626][ C1] other info that might help us debug this: [ 646.612757][ C1] Possible unsafe locking scenario: [ 646.612757][ C1] [ 646.620191][ C1] CPU0 [ 646.623460][ C1] ---- [ 646.626721][ C1] lock(&hsr->seqnr_lock); [ 646.631211][ C1] lock(&hsr->seqnr_lock); [ 646.635710][ C1] [ 646.635710][ C1] *** DEADLOCK *** [ 646.635710][ C1] [ 646.643852][ C1] May be due to missing lock nesting notation [ 646.643852][ C1] [ 646.652154][ C1] 10 locks held by syz.3.6936/22473: [ 646.657445][ C1] #0: ffff888050318638 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 646.666490][ C1] #1: ffff88807bdd0ca0 (&mm->mmap_lock){++++}-{4:4}, at: __access_remote_vm+0xa0/0x7d0 [ 646.676231][ C1] #2: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: mt_find+0x15c/0x5e0 [ 646.685018][ C1] #3: ffffc90000a08be0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 646.695032][ C1] #4: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x83/0x360 [ 646.704170][ C1] #5: ffff888053ff2f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 646.714867][ C1] #6: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 646.724346][ C1] #7: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 646.734349][ C1] #8: ffffffff8df3d740 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 646.744261][ C1] #9: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 646.753391][ C1] [ 646.753391][ C1] stack backtrace: [ 646.759263][ C1] CPU: 1 UID: 0 PID: 22473 Comm: syz.3.6936 Not tainted syzkaller #0 PREEMPT(full) [ 646.759282][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 646.759293][ C1] Call Trace: [ 646.759301][ C1] [ 646.759309][ C1] dump_stack_lvl+0x189/0x250 [ 646.759334][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.759354][ C1] ? __pfx__printk+0x10/0x10 [ 646.759374][ C1] print_deadlock_bug+0x28b/0x2a0 [ 646.759395][ C1] validate_chain+0x1a3f/0x2140 [ 646.759415][ C1] ? skb_network_protocol+0x4fe/0x760 [ 646.759435][ C1] ? __pfx_skb_network_protocol+0x10/0x10 [ 646.759454][ C1] __lock_acquire+0xab9/0xd20 [ 646.759472][ C1] ? hsr_dev_xmit+0x237/0x360 [ 646.759488][ C1] lock_acquire+0x120/0x360 [ 646.759503][ C1] ? hsr_dev_xmit+0x237/0x360 [ 646.759523][ C1] ? hsr_dev_xmit+0x237/0x360 [ 646.759539][ C1] _raw_spin_lock_bh+0x36/0x50 [ 646.759560][ C1] ? hsr_dev_xmit+0x237/0x360 [ 646.759577][ C1] hsr_dev_xmit+0x237/0x360 [ 646.759599][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 646.759617][ C1] dev_hard_start_xmit+0x2d7/0x830 [ 646.759640][ C1] __dev_queue_xmit+0x1b8d/0x3b50 [ 646.759659][ C1] ? __lock_acquire+0xab9/0xd20 [ 646.759676][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 646.759698][ C1] ? __lock_acquire+0xab9/0xd20 [ 646.759713][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 646.759734][ C1] ? skb_network_protocol+0x4fe/0x760 [ 646.759752][ C1] ? __pfx_skb_network_protocol+0x10/0x10 [ 646.759769][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 646.759790][ C1] ? validate_xmit_xfrm+0xbf/0x1160 [ 646.759816][ C1] macvlan_start_xmit+0x46d/0x6e0 [ 646.759840][ C1] ? __pfx_macvlan_start_xmit+0x10/0x10 [ 646.759862][ C1] dev_hard_start_xmit+0x2d7/0x830 [ 646.759885][ C1] __dev_queue_xmit+0x1b8d/0x3b50 [ 646.759903][ C1] ? kasan_save_track+0x4f/0x80 [ 646.759924][ C1] ? kasan_save_track+0x3e/0x80 [ 646.759948][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 646.759966][ C1] ? find_vma+0xe7/0x160 [ 646.759985][ C1] ? __get_user_pages+0x3ae/0x2a00 [ 646.760003][ C1] ? get_user_pages_remote+0x2f1/0xac0 [ 646.760021][ C1] ? environ_read+0x245/0x3e0 [ 646.760037][ C1] ? vfs_read+0x200/0xa30 [ 646.760057][ C1] ? do_syscall_64+0xfa/0xfa0 [ 646.760079][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.760098][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 646.760120][ C1] ? __copy_skb_header+0xa7/0x550 [ 646.760138][ C1] ? __asan_memcpy+0x40/0x70 [ 646.760161][ C1] ? hsr_addr_subst_dest+0x307/0xac0 [ 646.760179][ C1] ? skb_clone+0x246/0x3a0 [ 646.760197][ C1] hsr_forward_skb+0x158b/0x2860 [ 646.760222][ C1] ? hsr_forward_skb+0x9e/0x2860 [ 646.760242][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 646.760262][ C1] ? do_raw_spin_lock+0x121/0x290 [ 646.760283][ C1] ? __asan_memset+0x22/0x50 [ 646.760303][ C1] ? __skb_pad+0x405/0x610 [ 646.760323][ C1] send_hsr_supervision_frame+0x731/0xcb0 [ 646.760345][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 646.760365][ C1] hsr_announce+0x1d5/0x360 [ 646.760382][ C1] ? hsr_announce+0x83/0x360 [ 646.760400][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 646.760420][ C1] call_timer_fn+0x17e/0x5f0 [ 646.760435][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 646.760452][ C1] ? call_timer_fn+0xbe/0x5f0 [ 646.760466][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 646.760483][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 646.760503][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.760524][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 646.760541][ C1] __run_timer_base+0x61a/0x860 [ 646.760568][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 646.760629][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 646.760655][ C1] run_timer_softirq+0xb7/0x180 [ 646.760677][ C1] handle_softirqs+0x286/0x870 [ 646.760695][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 646.760713][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 646.760733][ C1] __irq_exit_rcu+0xca/0x1f0 [ 646.760749][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 646.760768][ C1] irq_exit_rcu+0x9/0x30 [ 646.760783][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 646.760806][ C1] [ 646.760811][ C1] [ 646.760818][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 646.760835][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 646.760851][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 5b fd d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 646.760866][ C1] RSP: 0018:ffffc9000c507620 EFLAGS: 00000206 [ 646.760881][ C1] RAX: 3db4dec303920300 RBX: 0000000000000000 RCX: 3db4dec303920300 [ 646.760893][ C1] RDX: 0000000000000000 RSI: ffffffff8d8f4fde RDI: ffffffff8bbf08e0 [ 646.760904][ C1] RBP: ffffffff8b3f4e1c R08: 0000000000000000 R09: ffffffff8b3f4e1c [ 646.760915][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9daf R12: 0000000000000002 [ 646.760927][ C1] R13: ffffffff8df3d6e0 R14: 0000000000000000 R15: 0000000000000246 [ 646.760939][ C1] ? mt_find+0x15c/0x5e0 [ 646.760962][ C1] ? mt_find+0x15c/0x5e0 [ 646.760988][ C1] ? rcu_is_watching+0x15/0xb0 [ 646.761007][ C1] mt_find+0x17d/0x5e0 [ 646.761028][ C1] ? mt_find+0x15c/0x5e0 [ 646.761050][ C1] ? rcu_is_watching+0x15/0xb0 [ 646.761066][ C1] ? mt_find+0x15c/0x5e0 [ 646.761087][ C1] ? __pfx_mt_find+0x10/0x10 [ 646.761116][ C1] find_vma+0xe7/0x160 [ 646.761136][ C1] ? __pfx_find_vma+0x10/0x10 [ 646.761159][ C1] __get_user_pages+0x3ae/0x2a00 [ 646.761188][ C1] get_user_pages_remote+0x2f1/0xac0 [ 646.761207][ C1] ? __pfx_mtree_load+0x10/0x10 [ 646.761230][ C1] ? __pfx_get_user_pages_remote+0x10/0x10 [ 646.761253][ C1] __access_remote_vm+0x211/0x7d0 [ 646.761276][ C1] ? do_raw_spin_lock+0x121/0x290 [ 646.761297][ C1] ? __pfx___access_remote_vm+0x10/0x10 [ 646.761319][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 646.761341][ C1] environ_read+0x245/0x3e0 [ 646.761358][ C1] ? __pfx_environ_read+0x10/0x10 [ 646.761374][ C1] vfs_read+0x200/0xa30 [ 646.761394][ C1] ? fdget_pos+0x247/0x320 [ 646.761411][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 646.761434][ C1] ? __pfx_vfs_read+0x10/0x10 [ 646.761454][ C1] ? __fget_files+0x2a/0x420 [ 646.761470][ C1] ? __fget_files+0x3a0/0x420 [ 646.761483][ C1] ? __fget_files+0x2a/0x420 [ 646.761500][ C1] ksys_read+0x145/0x250 [ 646.761522][ C1] ? __pfx_ksys_read+0x10/0x10 [ 646.761543][ C1] ? do_syscall_64+0xbe/0xfa0 [ 646.761566][ C1] do_syscall_64+0xfa/0xfa0 [ 646.761592][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.761613][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.761628][ C1] ? clear_bhb_loop+0x60/0xb0 [ 646.761646][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.761661][ C1] RIP: 0033:0x7fe51958f6c9 [ 646.761675][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.761689][ C1] RSP: 002b:00007fe51a501038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 646.761704][ C1] RAX: ffffffffffffffda RBX: 00007fe5197e5fa0 RCX: 00007fe51958f6c9 [ 646.761716][ C1] RDX: 00000000ffffffb2 RSI: 0000200000000a40 RDI: 0000000000000003 [ 646.761727][ C1] RBP: 00007fe519611f91 R08: 0000000000000000 R09: 0000000000000000 [ 646.761737][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.761746][ C1] R13: 00007fe5197e6038 R14: 00007fe5197e5fa0 R15: 00007fe51990fa28 [ 646.761764][ C1] [ 646.761811][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.196466][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 647.198439][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.498299][ C1] vkms_vblank_simulate: vblank timer overrun [ 647.602628][ T30] audit: type=1326 audit(1763519349.946:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22460 comm="syz.2.6933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf4138f6c9 code=0x0 [ 647.624458][ C1] vkms_vblank_simulate: vblank timer overrun [ 648.236486][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 649.286448][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 650.316472][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 651.356481][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 652.406470][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 653.436481][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 654.476470][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 655.516536][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available