last executing test programs: 8m11.430763715s ago: executing program 2 (id=749): r0 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x0, 0x80}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000340)={0x9, 0x0, &(0x7f0000000200)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000400)={0x800, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 8m11.169261594s ago: executing program 2 (id=752): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f00000000c0)='\n', 0x1}], 0x2}}], 0x1, 0xc014) 8m11.014618955s ago: executing program 2 (id=756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x3, @loopback={0x0, 0x7ffffffe}, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="7f", 0x1}], 0x1}}], 0x1, 0x20000001) 8m10.002198119s ago: executing program 2 (id=768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0, 0x200007af}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) 8m9.839935411s ago: executing program 2 (id=769): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8m9.720168308s ago: executing program 2 (id=772): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 7m54.473865334s ago: executing program 32 (id=772): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 4m3.392134374s ago: executing program 4 (id=3138): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000240)={0x10000001}) 4m3.094797534s ago: executing program 4 (id=3141): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000400)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 4m2.736628054s ago: executing program 4 (id=3147): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000339000/0x1000)=nil, 0x3000}) 4m2.489536518s ago: executing program 4 (id=3149): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000440)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='devpts\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 4m2.086748284s ago: executing program 4 (id=3150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 4m1.251166423s ago: executing program 4 (id=3154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000000000009b000040"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m0.909803669s ago: executing program 33 (id=3154): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000000000009b000040"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m43.702975975s ago: executing program 6 (id=4598): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000018c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x10}, 0x0) 1m43.59901521s ago: executing program 6 (id=4599): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x9, 0x0, 0x4, {0x7, @vbi={0x7, 0x0, 0x47, 0x41495043, [0x6, 0x2ffcafc2], [0x0, 0x60], 0x2}}, 0x4}) 1m43.550261154s ago: executing program 6 (id=4600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc811"], 0xffe) 1m43.118762626s ago: executing program 6 (id=4607): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x104e22}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m42.913259601s ago: executing program 6 (id=4610): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000100)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x1d, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 1m42.258927908s ago: executing program 6 (id=4618): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x801, 0x8080000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0xffff1000, 0x1a000, 0x8}) 1m41.963492756s ago: executing program 34 (id=4618): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x801, 0x8080000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0xffff1000, 0x1a000, 0x8}) 4.337158258s ago: executing program 3 (id=5656): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x0, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1200, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x23}, @fda={0x66646185, 0x0, 0x1, 0xd}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000003000040"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.902801351s ago: executing program 3 (id=5660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000416000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xeeee8000, 0x0, 0x0, 0x8, 0xb, 0x0, 0x2, 0x0, 0x9, 0x9, 0x10}, {0x0, 0x4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x5, 0xff}, {0x3000, 0x5000, 0xe, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0x4, 0x0, 0x0, 0x0, 0xf7, 0xaa, 0x8, 0x0, 0x4}, {0xdddd0000, 0xdddd0000, 0x8, 0x6, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c, 0x5}, {0x0, 0x0, 0xd, 0x80, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x80, 0x40}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0xe8, 0x8}, {0x0, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc, 0x26, 0x3, 0x10, 0xfc}, {0x10000}, {0xeeef0000}, 0xddfcffd9, 0x0, 0x0, 0x22c, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 3.467001809s ago: executing program 3 (id=5664): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 3.092013139s ago: executing program 7 (id=5666): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x31) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)='@', 0x1}], 0x1) 2.747153261s ago: executing program 0 (id=5668): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.74586619s ago: executing program 7 (id=5670): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 2.382855599s ago: executing program 0 (id=5672): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setuid(0xee00) recvmsg$kcm(r1, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) 1.941156727s ago: executing program 5 (id=5676): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r1, 0x0, &(0x7f0000931000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 1.467141424s ago: executing program 5 (id=5678): socket$l2tp6(0xa, 0x2, 0x73) socket$rxrpc(0x21, 0x2, 0x2) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.341716298s ago: executing program 0 (id=5679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000240)={'gre0\x00', 0x200}) 1.340947189s ago: executing program 3 (id=5680): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1.256872376s ago: executing program 1 (id=5681): r0 = userfaultfd(0x80801) r1 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x5}) 1.218782655s ago: executing program 7 (id=5682): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000740), 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000740)={0x1f, @none}, 0x8) listen(r1, 0x0) listen(r0, 0x8) 1.047024239s ago: executing program 1 (id=5683): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 990.881057ms ago: executing program 7 (id=5684): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r1 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(r1, 0x353, 0x0, 0x0, 0x0, 0x0) signalfd(r0, &(0x7f0000002340), 0x8) 870.831434ms ago: executing program 1 (id=5685): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047459, 0x0) 834.196622ms ago: executing program 3 (id=5686): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x28dc, 0x100000000000000, 0x440000, 0x1, {0x1, 0xfffffffffffffffd, 0x3, 0x1000, 0xfffffffffffffffc, 0x900, 0x0, 0x0, 0x4, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 780.929895ms ago: executing program 1 (id=5687): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x10400, 0x0, 0x8}, 0x18) 743.663182ms ago: executing program 7 (id=5688): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53", 0x3e}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/70, 0x46}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 614.857777ms ago: executing program 3 (id=5689): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}, 0xffff}], 0x1, 0x10041, 0x0) 579.086891ms ago: executing program 1 (id=5690): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x12) 536.890084ms ago: executing program 7 (id=5691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb0800450045ac00006000002f9078ac1e0001e00000010008655800189078040000000000001386dd"], 0xfdef) 505.985194ms ago: executing program 0 (id=5692): prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 452.232408ms ago: executing program 5 (id=5693): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c4", 0x66}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000700)=""/192, 0xc0}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x2) 243.234871ms ago: executing program 5 (id=5694): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 234.782888ms ago: executing program 1 (id=5695): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 205.38905ms ago: executing program 0 (id=5696): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 113.729587ms ago: executing program 5 (id=5697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$xdp(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="9f", 0x1}], 0x1, 0x0, 0x0, 0x2400c090}, 0x840) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/135, 0x87}], 0x1}, 0x10000}], 0x1, 0x28101, 0x0) 16.811601ms ago: executing program 0 (id=5698): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x18) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 0s ago: executing program 5 (id=5699): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, 0x0, r1) setuid(r1) kernel console output (not intermixed with test programs): 70,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 452.573614][ T6033] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 452.651102][T14301] overlayfs: invalid origin (00000000d1d3e81a820eee8a94416592a5356da96db48150eae08457fbc30ece5e7e7e318cb2b4b2f8bddb73e65c239a40942f00000000000000000000000000) [ 452.724751][ T6033] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 452.724812][ T6033] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 452.724836][ T6033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 452.724859][ T6033] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 452.724883][ T6033] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 452.724922][ T6033] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 452.724942][ T6033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.740582][ T6033] usb 4-1: config 0 descriptor?? [ 452.741955][T14291] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 453.191070][ T6033] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.191105][ T6033] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.191130][ T6033] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.191155][ T6033] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.191179][ T6033] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.191203][ T6033] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 453.212006][ T6033] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 453.212388][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 453.401928][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 453.405250][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.405279][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.405315][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 453.405336][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.456547][ T9] usb 7-1: config 0 descriptor?? [ 453.466027][ T5927] usb 4-1: USB disconnect, device number 27 [ 453.617096][T14323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3585'. [ 453.621987][ T1229] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 453.781894][ T1229] usb 6-1: Using ep0 maxpacket: 32 [ 453.818725][T14315] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3582'. [ 453.837723][ T1229] usb 6-1: unable to get BOS descriptor or descriptor too short [ 453.838911][ T1229] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 453.838945][ T1229] usb 6-1: can't read configurations, error -71 [ 453.841326][ T6012] hid-generic 0008:0006:0007.0026: unknown main item tag 0x0 [ 453.841520][ T6012] hid-generic 0008:0006:0007.0026: unknown main item tag 0x0 [ 453.841545][ T6012] hid-generic 0008:0006:0007.0026: unknown main item tag 0x0 [ 453.841618][ T6012] hid-generic 0008:0006:0007.0026: unknown main item tag 0x0 [ 453.932065][ T6012] hid-generic 0008:0006:0007.0026: hidraw0: HID v0.0b Device [syz1] on syz1 [ 453.954740][ T9] savu 0003:1E7D:2D5A.0027: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 454.179258][ T9] usb 7-1: USB disconnect, device number 5 [ 454.672773][T14348] program syz.5.3597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 454.985769][T14362] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 455.191548][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 455.882549][ T5847] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 455.923750][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.930534][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 456.094606][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 456.094635][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.169726][ T9] usb 1-1: config 0 descriptor?? [ 456.193240][ T9] cp210x 1-1:0.0: cp210x converter detected [ 456.598204][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 456.638053][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.836539][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 457.008683][ T5927] usb 1-1: USB disconnect, device number 39 [ 457.028272][ T5927] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 457.154204][ T5927] cp210x 1-1:0.0: device disconnected [ 457.761913][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 457.914683][ T45] usb 4-1: config 0 has no interfaces? [ 457.914707][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 457.914718][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.919993][ T45] usb 4-1: config 0 descriptor?? [ 458.366379][T14411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.366758][T14411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.371122][ T5927] usb 4-1: USB disconnect, device number 28 [ 458.541922][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.997256][ T37] audit: type=1326 audit(1756379804.494:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14451 comm="syz.3.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 458.997311][ T37] audit: type=1326 audit(1756379804.504:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14451 comm="syz.3.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 459.049650][ T37] audit: type=1326 audit(1756379804.554:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14451 comm="syz.3.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 459.049700][ T37] audit: type=1326 audit(1756379804.554:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14451 comm="syz.3.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 459.049738][ T37] audit: type=1326 audit(1756379804.554:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14451 comm="syz.3.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 459.101971][ T5927] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 459.135328][ T37] audit: type=1326 audit(1756379804.644:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14451 comm="syz.3.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 459.135380][ T37] audit: type=1326 audit(1756379804.644:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14451 comm="syz.3.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 459.135420][ T37] audit: type=1326 audit(1756379804.644:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14451 comm="syz.3.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 459.138643][ T37] audit: type=1326 audit(1756379804.644:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14451 comm="syz.3.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 459.138689][ T37] audit: type=1326 audit(1756379804.644:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14451 comm="syz.3.3644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 459.269841][ T5927] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 459.269903][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.271199][ T5927] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 459.271224][ T5927] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 459.271242][ T5927] usb 6-1: Manufacturer: syz [ 459.294199][ T5927] usb 6-1: config 0 descriptor?? [ 459.306618][ T6033] kernel write not supported for file bpf-prog (pid: 6033 comm: kworker/1:7) [ 459.421834][ T5927] rc_core: IR keymap rc-hauppauge not found [ 459.421854][ T5927] Registered IR keymap rc-empty [ 459.423428][ T5927] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 459.474749][ T5927] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input50 [ 459.690341][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 459.766648][ T5927] usb 6-1: USB disconnect, device number 27 [ 460.162439][T14477] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 460.169114][ T45] IPVS: starting estimator thread 0... [ 460.252825][T14481] IPVS: using max 9 ests per chain, 21600 per kthread [ 460.643754][T14497] sctp: [Deprecated]: syz.3.3660 (pid 14497) Use of int in max_burst socket option deprecated. [ 460.643754][T14497] Use struct sctp_assoc_value instead [ 461.006407][ T45] kernel read not supported for file /dsp1 (pid: 45 comm: kworker/0:2) [ 461.073190][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.393462][T14551] binder: 14550:14551 ioctl c018620b 200000000700 returned -14 [ 463.111887][ T6033] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 463.274307][ T6033] usb 6-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 463.274353][ T6033] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 463.274404][ T6033] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.274427][ T6033] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.274447][ T6033] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.274488][ T6033] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 463.274509][ T6033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.281917][ T1229] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 463.286783][ T6033] usb 6-1: config 0 descriptor?? [ 463.445686][ T1229] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 463.445717][ T1229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.445735][ T1229] usb 2-1: Product: syz [ 463.445748][ T1229] usb 2-1: Manufacturer: syz [ 463.445760][ T1229] usb 2-1: SerialNumber: syz [ 463.830834][ T6033] input: HID 28bd:0909 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28BD:0909.0028/input/input51 [ 464.033619][ T6033] uclogic 0003:28BD:0909.0028: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.5-1/input0 [ 464.153117][ T6033] usb 6-1: USB disconnect, device number 28 [ 464.238933][ T1229] rtl8150 2-1:1.0: eth9: rtl8150 is detected [ 464.365993][ T1229] usb 2-1: USB disconnect, device number 36 [ 464.776369][T14618] overlay: filesystem on ./bus is read-only [ 464.809556][T14620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3714'. [ 465.197351][T14634] ALSA: seq fatal error: cannot create timer (-22) [ 465.502300][T14648] netlink: 'syz.5.3725': attribute type 1 has an invalid length. [ 465.502365][T14648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.502443][T14648] IPv6: NLM_F_CREATE should be set when creating new route [ 465.502476][T14648] IPv6: NLM_F_CREATE should be set when creating new route [ 465.503817][T14648] netlink: 'syz.5.3725': attribute type 1 has an invalid length. [ 465.503863][T14648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 466.443275][T14682] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 466.443307][T14682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.549011][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 466.549026][ T37] audit: type=1326 audit(1756379812.054:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.6.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 466.552047][ T37] audit: type=1326 audit(1756379812.054:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.6.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 466.552342][ T37] audit: type=1326 audit(1756379812.064:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.6.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 466.552571][ T37] audit: type=1326 audit(1756379812.064:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.6.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 466.564367][ T37] audit: type=1326 audit(1756379812.064:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14684 comm="syz.6.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 466.674798][T14691] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3743'. [ 466.691098][T14690] input: syz1 as /devices/virtual/input/input52 [ 466.841444][T14696] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 467.703364][ T5847] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 467.912011][ T1229] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 468.098064][ T1229] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 468.098097][ T1229] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 468.098134][ T1229] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 468.098154][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.117857][T14724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 468.126807][ T1229] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 468.211867][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 468.372035][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 468.404186][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.404217][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.404254][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 468.404274][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.467344][ T9] usb 1-1: config 0 descriptor?? [ 468.517777][ T45] usb 2-1: USB disconnect, device number 37 [ 468.905821][ T9] hid_parser_main: 49 callbacks suppressed [ 468.905843][ T9] corsair 0003:1B1C:1B02.0029: unknown main item tag 0x0 [ 468.905871][ T9] corsair 0003:1B1C:1B02.0029: unknown main item tag 0x0 [ 468.905896][ T9] corsair 0003:1B1C:1B02.0029: unknown main item tag 0x0 [ 468.905921][ T9] corsair 0003:1B1C:1B02.0029: unknown main item tag 0x0 [ 468.905945][ T9] corsair 0003:1B1C:1B02.0029: unknown main item tag 0x0 [ 468.911951][ T1229] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 468.970503][ T9] corsair 0003:1B1C:1B02.0029: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 469.071884][ T1229] usb 7-1: Using ep0 maxpacket: 16 [ 469.078977][ T1229] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.079032][ T1229] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.079056][ T1229] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 469.079076][ T1229] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 469.079095][ T1229] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 469.080707][ T1229] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 469.080731][ T1229] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 469.080749][ T1229] usb 7-1: Manufacturer: syz [ 469.099384][ T1229] usb 7-1: config 0 descriptor?? [ 469.167617][ T9] corsair 0003:1B1C:1B02.0029: Read invalid backlight brightness: be. [ 469.376449][ T6033] usb 1-1: USB disconnect, device number 40 [ 469.481932][ T1229] rc_core: IR keymap rc-hauppauge not found [ 469.481953][ T1229] Registered IR keymap rc-empty [ 469.482108][ T1229] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 469.503114][ T1229] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 469.526579][ T1229] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 469.538591][ T1229] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input53 [ 469.564001][ T1229] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 469.582736][ T1229] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 469.607956][ T1229] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 469.622140][ T1229] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 469.642104][ T1229] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 469.662115][ T1229] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 469.682141][ T1229] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 469.698686][T14754] team0 (unregistering): Port device team_slave_0 removed [ 469.702065][ T1229] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 469.722164][ T1229] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 469.742086][ T1229] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 469.743158][T14754] team0 (unregistering): Port device team_slave_1 removed [ 469.796603][ T1229] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 469.796626][ T1229] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 469.860520][ T1229] usb 7-1: USB disconnect, device number 6 [ 470.015201][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 470.186184][ T45] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 470.186211][ T45] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 470.186229][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 470.186277][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 470.186301][ T45] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 470.193188][ T45] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 470.193215][ T45] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 470.193232][ T45] usb 4-1: Product: syz [ 470.193245][ T45] usb 4-1: Manufacturer: syz [ 470.218225][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 470.218243][ T45] cdc_wdm 4-1:1.0: skipping garbage [ 470.234822][ T45] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 470.234851][ T45] cdc_wdm 4-1:1.0: Unknown control protocol [ 470.532100][T14791] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3786'. [ 470.708661][ T1229] usb 4-1: USB disconnect, device number 29 [ 470.794468][T14797] atomic_op ffff88805f39fa18 conn xmit_atomic 0000000000000000 [ 472.382016][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 472.540487][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 472.662718][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 472.662743][ T9] usb 4-1: config 0 has no interface number 0 [ 472.687901][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 472.687930][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.687947][ T9] usb 4-1: Product: syz [ 472.687959][ T9] usb 4-1: Manufacturer: syz [ 472.687972][ T9] usb 4-1: SerialNumber: syz [ 472.712320][ T9] usb 4-1: config 0 descriptor?? [ 472.719940][ T9] smsc95xx v2.0.0 [ 472.820722][T14871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.416156][T14887] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3831'. [ 473.799832][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 473.799860][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 473.803857][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 473.804172][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 473.829849][ T9] usb 4-1: USB disconnect, device number 30 [ 474.380322][T14910] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3841'. [ 475.015988][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.508426][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3852'. [ 475.508461][T14929] netlink: 'syz.6.3852': attribute type 7 has an invalid length. [ 475.508474][T14929] netlink: 'syz.6.3852': attribute type 8 has an invalid length. [ 475.508485][T14929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3852'. [ 475.563184][T14929] gretap0: entered promiscuous mode [ 475.564692][T14929] batadv_slave_1: entered promiscuous mode [ 475.583898][T14929] debugfs: 'hsr1' already exists in 'hsr' [ 475.583927][T14929] Cannot create hsr debugfs directory [ 476.269521][T14954] loop5: detected capacity change from 0 to 1367 [ 476.301269][T14954] loop5: detected capacity change from 1367 to 2383 [ 476.637137][T14968] netlink: 'syz.1.3865': attribute type 3 has an invalid length. [ 476.637158][T14968] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3865'. [ 477.258746][T14990] pim6reg1: entered promiscuous mode [ 477.258774][T14990] pim6reg1: entered allmulticast mode [ 479.515563][T15027] loop8: detected capacity change from 0 to 7 [ 479.521910][T15027] Dev loop8: unable to read RDB block 7 [ 479.521954][T15027] loop8: unable to read partition table [ 479.522173][T15027] loop8: partition table beyond EOD, truncated [ 479.522190][T15027] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 480.334139][T15039] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.3899'. [ 480.594521][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3902'. [ 481.616875][T15078] loop2: detected capacity change from 0 to 7 [ 481.621502][T15078] Dev loop2: unable to read RDB block 7 [ 481.621547][T15078] loop2: unable to read partition table [ 481.642745][T15078] loop2: partition table beyond EOD, truncated [ 481.642767][T15078] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 481.793864][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3919'. [ 482.184303][ T5847] Bluetooth: hci3: ACL packet too small [ 482.261858][ T6012] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 482.374527][T15102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 482.427855][ T6012] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 482.427882][ T6012] usb 6-1: config 0 has no interface number 0 [ 482.427932][ T6012] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.427956][ T6012] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.427993][ T6012] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 482.428014][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.491986][ T6012] usb 6-1: config 0 descriptor?? [ 482.576707][T15110] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000004 [ 482.934035][ T6012] prodikeys 0003:041E:2801.002A: unknown main item tag 0x0 [ 482.934073][ T6012] prodikeys 0003:041E:2801.002A: unknown main item tag 0x0 [ 482.956839][ T6012] prodikeys 0003:041E:2801.002A: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1 [ 482.959507][ T6012] hid_prodikeys: hid-prodikeys: failed to find output report [ 482.959507][ T6012] [ 483.134126][ T1229] usb 6-1: USB disconnect, device number 29 [ 483.311969][ T6033] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 483.461951][ T6033] usb 4-1: Using ep0 maxpacket: 32 [ 483.465177][ T6033] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 483.468304][ T6033] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 483.468331][ T6033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.468348][ T6033] usb 4-1: Product: syz [ 483.468360][ T6033] usb 4-1: Manufacturer: syz [ 483.468372][ T6033] usb 4-1: SerialNumber: syz [ 483.491520][ T6033] usb 4-1: config 0 descriptor?? [ 483.506629][T15116] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 483.536831][ T6033] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input54 [ 483.825887][ T6012] usb 4-1: USB disconnect, device number 31 [ 483.826058][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 485.219128][T15162] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.555439][T15176] program syz.3.3963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.430516][T15207] netlink: 212164 bytes leftover after parsing attributes in process `syz.5.3977'. [ 487.104592][ T5847] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 487.104633][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 487.104655][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 487.104667][ T5847] Workqueue: hci5 hci_rx_work [ 487.104693][ T5847] Call Trace: [ 487.104700][ T5847] [ 487.104708][ T5847] dump_stack_lvl+0x189/0x250 [ 487.104740][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.104764][ T5847] ? __pfx__printk+0x10/0x10 [ 487.104789][ T5847] ? kernfs_path_from_node+0x2c/0x280 [ 487.104807][ T5847] ? kernfs_path_from_node+0x243/0x280 [ 487.104822][ T5847] ? kernfs_path_from_node+0x2c/0x280 [ 487.104844][ T5847] sysfs_create_dir_ns+0x259/0x280 [ 487.104869][ T5847] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 487.104890][ T5847] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 487.104916][ T5847] ? rt_spin_unlock+0x65/0x80 [ 487.104941][ T5847] kobject_add_internal+0x5a5/0xb50 [ 487.104974][ T5847] kobject_add+0x155/0x220 [ 487.105003][ T5847] ? __pfx_kobject_add+0x10/0x10 [ 487.105034][ T5847] ? get_device_parent+0x370/0x3a0 [ 487.105070][ T5847] device_add+0x408/0xb50 [ 487.105104][ T5847] hci_conn_add_sysfs+0xd5/0x1e0 [ 487.105133][ T5847] le_conn_complete_evt+0xc3a/0x1220 [ 487.105164][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.105191][ T5847] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 487.105214][ T5847] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 487.105236][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.105263][ T5847] ? skb_pull_data+0xfb/0x200 [ 487.105286][ T5847] hci_le_enh_conn_complete_evt+0x189/0x470 [ 487.105310][ T5847] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 487.105336][ T5847] hci_event_packet+0x78f/0x1200 [ 487.105358][ T5847] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 487.105382][ T5847] ? __pfx_hci_event_packet+0x10/0x10 [ 487.105399][ T5847] ? __pfx_migrate_enable+0x10/0x10 [ 487.105431][ T5847] ? hci_send_to_monitor+0xe2/0x570 [ 487.105457][ T5847] hci_rx_work+0x46a/0xe80 [ 487.105485][ T5847] ? process_scheduled_works+0x9ef/0x17b0 [ 487.105508][ T5847] process_scheduled_works+0xade/0x17b0 [ 487.105563][ T5847] ? __pfx_process_scheduled_works+0x10/0x10 [ 487.105603][ T5847] worker_thread+0x8a0/0xda0 [ 487.105655][ T5847] kthread+0x711/0x8a0 [ 487.105683][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 487.105705][ T5847] ? __pfx_kthread+0x10/0x10 [ 487.105735][ T5847] ? __pfx_kthread+0x10/0x10 [ 487.105761][ T5847] ret_from_fork+0x3fc/0x770 [ 487.105786][ T5847] ? __pfx_ret_from_fork+0x10/0x10 [ 487.105815][ T5847] ? __switch_to_asm+0x39/0x70 [ 487.105830][ T5847] ? __switch_to_asm+0x33/0x70 [ 487.105845][ T5847] ? __pfx_kthread+0x10/0x10 [ 487.105871][ T5847] ret_from_fork_asm+0x1a/0x30 [ 487.105903][ T5847] [ 487.110931][ T5847] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 487.110992][ T5847] Bluetooth: hci5: failed to register connection device [ 487.892874][T15248] tun0: tun_chr_ioctl cmd 1074025675 [ 487.892895][T15248] tun0: persist enabled [ 487.893441][T15248] tun0: tun_chr_ioctl cmd 1074025675 [ 487.893457][T15248] tun0: persist disabled [ 487.959453][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 488.343631][T15260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.164428][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 489.783870][T15298] netlink: 'syz.1.4017': attribute type 25 has an invalid length. [ 489.783891][T15298] netlink: 'syz.1.4017': attribute type 7 has an invalid length. [ 490.262031][ T45] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 490.444608][ T45] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 490.444667][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.447005][ T45] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 490.447032][ T45] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 490.447049][ T45] usb 1-1: Manufacturer: syz [ 490.516771][ T45] usb 1-1: config 0 descriptor?? [ 490.622126][ T45] rc_core: IR keymap rc-hauppauge not found [ 490.622145][ T45] Registered IR keymap rc-empty [ 490.623743][ T45] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 490.626785][ T45] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input55 [ 490.671979][ T1229] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 490.749721][ C0] igorplugusb 1-1:0.0: Error: urb status = -32 [ 490.774651][ T45] usb 1-1: USB disconnect, device number 41 [ 490.822105][ T1229] usb 6-1: Using ep0 maxpacket: 16 [ 490.824948][ T1229] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.824993][ T1229] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 490.825013][ T1229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.830838][ T1229] usb 6-1: config 0 descriptor?? [ 490.832054][ T6033] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 490.981883][ T6033] usb 4-1: Using ep0 maxpacket: 16 [ 490.985484][ T6033] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 490.985540][ T6033] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.985563][ T6033] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.985583][ T6033] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 490.985670][ T6033] usb 4-1: config 7 interface 0 has no altsetting 0 [ 490.985702][ T6033] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 490.985723][ T6033] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.298610][T15327] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4030'. [ 491.336585][ T1229] mcp2221 0003:04D8:00DD.002B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 491.514700][ T6033] hid (null): invalid report_count 22626 [ 491.514800][ T6033] hid (null): bogus close delimiter [ 491.514812][ T6033] hid (null): global environment stack underflow [ 491.518945][ T6033] hid (null): unknown global tag 0xd [ 491.735009][ T6033] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.002C/input/input56 [ 491.776257][ T1229] usb 6-1: USB disconnect, device number 30 [ 491.801373][ T6033] kye 0003:0458:5010.002C: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 491.852052][ T6033] usb 4-1: USB disconnect, device number 32 [ 492.873710][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4043'. [ 493.232764][T15370] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4050'. [ 493.467203][ T37] audit: type=1326 audit(1756379838.964:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 493.467254][ T37] audit: type=1326 audit(1756379838.974:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 493.472717][ T37] audit: type=1326 audit(1756379838.984:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 493.472765][ T37] audit: type=1326 audit(1756379838.984:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 493.472804][ T37] audit: type=1326 audit(1756379838.984:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 493.594340][ T37] audit: type=1326 audit(1756379839.104:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 493.594403][ T37] audit: type=1326 audit(1756379839.104:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 493.594443][ T37] audit: type=1326 audit(1756379839.104:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 493.605050][ T37] audit: type=1326 audit(1756379839.114:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 493.605104][ T37] audit: type=1326 audit(1756379839.114:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15377 comm="syz.6.4054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac8893ebe9 code=0x7ffc0000 [ 493.761964][ T6012] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 493.891393][T15391] input: syz1 as /devices/virtual/input/input57 [ 493.919486][ T6012] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 493.919532][ T6012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.919556][ T6012] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.919576][ T6012] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 493.969139][ T6012] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 493.969167][ T6012] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 493.969185][ T6012] usb 6-1: Manufacturer: syz [ 494.003603][ T6012] usb 6-1: config 0 descriptor?? [ 494.428690][ T6012] appleir 0003:05AC:8243.002D: unknown main item tag 0x0 [ 494.447099][ T6012] appleir 0003:05AC:8243.002D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 494.694910][ T1229] usb 6-1: USB disconnect, device number 31 [ 494.872155][ T6033] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 495.027016][ T6033] usb 7-1: Using ep0 maxpacket: 16 [ 495.031010][ T6033] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 495.031034][ T6033] usb 7-1: config 0 has no interface number 0 [ 495.031085][ T6033] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 495.031107][ T6033] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 495.031128][ T6033] usb 7-1: config 0 interface 41 has no altsetting 0 [ 495.072327][ T6033] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 495.072354][ T6033] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.072368][ T6033] usb 7-1: Product: syz [ 495.072379][ T6033] usb 7-1: Manufacturer: syz [ 495.072391][ T6033] usb 7-1: SerialNumber: syz [ 495.126213][ T6033] usb 7-1: config 0 descriptor?? [ 495.127023][T15410] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 495.127150][T15410] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 495.351593][T15410] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 495.351900][T15410] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 495.421993][ T45] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 495.582257][ T45] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 495.582284][ T45] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 495.582303][ T45] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 495.582321][ T45] usb 1-1: config 220 has no interface number 2 [ 495.582383][ T45] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 495.582409][ T45] usb 1-1: config 220 interface 0 has no altsetting 0 [ 495.582426][ T45] usb 1-1: config 220 interface 76 has no altsetting 0 [ 495.582443][ T45] usb 1-1: config 220 interface 1 has no altsetting 0 [ 495.590782][ T45] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 495.590809][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.590828][ T45] usb 1-1: Product: syz [ 495.590861][ T45] usb 1-1: Manufacturer: syz [ 495.590875][ T45] usb 1-1: SerialNumber: syz [ 495.759996][ T6033] Error reading MAC address [ 495.762239][T15410] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 495.762429][T15410] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 495.780722][ T1229] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 495.858476][ T45] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 495.858508][ T45] usb 1-1: No valid video chain found. [ 495.858567][ T45] usb 1-1: selecting invalid altsetting 0 [ 495.890284][ C0] vkms_vblank_simulate: vblank timer overrun [ 495.923786][ T45] usb 1-1: selecting invalid altsetting 0 [ 495.923823][ T45] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 495.936650][ T45] usb 1-1: USB disconnect, device number 42 [ 495.957555][ T1229] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 495.957583][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.983191][ T6033] sr9700 7-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 495.986971][ T1229] usb 4-1: config 0 descriptor?? [ 496.007512][ T1229] cp210x 4-1:0.0: cp210x converter detected [ 496.018627][ T6033] usb 7-1: USB disconnect, device number 7 [ 496.616521][ T1229] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 496.616577][ T1229] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 496.659173][ T1229] usb 4-1: cp210x converter now attached to ttyUSB0 [ 496.676162][ T1229] usb 4-1: USB disconnect, device number 33 [ 496.697150][ T1229] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 496.697660][ T1229] cp210x 4-1:0.0: device disconnected [ 498.088428][ T1229] IPVS: starting estimator thread 0... [ 498.122086][ T6012] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 498.181961][T15503] IPVS: using max 8 ests per chain, 19200 per kthread [ 498.284922][ T6012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 498.284954][ T6012] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.284993][ T6012] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 498.285014][ T6012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.299669][ T6012] usb 4-1: config 0 descriptor?? [ 498.300703][T15492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 498.585090][T15516] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4114'. [ 498.585126][T15516] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4114'. [ 498.772212][ T6012] lenovo 0003:17EF:60EE.002E: hidraw0: USB HID v1.01 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0 [ 499.004736][T15532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 499.014339][ T45] usb 4-1: USB disconnect, device number 34 [ 499.492722][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4123'. [ 500.318855][T15568] sit1: entered allmulticast mode [ 500.527416][ T5913] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 500.679990][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 500.692499][ T5913] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 500.692528][ T5913] usb 1-1: config 0 has no interface number 0 [ 500.692574][ T5913] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 500.692601][ T5913] usb 1-1: config 0 interface 85 has no altsetting 0 [ 500.697002][ T5913] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 500.697028][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.697046][ T5913] usb 1-1: Product: syz [ 500.697058][ T5913] usb 1-1: Manufacturer: syz [ 500.697070][ T5913] usb 1-1: SerialNumber: syz [ 500.767230][ T5913] usb 1-1: config 0 descriptor?? [ 500.833969][T15588] openvswitch: netlink: Message has 4 unknown bytes. [ 501.384631][T15608] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4152'. [ 501.432119][ T5913] appletouch 1-1:0.85: Geyser mode initialized. [ 501.439751][ T5913] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input58 [ 501.621088][ T45] usb 1-1: USB disconnect, device number 43 [ 501.646845][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.685840][T15618] block nbd5: Attempted send on invalid socket [ 501.685864][T15618] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.687237][T15618] block nbd5: Attempted send on invalid socket [ 501.687255][T15618] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.687357][T15618] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 501.687755][T15618] block nbd5: Attempted send on invalid socket [ 501.687769][T15618] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.687863][T15618] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 501.689850][T15618] block nbd5: Attempted send on invalid socket [ 501.689867][T15618] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.690959][T15618] block nbd5: Attempted send on invalid socket [ 501.690975][T15618] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.691068][T15618] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 501.691326][T15618] block nbd5: Attempted send on invalid socket [ 501.691339][T15618] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.691432][T15618] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 501.729408][T15618] block nbd5: Attempted send on invalid socket [ 501.729430][T15618] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.737460][T15618] block nbd5: Attempted send on invalid socket [ 501.737488][T15618] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.737589][T15618] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 501.878066][ T64] block nbd5: Attempted send on invalid socket [ 501.878090][ T64] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.886637][T15618] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 501.899978][T15618] block nbd5: Attempted send on invalid socket [ 501.899999][T15618] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.906956][T15618] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 501.907198][T15618] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 501.907216][T15618] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 501.909020][ T45] appletouch 1-1:0.85: input: appletouch disconnected [ 502.241244][T15629] loop7: detected capacity change from 0 to 16384 [ 502.305317][T15629] loop7: detected capacity change from 16384 to 16383 [ 503.280990][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4181'. [ 503.281018][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4181'. [ 504.000315][T15686] loop2: detected capacity change from 0 to 7 [ 504.009738][T15686] Dev loop2: unable to read RDB block 7 [ 504.009768][T15686] loop2: AHDI p1 p2 [ 504.009797][T15686] loop2: partition table partially beyond EOD, truncated [ 504.009897][T15686] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 504.932186][T15707] trusted_key: syz.1.4200 sent an empty control message without MSG_MORE. [ 504.991933][T15711] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 505.151880][ T6012] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 505.322189][ T6012] usb 6-1: Using ep0 maxpacket: 8 [ 505.324716][ T6012] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 505.324740][ T6012] usb 6-1: config 179 has no interface number 0 [ 505.324779][ T6012] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 505.324801][ T6012] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 505.324823][ T6012] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 505.324846][ T6012] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 505.324869][ T6012] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 505.324905][ T6012] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 505.324925][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.333715][T15708] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 505.629441][ T6012] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input59 [ 505.789811][T15708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.790468][T15708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.002672][ T5913] usb 6-1: USB disconnect, device number 32 [ 506.002672][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 506.002826][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 506.274711][T15731] netlink: 'syz.1.4208': attribute type 1 has an invalid length. [ 506.274733][T15731] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4208'. [ 506.274765][T15731] netlink: 'syz.1.4208': attribute type 1 has an invalid length. [ 506.274777][T15731] netlink: 'syz.1.4208': attribute type 2 has an invalid length. [ 506.274788][T15731] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4208'. [ 506.671856][T15737] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000005 [ 506.993189][ T5913] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 507.096576][T15746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4215'. [ 507.174051][ T5913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.174109][ T5913] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 507.174130][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.227502][ T5913] usb 6-1: config 0 descriptor?? [ 507.279472][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 507.629130][T15754] netlink: 'syz.1.4219': attribute type 11 has an invalid length. [ 507.665901][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 507.668627][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 507.887748][ T5913] pwc: recv_control_msg error -71 req 04 val 1000 [ 507.888333][ T5913] pwc: recv_control_msg error -71 req 04 val 1300 [ 507.888813][ T5913] pwc: recv_control_msg error -71 req 04 val 1400 [ 507.889294][ T5913] pwc: recv_control_msg error -71 req 02 val 2000 [ 507.889772][ T5913] pwc: recv_control_msg error -71 req 02 val 2100 [ 507.890368][ T5913] pwc: recv_control_msg error -71 req 04 val 1500 [ 507.890864][ T5913] pwc: recv_control_msg error -71 req 02 val 2500 [ 507.891410][ T5913] pwc: recv_control_msg error -71 req 02 val 2400 [ 507.944907][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 507.945513][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 507.946043][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 507.949290][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 507.949833][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 508.011223][ T5913] pwc: Registered as video103. [ 508.014531][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input60 [ 508.034788][ T5913] usb 6-1: USB disconnect, device number 33 [ 508.885588][T15790] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4234'. [ 510.162030][ T1229] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 510.312092][ T1229] usb 2-1: Using ep0 maxpacket: 16 [ 510.314197][ T1229] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.314220][ T1229] usb 2-1: config 0 has no interface number 0 [ 510.316883][ T1229] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 510.316908][ T1229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.317043][ T1229] usb 2-1: Product: syz [ 510.317056][ T1229] usb 2-1: Manufacturer: syz [ 510.317068][ T1229] usb 2-1: SerialNumber: syz [ 510.321486][ T1229] usb 2-1: config 0 descriptor?? [ 510.381246][ T1229] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 511.017372][T15833] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4251'. [ 511.371480][T15845] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4256'. [ 511.394178][ T1229] gspca_spca1528: reg_w err -71 [ 511.394247][ T1229] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 511.396238][ T1229] usb 2-1: USB disconnect, device number 38 [ 511.592646][T15850] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 511.807608][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4262'. [ 511.975534][T15862] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4264'. [ 511.976018][T15862] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4264'. [ 512.411064][T15880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 512.955815][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 512.955831][ T37] audit: type=1326 audit(1756379858.464:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15898 comm="syz.5.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 512.956106][ T37] audit: type=1326 audit(1756379858.464:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15898 comm="syz.5.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 512.957418][ T37] audit: type=1326 audit(1756379858.464:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15898 comm="syz.5.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 512.957673][ T37] audit: type=1326 audit(1756379858.464:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15898 comm="syz.5.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 512.958664][ T37] audit: type=1326 audit(1756379858.464:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15898 comm="syz.5.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 512.958970][ T37] audit: type=1326 audit(1756379858.464:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15898 comm="syz.5.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 512.969704][ T37] audit: type=1326 audit(1756379858.474:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15898 comm="syz.5.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 512.970785][ T37] audit: type=1326 audit(1756379858.474:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15898 comm="syz.5.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 513.107709][T15904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 513.911645][T15935] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 513.961876][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 514.058505][T15940] input: syz0 as /devices/virtual/input/input61 [ 514.111919][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 514.117762][ T9] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 514.117789][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.117806][ T9] usb 7-1: Product: syz [ 514.117819][ T9] usb 7-1: Manufacturer: syz [ 514.117832][ T9] usb 7-1: SerialNumber: syz [ 514.133856][ T9] usb 7-1: config 0 descriptor?? [ 514.180843][T15942] input: syz0 as /devices/virtual/input/input62 [ 514.399605][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 514.928835][T15968] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 515.192705][ T9] gspca_sunplus: reg_w_riv err -71 [ 515.192803][ T9] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 515.198785][ T9] usb 7-1: USB disconnect, device number 8 [ 515.396383][T15981] vivid-000: disconnect [ 515.464839][T15976] vivid-000: reconnect [ 516.147805][ T6012] kernel read not supported for file /dsp (pid: 6012 comm: kworker/0:6) [ 517.311344][T16003] syz.0.4328 (16003): drop_caches: 2 [ 517.593645][T16033] sctp: [Deprecated]: syz.1.4340 (pid 16033) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.593645][T16033] Use struct sctp_sack_info instead [ 518.421877][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 518.584464][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.584496][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.584533][ T9] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 518.584553][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.591694][ T9] usb 2-1: config 0 descriptor?? [ 518.601987][ T45] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 518.773697][ T45] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 518.773760][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.773784][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.773857][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 518.802448][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 518.802529][ T45] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 518.802548][ T45] usb 4-1: Manufacturer: syz [ 518.828871][ T45] usb 4-1: config 0 descriptor?? [ 519.129623][ T9] hid-led 0003:0FC5:B080.002F: unknown main item tag 0x0 [ 519.129877][ T9] hid-led 0003:0FC5:B080.002F: unknown main item tag 0x0 [ 519.129905][ T9] hid-led 0003:0FC5:B080.002F: unknown main item tag 0x0 [ 519.326180][ T45] appleir 0003:05AC:8243.0030: unknown main item tag 0x0 [ 519.374324][ T45] appleir 0003:05AC:8243.0030: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 519.473886][ T6012] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 519.626158][ T6012] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 519.626184][ T6012] usb 6-1: config 0 has no interface number 0 [ 519.626256][ T6012] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 519.626288][ T6012] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 519.626312][ T6012] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 519.626331][ T6012] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.626370][ T6012] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 519.626390][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.638742][ T9] usb 4-1: USB disconnect, device number 35 [ 519.649168][ T6012] usb 6-1: config 0 descriptor?? [ 519.754458][ T45] usb 2-1: USB disconnect, device number 39 [ 520.069366][ T6012] hid (null): invalid report_size 671936076 [ 520.069402][ T6012] hid (null): report_id 0 is invalid [ 520.257928][T16101] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4371'. [ 520.302455][ T6012] input: HID 28bd:0042 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.0031/input/input63 [ 520.330270][ T6012] uclogic 0003:28BD:0042.0031: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 520.334729][ T6012] usb 6-1: USB disconnect, device number 34 [ 520.414062][ T5913] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 520.421565][T16107] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4374'. [ 520.526196][ T5927] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 520.561910][ T5913] usb 1-1: Using ep0 maxpacket: 32 [ 520.563801][ T5913] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 520.563824][ T5913] usb 1-1: config 0 has no interface number 0 [ 520.572372][ T5913] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 520.572398][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.572416][ T5913] usb 1-1: Product: syz [ 520.572428][ T5913] usb 1-1: Manufacturer: syz [ 520.572439][ T5913] usb 1-1: SerialNumber: syz [ 520.634526][ T5913] usb 1-1: config 0 descriptor?? [ 520.640866][ T5913] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 520.684934][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 520.697808][ T5927] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 520.697891][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.697909][ T5927] usb 4-1: Product: syz [ 520.697922][ T5927] usb 4-1: Manufacturer: syz [ 520.697934][ T5927] usb 4-1: SerialNumber: syz [ 520.745646][ T5927] usb 4-1: config 0 descriptor?? [ 520.768733][ T5927] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 520.913875][ T5913] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 520.955329][ T5913] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 521.154193][T16122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4381'. [ 521.297855][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 521.299713][ T6012] usb 1-1: USB disconnect, device number 44 [ 521.334103][ T6012] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 521.366659][ T6012] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 521.367692][ T6012] quatech2 1-1:0.51: device disconnected [ 521.835271][ T5927] gspca_sonixj: reg_w err -71 [ 521.835380][ T5927] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 521.855795][ T5927] usb 4-1: USB disconnect, device number 36 [ 522.108794][T16134] 9pnet: p9_errstr2errno: server reported unknown error @00000000000000000004 [ 522.122698][T16135] syzkaller1: entered promiscuous mode [ 522.122726][T16135] syzkaller1: entered allmulticast mode [ 522.603161][T16142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.865424][T16155] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4397'. [ 523.470151][ C0] vkms_vblank_simulate: vblank timer overrun [ 524.052235][ T45] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 524.217132][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.217179][ T45] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 524.219792][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.219818][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.219835][ T45] usb 1-1: Product: syz [ 524.219848][ T45] usb 1-1: Manufacturer: syz [ 524.219859][ T45] usb 1-1: SerialNumber: syz [ 524.271756][ T45] cdc_mbim 1-1:1.0: skipping garbage [ 524.487526][T16174] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 524.617140][T16193] : renamed from wg2 (while UP) [ 524.861895][ T5927] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 525.026996][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 525.027028][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 525.027052][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 525.027071][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 525.027109][ T5927] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.027128][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.108266][T16174] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 525.108717][ T45] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 525.108738][ T45] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 525.110357][ T5927] usb 4-1: config 0 descriptor?? [ 525.309772][ T45] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 525.326704][ T45] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 525.351508][ T45] wwan wwan0: port wwan0mbim0 attached [ 525.370609][ T45] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, ae:52:30:9c:da:8f [ 525.389414][ T45] usb 1-1: USB disconnect, device number 45 [ 525.393425][ T45] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 525.421953][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 525.528256][ T45] wwan wwan0: port wwan0mbim0 disconnected [ 525.581901][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 525.590167][ T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 525.590195][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.590213][ T9] usb 6-1: Product: syz [ 525.590226][ T9] usb 6-1: Manufacturer: syz [ 525.590239][ T9] usb 6-1: SerialNumber: syz [ 525.701416][ T5927] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 525.724157][ T9] usb 6-1: config 0 descriptor?? [ 525.738381][ T9] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 525.741254][ T9] usb 6-1: Detected FT232H [ 525.861271][ T45] usb 4-1: USB disconnect, device number 37 [ 526.001814][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 526.459832][ T9] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 526.622353][ T5899] usb 6-1: USB disconnect, device number 35 [ 526.753067][ T5899] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 526.753568][ T5899] ftdi_sio 6-1:0.0: device disconnected [ 526.813909][ T5927] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 526.961876][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 526.967180][ T5927] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 526.967206][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.967224][ T5927] usb 4-1: Product: syz [ 526.967236][ T5927] usb 4-1: Manufacturer: syz [ 526.967247][ T5927] usb 4-1: SerialNumber: syz [ 527.014619][ T5927] usb 4-1: config 0 descriptor?? [ 527.021669][ T5927] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 527.176208][T16243] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4435'. [ 528.086679][ T5899] usb 4-1: USB disconnect, device number 38 [ 528.997047][T16299] binfmt_misc: register: failed to install interpreter file ./file1 [ 529.680058][T16323] kvm: user requested TSC rate below hardware speed [ 530.486143][T16363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4488'. [ 530.673835][ T5927] kernel write not supported for file bpf-prog (pid: 5927 comm: kworker/1:5) [ 530.791821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 530.891896][ T5899] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 531.041996][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 531.044522][ T5899] usb 7-1: config 0 has no interfaces? [ 531.050673][ T5899] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 531.050699][ T5899] usb 7-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 531.050718][ T5899] usb 7-1: Product: syz [ 531.050729][ T5899] usb 7-1: Manufacturer: syz [ 531.050741][ T5899] usb 7-1: SerialNumber: syz [ 531.104522][ T5899] usb 7-1: config 0 descriptor?? [ 531.367788][ T9] usb 7-1: USB disconnect, device number 9 [ 531.537674][T16385] netlink: 'syz.5.4496': attribute type 32 has an invalid length. [ 531.537971][T16385] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 531.796191][T16388] sctp: [Deprecated]: syz.1.4497 (pid 16388) Use of int in maxseg socket option. [ 531.796191][T16388] Use struct sctp_assoc_value instead [ 531.858314][T16390] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4498'. [ 531.868472][T16390] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4498'. [ 532.359307][T16411] geneve1: entered promiscuous mode [ 532.391926][T16411] geneve1: left promiscuous mode [ 532.497170][T16418] input: syz1 as /devices/virtual/input/input65 [ 532.652040][ T5927] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 532.812231][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 532.814581][ T5927] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 532.814604][ T5927] usb 1-1: config 0 has no interface number 0 [ 532.817561][ T5927] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 532.817584][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.817600][ T5927] usb 1-1: Product: syz [ 532.817613][ T5927] usb 1-1: Manufacturer: syz [ 532.817625][ T5927] usb 1-1: SerialNumber: syz [ 532.880927][ T5927] usb 1-1: config 0 descriptor?? [ 532.885865][ T5927] smsc95xx v2.0.0 [ 533.306237][ T5927] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 533.306264][ T5927] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 533.441996][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 533.470767][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4521'. [ 533.590006][T16446] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4524'. [ 533.592776][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 533.599832][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 533.599855][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 533.599872][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 533.605532][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 533.605558][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.605575][ T9] usb 2-1: Product: syz [ 533.605587][ T9] usb 2-1: Manufacturer: syz [ 533.605599][ T9] usb 2-1: SerialNumber: syz [ 533.759503][ T5927] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 533.759814][ T5927] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 533.827301][ T5927] usb 1-1: USB disconnect, device number 46 [ 534.420785][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.714687][ C0] vkms_vblank_simulate: vblank timer overrun [ 534.716519][ T9] usb 2-1: 0:2 : does not exist [ 535.369076][ C0] vkms_vblank_simulate: vblank timer overrun [ 535.893821][ T9] usb 2-1: USB disconnect, device number 40 [ 536.378085][T16451] syz.6.4526 (16451): drop_caches: 2 [ 536.567809][T16476] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4536'. [ 537.830836][T16512] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4553'. [ 537.991907][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 538.141914][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 538.144475][ T9] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 538.144497][ T9] usb 4-1: config 0 has no interface number 0 [ 538.151883][ T9] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 538.151911][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.151929][ T9] usb 4-1: Product: syz [ 538.151941][ T9] usb 4-1: Manufacturer: syz [ 538.151953][ T9] usb 4-1: SerialNumber: syz [ 538.163916][ T9] usb 4-1: config 0 descriptor?? [ 538.440755][T16523] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4558'. [ 538.440788][T16523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4558'. [ 538.518403][ T9] kaweth 4-1:0.235: Firmware present in device. [ 538.673307][ T9] kaweth 4-1:0.235: Statistics collection: 0 [ 538.673329][ T9] kaweth 4-1:0.235: Multicast filter limit: 0 [ 538.673342][ T9] kaweth 4-1:0.235: MTU: 0 [ 538.673354][ T9] kaweth 4-1:0.235: Read MAC address 00:00:00:00:00:00 [ 538.736499][T16500] syz.5.4548 (16500): drop_caches: 2 [ 538.758461][T16525] syzkaller1: entered promiscuous mode [ 538.758492][T16525] syzkaller1: entered allmulticast mode [ 539.079861][ T9] kaweth 4-1:0.235: Error setting SOFS wait [ 539.080197][ T9] kaweth 4-1:0.235: probe with driver kaweth failed with error -5 [ 539.111487][ T9] usb 4-1: USB disconnect, device number 39 [ 539.384529][T16540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4566'. [ 540.121974][ T60] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 541.380621][T16609] netlink: 'syz.6.4597': attribute type 12 has an invalid length. [ 541.380642][T16609] netlink: 'syz.6.4597': attribute type 29 has an invalid length. [ 541.380655][T16609] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4597'. [ 541.380695][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4597'. [ 542.417196][T16647] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4612'. [ 542.795555][T16652] netlink: 'syz.5.4614': attribute type 1 has an invalid length. [ 544.172891][T16693] autofs: Bad value for 'fd' [ 544.206568][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 544.234684][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 544.238725][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 544.257297][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 544.263183][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 544.526227][T14034] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.072222][T14034] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.510861][T14034] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.042987][T14034] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.364351][ T60] Bluetooth: hci2: command tx timeout [ 546.682983][T16695] chnl_net:caif_netlink_parms(): no params data found [ 546.711910][ T45] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 546.881997][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 546.884510][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.884539][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.884575][ T45] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 546.884597][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.894454][ T45] usb 1-1: config 0 descriptor?? [ 547.013847][T14034] bridge_slave_1: left allmulticast mode [ 547.013880][T14034] bridge_slave_1: left promiscuous mode [ 547.014160][T14034] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.111382][T14034] bridge_slave_0: left allmulticast mode [ 547.111415][T14034] bridge_slave_0: left promiscuous mode [ 547.118821][T14034] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.353463][ T45] ft260 0003:0403:6030.0033: unknown main item tag 0x0 [ 547.535895][ T45] ft260 0003:0403:6030.0033: chip code: 6424 8183 [ 547.736493][ T45] ft260 0003:0403:6030.0033: failed to retrieve system status [ 547.736893][ T45] ft260 0003:0403:6030.0033: probe with driver ft260 failed with error -32 [ 547.752233][ T45] usb 1-1: USB disconnect, device number 47 [ 548.228671][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.452119][ T60] Bluetooth: hci2: command tx timeout [ 548.563380][T14034] gretap0 (unregistering): left promiscuous mode [ 548.691884][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.761372][ C1] vkms_vblank_simulate: vblank timer overrun [ 548.832673][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.044297][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.107844][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.409305][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.508136][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.559617][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.596842][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.659190][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.745675][ C1] vkms_vblank_simulate: vblank timer overrun [ 549.853713][T14034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.912674][T14034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.966984][T14034] bond0 (unregistering): Released all slaves [ 550.383530][T14034] tipc: Disabling bearer [ 550.384739][T14034] tipc: Left network mode [ 550.541839][ T60] Bluetooth: hci2: command tx timeout [ 550.587793][T14034] IPVS: stopping backup sync thread 14696 ... [ 551.316018][T16695] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.316234][T16695] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.316484][T16695] bridge_slave_0: entered allmulticast mode [ 551.323365][T16695] bridge_slave_0: entered promiscuous mode [ 551.342422][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4685'. [ 551.353741][T16695] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.366884][T16695] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.367152][T16695] bridge_slave_1: entered allmulticast mode [ 551.373937][T16695] bridge_slave_1: entered promiscuous mode [ 551.509284][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.580193][T16837] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 552.341035][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.382733][T16695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.434791][T16695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.489255][T14034] batadv_slave_1: left promiscuous mode [ 552.601892][ T60] Bluetooth: hci2: command tx timeout [ 552.703114][T14034] hsr_slave_0: left promiscuous mode [ 552.744155][T14034] hsr_slave_1: left promiscuous mode [ 552.745155][T14034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.745184][T14034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.804556][T14034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.804587][T14034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.993583][T14034] veth1_macvtap: left promiscuous mode [ 552.993711][T14034] veth0_macvtap: left promiscuous mode [ 552.994001][T14034] veth1_vlan: left promiscuous mode [ 552.994203][T14034] veth0_vlan: left promiscuous mode [ 553.141843][ T5913] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 553.292228][ T5913] usb 6-1: Using ep0 maxpacket: 16 [ 553.294992][ T5913] usb 6-1: config index 0 descriptor too short (expected 46642, got 72) [ 553.295018][ T5913] usb 6-1: config 173 has too many interfaces: 131, using maximum allowed: 32 [ 553.295037][ T5913] usb 6-1: config 173 contains an unexpected descriptor of type 0x1, skipping [ 553.295053][ T5913] usb 6-1: config 173 has an invalid descriptor of length 0, skipping remainder of the config [ 553.295070][ T5913] usb 6-1: config 173 has 0 interfaces, different from the descriptor's value: 131 [ 553.299299][ T5913] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 553.299325][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.299343][ T5913] usb 6-1: Product: syz [ 553.299355][ T5913] usb 6-1: Manufacturer: syz [ 553.299367][ T5913] usb 6-1: SerialNumber: syz [ 553.550220][ T5913] usb 6-1: USB disconnect, device number 36 [ 553.982209][ T45] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 554.176550][ T45] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 554.176578][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.176596][ T45] usb 4-1: Product: syz [ 554.176608][ T45] usb 4-1: Manufacturer: syz [ 554.176621][ T45] usb 4-1: SerialNumber: syz [ 554.216996][ T45] usb 4-1: config 0 descriptor?? [ 554.449274][ T5899] usb 4-1: USB disconnect, device number 40 [ 554.772030][ T5847] Bluetooth: hci2: command 0x0405 tx timeout [ 555.230470][T16897] openvswitch: netlink: IPv4 tun info is not correct [ 556.202423][T14034] team0 (unregistering): Port device team_slave_1 removed [ 556.536064][T14034] team0 (unregistering): Port device team_slave_0 removed [ 560.076004][T16695] team0: Port device team_slave_0 added [ 560.114328][T16695] team0: Port device team_slave_1 added [ 560.523514][T16695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.523530][T16695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.523555][T16695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.562053][T16695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.562071][T16695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.562096][T16695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.851760][T16936] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 561.009360][T16948] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 561.009385][T16948] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 561.102382][T16695] hsr_slave_0: entered promiscuous mode [ 561.104057][T16695] hsr_slave_1: entered promiscuous mode [ 561.105131][T16695] debugfs: 'hsr0' already exists in 'hsr' [ 561.105155][T16695] Cannot create hsr debugfs directory [ 561.225448][T16950] evm: overlay not supported [ 561.601486][T14034] IPVS: stop unused estimator thread 0... [ 561.769269][ T37] audit: type=1326 audit(1756379907.274:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16962 comm="syz.1.4747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2793beebe9 code=0x0 [ 562.331000][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4751'. [ 562.549736][T16980] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.654964][T16695] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 562.712362][T16695] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 562.793529][T16695] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 562.862682][T16695] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 563.093131][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 563.095666][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.179094][T16695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.218245][T16695] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.237573][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.237885][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.288094][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.288319][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.468654][T17010] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4764'. [ 563.502909][T17010] bridge0: port 3(vlan2) entered blocking state [ 563.506067][T17010] bridge0: port 3(vlan2) entered disabled state [ 563.506669][T17010] vlan2: entered allmulticast mode [ 563.506685][T17010] dummy0: entered allmulticast mode [ 563.519338][T17010] vlan2: entered promiscuous mode [ 563.519357][T17010] dummy0: entered promiscuous mode [ 563.712338][T17019] netlink: 360 bytes leftover after parsing attributes in process `syz.3.4767'. [ 564.328444][T16695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.331939][ T5927] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 564.418130][T17040] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4776'. [ 564.514317][ T5927] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 564.514342][ T5927] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 564.514980][ T5837] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 564.515843][ T5927] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 564.515865][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 564.515882][ T5927] usb 6-1: SerialNumber: syz [ 564.672530][ T5837] usb 4-1: Using ep0 maxpacket: 32 [ 564.675727][ T5837] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 564.675754][ T5837] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 564.675785][ T5837] usb 4-1: config 0 interface 0 has no altsetting 0 [ 564.679471][ T5837] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 564.679496][ T5837] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 564.679514][ T5837] usb 4-1: Product: syz [ 564.679527][ T5837] usb 4-1: Manufacturer: syz [ 564.679540][ T5837] usb 4-1: SerialNumber: syz [ 564.722017][ T5837] usb 4-1: config 0 descriptor?? [ 564.778881][ T5927] usb 6-1: 0:2 : does not exist [ 564.872012][ T5927] usb 6-1: USB disconnect, device number 37 [ 565.165602][ T5837] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 565.220713][T16695] veth0_vlan: entered promiscuous mode [ 565.262419][T16695] veth1_vlan: entered promiscuous mode [ 565.431842][T16695] veth0_macvtap: entered promiscuous mode [ 565.521145][T16695] veth1_macvtap: entered promiscuous mode [ 565.576601][ T5837] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 565.605325][T16695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.623754][ T5837] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 565.657210][T16695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.720912][T14034] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.721533][T14034] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.726107][T14034] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.726172][T14034] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.807774][ T5837] usb 4-1: USB disconnect, device number 41 [ 566.320342][T14034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.320361][T14034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.545231][T14034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.545251][T14034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.912069][ C0] vkms_vblank_simulate: vblank timer overrun [ 568.812070][ T37] audit: type=1326 audit(1756379914.314:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17151 comm="syz.3.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 568.812131][ T37] audit: type=1326 audit(1756379914.314:3570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17151 comm="syz.3.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 568.816184][ T37] audit: type=1326 audit(1756379914.324:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17151 comm="syz.3.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 568.816231][ T37] audit: type=1326 audit(1756379914.324:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17151 comm="syz.3.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 568.816270][ T37] audit: type=1326 audit(1756379914.324:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17151 comm="syz.3.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 568.834369][ T37] audit: type=1326 audit(1756379914.344:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17151 comm="syz.3.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 568.834421][ T37] audit: type=1326 audit(1756379914.344:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17151 comm="syz.3.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 568.835945][ T37] audit: type=1326 audit(1756379914.344:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17151 comm="syz.3.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 568.835993][ T37] audit: type=1326 audit(1756379914.344:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17151 comm="syz.3.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 568.836038][ T37] audit: type=1326 audit(1756379914.344:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17151 comm="syz.3.4823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f44ab48ebe9 code=0x7ffc0000 [ 570.405832][T17192] sp0: Synchronizing with TNC [ 570.946412][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4845'. [ 571.173730][ T43] Bluetooth: hci4: Frame reassembly failed (-84) [ 572.205766][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.235253][ T5922] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 572.334094][T17227] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 572.522218][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.002164][ T5922] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 573.248700][ T60] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 573.535876][T17258] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 574.251237][T17280] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input66 [ 574.312017][ T5899] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 574.483974][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 574.484006][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.484028][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.484065][ T5899] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 574.484086][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.570205][ T5899] usb 4-1: config 0 descriptor?? [ 575.017660][ T5899] sony 0003:054C:024B.0034: unexpected long global item [ 575.018493][ T5899] sony 0003:054C:024B.0034: parse failed [ 575.018589][ T5899] sony 0003:054C:024B.0034: probe with driver sony failed with error -22 [ 575.222679][ T6012] usb 4-1: USB disconnect, device number 42 [ 575.532122][ T5899] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 575.685861][ T5899] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 575.685932][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.689146][ T5899] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 575.689173][ T5899] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 575.689190][ T5899] usb 6-1: Manufacturer: syz [ 575.707870][ T5899] usb 6-1: config 0 descriptor?? [ 575.855128][ T5899] rc_core: IR keymap rc-hauppauge not found [ 575.855149][ T5899] Registered IR keymap rc-empty [ 575.856667][ T5899] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 575.859577][ T5899] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input67 [ 575.952234][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 575.986148][ T6012] usb 6-1: USB disconnect, device number 38 [ 578.202439][ T6033] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 578.360865][ T6033] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 578.360893][ T6033] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.360911][ T6033] usb 4-1: Product: syz [ 578.360923][ T6033] usb 4-1: Manufacturer: syz [ 578.360936][ T6033] usb 4-1: SerialNumber: syz [ 578.620210][ T6033] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 578.620272][ T6033] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 578.620290][ T6033] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 578.674405][ T6033] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 578.730248][ T6033] usb 4-1: USB disconnect, device number 43 [ 579.064580][T17421] overlayfs: failed to clone upperpath [ 581.227125][T17491] input: syz1 as /devices/virtual/input/input68 [ 582.015221][T17509] fuse: Bad value for 'fd' [ 582.238640][T17518] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4982'. [ 582.402839][T17523] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4984'. [ 582.402877][T17523] nbd: must specify at least one socket [ 582.543493][T17530] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4986'. [ 582.544040][T17526] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4986'. [ 584.526688][T17599] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 584.962286][T17615] batadv_slave_1: entered promiscuous mode [ 584.968176][T17614] batadv_slave_1: left promiscuous mode [ 585.961215][T17645] random: crng reseeded on system resumption [ 586.223011][T17654] syz.3.5040 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 586.665973][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 586.665989][ T37] audit: type=1326 audit(1756379932.174:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17671 comm="syz.3.5048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44ab48ebe9 code=0x0 [ 586.686184][T17675] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 587.381874][ T6033] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 587.532166][ T6033] usb 1-1: Using ep0 maxpacket: 8 [ 587.534616][ T6033] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 587.534640][ T6033] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.534658][ T6033] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 587.534675][ T6033] usb 1-1: config 1 has no interface number 0 [ 587.534719][ T6033] usb 1-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 587.539111][ T6033] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 587.539138][ T6033] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.539155][ T6033] usb 1-1: Product: syz [ 587.539167][ T6033] usb 1-1: Manufacturer: syz [ 587.539179][ T6033] usb 1-1: SerialNumber: syz [ 587.641041][ T6033] cdc_wdm 1-1:1.128: skipping garbage [ 587.641062][ T6033] cdc_wdm 1-1:1.128: skipping garbage [ 587.641074][ T6033] cdc_wdm 1-1:1.128: invalid descriptor buffer length [ 587.641109][ T6033] cdc_wdm 1-1:1.128: probe with driver cdc_wdm failed with error -22 [ 587.726337][T17701] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 587.854923][ T6033] usb 1-1: USB disconnect, device number 48 [ 588.338257][T17711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5065'. [ 589.483774][ T6012] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 589.636271][ T6012] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 589.636332][ T6012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.636356][ T6012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.636375][ T6012] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 589.637800][ T6012] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 589.637826][ T6012] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 589.637843][ T6012] usb 1-1: Manufacturer: syz [ 589.649955][ T6012] usb 1-1: config 0 descriptor?? [ 589.665281][T17746] sctp: [Deprecated]: syz.3.5081 (pid 17746) Use of int in max_burst socket option deprecated. [ 589.665281][T17746] Use struct sctp_assoc_value instead [ 590.125820][ T6012] appleir 0003:05AC:8243.0035: unknown main item tag 0x0 [ 590.143559][ T6012] appleir 0003:05AC:8243.0035: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 590.380287][ T37] audit: type=1800 audit(1756379935.884:3583): pid=17754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.5085" name="nullb0" dev="tmpfs" ino=5747 res=0 errno=0 [ 590.429210][ T6012] usb 1-1: USB disconnect, device number 49 [ 591.168141][T17781] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5096'. [ 592.121974][ T45] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 592.281912][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 592.284956][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.284984][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.285025][ T45] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 592.285047][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.290482][ T45] usb 1-1: config 0 descriptor?? [ 592.295055][ T45] hub 1-1:0.0: USB hub found [ 592.513594][ T45] hub 1-1:0.0: 9 ports detected [ 592.514478][ T45] hub 1-1:0.0: insufficient power available to use all downstream ports [ 592.732055][ T45] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 592.732081][ T45] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 592.739243][ T45] usbhid 1-1:0.0: can't add hid device: -71 [ 592.739370][ T45] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 592.802944][ T45] usb 1-1: USB disconnect, device number 50 [ 594.695463][T17886] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 34 [ 597.162845][T17955] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5175'. [ 597.291950][ T6033] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 597.458860][ T6033] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 597.458891][ T6033] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 597.458915][ T6033] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 597.458936][ T6033] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 597.458976][ T6033] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 597.458997][ T6033] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.549913][ T6033] usb 6-1: config 0 descriptor?? [ 598.017607][ T6033] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 598.276677][ T5913] usb 6-1: USB disconnect, device number 39 [ 598.660990][T18007] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input70 [ 599.022937][ T60] Bluetooth: hci2: link tx timeout [ 599.027787][ T60] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 601.082079][ T60] Bluetooth: hci2: command 0x0405 tx timeout [ 601.192363][T18073] syzkaller1: entered promiscuous mode [ 601.192393][T18073] syzkaller1: entered allmulticast mode [ 602.195448][T18104] vivid-000: disconnect [ 602.225517][T18101] vivid-000: reconnect [ 602.718937][T18122] 9pnet: p9_errstr2errno: server reported unknown error  [ 604.508945][T18178] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 606.292020][T18203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5280'. [ 606.292061][T18203] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5280'. [ 606.871941][ T5922] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 606.971935][ T45] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 607.031599][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.031630][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.031664][ T5922] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 607.031684][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.047429][ T5922] usb 4-1: config 0 descriptor?? [ 607.073544][T18225] sit0: entered allmulticast mode [ 607.142584][ T45] usb 6-1: Using ep0 maxpacket: 32 [ 607.150227][ T45] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 607.150311][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.150329][ T45] usb 6-1: Product: syz [ 607.150340][ T45] usb 6-1: Manufacturer: syz [ 607.150353][ T45] usb 6-1: SerialNumber: syz [ 607.218991][ T45] usb 6-1: config 0 descriptor?? [ 607.331366][ T45] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 607.527440][ T5922] kye 0003:0458:0153.0037: unknown main item tag 0x3 [ 607.539475][ T5922] kye 0003:0458:0153.0037: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.3-1/input0 [ 607.702311][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5294'. [ 607.762508][ T5913] usb 4-1: USB disconnect, device number 44 [ 608.515097][ T45] gspca_topro: reg_w err -71 [ 608.552225][ T45] gspca_topro: Sensor soi763a [ 608.573613][ T45] usb 6-1: USB disconnect, device number 40 [ 609.162650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.254163][T18279] netlink: 752 bytes leftover after parsing attributes in process `syz.7.5314'. [ 609.367475][T18282] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5315'. [ 609.437739][T18284] loop6: detected capacity change from 0 to 7 [ 609.446664][T18284] Dev loop6: unable to read RDB block 7 [ 609.446710][T18284] loop6: unable to read partition table [ 609.446951][T18284] loop6: partition table beyond EOD, truncated [ 609.446968][T18284] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 609.757362][T18300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.678173][T18344] netlink: 'syz.3.5338': attribute type 4 has an invalid length. [ 610.730732][T18342] netlink: 'syz.3.5338': attribute type 4 has an invalid length. [ 611.784333][T18385] input: syz0 as /devices/virtual/input/input72 [ 612.301971][ T45] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 612.455156][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.455188][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.455208][ T45] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 612.455247][ T45] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 612.455268][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.460776][ T45] usb 6-1: config 0 descriptor?? [ 612.915264][ T45] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 614.866173][T18451] ip6gretap0: entered promiscuous mode [ 614.866336][T18451] macsec2: entered allmulticast mode [ 614.866347][T18451] ip6gretap0: entered allmulticast mode [ 614.913642][T18451] ip6gretap0: left allmulticast mode [ 614.913809][T18451] ip6gretap0: left promiscuous mode [ 614.971860][ T5927] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 615.028183][ T5899] usb 6-1: USB disconnect, device number 41 [ 615.167583][ T5927] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 615.167613][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.167744][ T5927] usb 1-1: Product: syz [ 615.167758][ T5927] usb 1-1: Manufacturer: syz [ 615.167824][ T5927] usb 1-1: SerialNumber: syz [ 615.209615][ T5927] usb 1-1: config 0 descriptor?? [ 615.258298][T18455] loop6: detected capacity change from 0 to 7 [ 615.296051][T18455] Dev loop6: unable to read RDB block 7 [ 615.296087][T18455] loop6: AHDI p3 p4 [ 615.296118][T18455] loop6: partition table partially beyond EOD, truncated [ 615.296226][T18455] loop6: p3 start 1886353253 is beyond EOD, truncated [ 615.494175][ T5922] usb 1-1: USB disconnect, device number 51 [ 617.001900][ T5922] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 617.161977][ T5922] usb 6-1: Using ep0 maxpacket: 8 [ 617.164679][ T5922] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 617.164706][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.179798][ T5922] usb 6-1: config 0 descriptor?? [ 617.426563][ T5922] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 617.604963][ T45] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 617.782666][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 617.783075][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 617.783121][ T45] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 617.783141][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.796416][ T45] usb 4-1: config 0 descriptor?? [ 617.799176][T18495] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 618.424781][ T45] logitech 0003:046D:C298.0039: unknown main item tag 0x4 [ 618.424814][ T45] logitech 0003:046D:C298.0039: unknown main item tag 0x0 [ 618.424841][ T45] logitech 0003:046D:C298.0039: unknown main item tag 0x0 [ 618.424920][ T45] logitech 0003:046D:C298.0039: unbalanced collection at end of report description [ 618.426340][ T45] logitech 0003:046D:C298.0039: parse failed [ 618.426499][ T45] logitech 0003:046D:C298.0039: probe with driver logitech failed with error -22 [ 618.446419][ T5922] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 618.446448][ T5922] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 618.446715][ T5922] asix 6-1:0.0: probe with driver asix failed with error -71 [ 618.457322][ T5922] usb 6-1: USB disconnect, device number 42 [ 618.552286][ T45] usb 4-1: USB disconnect, device number 45 [ 619.692087][ T5922] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 619.844001][ T5922] usb 1-1: Using ep0 maxpacket: 16 [ 619.846670][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 619.846699][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 619.849818][ T5922] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 619.849843][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.849860][ T5922] usb 1-1: Product: syz [ 619.849871][ T5922] usb 1-1: Manufacturer: syz [ 619.849884][ T5922] usb 1-1: SerialNumber: syz [ 619.866917][ T5922] usb 1-1: config 0 descriptor?? [ 619.904498][ T5922] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 619.904531][ T5922] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 620.517349][ T5922] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 620.518093][ T5922] em28xx 1-1:0.0: Config register raw data: 0xbd [ 620.518112][ T5922] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 620.518126][ T5922] em28xx 1-1:0.0: No AC97 audio processor [ 620.702592][ T45] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 620.857231][ T45] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 620.857257][ T45] usb 4-1: config 0 has no interface number 0 [ 620.862931][ T45] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 620.863016][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.863034][ T45] usb 4-1: Product: syz [ 620.863046][ T45] usb 4-1: Manufacturer: syz [ 620.863058][ T45] usb 4-1: SerialNumber: syz [ 620.904434][ T45] usb 4-1: config 0 descriptor?? [ 620.936921][ T5922] usb 1-1: USB disconnect, device number 52 [ 621.113598][ T45] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 621.132301][ T45] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 621.136317][ T45] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 621.136372][ T45] usb 4-1: media controller created [ 621.153452][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 621.320513][ T45] DVB: Unable to find symbol dib7000p_attach() [ 621.320529][ T45] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 621.320542][ T45] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 621.326452][ T45] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 621.326525][ T45] usb 4-1: media controller created [ 621.355625][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 621.389350][ T45] dib0700: the master dib7090 has to be initialized first [ 621.389365][ T45] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 621.509106][ T45] rc_core: IR keymap rc-dib0700-rc5 not found [ 621.509126][ T45] Registered IR keymap rc-empty [ 621.509434][ T45] dvb-usb: could not initialize remote control. [ 621.509443][ T45] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 621.540491][ T45] usb 4-1: USB disconnect, device number 46 [ 621.599877][T18569] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 621.670810][ T45] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 622.552993][T18609] netlink: 'syz.5.5457': attribute type 13 has an invalid length. [ 622.553014][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5457'. [ 622.554565][T18609] netlink: 'syz.5.5457': attribute type 13 has an invalid length. [ 622.554582][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5457'. [ 622.950637][ T45] kernel write not supported for file /input/mouse0 (pid: 45 comm: kworker/0:2) [ 623.161141][T18629] netlink: 'syz.1.5466': attribute type 1 has an invalid length. [ 623.200210][T18629] bond1: entered promiscuous mode [ 623.200240][T18629] bond1: entered allmulticast mode [ 623.240545][T18629] bridge1: entered promiscuous mode [ 623.240575][T18629] bridge1: entered allmulticast mode [ 623.288341][T18629] bond1: (slave bridge1): making interface the new active one [ 623.289167][T18629] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 623.815252][ T5927] kernel write not supported for file [eventfd] (pid: 5927 comm: kworker/1:5) [ 623.885616][T18654] overlayfs: failed to clone lowerpath [ 624.530230][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.486056][T18708] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 625.665132][T18714] syzkaller1: entered promiscuous mode [ 625.665160][T18714] syzkaller1: entered allmulticast mode [ 625.671903][ T5899] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 625.825098][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.846572][T18719] overlay: filesystem on ./bus not supported as upperdir [ 625.871885][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 625.874285][ T5899] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 625.874309][ T5899] usb 6-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config [ 625.874326][ T5899] usb 6-1: config 226 has 0 interfaces, different from the descriptor's value: 2 [ 625.878022][ T5899] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 625.878048][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.878066][ T5899] usb 6-1: Product: syz [ 625.878079][ T5899] usb 6-1: Manufacturer: syz [ 625.878092][ T5899] usb 6-1: SerialNumber: syz [ 626.351283][ T5899] usb 6-1: USB disconnect, device number 43 [ 627.611437][T18770] batadv_slave_1: entered promiscuous mode [ 627.618366][T18769] batadv_slave_1: left promiscuous mode [ 628.038443][T18785] loop4: detected capacity change from 0 to 7 [ 628.049434][T18785] Dev loop4: unable to read RDB block 7 [ 628.049494][T18785] loop4: unable to read partition table [ 628.049737][T18785] loop4: partition table beyond EOD, truncated [ 628.049755][T18785] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 628.281884][ T5922] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 628.436886][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 628.439220][ T5922] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 628.439245][ T5922] usb 6-1: config 0 has no interface number 0 [ 628.439278][ T5922] usb 6-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 628.439319][ T5922] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 628.439341][ T5922] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 628.439360][ T5922] usb 6-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 628.439383][ T5922] usb 6-1: config 0 interface 41 has no altsetting 0 [ 628.492058][ T5922] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 628.492088][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.492105][ T5922] usb 6-1: Product: syz [ 628.492116][ T5922] usb 6-1: Manufacturer: syz [ 628.492127][ T5922] usb 6-1: SerialNumber: syz [ 628.548903][ T5922] usb 6-1: config 0 descriptor?? [ 628.549880][T18786] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 628.550005][T18786] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 628.785473][T18786] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 628.785595][T18786] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 628.984280][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5544'. [ 628.984315][T18806] netlink: 'syz.7.5544': attribute type 30 has an invalid length. [ 629.127143][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5544'. [ 629.127180][T18806] netlink: 'syz.7.5544': attribute type 30 has an invalid length. [ 629.294240][ T43] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.294566][ T43] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.294604][ T43] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.294640][ T43] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.389764][ T5922] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 629.594786][ T5922] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 629.594824][ T5922] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 629.595051][ T5922] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 629.650466][ T5922] usb 6-1: USB disconnect, device number 44 [ 629.964078][T18823] netlink: 'syz.0.5549': attribute type 1 has an invalid length. [ 630.162214][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.253897][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.256988][T18823] bond1: entered promiscuous mode [ 630.257584][T18823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 630.330690][T18824] bond1: (slave bridge1): making interface the new active one [ 630.330723][T18824] bridge1: entered promiscuous mode [ 630.361629][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.375070][T18824] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 630.687656][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5555'. [ 630.936938][T18846] Invalid ELF header magic: != ELF [ 631.103712][T18849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5561'. [ 631.262844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 631.301796][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.367163][ T5922] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 631.431780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 631.567252][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.567273][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 631.567289][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 631.567308][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 631.567332][ T5922] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 631.567343][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.584886][ T5922] usb 1-1: config 0 descriptor?? [ 631.861054][ C0] vkms_vblank_simulate: vblank timer overrun [ 631.886945][T18861] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 632.029256][ T5922] plantronics 0003:047F:FFFF.003A: ignoring exceeding usage max [ 632.086267][ T5922] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 632.131254][T18869] bridge0: entered allmulticast mode [ 632.149322][T18869] pim6reg: entered allmulticast mode [ 632.159703][T18869] pim6reg: left allmulticast mode [ 632.159845][T18869] bridge0: left allmulticast mode [ 633.458705][ T37] audit: type=1326 audit(1756379978.954:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18897 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 633.458999][ T37] audit: type=1326 audit(1756379978.964:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18897 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 633.461237][ T37] audit: type=1326 audit(1756379978.964:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18897 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 633.514152][ T37] audit: type=1326 audit(1756379979.024:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18897 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 633.514205][ T37] audit: type=1326 audit(1756379979.024:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18897 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 633.543006][ T37] audit: type=1326 audit(1756379979.054:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18897 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 633.544542][ T37] audit: type=1326 audit(1756379979.054:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18897 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 633.546848][ T37] audit: type=1326 audit(1756379979.054:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18897 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 633.549192][ T37] audit: type=1326 audit(1756379979.054:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18897 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 633.549868][ T37] audit: type=1326 audit(1756379979.054:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18897 comm="syz.5.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97f71aebe9 code=0x7ffc0000 [ 633.760442][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880496be000: rx timeout, send abort [ 634.174180][ T6012] usb 1-1: USB disconnect, device number 53 [ 634.263073][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880496be000: abort rx timeout. Force session deactivation [ 634.921947][ T6012] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 635.071812][ T6012] usb 1-1: Using ep0 maxpacket: 16 [ 635.074793][ T6012] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 635.078243][ T6012] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 635.078270][ T6012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.078288][ T6012] usb 1-1: Product: syz [ 635.078301][ T6012] usb 1-1: Manufacturer: syz [ 635.078313][ T6012] usb 1-1: SerialNumber: syz [ 635.095280][ T6012] usb 1-1: config 0 descriptor?? [ 635.107375][ T6012] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 635.109025][ T6012] usb 1-1: Detected FT232R [ 635.402170][ T6012] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 635.642249][ T6012] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 635.783702][T18961] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 635.783702][T18961] [ 635.838836][ T45] usb 1-1: USB disconnect, device number 54 [ 635.985201][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.155140][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 636.155672][ T45] ftdi_sio 1-1:0.0: device disconnected [ 636.290755][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.386437][T18978] netlink: 'syz.1.5617': attribute type 10 has an invalid length. [ 636.662847][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.242891][ T5927] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 637.433955][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.433986][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.434005][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 637.434044][ T5927] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 637.434074][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.495257][ T5927] usb 1-1: config 0 descriptor?? [ 637.921180][ T5927] plantronics 0003:047F:FFFF.003B: reserved main item tag 0xd [ 637.967718][ T5927] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 638.192743][ T5927] usb 1-1: USB disconnect, device number 55 [ 638.304389][T19016] syzkaller1: entered promiscuous mode [ 638.304417][T19016] syzkaller1: entered allmulticast mode [ 639.082040][ T45] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 639.248896][ T45] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 639.248924][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.248942][ T45] usb 1-1: Product: syz [ 639.248955][ T45] usb 1-1: Manufacturer: syz [ 639.248967][ T45] usb 1-1: SerialNumber: syz [ 639.289514][ T45] usb 1-1: config 0 descriptor?? [ 639.307284][ T45] ch341 1-1:0.0: ch341-uart converter detected [ 639.835560][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5646'. [ 640.541449][ T45] ch341-uart ttyUSB0: failed to read break control: -71 [ 640.541508][ T45] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 640.545832][ T45] usb 1-1: USB disconnect, device number 56 [ 640.548442][ T45] ch341 1-1:0.0: device disconnected [ 641.791945][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dbe1c00: rx timeout, send abort [ 642.183891][T19092] 9pnet_fd: p9_fd_create_tcp (19092): problem connecting socket to 127.0.0.1 [ 642.292022][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dbe1c00: abort rx timeout. Force session deactivation [ 642.296699][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dbe1400: rx timeout, send abort [ 642.551586][T19098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5669'. [ 642.796794][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dbe1400: abort rx timeout. Force session deactivation [ 643.396734][T19116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 644.678672][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5690'. [ 644.799052][T19154] io-wq is not configured for unbound workers [ 644.843487][T19149] syzkaller1: entered promiscuous mode [ 644.843521][T19149] syzkaller1: entered allmulticast mode [ 645.213504][T19166] [ 645.213517][T19166] ============================================ [ 645.213524][T19166] WARNING: possible recursive locking detected [ 645.213537][T19166] syzkaller #0 Not tainted [ 645.213548][T19166] -------------------------------------------- [ 645.213554][T19166] syz.0.5698/19166 is trying to acquire lock: [ 645.213565][T19166] ffff888026d44318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70 [ 645.213625][T19166] [ 645.213625][T19166] but task is already holding lock: [ 645.213632][T19166] ffff888026d44318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70 [ 645.213683][T19166] [ 645.213683][T19166] other info that might help us debug this: [ 645.213689][T19166] Possible unsafe locking scenario: [ 645.213689][T19166] [ 645.213695][T19166] CPU0 [ 645.213699][T19166] ---- [ 645.213704][T19166] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 645.213721][T19166] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3); [ 645.213736][T19166] [ 645.213736][T19166] *** DEADLOCK *** [ 645.213736][T19166] [ 645.213741][T19166] May be due to missing lock nesting notation [ 645.213741][T19166] [ 645.213746][T19166] 21 locks held by syz.0.5698/19166: [ 645.213755][T19166] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rawv6_send_hdrinc+0xc09/0x1790 [ 645.213799][T19166] #1: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: ip6_mr_output+0x1ca/0x1100 [ 645.213842][T19166] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x710/0x1720 [ 645.213882][T19166] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 645.213928][T19166] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 645.213971][T19166] #5: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 645.214012][T19166] #6: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 645.214061][T19166] #7: ffffffff8d9a8be0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 645.214110][T19166] #8: ffff888026d44318 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xd58/0x3b70 [ 645.214163][T19166] #9: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 645.214203][T19166] #10: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: icmp6_send+0x1e9/0x1940 [ 645.214248][T19166] #11: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 645.214292][T19166] #12: ffff88814d268c50 (k-slock-AF_INET6){+...}-{3:3}, at: icmp6_send+0xc5c/0x1940 [ 645.214335][T19166] #13: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0xfa/0x180 [ 645.214376][T19166] #14: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: ip6_send_skb+0x10f/0x390 [ 645.214416][T19166] #15: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x710/0x1720 [ 645.214459][T19166] #16: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 645.214502][T19166] #17: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x20c/0x1440 [ 645.214547][T19166] #18: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x710/0x1720 [ 645.214589][T19166] #19: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 645.214633][T19166] #20: ffffffff8d9a8be0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x26f/0x3b70 [ 645.214676][T19166] [ 645.214676][T19166] stack backtrace: [ 645.214689][T19166] CPU: 1 UID: 0 PID: 19166 Comm: syz.0.5698 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 645.214701][T19166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.214708][T19166] Call Trace: [ 645.214713][T19166] [ 645.214718][T19166] dump_stack_lvl+0x189/0x250 [ 645.214733][T19166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.214747][T19166] ? __pfx__printk+0x10/0x10 [ 645.214757][T19166] ? print_lock_name+0xde/0x100 [ 645.214767][T19166] print_deadlock_bug+0x28b/0x2a0 [ 645.214797][T19166] validate_chain+0x1a3f/0x2140 [ 645.214813][T19166] ? __bfs+0x151/0x2a0 [ 645.214825][T19166] ? __bfs+0x151/0x2a0 [ 645.214841][T19166] ? __pfx_hlock_conflict+0x10/0x10 [ 645.214865][T19166] ? __lock_acquire+0xab9/0xd20 [ 645.214886][T19166] __lock_acquire+0xab9/0xd20 [ 645.214908][T19166] ? __dev_queue_xmit+0xd58/0x3b70 [ 645.214930][T19166] lock_acquire+0x120/0x360 [ 645.214949][T19166] ? __dev_queue_xmit+0xd58/0x3b70 [ 645.214964][T19166] ? __lock_acquire+0xab9/0xd20 [ 645.214976][T19166] rt_spin_lock+0x88/0x2c0 [ 645.214985][T19166] ? __dev_queue_xmit+0xd58/0x3b70 [ 645.214998][T19166] ? __pfx_rt_spin_lock+0x10/0x10 [ 645.215009][T19166] __dev_queue_xmit+0xd58/0x3b70 [ 645.215023][T19166] ? __dev_queue_xmit+0x26f/0x3b70 [ 645.215040][T19166] ? __pfx___dev_queue_xmit+0x10/0x10 [ 645.215052][T19166] ? read_seqbegin+0x128/0x2e0 [ 645.215068][T19166] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.215080][T19166] ? read_seqbegin+0x27c/0x2e0 [ 645.215090][T19166] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 645.215103][T19166] ? __pfx_read_seqbegin+0x10/0x10 [ 645.215113][T19166] ? eth_header+0x11b/0x200 [ 645.215126][T19166] ? __asan_memcpy+0x40/0x70 [ 645.215141][T19166] ? ip6_finish_output2+0x710/0x1720 [ 645.215151][T19166] ip6_finish_output2+0x1273/0x1720 [ 645.215162][T19166] ? ip6_finish_output2+0x710/0x1720 [ 645.215173][T19166] ? ip6_mtu+0x7d/0x3f0 [ 645.215181][T19166] ? __pfx_ip6_finish_output2+0x10/0x10 [ 645.215191][T19166] ? ip6_mtu+0x7d/0x3f0 [ 645.215198][T19166] ? ip6_mtu+0x321/0x3f0 [ 645.215206][T19166] ? ip6_finish_output+0x2ef/0x4e0 [ 645.215215][T19166] ndisc_send_skb+0xb54/0x1440 [ 645.215227][T19166] ? ndisc_send_skb+0x20c/0x1440 [ 645.215240][T19166] ? __pfx_ndisc_send_skb+0x10/0x10 [ 645.215252][T19166] ? __pfx_dst_output+0x10/0x10 [ 645.215264][T19166] ? ipv6_get_lladdr+0x2b/0x400 [ 645.215275][T19166] ? ipv6_get_lladdr+0x2b/0x400 [ 645.215284][T19166] ? ipv6_get_lladdr+0x2b/0x400 [ 645.215295][T19166] ? ipv6_get_lladdr+0x392/0x400 [ 645.215305][T19166] ? ipv6_get_lladdr+0x2b/0x400 [ 645.215316][T19166] ndisc_solicit+0x444/0x610 [ 645.215330][T19166] ? __pfx_ndisc_solicit+0x10/0x10 [ 645.215342][T19166] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 645.215351][T19166] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 645.215365][T19166] ? __pfx_ndisc_solicit+0x10/0x10 [ 645.215376][T19166] __neigh_event_send+0xf65/0x1580 [ 645.215387][T19166] ? __neigh_event_send+0x38/0x1580 [ 645.215397][T19166] ? ___neigh_create+0x1d71/0x2360 [ 645.215407][T19166] neigh_resolve_output+0x19f/0x780 [ 645.215420][T19166] ? ip6_finish_output2+0x710/0x1720 [ 645.215430][T19166] ip6_finish_output2+0x1273/0x1720 [ 645.215441][T19166] ? ip6_finish_output2+0x710/0x1720 [ 645.215451][T19166] ? ip6_mtu+0x7d/0x3f0 [ 645.215459][T19166] ? __pfx_ip6_finish_output2+0x10/0x10 [ 645.215469][T19166] ? ip6_mtu+0x7d/0x3f0 [ 645.215476][T19166] ? ip6_mtu+0x321/0x3f0 [ 645.215485][T19166] ? ip6_finish_output+0x2ef/0x4e0 [ 645.215493][T19166] ? ip6_send_skb+0x10f/0x390 [ 645.215502][T19166] ip6_send_skb+0x1d5/0x390 [ 645.215512][T19166] icmp6_send+0x12c6/0x1940 [ 645.215524][T19166] ? icmp6_send+0x1e9/0x1940 [ 645.215539][T19166] ? __pfx_icmp6_send+0x10/0x10 [ 645.215549][T19166] ? __lock_acquire+0xab9/0xd20 [ 645.215565][T19166] ? ip6_neigh_lookup+0x14e/0x470 [ 645.215587][T19166] ? ip6_neigh_lookup+0x14e/0x470 [ 645.215599][T19166] ? ip6_neigh_lookup+0x397/0x470 [ 645.215611][T19166] ? ip6_neigh_lookup+0x14e/0x470 [ 645.215622][T19166] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 645.215635][T19166] ip6_link_failure+0x3b/0x4c0 [ 645.215649][T19166] ip_tunnel_xmit+0x175e/0x2390 [ 645.215660][T19166] ? ip_tunnel_xmit+0x120/0x2390 [ 645.215671][T19166] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 645.215679][T19166] ? gre_build_header+0x31c/0xa40 [ 645.215693][T19166] ? __pfx_gre_build_header+0x10/0x10 [ 645.215705][T19166] ? iptunnel_handle_offloads+0x2fd/0x630 [ 645.215718][T19166] gre_tap_xmit+0x590/0x7a0 [ 645.215731][T19166] ? __pfx_gre_tap_xmit+0x10/0x10 [ 645.215745][T19166] dev_hard_start_xmit+0x2f0/0x870 [ 645.215762][T19166] sch_direct_xmit+0x241/0x4b0 [ 645.215773][T19166] ? __pfx_sch_direct_xmit+0x10/0x10 [ 645.215782][T19166] ? migrate_enable+0x29c/0x3c0 [ 645.215794][T19166] __dev_queue_xmit+0x19fc/0x3b70 [ 645.215812][T19166] ? __dev_queue_xmit+0x26f/0x3b70 [ 645.215829][T19166] ? __pfx___dev_queue_xmit+0x10/0x10 [ 645.215841][T19166] ? read_seqbegin+0x128/0x2e0 [ 645.215850][T19166] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.215861][T19166] ? read_seqbegin+0x27c/0x2e0 [ 645.215870][T19166] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 645.215881][T19166] ? __pfx_read_seqbegin+0x10/0x10 [ 645.215891][T19166] ? eth_header+0x11b/0x200 [ 645.215902][T19166] ? __asan_memcpy+0x40/0x70 [ 645.215917][T19166] ? ip6_finish_output2+0x710/0x1720 [ 645.215926][T19166] ip6_finish_output2+0x1273/0x1720 [ 645.215938][T19166] ? ip6_finish_output2+0x710/0x1720 [ 645.215948][T19166] ? ip6_mtu+0x7d/0x3f0 [ 645.215957][T19166] ? __pfx_ip6_finish_output2+0x10/0x10 [ 645.215972][T19166] ? ip6_mtu+0x7d/0x3f0 [ 645.215984][T19166] ? ip6_mtu+0x321/0x3f0 [ 645.215998][T19166] ? ip6_finish_output+0x2ef/0x4e0 [ 645.216014][T19166] ip6_mr_output+0x4e9/0x1100 [ 645.216033][T19166] ? ip6_mr_output+0x1ca/0x1100 [ 645.216051][T19166] ? __pfx_ip6_mr_output+0x10/0x10 [ 645.216072][T19166] ? _copy_from_iter+0x24f/0x1790 [ 645.216089][T19166] ? __lock_acquire+0xab9/0xd20 [ 645.216105][T19166] ? skb_dst+0x4f/0xd0 [ 645.216116][T19166] ? dst_output+0x17b/0x1c0 [ 645.216127][T19166] ? rawv6_send_hdrinc+0xc09/0x1790 [ 645.216139][T19166] rawv6_send_hdrinc+0xda3/0x1790 [ 645.216154][T19166] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 645.216165][T19166] ? txopt_get+0x335/0x3f0 [ 645.216176][T19166] ? __pfx_dst_output+0x10/0x10 [ 645.216186][T19166] ? __pfx_txopt_get+0x10/0x10 [ 645.216198][T19166] rawv6_sendmsg+0x12e2/0x1820 [ 645.216209][T19166] ? tomoyo_check_inet_address+0x275/0x8c0 [ 645.216225][T19166] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 645.216237][T19166] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 645.216254][T19166] ? sock_rps_record_flow+0x19/0x410 [ 645.216264][T19166] ? inet_sendmsg+0x2f4/0x370 [ 645.216272][T19166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.216282][T19166] __sock_sendmsg+0x19c/0x270 [ 645.216292][T19166] ____sys_sendmsg+0x508/0x820 [ 645.216306][T19166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.216319][T19166] ? import_iovec+0x74/0xa0 [ 645.216329][T19166] ___sys_sendmsg+0x21f/0x2a0 [ 645.216342][T19166] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.216362][T19166] ? __fget_files+0x2a/0x420 [ 645.216375][T19166] ? __fget_files+0x3a6/0x420 [ 645.216389][T19166] __x64_sys_sendmsg+0x1a1/0x260 [ 645.216402][T19166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.216417][T19166] ? rcu_is_watching+0x15/0xb0 [ 645.216431][T19166] ? do_syscall_64+0xbe/0x3b0 [ 645.216444][T19166] do_syscall_64+0xfa/0x3b0 [ 645.216455][T19166] ? lockdep_hardirqs_on+0x9c/0x150 [ 645.216465][T19166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.216475][T19166] ? clear_bhb_loop+0x60/0xb0 [ 645.216484][T19166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.216501][T19166] RIP: 0033:0x7f73aafdebe9 [ 645.216512][T19166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.216521][T19166] RSP: 002b:00007f73a9246038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.216533][T19166] RAX: ffffffffffffffda RBX: 00007f73ab205fa0 RCX: 00007f73aafdebe9 [ 645.216540][T19166] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 645.216547][T19166] RBP: 00007f73ab061e19 R08: 0000000000000000 R09: 0000000000000000 [ 645.216553][T19166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.216559][T19166] R13: 00007f73ab206038 R14: 00007f73ab205fa0 R15: 00007ffd3ee30c18 [ 645.216571][T19166]