last executing test programs: 27.96701513s ago: executing program 3 (id=1376): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000000214", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) io_uring_setup(0xab2, &(0x7f0000000380)={0x0, 0x4051cf, 0x40, 0x3, 0xe5}) eventfd2(0x10000, 0x801) readv(r0, 0x0, 0x0) 27.75414408s ago: executing program 3 (id=1381): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) fcntl$setstatus(r0, 0x4, 0x2c00) fcntl$setown(r0, 0x8, 0x0) 27.522370378s ago: executing program 3 (id=1384): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x1c) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x8) 27.402596133s ago: executing program 3 (id=1386): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000dc0)='sysfs\x00', 0x8000, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100419, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x101015, 0x0) mount(0x0, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x2280008, 0x0) unshare(0x6020400) 27.182080008s ago: executing program 3 (id=1391): mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000002000/0x1000)=nil) 27.005994715s ago: executing program 3 (id=1394): syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00183cff20010000000000000000000000000000fe8000000000000000000000000000aa33000000cb"], 0x0) 11.204368515s ago: executing program 0 (id=1467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="130000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000029c0)={0x17, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 10.818020359s ago: executing program 0 (id=1471): unshare(0x60000600) unshare(0x20000) 5.460784675s ago: executing program 0 (id=1485): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b40)={0x24, &(0x7f0000000980)={0x0, 0xf, 0x9, {0x9, 0x31, "78f154391948c2"}}, 0x0, 0x0, 0x0}, 0x0) 5.231689349s ago: executing program 2 (id=1487): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002080), 0x109000, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x10000, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$inet6(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000a00)=ANY=[@ANYBLOB="680200000105010200000000000000000000000454"], 0x268}, 0x1, 0x0, 0x0, 0x4045}, 0x20008011) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.917808363s ago: executing program 4 (id=1488): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), 0x9, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff43, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.875088689s ago: executing program 2 (id=1489): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x81, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x25) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.79137068s ago: executing program 4 (id=1490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)={@val={0x70, 0x886b}, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x4, 0x28, 0x4024, 0x0, 0x5, 0x6, 0x0, @multicast1, @multicast2}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x81, 0x0, 0x8}}}}}}}, 0x3e) 4.229962592s ago: executing program 2 (id=1491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0xac00, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsmount(0xffffffffffffffff, 0x1, 0xf0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.987583996s ago: executing program 1 (id=1492): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{0x0, 0x51}, {&(0x7f0000000200)="f6", 0xfffffeed}], 0x2, 0x7, 0x10) 3.865664683s ago: executing program 1 (id=1493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x2000, 0xffffffff, 0xf571, 0x1, 0x0, [{0xff, 0x3, 0x86, '\x00', 0x91}, {0x6c, 0xbc, 0x11, '\x00', 0xf}, {0x5, 0x83, 0x6}, {0x0, 0x9, 0x8, '\x00', 0xd7}, {0x3, 0x5, 0x7, '\x00', 0x2}, {0x3, 0x3, 0x1, '\x00', 0x89}, {0xb, 0x2, 0xb4, '\x00', 0x9}, {0x6, 0x0, 0x1, '\x00', 0x3}, {0xb, 0x4, 0x4, '\x00', 0xd}, {0x2, 0x7, 0x1, '\x00', 0x3a}, {0xf8, 0xff, 0xc, '\x00', 0x5}, {0x3, 0xb2, 0x3, '\x00', 0x1e}, {0x8, 0x9, 0x8, '\x00', 0x3}, {0x2, 0x7, 0xa8}, {0x81, 0x40, 0x6, '\x00', 0x20}, {0xe, 0x2, 0xb, '\x00', 0x1}, {0x4d, 0xe, 0x6d}, {0xe, 0x8, 0x8, '\x00', 0xd3}, {0x0, 0x5, 0x3f, '\x00', 0x2}, {0x7f, 0x0, 0x72, '\x00', 0x5}, {0x9, 0x7, 0x9, '\x00', 0x7}, {0x1, 0x6, 0xa, '\x00', 0x2}, {0x72, 0xe, 0x3}, {0x80, 0xfc, 0x40, '\x00', 0xab}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.764244314s ago: executing program 2 (id=1494): syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0d01000409000008250592d20700006a3b01096b241700fa0074980904e4ff11070103000905010200ffe00000090582"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"}) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 3.660530183s ago: executing program 0 (id=1495): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x300000b, 0x204031, r1, 0x42792000) creat(&(0x7f0000000240)='./file0\x00', 0x160) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x78e22799f4a46f40) read$watch_queue(r3, &(0x7f00000001c0)=""/178, 0xb2) 3.517946101s ago: executing program 4 (id=1496): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000500)={0x11, 0x5, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000680)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@llc={0x606, {@llc={0xfe, 0xaa, "eb"}}}}}, 0x0) 3.320554347s ago: executing program 1 (id=1497): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_connect$uac2(0x7, 0x7b, &(0x7f0000000180)=ANY=[@ANYBLOB="12011003000000511e04003040006900030108c010080b00000100200d090400001f0101200009240104000909000009040100000102200009040101010120000905010900001000060825010000000d000904020000010220000904020101010220000905820940000670050825010033030000998ee453497e745f776a79a2eb0438e9ec948066b617ce225e43766fe1cf76d960e28da29668e0a8a70b04c81817645e8b3aba8290"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3.054413343s ago: executing program 4 (id=1498): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400)=@chain) add_key$keyring(&(0x7f0000000300), &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, r0) 2.729997379s ago: executing program 4 (id=1499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$tipc(0x1e, 0x6, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00004e1000/0x4000)=nil, 0x4000) 1.695819363s ago: executing program 4 (id=1500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000040)={0x3}, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fremovexattr(0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.158301645s ago: executing program 1 (id=1501): syz_emit_ethernet(0x7e, &(0x7f0000000640)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x3f5c, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0xfff, 0x0, 0x6, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20000}, {@dev, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x3a00, 0x0, 0x0, 0x1000, 0x0, 0x0]}]}}}}}}}, 0x0) 530.30991ms ago: executing program 2 (id=1502): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) getgroups(0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r2, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x18}}, 0x10, 0x0}, 0x0) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) 300.651425ms ago: executing program 1 (id=1503): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) 298.889587ms ago: executing program 0 (id=1504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000000202030000000000000000000a0000064400028006000340000100000c0002800500be00dc0000002c0001801400030000000000000000000000000000000001140004"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4040) 89.292818ms ago: executing program 1 (id=1505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x184, 0x2, 0x10, 0xf1, 0x100000001, 0x1, 0x5, 0x0, 0x29, 0x0, 0x2, 0x0, 0xbd9], 0xffff1001, 0x53101}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x200000, 0x3000, 0x3, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x18227000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0xa000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x91}, {0xeeee0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 825.408µs ago: executing program 0 (id=1506): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x1, 0x20040, 0x5, 0x41, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1356, &(0x7f0000003c80)=ANY=[], 0x0) 0s ago: executing program 2 (id=1507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x310, 0x25, 0x148, 0x310, 0x60, 0x3e0, 0x2a8, 0x2a8, 0x3e0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2c8, 0x310, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@socket2={{0x28}, 0xb0950de4a1e82a43}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00', {0x15}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x0, 0x0, 0x0, 0x0, 0x3]}, {0x0, [0x0, 0x0, 0x0, 0x6]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4d8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x10c2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) kernel console output (not intermixed with test programs): USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.690245][ T5889] usb 5-1: selecting invalid altsetting 1 [ 153.799421][ T6365] trusted_key: encrypted_key: insufficient parameters specified [ 154.045885][ T5882] usb 3-1: USB disconnect, device number 10 [ 154.208989][ T5889] usb 5-1: unit 6 not found! [ 155.120689][ T6371] could not allocate digest TFM handle sha3-224-generic [ 155.563426][ T5889] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 155.708415][ T5889] usb 5-1: USB disconnect, device number 7 [ 155.721579][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 155.752573][ T6389] openvswitch: netlink: Duplicate or invalid key (type 0). [ 155.752611][ T6389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.979145][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.280201][ T5882] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 156.529873][ T6401] hub 9-0:1.0: USB hub found [ 156.565646][ T6401] hub 9-0:1.0: 1 port detected [ 157.106885][ T5889] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.316796][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 157.323949][ T5889] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 157.323978][ T5889] usb 5-1: config 1 has an invalid descriptor of length 30, skipping remainder of the config [ 157.323998][ T5889] usb 5-1: config 1 has no interface number 0 [ 157.324046][ T5889] usb 5-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid maxpacket 3291, setting to 64 [ 157.324074][ T5889] usb 5-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.324103][ T5889] usb 5-1: config 1 interface 105 has no altsetting 0 [ 157.326839][ T5882] usb 3-1: device descriptor read/64, error -71 [ 157.327908][ T5889] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 157.327938][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 157.327961][ T5889] usb 5-1: Product: syz [ 157.327976][ T5889] usb 5-1: Manufacturer: syz [ 157.327991][ T5889] usb 5-1: SerialNumber: syz [ 157.392205][ T6409] capability: warning: `syz.0.181' uses deprecated v2 capabilities in a way that may be insecure [ 157.517847][ T5891] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 157.570885][ T5882] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 157.657050][ T5891] usb 2-1: device descriptor read/64, error -71 [ 157.692164][ T5889] aqc111 5-1:1.105: probe with driver aqc111 failed with error -22 [ 157.697280][ T5882] usb 3-1: device descriptor read/64, error -71 [ 157.814666][ T5882] usb usb3-port1: attempt power cycle [ 157.896847][ T5891] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 157.898814][ T6389] ieee802154 phy0 wpan0: encryption failed: -90 [ 158.036807][ T5891] usb 2-1: device descriptor read/64, error -71 [ 158.157165][ T5891] usb usb2-port1: attempt power cycle [ 158.196870][ T5882] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 158.218992][ T5882] usb 3-1: device descriptor read/8, error -71 [ 158.466915][ T5882] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 158.527663][ T5891] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 158.547571][ T5891] usb 2-1: device descriptor read/8, error -71 [ 158.562908][ T5882] usb 3-1: device descriptor read/8, error -71 [ 158.667224][ T5882] usb usb3-port1: unable to enumerate USB device [ 158.787199][ T5891] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 158.809898][ T5891] usb 2-1: device descriptor read/8, error -71 [ 158.917332][ T5891] usb usb2-port1: unable to enumerate USB device [ 159.071914][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 159.398702][ T5889] usb 5-1: USB disconnect, device number 8 [ 160.343383][ T6489] hub 9-0:1.0: USB hub found [ 160.353455][ T6489] hub 9-0:1.0: 1 port detected [ 161.700708][ T6501] Bluetooth: MGMT ver 1.23 [ 162.820396][ T6513] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20002 [ 164.361836][ T873] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 164.379073][ T6530] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 164.545510][ T873] usb 3-1: device descriptor read/64, error -71 [ 164.786887][ T873] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 164.918682][ T873] usb 3-1: device descriptor read/64, error -71 [ 165.031011][ T873] usb usb3-port1: attempt power cycle [ 165.966737][ T6550] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 166.246814][ T873] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 166.342192][ T873] usb 3-1: device descriptor read/8, error -71 [ 167.897421][ T5805] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 167.898662][ T6578] syz.4.250 uses obsolete (PF_INET,SOCK_PACKET) [ 168.059754][ T5805] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.061759][ T5805] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 168.061788][ T5805] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 168.061810][ T5805] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 168.061832][ T5805] usb 2-1: config 129 has no interface number 0 [ 168.061849][ T5805] usb 2-1: config 129 has no interface number 1 [ 168.061907][ T5805] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 168.061936][ T5805] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 168.061976][ T5805] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 168.062005][ T5805] usb 2-1: config 129 interface 135 has no altsetting 0 [ 168.062025][ T5805] usb 2-1: config 129 interface 5 has no altsetting 0 [ 168.106148][ T5805] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 168.106188][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.106208][ T5805] usb 2-1: Product: syz [ 168.106224][ T5805] usb 2-1: Manufacturer: syz [ 168.106246][ T5805] usb 2-1: SerialNumber: syz [ 168.513319][ T5805] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 168.513380][ T5805] usb 2-1: MIDIStreaming interface descriptor not found [ 168.901995][ T5805] usb 2-1: USB disconnect, device number 13 [ 170.229001][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.838649][ T6623] hub 9-0:1.0: USB hub found [ 170.842687][ T6623] hub 9-0:1.0: 1 port detected [ 171.381277][ T6621] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.576991][ T31] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.731518][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 173.748553][ T6655] 9p: Bad value for 'wfdno' [ 175.668625][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 175.669705][ T31] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 175.669741][ T31] usb 1-1: can't read configurations, error -71 [ 175.906775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.936770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 175.936970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 176.316851][ T5891] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 176.478265][ T5891] usb 2-1: unable to get BOS descriptor or descriptor too short [ 176.482115][ T5891] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 176.482144][ T5891] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 176.482165][ T5891] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 176.482188][ T5891] usb 2-1: config 129 has no interface number 0 [ 176.482206][ T5891] usb 2-1: config 129 has no interface number 1 [ 176.482263][ T5891] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 176.482293][ T5891] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 176.482334][ T5891] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 176.482363][ T5891] usb 2-1: config 129 interface 135 has no altsetting 0 [ 176.482382][ T5891] usb 2-1: config 129 interface 5 has no altsetting 0 [ 176.518047][ T5891] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 176.518163][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.518218][ T5891] usb 2-1: Product: syz [ 176.518259][ T5891] usb 2-1: Manufacturer: syz [ 176.518294][ T5891] usb 2-1: SerialNumber: syz [ 176.897960][ T5891] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.898019][ T5891] usb 2-1: MIDIStreaming interface descriptor not found [ 177.108897][ T6733] could not allocate digest TFM handle sha3-384-generic [ 177.142907][ T5891] usb 2-1: USB disconnect, device number 14 [ 177.406109][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.544257][ T6756] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20002 [ 180.394904][ T6798] Non-string source [ 180.729610][ T6811] dummy0: entered allmulticast mode [ 181.872044][ T6843] ======================================================= [ 181.872044][ T6843] WARNING: The mand mount option has been deprecated and [ 181.872044][ T6843] and is ignored by this kernel. Remove the mand [ 181.872044][ T6843] option from the mount to silence this warning. [ 181.872044][ T6843] ======================================================= [ 182.055208][ T37] audit: type=1800 audit(1773887302.853:68): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.347" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 183.514527][ T6879] tmpfs: Unknown parameter 'noinode32' [ 183.659896][ T6884] ufs: You didn't specify the type of your ufs filesystem [ 183.659896][ T6884] [ 183.659896][ T6884] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 183.659896][ T6884] [ 183.659896][ T6884] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 183.659938][ T6884] ufs: ufstype=old is supported read-only [ 183.662162][ T6884] ufs: ufs_fill_super(): bad magic number [ 183.913531][ T6891] tmpfs: Unknown parameter 'mp½eV' [ 184.032974][ T37] audit: type=1326 audit(1773887304.863:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7942bc799 code=0x7ffc0000 [ 184.033048][ T37] audit: type=1326 audit(1773887304.863:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7942bc799 code=0x7ffc0000 [ 184.033094][ T37] audit: type=1326 audit(1773887304.863:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fe7942bc799 code=0x7ffc0000 [ 184.033141][ T37] audit: type=1326 audit(1773887304.863:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7942bc799 code=0x7ffc0000 [ 184.033187][ T37] audit: type=1326 audit(1773887304.863:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7942bc799 code=0x7ffc0000 [ 185.953595][ T37] audit: type=1326 audit(1773887306.833:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x0 [ 186.290667][ T37] audit: type=1326 audit(1773887307.173:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 186.290723][ T37] audit: type=1326 audit(1773887307.173:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 186.291286][ T37] audit: type=1326 audit(1773887307.173:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6917 comm="syz.0.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 187.018795][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 187.510252][ T6959] blktrace: Concurrent blktraces are not allowed on loop4 [ 187.515817][ T6963] FAULT_INJECTION: forcing a failure. [ 187.515817][ T6963] name failslab, interval 1, probability 0, space 0, times 1 [ 187.515856][ T6963] CPU: 1 UID: 0 PID: 6963 Comm: syz.4.391 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 187.515885][ T6963] Tainted: [L]=SOFTLOCKUP [ 187.515893][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.515906][ T6963] Call Trace: [ 187.515914][ T6963] [ 187.515923][ T6963] dump_stack_lvl+0xe8/0x150 [ 187.515960][ T6963] should_fail_ex+0x46b/0x600 [ 187.515995][ T6963] should_failslab+0xa8/0x100 [ 187.516019][ T6963] __kmalloc_noprof+0xdf/0x7b0 [ 187.516054][ T6963] ? tomoyo_encode+0x28b/0x550 [ 187.516086][ T6963] tomoyo_encode+0x28b/0x550 [ 187.516119][ T6963] tomoyo_realpath_from_path+0x58d/0x5d0 [ 187.516167][ T6963] ? tomoyo_path_number_perm+0x219/0x630 [ 187.516204][ T6963] tomoyo_path_number_perm+0x246/0x630 [ 187.516242][ T6963] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.516281][ T6963] ? __lock_acquire+0x6b5/0x2cf0 [ 187.516340][ T6963] ? __fget_files+0x2a/0x420 [ 187.516372][ T6963] ? __fget_files+0x2a/0x420 [ 187.516399][ T6963] ? __fget_files+0x3a6/0x420 [ 187.516426][ T6963] ? __fget_files+0x2a/0x420 [ 187.516458][ T6963] security_file_ioctl+0xc3/0x2a0 [ 187.516484][ T6963] __se_sys_ioctl+0x47/0x170 [ 187.516527][ T6963] do_syscall_64+0x14d/0xf80 [ 187.516561][ T6963] ? trace_irq_disable+0x3b/0x150 [ 187.516587][ T6963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.516610][ T6963] ? clear_bhb_loop+0x40/0x90 [ 187.516637][ T6963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.516659][ T6963] RIP: 0033:0x7f3550bdc799 [ 187.516680][ T6963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.516698][ T6963] RSP: 002b:00007f354ee2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.516721][ T6963] RAX: ffffffffffffffda RBX: 00007f3550e55fa0 RCX: 00007f3550bdc799 [ 187.516737][ T6963] RDX: 00002000000000c0 RSI: 0000000080605414 RDI: 0000000000000003 [ 187.516752][ T6963] RBP: 00007f354ee2e090 R08: 0000000000000000 R09: 0000000000000000 [ 187.516766][ T6963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.516779][ T6963] R13: 00007f3550e56038 R14: 00007f3550e55fa0 R15: 00007ffd3bd53ad8 [ 187.516815][ T6963] [ 187.517324][ T6963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 188.017198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 188.019202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 188.020427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 188.021596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 188.022775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 188.023950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 188.025076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 189.807973][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.808855][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.076858][ T5891] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 190.206926][ T5891] usb 2-1: device descriptor read/64, error -71 [ 190.237755][ T6999] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.404'. [ 190.456841][ T5891] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 190.602429][ T5891] usb 2-1: device descriptor read/64, error -71 [ 190.722501][ T5891] usb usb2-port1: attempt power cycle [ 191.060095][ T7008] netlink: 92 bytes leftover after parsing attributes in process `syz.4.408'. [ 191.116971][ T5891] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 191.148393][ T5891] usb 2-1: device descriptor read/8, error -71 [ 191.397021][ T5891] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 191.417747][ T5891] usb 2-1: device descriptor read/8, error -71 [ 191.529324][ T5891] usb usb2-port1: unable to enumerate USB device [ 194.121170][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 194.584116][ T7066] netlink: 368 bytes leftover after parsing attributes in process `syz.4.436'. [ 195.850157][ T7095] FAULT_INJECTION: forcing a failure. [ 195.850157][ T7095] name failslab, interval 1, probability 0, space 0, times 0 [ 195.850195][ T7095] CPU: 0 UID: 0 PID: 7095 Comm: syz.3.445 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 195.850224][ T7095] Tainted: [L]=SOFTLOCKUP [ 195.850231][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.850244][ T7095] Call Trace: [ 195.850252][ T7095] [ 195.850261][ T7095] dump_stack_lvl+0xe8/0x150 [ 195.850300][ T7095] should_fail_ex+0x46b/0x600 [ 195.850333][ T7095] should_failslab+0xa8/0x100 [ 195.850367][ T7095] __kmalloc_noprof+0xdf/0x7b0 [ 195.850403][ T7095] ? tomoyo_encode+0x28b/0x550 [ 195.850435][ T7095] tomoyo_encode+0x28b/0x550 [ 195.850467][ T7095] tomoyo_realpath_from_path+0x58d/0x5d0 [ 195.850504][ T7095] ? tomoyo_path_number_perm+0x219/0x630 [ 195.850540][ T7095] tomoyo_path_number_perm+0x246/0x630 [ 195.850577][ T7095] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.850615][ T7095] ? __lock_acquire+0x6b5/0x2cf0 [ 195.850672][ T7095] ? __fget_files+0x2a/0x420 [ 195.850704][ T7095] ? __fget_files+0x2a/0x420 [ 195.850730][ T7095] ? __fget_files+0x3a6/0x420 [ 195.850757][ T7095] ? __fget_files+0x2a/0x420 [ 195.850789][ T7095] security_file_ioctl+0xc3/0x2a0 [ 195.850815][ T7095] __se_sys_ioctl+0x47/0x170 [ 195.850854][ T7095] do_syscall_64+0x14d/0xf80 [ 195.850889][ T7095] ? trace_irq_disable+0x3b/0x150 [ 195.850914][ T7095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.850937][ T7095] ? clear_bhb_loop+0x40/0x90 [ 195.850965][ T7095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.850987][ T7095] RIP: 0033:0x7fe46f74c799 [ 195.851013][ T7095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.851031][ T7095] RSP: 002b:00007fe46d9a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.851055][ T7095] RAX: ffffffffffffffda RBX: 00007fe46f9c5fa0 RCX: 00007fe46f74c799 [ 195.851071][ T7095] RDX: 00002000000000c0 RSI: 0000000080605414 RDI: 0000000000000003 [ 195.851085][ T7095] RBP: 00007fe46d9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.851098][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.851111][ T7095] R13: 00007fe46f9c6038 R14: 00007fe46f9c5fa0 R15: 00007fff1df98dd8 [ 195.851146][ T7095] [ 195.851167][ T7095] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.256815][ T5889] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 196.386821][ T5889] usb 2-1: device descriptor read/64, error -71 [ 196.636812][ T5889] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 196.766810][ T5889] usb 2-1: device descriptor read/64, error -71 [ 196.881808][ T5889] usb usb2-port1: attempt power cycle [ 197.115415][ T7116] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.144436][ T7116] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.144713][ T7116] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.144989][ T7116] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.146095][ T7116] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.146354][ T7116] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.146617][ T7116] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.151220][ T7116] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.152270][ T7116] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.154508][ T7116] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 197.219523][ T5889] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 197.244715][ T5889] usb 2-1: device descriptor read/8, error -71 [ 197.338398][ T5805] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 197.477907][ T5889] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 197.500792][ T5805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 197.503617][ T5889] usb 2-1: device descriptor read/8, error -71 [ 197.505310][ T5805] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 197.505337][ T5805] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 197.505358][ T5805] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 197.505381][ T5805] usb 1-1: config 129 has no interface number 0 [ 197.505398][ T5805] usb 1-1: config 129 has no interface number 1 [ 197.505456][ T5805] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 197.505485][ T5805] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 197.505525][ T5805] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 197.505553][ T5805] usb 1-1: config 129 interface 135 has no altsetting 0 [ 197.505573][ T5805] usb 1-1: config 129 interface 5 has no altsetting 0 [ 197.546881][ T5883] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 197.637858][ T5805] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 197.637891][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.637912][ T5805] usb 1-1: Product: syz [ 197.637928][ T5805] usb 1-1: Manufacturer: syz [ 197.637943][ T5805] usb 1-1: SerialNumber: syz [ 197.679503][ T5889] usb usb2-port1: unable to enumerate USB device [ 197.756796][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 197.759133][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.759166][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.759198][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.759244][ T5883] usb 5-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.00 [ 197.759267][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.814787][ T5883] usb 5-1: config 0 descriptor?? [ 197.966402][ T5805] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.966463][ T5805] usb 1-1: MIDIStreaming interface descriptor not found [ 198.193883][ T5805] usb 1-1: USB disconnect, device number 6 [ 198.245700][ T5883] magicmouse 0003:05AC:0323.0002: unknown main item tag 0x0 [ 198.245743][ T5883] magicmouse 0003:05AC:0323.0002: unknown main item tag 0x0 [ 198.245772][ T5883] magicmouse 0003:05AC:0323.0002: unknown main item tag 0x0 [ 198.245800][ T5883] magicmouse 0003:05AC:0323.0002: unknown main item tag 0x0 [ 198.245829][ T5883] magicmouse 0003:05AC:0323.0002: unknown main item tag 0x0 [ 198.245858][ T5883] magicmouse 0003:05AC:0323.0002: unknown main item tag 0x0 [ 198.245885][ T5883] magicmouse 0003:05AC:0323.0002: unexpected long global item [ 198.305887][ T5883] magicmouse 0003:05AC:0323.0002: magicmouse hid parse failed [ 198.306011][ T5883] magicmouse 0003:05AC:0323.0002: probe with driver magicmouse failed with error -22 [ 198.452290][ T7127] tc_dump_action: action bad kind [ 198.570535][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.608866][ T7174] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20002 [ 199.656952][ T5883] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 199.820074][ T5883] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.820106][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.848800][ T5883] usb 3-1: config 0 descriptor?? [ 199.871024][ T5883] cp210x 3-1:0.0: cp210x converter detected [ 199.908977][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.910456][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.229703][ T873] usb 5-1: USB disconnect, device number 9 [ 200.382661][ T5883] usb 3-1: cp210x converter now attached to ttyUSB0 [ 200.382858][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 200.421135][ T5883] usb 3-1: USB disconnect, device number 19 [ 200.443295][ T5883] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 200.444119][ T5883] cp210x 3-1:0.0: device disconnected [ 200.773500][ T7206] mmap: syz.0.493 (7206) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 203.345636][ T7237] block device autoloading is deprecated and will be removed. [ 203.429294][ T5805] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 203.582736][ T5805] usb 3-1: unable to get BOS descriptor or descriptor too short [ 203.595244][ T5805] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 203.595273][ T5805] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 203.595293][ T5805] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 203.595316][ T5805] usb 3-1: config 129 has no interface number 0 [ 203.595335][ T5805] usb 3-1: config 129 has no interface number 1 [ 203.595374][ T5805] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.595394][ T5805] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 203.595420][ T5805] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 203.595439][ T5805] usb 3-1: config 129 interface 135 has no altsetting 0 [ 203.595452][ T5805] usb 3-1: config 129 interface 5 has no altsetting 0 [ 203.691066][ T5805] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 203.691110][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.691132][ T5805] usb 3-1: Product: syz [ 203.691147][ T5805] usb 3-1: Manufacturer: syz [ 203.691161][ T5805] usb 3-1: SerialNumber: syz [ 204.159671][ T5805] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.159730][ T5805] usb 3-1: MIDIStreaming interface descriptor not found [ 204.306908][ T5805] usb 3-1: USB disconnect, device number 20 [ 204.504725][ T7258] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20002 [ 204.618333][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.472797][ T7285] netlink: 168 bytes leftover after parsing attributes in process `syz.1.518'. [ 206.129244][ T7297] syz.4.510 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 206.956798][ T5805] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 207.086887][ T5805] usb 5-1: device descriptor read/64, error -71 [ 207.326869][ T5805] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 207.456882][ T5805] usb 5-1: device descriptor read/64, error -71 [ 207.567302][ T5805] usb usb5-port1: attempt power cycle [ 207.650386][ T7339] 9p: Bad value for 'rfdno' [ 207.908497][ T5805] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 207.908900][ T7353] netlink: 'syz.0.547': attribute type 2 has an invalid length. [ 207.950584][ T5805] usb 5-1: device descriptor read/8, error -71 [ 208.196852][ T5805] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 208.227658][ T5805] usb 5-1: device descriptor read/8, error -71 [ 208.337316][ T5805] usb usb5-port1: unable to enumerate USB device [ 208.426830][ T5815] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 208.532852][ T7375] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 208.577052][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 208.581341][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 208.581376][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.584025][ T5815] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 208.584054][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.584075][ T5815] usb 3-1: Product: syz [ 208.584090][ T5815] usb 3-1: Manufacturer: syz [ 208.584104][ T5815] usb 3-1: SerialNumber: syz [ 208.624069][ T5815] usb 3-1: config 0 descriptor?? [ 208.676072][ T5815] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 208.676108][ T5815] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 208.686472][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 209.019295][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 209.022827][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.022855][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.289501][ T31] usb 4-1: string descriptor 0 read error: -22 [ 210.289660][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 210.289687][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.482253][ T31] usb 4-1: 0:1 : does not exist [ 210.491073][ T5815] em28xx 3-1:0.0: chip ID is em28178 [ 210.591886][ T7371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.592421][ T7371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.726981][ T31] usb 4-1: unit 0 not found! [ 210.889061][ T5815] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 210.967974][ T31] usb 4-1: USB disconnect, device number 4 [ 211.056865][ T5815] usb 2-1: Using ep0 maxpacket: 32 [ 211.064237][ T5815] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 211.064268][ T5815] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 211.064291][ T5815] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 211.064312][ T5815] usb 2-1: config 1 has no interface number 0 [ 211.064361][ T5815] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 211.064389][ T5815] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 211.064435][ T5815] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 211.064458][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.234921][ T5815] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 211.434873][ T5815] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 211.509170][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 211.509186][ T37] audit: type=1326 audit(1773887332.393:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 211.513480][ T37] audit: type=1326 audit(1773887332.393:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 211.513791][ T37] audit: type=1326 audit(1773887332.393:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 211.525606][ T37] audit: type=1326 audit(1773887332.393:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 211.525666][ T37] audit: type=1326 audit(1773887332.403:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 211.667685][ T7409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 211.949646][ T5815] usb 3-1: USB disconnect, device number 21 [ 211.999645][ T5815] em28xx 3-1:0.0: Disconnecting em28xx [ 212.083510][ T7389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.087457][ T7389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.108898][ T7389] sockfs: Unknown parameter 'smackfstransmute ' [ 212.151967][ T5889] usb 2-1: USB disconnect, device number 23 [ 212.155172][ T5889] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 212.264530][ T5815] em28xx 3-1:0.0: Freeing device [ 212.660411][ T7437] capability: warning: `syz.2.579' uses 32-bit capabilities (legacy support in use) [ 212.796184][ T7442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.582'. [ 212.826899][ T5815] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 212.888607][ T7442] 9pnet_fd: Insufficient options for proto=fd [ 212.966801][ T5815] usb 1-1: device descriptor read/64, error -71 [ 213.236857][ T5815] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 213.370745][ T5815] usb 1-1: device descriptor read/64, error -71 [ 214.048026][ T5815] usb usb1-port1: attempt power cycle [ 214.389955][ T5815] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.427703][ T5815] usb 1-1: device descriptor read/8, error -71 [ 214.477064][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 214.524566][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 214.524983][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 214.666846][ T5815] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 214.688009][ T5815] usb 1-1: device descriptor read/8, error -71 [ 214.797272][ T5815] usb usb1-port1: unable to enumerate USB device [ 214.938845][ T7487] 9p: Bad value for 'rfdno' [ 217.526958][ T5883] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 217.746892][ T5815] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 217.776967][ T5883] usb 2-1: device descriptor read/64, error -71 [ 217.795755][ T37] audit: type=1326 audit(1773887338.673:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 217.795811][ T37] audit: type=1326 audit(1773887338.673:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 217.803300][ T37] audit: type=1326 audit(1773887338.683:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 217.803694][ T37] audit: type=1326 audit(1773887338.683:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 217.803739][ T37] audit: type=1326 audit(1773887338.683:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 217.803789][ T37] audit: type=1326 audit(1773887338.683:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 217.803846][ T37] audit: type=1326 audit(1773887338.683:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 217.803889][ T37] audit: type=1326 audit(1773887338.683:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 217.803933][ T37] audit: type=1326 audit(1773887338.683:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 217.803978][ T37] audit: type=1326 audit(1773887338.683:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.0.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 217.988293][ T5815] usb 3-1: Using ep0 maxpacket: 16 [ 218.080903][ T7548] hub 9-0:1.0: USB hub found [ 218.087421][ T7548] hub 9-0:1.0: 1 port detected [ 218.951824][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 218.951860][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 218.954441][ T5815] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 218.954470][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.954492][ T5815] usb 3-1: Product: syz [ 218.954507][ T5815] usb 3-1: Manufacturer: syz [ 218.954523][ T5815] usb 3-1: SerialNumber: syz [ 219.029082][ T5815] usb 3-1: config 0 descriptor?? [ 219.087148][ T5883] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 219.105678][ T5815] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 219.236857][ T5883] usb 2-1: device descriptor read/64, error -71 [ 219.247655][ T7556] tmpfs: Bad value for 'mpol' [ 219.273963][ T5815] usb 3-1: USB disconnect, device number 22 [ 219.338784][ T7558] Bluetooth: hci0: unsupported parameter 12386 [ 219.338812][ T7558] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 219.350379][ T5883] usb usb2-port1: attempt power cycle [ 219.436857][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 219.546849][ T5882] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 219.566918][ T31] usb 1-1: device descriptor read/64, error -71 [ 219.711808][ T5882] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 219.711842][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.711864][ T5882] usb 5-1: Product: syz [ 219.711879][ T5882] usb 5-1: Manufacturer: syz [ 219.711894][ T5882] usb 5-1: SerialNumber: syz [ 219.718830][ T5883] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 219.757603][ T5883] usb 2-1: device descriptor read/8, error -71 [ 219.786838][ T5882] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 219.817135][ T31] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 219.915042][ T5815] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 219.956846][ T31] usb 1-1: device descriptor read/64, error -71 [ 219.996938][ T5883] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 220.028280][ T5883] usb 2-1: device descriptor read/8, error -71 [ 220.067980][ T31] usb usb1-port1: attempt power cycle [ 220.147402][ T5883] usb usb2-port1: unable to enumerate USB device [ 220.457337][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 220.480033][ T31] usb 1-1: device descriptor read/8, error -71 [ 220.575213][ T5805] usb 5-1: USB disconnect, device number 14 [ 220.716864][ T31] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 220.749736][ T31] usb 1-1: device descriptor read/8, error -71 [ 220.857216][ T31] usb usb1-port1: unable to enumerate USB device [ 221.042312][ T5815] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 221.044268][ T5815] ath9k_htc: Failed to initialize the device [ 222.161132][ T5805] usb 5-1: ath9k_htc: USB layer deinitialized [ 223.191430][ T7607] net_ratelimit: 23 callbacks suppressed [ 223.191447][ T7607] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 226.606004][ T7660] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 226.778077][ T5805] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 226.782048][ T37] kauditd_printk_skb: 82 callbacks suppressed [ 226.782062][ T37] audit: type=1800 audit(1773887347.653:177): pid=7663 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.675" name="file0" dev="overlay" ino=486 res=0 errno=0 [ 226.929075][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.929112][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.929137][ T5805] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 226.929254][ T5805] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.929281][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.065745][ T5805] usb 5-1: config 0 descriptor?? [ 228.736987][ T5889] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 228.886835][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 228.892841][ T5889] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.893269][ T5889] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.893298][ T5889] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 228.893328][ T5889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.893365][ T5889] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 228.893966][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.986379][ T5889] usb 1-1: config 0 descriptor?? [ 229.435019][ T5889] hid (null): unknown global tag 0xc [ 229.448907][ T5889] hid (null): usage index exceeded [ 229.451131][ T5889] hid (null): unknown global tag 0xd [ 229.451154][ T5889] hid (null): global environment stack underflow [ 229.469767][ T5889] hid (null): usage index exceeded [ 229.616975][ T5815] usb 1-1: USB disconnect, device number 15 [ 230.367010][ T5889] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 230.516746][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 230.520742][ T5889] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 230.520775][ T5889] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 230.520799][ T5889] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 230.520959][ T5889] usb 2-1: config 1 has no interface number 0 [ 230.521318][ T5889] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.521439][ T5889] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 230.521490][ T5889] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 230.521515][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.676249][ T5889] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 230.881729][ T5889] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 230.950405][ T7740] netlink: 16 bytes leftover after parsing attributes in process `syz.2.707'. [ 231.011622][ T5805] usbhid 5-1:0.0: can't add hid device: -71 [ 231.012185][ T5805] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 231.050445][ T5805] usb 5-1: USB disconnect, device number 15 [ 231.095197][ T7739] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 231.901834][ T5805] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 232.696849][ T7734] Bluetooth: hci1: command 0x0406 tx timeout [ 232.699079][ T7734] Bluetooth: hci3: command 0x0406 tx timeout [ 232.700308][ T7734] Bluetooth: hci0: command 0x0406 tx timeout [ 232.701947][ T7734] Bluetooth: hci4: command 0x0406 tx timeout [ 233.769420][ T5882] usb 2-1: USB disconnect, device number 28 [ 233.793489][ T5882] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 237.604294][ T7855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.755'. [ 237.729944][ T7850] sctp: [Deprecated]: syz.2.748 (pid 7850) Use of int in maxseg socket option. [ 237.729944][ T7850] Use struct sctp_assoc_value instead [ 237.767869][ T7859] FAULT_INJECTION: forcing a failure. [ 237.767869][ T7859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.767909][ T7859] CPU: 0 UID: 0 PID: 7859 Comm: syz.3.757 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 237.767939][ T7859] Tainted: [L]=SOFTLOCKUP [ 237.767946][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.767958][ T7859] Call Trace: [ 237.767967][ T7859] [ 237.767976][ T7859] dump_stack_lvl+0xe8/0x150 [ 237.768012][ T7859] should_fail_ex+0x46b/0x600 [ 237.768046][ T7859] _copy_from_user+0x2d/0xb0 [ 237.768088][ T7859] __sys_bpf+0x229/0x950 [ 237.768118][ T7859] ? __pfx___sys_bpf+0x10/0x10 [ 237.768143][ T7859] ? rt_mutex_slowunlock+0x1cb/0x300 [ 237.768188][ T7859] ? ksys_write+0x248/0x270 [ 237.768223][ T7859] ? __pfx_ksys_write+0x10/0x10 [ 237.768264][ T7859] __x64_sys_bpf+0x7c/0x90 [ 237.768290][ T7859] do_syscall_64+0x14d/0xf80 [ 237.768322][ T7859] ? trace_irq_disable+0x3b/0x150 [ 237.768347][ T7859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.768370][ T7859] ? clear_bhb_loop+0x40/0x90 [ 237.768397][ T7859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.768420][ T7859] RIP: 0033:0x7fe46f74c799 [ 237.768441][ T7859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.768460][ T7859] RSP: 002b:00007fe46d9a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.768496][ T7859] RAX: ffffffffffffffda RBX: 00007fe46f9c5fa0 RCX: 00007fe46f74c799 [ 237.768512][ T7859] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000009 [ 237.768526][ T7859] RBP: 00007fe46d9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 237.768539][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.768552][ T7859] R13: 00007fe46f9c6038 R14: 00007fe46f9c5fa0 R15: 00007fff1df98dd8 [ 237.768585][ T7859] [ 238.246800][ T5889] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 238.400100][ T5889] usb 2-1: Using ep0 maxpacket: 32 [ 238.405401][ T5889] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 238.405430][ T5889] usb 2-1: config 0 has no interface number 0 [ 238.405476][ T5889] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.405505][ T5889] usb 2-1: config 0 interface 85 has no altsetting 0 [ 238.432993][ T5889] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 238.433078][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.433139][ T5889] usb 2-1: Product: syz [ 238.433187][ T5889] usb 2-1: Manufacturer: syz [ 238.433230][ T5889] usb 2-1: SerialNumber: syz [ 238.508302][ T5889] usb 2-1: config 0 descriptor?? [ 238.536861][ T873] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 238.686767][ T873] usb 1-1: Using ep0 maxpacket: 32 [ 238.691368][ T873] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 238.691400][ T873] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 238.691423][ T873] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 238.691552][ T873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.691576][ T873] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.691603][ T873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.691679][ T873] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 238.691704][ T873] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 238.691749][ T873] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 238.691773][ T873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.835472][ T873] usb 1-1: config 0 descriptor?? [ 239.083729][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.084305][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.230762][ T5889] appletouch 2-1:0.85: Geyser mode initialized. [ 239.234301][ T5889] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input9 [ 239.245805][ T873] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 239.407035][ T873] usb 1-1: USB disconnect, device number 16 [ 239.890872][ T7905] IPv6: NLM_F_REPLACE set, but no existing node found! [ 240.728964][ T873] usblp0: removed [ 241.028160][ T7912] nfs: Bad value for 'smackfsfloor' [ 241.061578][ T873] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 241.217546][ T873] usb 1-1: Using ep0 maxpacket: 32 [ 241.221765][ T873] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 241.221804][ T873] usb 1-1: config 0 has no interface number 0 [ 241.221837][ T873] usb 1-1: too many endpoints for config 0 interface 46 altsetting 0: 223, using maximum allowed: 30 [ 241.221889][ T873] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.221913][ T873] usb 1-1: config 0 interface 46 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 241.221940][ T873] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.221963][ T873] usb 1-1: config 0 interface 46 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 241.221987][ T873] usb 1-1: config 0 interface 46 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 223 [ 241.226153][ T873] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 241.226186][ T873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.226209][ T873] usb 1-1: Product: syz [ 241.226225][ T873] usb 1-1: Manufacturer: syz [ 241.226240][ T873] usb 1-1: SerialNumber: syz [ 241.391010][ T873] usb 1-1: config 0 descriptor?? [ 241.538784][ T873] usb 1-1: can't set config #0, error -71 [ 241.546394][ T873] usb 1-1: USB disconnect, device number 17 [ 241.638480][ T5115] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 241.639726][ T5115] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 241.712801][ T7922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.784'. [ 242.144548][ T5815] usb 2-1: USB disconnect, device number 29 [ 242.623522][ T5815] appletouch 2-1:0.85: input: appletouch disconnected [ 242.648957][ T5882] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 242.789879][ T7942] netlink: 'syz.2.793': attribute type 6 has an invalid length. [ 242.807085][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 242.811166][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short [ 242.812699][ T5882] usb 1-1: config 164 has an invalid interface number: 28 but max is 0 [ 242.812728][ T5882] usb 1-1: config 164 has no interface number 0 [ 242.812762][ T5882] usb 1-1: config 164 interface 28 has no altsetting 0 [ 242.826916][ T5882] usb 1-1: New USB device found, idVendor=a772, idProduct=72b8, bcdDevice=30.cc [ 242.826959][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.826980][ T5882] usb 1-1: Product: syz [ 242.826996][ T5882] usb 1-1: Manufacturer: syz [ 242.827011][ T5882] usb 1-1: SerialNumber: syz [ 242.976867][ T5815] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 243.150455][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.151048][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.151075][ T5815] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 243.151121][ T5815] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.151532][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.259380][ T5815] usb 2-1: config 0 descriptor?? [ 243.326430][ T5882] usb 1-1: USB disconnect, device number 18 [ 243.545658][ T5805] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 243.676836][ T5805] usb 3-1: device descriptor read/64, error -71 [ 243.926818][ T5805] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 244.057072][ T5805] usb 3-1: device descriptor read/64, error -71 [ 244.335340][ T5805] usb usb3-port1: attempt power cycle [ 245.266821][ T5805] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 245.296927][ T5805] usb 3-1: device descriptor read/8, error -71 [ 245.736955][ T7981] hub 9-0:1.0: USB hub found [ 245.739472][ T7981] hub 9-0:1.0: 1 port detected [ 245.861749][ T5805] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 245.877589][ T5805] usb 3-1: device descriptor read/8, error -71 [ 245.990480][ T5805] usb usb3-port1: unable to enumerate USB device [ 248.347365][ T5815] usbhid 2-1:0.0: can't add hid device: -32 [ 248.347499][ T5815] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 249.121830][ T5882] usb 2-1: USB disconnect, device number 30 [ 249.204750][ T8029] netlink: 'syz.4.826': attribute type 72 has an invalid length. [ 249.408147][ T37] audit: type=1326 audit(1773887370.293:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 249.418760][ T37] audit: type=1326 audit(1773887370.293:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 249.418813][ T37] audit: type=1326 audit(1773887370.303:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 249.418854][ T37] audit: type=1326 audit(1773887370.303:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 249.418894][ T37] audit: type=1326 audit(1773887370.303:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 249.438696][ T37] audit: type=1326 audit(1773887370.313:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 249.438840][ T37] audit: type=1326 audit(1773887370.313:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 249.441591][ T37] audit: type=1326 audit(1773887370.323:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 249.441718][ T37] audit: type=1326 audit(1773887370.323:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 249.441839][ T37] audit: type=1326 audit(1773887370.323:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8034 comm="syz.0.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 250.843504][ T8058] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.839'. [ 254.236824][ T5882] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 254.413021][ T5882] usb 1-1: device descriptor read/64, error -71 [ 254.555418][ T8111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.668583][ T5882] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 254.806947][ T5882] usb 1-1: device descriptor read/64, error -71 [ 254.917270][ T5882] usb usb1-port1: attempt power cycle [ 255.266993][ T5882] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 255.291569][ T5882] usb 1-1: device descriptor read/8, error -71 [ 255.521892][ T8145] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.873'. [ 255.543433][ T5882] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 255.558425][ T5882] usb 1-1: device descriptor read/8, error -71 [ 255.667337][ T5882] usb usb1-port1: unable to enumerate USB device [ 255.997935][ T8162] FAULT_INJECTION: forcing a failure. [ 255.997935][ T8162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.998140][ T8162] CPU: 0 UID: 0 PID: 8162 Comm: syz.3.880 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 255.998171][ T8162] Tainted: [L]=SOFTLOCKUP [ 255.998179][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 255.998213][ T8162] Call Trace: [ 255.998222][ T8162] [ 255.998232][ T8162] dump_stack_lvl+0xe8/0x150 [ 255.998270][ T8162] should_fail_ex+0x46b/0x600 [ 255.998305][ T8162] _copy_to_user+0x31/0xb0 [ 255.998342][ T8162] simple_read_from_buffer+0xe1/0x170 [ 255.998377][ T8162] proc_fail_nth_read+0x1be/0x230 [ 255.998411][ T8162] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.998443][ T8162] ? rw_verify_area+0x2ac/0x4e0 [ 255.998475][ T8162] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.998504][ T8162] vfs_read+0x212/0xa80 [ 255.998546][ T8162] ? __pfx_vfs_read+0x10/0x10 [ 255.998582][ T8162] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 255.998617][ T8162] ? lockdep_hardirqs_on+0x7a/0x110 [ 255.998650][ T8162] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 255.998683][ T8162] ? mutex_lock_nested+0x152/0x1d0 [ 255.998709][ T8162] ? fdget_pos+0x252/0x320 [ 255.998748][ T8162] ksys_read+0x156/0x270 [ 255.998785][ T8162] ? __pfx_ksys_read+0x10/0x10 [ 255.998831][ T8162] do_syscall_64+0x14d/0xf80 [ 255.998864][ T8162] ? trace_irq_disable+0x3b/0x150 [ 255.998890][ T8162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.998914][ T8162] ? clear_bhb_loop+0x40/0x90 [ 255.998942][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.998982][ T8162] RIP: 0033:0x7fe46f70cfce [ 255.999004][ T8162] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 255.999022][ T8162] RSP: 002b:00007fe46d9a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.999045][ T8162] RAX: ffffffffffffffda RBX: 00007fe46d9a66c0 RCX: 00007fe46f70cfce [ 255.999061][ T8162] RDX: 000000000000000f RSI: 00007fe46d9a60a0 RDI: 0000000000000005 [ 255.999074][ T8162] RBP: 00007fe46d9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 255.999087][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.999100][ T8162] R13: 00007fe46f9c6038 R14: 00007fe46f9c5fa0 R15: 00007fff1df98dd8 [ 255.999135][ T8162] [ 257.302356][ T8187] bond2: entered promiscuous mode [ 257.302387][ T8187] bond2: entered allmulticast mode [ 257.302927][ T8187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.572183][ T8200] FAULT_INJECTION: forcing a failure. [ 257.572183][ T8200] name failslab, interval 1, probability 0, space 0, times 0 [ 257.572223][ T8200] CPU: 0 UID: 0 PID: 8200 Comm: syz.1.894 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 257.572253][ T8200] Tainted: [L]=SOFTLOCKUP [ 257.572260][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 257.572273][ T8200] Call Trace: [ 257.572281][ T8200] [ 257.572291][ T8200] dump_stack_lvl+0xe8/0x150 [ 257.572327][ T8200] should_fail_ex+0x46b/0x600 [ 257.572361][ T8200] should_failslab+0xa8/0x100 [ 257.572386][ T8200] __kmalloc_noprof+0xdf/0x7b0 [ 257.572419][ T8200] ? sock_kmalloc+0xd6/0x160 [ 257.572442][ T8200] ? unwind_get_return_address+0x4d/0x90 [ 257.572469][ T8200] sock_kmalloc+0xd6/0x160 [ 257.572494][ T8200] ____sys_sendmsg+0x1b5/0x9c0 [ 257.572520][ T8200] ? __asan_memset+0x22/0x50 [ 257.572549][ T8200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.572582][ T8200] ? import_iovec+0x73/0xa0 [ 257.572619][ T8200] ___sys_sendmsg+0x2a5/0x360 [ 257.572647][ T8200] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.572707][ T8200] ? __fget_files+0x2a/0x420 [ 257.572735][ T8200] ? __fget_files+0x3a6/0x420 [ 257.572775][ T8200] __x64_sys_sendmsg+0x1c3/0x2a0 [ 257.572802][ T8200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 257.572834][ T8200] ? __pfx_ksys_write+0x10/0x10 [ 257.572889][ T8200] do_syscall_64+0x14d/0xf80 [ 257.572922][ T8200] ? trace_irq_disable+0x3b/0x150 [ 257.572948][ T8200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.572972][ T8200] ? clear_bhb_loop+0x40/0x90 [ 257.572999][ T8200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.573021][ T8200] RIP: 0033:0x7fd9a26ec799 [ 257.573041][ T8200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.573060][ T8200] RSP: 002b:00007fd9a0946028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.573083][ T8200] RAX: ffffffffffffffda RBX: 00007fd9a2965fa0 RCX: 00007fd9a26ec799 [ 257.573099][ T8200] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 257.573112][ T8200] RBP: 00007fd9a0946090 R08: 0000000000000000 R09: 0000000000000000 [ 257.573126][ T8200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.573138][ T8200] R13: 00007fd9a2966038 R14: 00007fd9a2965fa0 R15: 00007ffedc2d3278 [ 257.573173][ T8200] [ 261.375348][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.375428][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.512230][ T8236] netlink: 'syz.3.907': attribute type 2 has an invalid length. [ 261.583240][ T8241] nfs: Unknown parameter '00000000000000000000003' [ 261.683462][ T8247] IPv6: NLM_F_REPLACE set, but no existing node found! [ 262.830787][ T8261] netlink: 76 bytes leftover after parsing attributes in process `syz.4.916'. [ 262.976823][ T5964] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 263.096972][ T873] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 263.129353][ T5964] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 263.129383][ T5964] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 263.129403][ T5964] usb 3-1: config 220 has no interface number 2 [ 263.129470][ T5964] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 263.129498][ T5964] usb 3-1: config 220 interface 0 has no altsetting 0 [ 263.129516][ T5964] usb 3-1: config 220 interface 76 has no altsetting 0 [ 263.129535][ T5964] usb 3-1: config 220 interface 1 has no altsetting 0 [ 263.250778][ T873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.250815][ T873] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.250839][ T873] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.250885][ T873] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.250910][ T873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.256512][ T873] usb 1-1: config 0 descriptor?? [ 263.452016][ T5964] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 263.452048][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.452070][ T5964] usb 3-1: Product: syz [ 263.452086][ T5964] usb 3-1: Manufacturer: syz [ 263.452102][ T5964] usb 3-1: SerialNumber: syz [ 265.811049][ T8263] syz.1.917 (8263) used greatest stack depth: 18696 bytes left [ 265.818656][ T5964] usb 3-1: selecting invalid altsetting 0 [ 265.849447][ T5964] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 265.849485][ T5964] uvcvideo 3-1:220.0: No valid video chain found. [ 265.973590][ T5964] usb 3-1: selecting invalid altsetting 0 [ 265.973632][ T5964] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 266.030545][ T5964] usb 3-1: USB disconnect, device number 27 [ 266.123254][ T8287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.925'. [ 266.640991][ T8301] ceph: No source [ 267.216522][ T873] usbhid 1-1:0.0: can't add hid device: -71 [ 267.216842][ T873] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 267.246769][ T873] usb 1-1: USB disconnect, device number 23 [ 267.616792][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 267.766798][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 267.770915][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 267.772131][ T10] usb 3-1: config 8 has an invalid interface number: 140 but max is 0 [ 267.772157][ T10] usb 3-1: config 8 has no interface number 0 [ 267.772205][ T10] usb 3-1: config 8 interface 140 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 267.774594][ T10] usb 3-1: New USB device found, idVendor=0403, idProduct=e80f, bcdDevice= 1.4c [ 267.774622][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.774643][ T10] usb 3-1: Product: syz [ 267.774658][ T10] usb 3-1: Manufacturer: syz [ 267.774672][ T10] usb 3-1: SerialNumber: syz [ 268.150661][ T8342] netlink: 28 bytes leftover after parsing attributes in process `syz.1.945'. [ 270.612977][ T10] ftdi_sio 3-1:8.140: FTDI USB Serial Device converter detected [ 270.614851][ T10] usb 3-1: Detected SIO [ 270.655999][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 270.698723][ T10] usb 3-1: USB disconnect, device number 28 [ 270.714386][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 270.715149][ T10] ftdi_sio 3-1:8.140: device disconnected [ 272.896894][ T5815] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 273.036914][ T8392] FAULT_INJECTION: forcing a failure. [ 273.036914][ T8392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.036956][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.3.962 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 273.036987][ T8392] Tainted: [L]=SOFTLOCKUP [ 273.036995][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 273.037007][ T8392] Call Trace: [ 273.037016][ T8392] [ 273.037027][ T8392] dump_stack_lvl+0xe8/0x150 [ 273.037063][ T8392] should_fail_ex+0x46b/0x600 [ 273.037098][ T8392] _copy_to_iter+0x1e4/0x17d0 [ 273.037127][ T8392] ? __pfx_drbg_kcapi_random+0x10/0x10 [ 273.037175][ T8392] ? __pfx__copy_to_iter+0x10/0x10 [ 273.037201][ T8392] ? unwind_next_frame+0xa5/0x23c0 [ 273.037240][ T8392] rng_recvmsg+0x1db/0x2a0 [ 273.037267][ T8392] ? __pfx_rng_recvmsg+0x10/0x10 [ 273.037308][ T8392] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 273.037339][ T8392] ? security_socket_recvmsg+0x7e/0x2c0 [ 273.037385][ T8392] ? __pfx_rng_recvmsg+0x10/0x10 [ 273.037409][ T8392] sock_recvmsg+0x172/0x1b0 [ 273.037443][ T8392] ____sys_recvmsg+0x1f2/0x4b0 [ 273.037476][ T8392] ? __pfx_____sys_recvmsg+0x10/0x10 [ 273.037515][ T8392] ? import_iovec+0x73/0xa0 [ 273.037550][ T8392] ___sys_recvmsg+0x215/0x590 [ 273.037579][ T8392] ? __pfx____sys_recvmsg+0x10/0x10 [ 273.037628][ T8392] ? __fget_files+0x3a6/0x420 [ 273.037667][ T8392] __x64_sys_recvmsg+0x1c0/0x2a0 [ 273.037694][ T8392] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 273.037728][ T8392] ? __pfx_ksys_write+0x10/0x10 [ 273.037772][ T8392] do_syscall_64+0x14d/0xf80 [ 273.037803][ T8392] ? trace_irq_disable+0x3b/0x150 [ 273.037828][ T8392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.037850][ T8392] ? clear_bhb_loop+0x40/0x90 [ 273.037877][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.037900][ T8392] RIP: 0033:0x7fe46f74c799 [ 273.037921][ T8392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.037961][ T8392] RSP: 002b:00007fe46d9a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 273.037985][ T8392] RAX: ffffffffffffffda RBX: 00007fe46f9c5fa0 RCX: 00007fe46f74c799 [ 273.038000][ T8392] RDX: 0000000000010150 RSI: 00002000000000c0 RDI: 0000000000000004 [ 273.038014][ T8392] RBP: 00007fe46d9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 273.038027][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.038039][ T8392] R13: 00007fe46f9c6038 R14: 00007fe46f9c5fa0 R15: 00007fff1df98dd8 [ 273.038073][ T8392] [ 273.168957][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 273.231517][ T5815] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.231578][ T5815] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 273.231604][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.247318][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 273.410013][ T5815] usb 5-1: config 0 descriptor?? [ 273.428894][ T5815] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 273.486824][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 273.490058][ T31] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 273.490191][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 273.490217][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 273.490243][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 273.490269][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.490371][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 273.490396][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.957932][ T5815] gspca_vc032x: reg_w err -71 [ 273.958254][ T5815] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 274.003303][ T5815] usb 5-1: USB disconnect, device number 16 [ 274.665273][ T5882] usb 1-1: USB disconnect, device number 24 [ 278.208946][ T8423] trusted_key: encrypted_key: keylen parameter is missing [ 278.211506][ T8420] trusted_key: encrypted_key: master key parameter 'lefault' is invalid [ 279.869830][ T8450] 9p: Bad value for 'wfdno' [ 279.886750][ T31] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 280.083345][ T8445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.083987][ T8445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.203964][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 280.203985][ T37] audit: type=1326 audit(1773887401.083:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8458 comm="syz.0.987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3af547c799 code=0x0 [ 281.542568][ T8473] could not allocate digest TFM handle sha3-224-generic [ 281.816932][ T8490] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.998'. [ 282.309444][ T5115] Bluetooth: hci0: command 0x0406 tx timeout [ 282.356939][ T8503] Illegal XDP return value 4294967274 on prog (id 34) dev syz_tun, expect packet loss! [ 282.393159][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.406773][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.062611][ T8515] netlink: 'syz.0.1008': attribute type 25 has an invalid length. [ 283.063110][ T8515] IPv6: NLM_F_REPLACE set, but no existing node found! [ 283.604314][ T8529] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1013'. [ 285.135693][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 285.240590][ T31] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 285.240622][ T31] usb 2-1: chopping to 0 config(s) [ 285.240651][ T31] usb 2-1: can't read configurations, error -32 [ 285.378201][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 285.472296][ T8559] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 285.506771][ T31] usb 2-1: device descriptor read/64, error -32 [ 285.622059][ T31] usb usb2-port1: attempt power cycle [ 285.966783][ T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 285.994755][ T31] usb 2-1: device descriptor read/8, error -32 [ 286.206797][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 286.226867][ T31] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 286.256710][ T31] usb 2-1: device descriptor read/8, error -32 [ 286.367748][ T31] usb usb2-port1: unable to enumerate USB device [ 286.370133][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 286.371645][ T10] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 286.371674][ T10] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 286.371696][ T10] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 286.371720][ T10] usb 3-1: config 129 has no interface number 0 [ 286.371738][ T10] usb 3-1: config 129 has no interface number 1 [ 286.371797][ T10] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 286.371828][ T10] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 286.371868][ T10] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 286.371898][ T10] usb 3-1: config 129 interface 135 has no altsetting 0 [ 286.371918][ T10] usb 3-1: config 129 interface 5 has no altsetting 0 [ 286.385119][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 286.385203][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.385256][ T10] usb 3-1: Product: syz [ 286.385298][ T10] usb 3-1: Manufacturer: syz [ 286.385340][ T10] usb 3-1: SerialNumber: syz [ 287.563240][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.563301][ T10] usb 3-1: MIDIStreaming interface descriptor not found [ 287.936033][ T10] usb 3-1: USB disconnect, device number 29 [ 288.271645][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 288.948763][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 289.096858][ T5905] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 289.260153][ T5905] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 289.260192][ T5905] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 289.260213][ T5905] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 289.260235][ T5905] usb 3-1: config 220 has no interface number 2 [ 289.261321][ T5905] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 289.261353][ T5905] usb 3-1: config 220 interface 0 has no altsetting 0 [ 289.261373][ T5905] usb 3-1: config 220 interface 76 has no altsetting 0 [ 289.261392][ T5905] usb 3-1: config 220 interface 1 has no altsetting 0 [ 289.264363][ T5905] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 289.264395][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.264418][ T5905] usb 3-1: Product: syz [ 289.264434][ T5905] usb 3-1: Manufacturer: syz [ 289.264451][ T5905] usb 3-1: SerialNumber: syz [ 289.594834][ T5905] usb 3-1: selecting invalid altsetting 0 [ 289.595344][ T5905] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 289.595377][ T5905] uvcvideo 3-1:220.0: No valid video chain found. [ 289.648921][ T5905] usb 3-1: selecting invalid altsetting 0 [ 289.648967][ T5905] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 289.674337][ T5905] usb 3-1: USB disconnect, device number 30 [ 290.425260][ T8643] 9p: Unknown access argument : -22 [ 290.547888][ T8647] netlink: 368 bytes leftover after parsing attributes in process `syz.0.1062'. [ 290.641609][ T37] audit: type=1326 audit(1773887411.523:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8654 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 290.644989][ T37] audit: type=1326 audit(1773887411.523:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8654 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 290.645371][ T37] audit: type=1326 audit(1773887411.523:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8654 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 290.645532][ T37] audit: type=1326 audit(1773887411.523:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8654 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 290.645949][ T37] audit: type=1326 audit(1773887411.523:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8654 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 290.646288][ T37] audit: type=1326 audit(1773887411.523:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8654 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 290.646414][ T37] audit: type=1326 audit(1773887411.523:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8654 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 290.651901][ T37] audit: type=1326 audit(1773887411.533:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8654 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 290.651967][ T37] audit: type=1326 audit(1773887411.533:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8654 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 290.652014][ T37] audit: type=1326 audit(1773887411.533:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8654 comm="syz.4.1064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 290.676803][ T5882] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 290.874080][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 290.894473][ T5882] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 290.894506][ T5882] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 290.894529][ T5882] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 290.894551][ T5882] usb 3-1: config 129 has no interface number 0 [ 290.894568][ T5882] usb 3-1: config 129 has no interface number 1 [ 290.894636][ T5882] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 290.894665][ T5882] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 290.894704][ T5882] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 290.894733][ T5882] usb 3-1: config 129 interface 135 has no altsetting 0 [ 290.894752][ T5882] usb 3-1: config 129 interface 5 has no altsetting 0 [ 291.001880][ T5882] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 291.001914][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.001935][ T5882] usb 3-1: Product: syz [ 291.001950][ T5882] usb 3-1: Manufacturer: syz [ 291.001965][ T5882] usb 3-1: SerialNumber: syz [ 291.556059][ T5882] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.556120][ T5882] usb 3-1: MIDIStreaming interface descriptor not found [ 292.487983][ T5882] usb 3-1: USB disconnect, device number 31 [ 292.705768][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.875146][ T8679] netlink: 368 bytes leftover after parsing attributes in process `syz.1.1074'. [ 293.175695][ T8693] netlink: 368 bytes leftover after parsing attributes in process `syz.2.1077'. [ 296.646854][ T5882] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 296.806817][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 296.810069][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short [ 296.816150][ T5882] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 296.853759][ T5882] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 296.853795][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.853817][ T5882] usb 2-1: Product: syz [ 296.853834][ T5882] usb 2-1: Manufacturer: syz [ 296.853849][ T5882] usb 2-1: SerialNumber: syz [ 297.189279][ T8775] tipc: Started in network mode [ 297.189317][ T8775] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 297.226315][ T8775] tipc: Enabled bearer , priority 14 [ 297.952228][ T8811] ip6erspan0: entered allmulticast mode [ 298.070935][ T8813] batadv0: entered promiscuous mode [ 298.071338][ T8813] vlan2: entered promiscuous mode [ 298.202121][ T5882] usb 2-1: unit 255 not found! [ 298.342949][ T5905] tipc: Node number set to 10005162 [ 298.466859][ T5882] usb 2-1: USB disconnect, device number 35 [ 298.626960][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 298.699329][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.916771][ T5882] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 299.004356][ T8842] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.039659][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 299.039680][ T37] audit: type=1326 audit(1773887419.913:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8839 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 299.039732][ T37] audit: type=1326 audit(1773887419.913:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8839 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 299.039780][ T37] audit: type=1326 audit(1773887419.913:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8839 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 299.039828][ T37] audit: type=1326 audit(1773887419.913:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8839 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 299.039874][ T37] audit: type=1326 audit(1773887419.913:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8839 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 299.039919][ T37] audit: type=1326 audit(1773887419.913:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8839 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 299.039963][ T37] audit: type=1326 audit(1773887419.913:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8839 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 299.040009][ T37] audit: type=1326 audit(1773887419.913:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8839 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 299.040055][ T37] audit: type=1326 audit(1773887419.913:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8839 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 299.040099][ T37] audit: type=1326 audit(1773887419.913:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8839 comm="syz.4.1134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 299.050162][ T5882] usb 2-1: device descriptor read/64, error -71 [ 299.319364][ T5882] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 299.459027][ T5882] usb 2-1: device descriptor read/64, error -71 [ 299.567144][ T5882] usb usb2-port1: attempt power cycle [ 299.906869][ T5882] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 299.927650][ T5882] usb 2-1: device descriptor read/8, error -71 [ 300.459419][ T873] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 300.606849][ T873] usb 5-1: Using ep0 maxpacket: 8 [ 300.609256][ T873] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.613189][ T873] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 300.613221][ T873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.613244][ T873] usb 5-1: Product: syz [ 300.613259][ T873] usb 5-1: Manufacturer: syz [ 300.613275][ T873] usb 5-1: SerialNumber: syz [ 300.629145][ T5882] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 300.661362][ T5882] usb 2-1: device descriptor read/8, error -71 [ 300.691864][ T873] usb 5-1: config 0 descriptor?? [ 300.701426][ T873] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 300.701520][ T873] usb 5-1: selecting invalid altsetting 1 [ 300.834750][ T5882] usb usb2-port1: unable to enumerate USB device [ 300.889293][ T8876] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1146'. [ 300.924491][ T873] gspca_stk014: init reg: 0x00 [ 300.924590][ T873] stk014 5-1:0.0: probe with driver stk014 failed with error -5 [ 301.329060][ T31] usb 5-1: USB disconnect, device number 17 [ 302.116803][ T5882] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 302.319504][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.322623][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.322647][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.325457][ T5882] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 302.325487][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.325508][ T5882] usb 3-1: Product: syz [ 302.325523][ T5882] usb 3-1: Manufacturer: syz [ 302.325538][ T5882] usb 3-1: SerialNumber: syz [ 302.906819][ T5905] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 302.967912][ T5882] usb 3-1: 0:1 : does not exist [ 302.969434][ T5882] usb 3-1: unit 0 not found! [ 303.074412][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.074440][ T5905] usb 2-1: config 0 has no interfaces? [ 303.090822][ T5905] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 303.090925][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.090986][ T5905] usb 2-1: Product: syz [ 303.091034][ T5905] usb 2-1: Manufacturer: syz [ 303.091089][ T5905] usb 2-1: SerialNumber: syz [ 303.130893][ T5882] usb 3-1: USB disconnect, device number 32 [ 303.202254][ T5905] usb 2-1: config 0 descriptor?? [ 303.350965][ T6771] udevd[6771]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.866202][ T8923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1167'. [ 304.046880][ T37] kauditd_printk_skb: 474 callbacks suppressed [ 304.046900][ T37] audit: type=1326 audit(1773887424.933:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9a26acfce code=0x7ffc0000 [ 304.048067][ T37] audit: type=1326 audit(1773887424.933:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9a26acfce code=0x7ffc0000 [ 304.049252][ T37] audit: type=1326 audit(1773887424.933:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9a26acfce code=0x7ffc0000 [ 304.050532][ T37] audit: type=1326 audit(1773887424.933:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9a26acfce code=0x7ffc0000 [ 304.051723][ T37] audit: type=1326 audit(1773887424.933:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9a26acfce code=0x7ffc0000 [ 304.052918][ T37] audit: type=1326 audit(1773887424.933:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9a26acfce code=0x7ffc0000 [ 304.054091][ T37] audit: type=1326 audit(1773887424.933:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9a26acfce code=0x7ffc0000 [ 304.055465][ T37] audit: type=1326 audit(1773887424.933:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9a26acfce code=0x7ffc0000 [ 304.122852][ T37] audit: type=1326 audit(1773887424.933:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9a26acfce code=0x7ffc0000 [ 304.123001][ T37] audit: type=1326 audit(1773887424.943:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.1.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd9a26acfce code=0x7ffc0000 [ 304.677389][ T8960] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 304.825563][ T8971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1189'. [ 305.063243][ T8980] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1191'. [ 305.864905][ T8986] pimreg: entered allmulticast mode [ 306.461564][ T5964] usb 2-1: USB disconnect, device number 40 [ 307.148919][ T9016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1202'. [ 307.271994][ T9019] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 308.010909][ T9048] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 310.591342][ T9093] hub 9-0:1.0: USB hub found [ 311.213397][ T9093] hub 9-0:1.0: 1 port detected [ 311.456047][ T9096] kexec: Could not allocate control_code_buffer [ 311.521902][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1239'. [ 311.940843][ T9108] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 312.336779][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 312.386751][ T5814] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 312.496780][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 312.499137][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 312.502101][ T10] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 312.502132][ T10] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 312.502155][ T10] usb 3-1: Product: syz [ 312.502170][ T10] usb 3-1: Manufacturer: syz [ 312.502186][ T10] usb 3-1: SerialNumber: syz [ 312.540272][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.540309][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.540333][ T5814] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.540376][ T5814] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.540401][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.616309][ T5814] usb 2-1: config 0 descriptor?? [ 312.925454][ T10] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 312.937558][ T10] visor 3-1:1.0: probe with driver visor failed with error -110 [ 313.665214][ T5889] usb 3-1: USB disconnect, device number 33 [ 315.332001][ T5814] usbhid 2-1:0.0: can't add hid device: -71 [ 315.332127][ T5814] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 315.369576][ T5814] usb 2-1: USB disconnect, device number 41 [ 322.783180][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.783271][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.794618][ T9134] 9p: Bad value for 'rfdno' [ 328.379773][ T5814] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 328.909957][ T9143] hub 9-0:1.0: USB hub found [ 328.947956][ T9143] hub 9-0:1.0: 1 port detected [ 329.230476][ T5814] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 329.230509][ T5814] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 329.230530][ T5814] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 329.230551][ T5814] usb 1-1: config 220 has no interface number 2 [ 329.230634][ T5814] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 329.230664][ T5814] usb 1-1: config 220 interface 0 has no altsetting 0 [ 329.230684][ T5814] usb 1-1: config 220 interface 76 has no altsetting 0 [ 329.230704][ T5814] usb 1-1: config 220 interface 1 has no altsetting 0 [ 329.308408][ T5814] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 329.308441][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.308462][ T5814] usb 1-1: Product: syz [ 329.308479][ T5814] usb 1-1: Manufacturer: syz [ 329.308494][ T5814] usb 1-1: SerialNumber: syz [ 329.399593][ T9152] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1256'. [ 329.620848][ T5814] usb 1-1: selecting invalid altsetting 0 [ 329.643276][ T5814] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 329.643312][ T5814] uvcvideo 1-1:220.0: No valid video chain found. [ 329.674901][ T5814] usb 1-1: selecting invalid altsetting 0 [ 329.674937][ T5814] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 329.739820][ T5814] usb 1-1: USB disconnect, device number 25 [ 329.960647][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'. [ 331.957324][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 332.493298][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 332.655311][ T9223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1280'. [ 332.668382][ T9223] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 332.668382][ T9223] program syz.1.1280 not setting count and/or reply_len properly [ 333.897806][ T37] kauditd_printk_skb: 1135 callbacks suppressed [ 333.897828][ T37] audit: type=1326 audit(1773887454.783:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9233 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 333.898665][ T37] audit: type=1326 audit(1773887454.783:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9233 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 333.902216][ T37] audit: type=1326 audit(1773887454.783:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9233 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 333.903039][ T37] audit: type=1326 audit(1773887454.783:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9233 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 333.903818][ T37] audit: type=1326 audit(1773887454.783:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9233 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 333.904096][ T37] audit: type=1326 audit(1773887454.783:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9233 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 333.904649][ T37] audit: type=1326 audit(1773887454.783:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9233 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 333.905151][ T37] audit: type=1326 audit(1773887454.783:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9233 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 333.905826][ T37] audit: type=1326 audit(1773887454.783:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9233 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 333.906102][ T37] audit: type=1326 audit(1773887454.783:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9233 comm="syz.4.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3550bdc799 code=0x7ffc0000 [ 334.101408][ T5883] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 334.439142][ T5883] usb 2-1: not running at top speed; connect to a high speed hub [ 334.444923][ T5883] usb 2-1: config 1 has an invalid interface number: 203 but max is 0 [ 334.444958][ T5883] usb 2-1: config 1 has no interface number 0 [ 334.444992][ T5883] usb 2-1: config 1 interface 203 has no altsetting 0 [ 334.491374][ T5883] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=a6.be [ 334.491410][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.491432][ T5883] usb 2-1: Product: syz [ 334.491448][ T5883] usb 2-1: Manufacturer: syz [ 334.491464][ T5883] usb 2-1: SerialNumber: syz [ 334.799308][ T5883] usb 2-1: USB disconnect, device number 42 [ 336.784519][ T9275] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1303'. [ 337.328313][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1311'. [ 339.865739][ T9322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1320'. [ 339.866541][ T9322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.867768][ T9322] IPv6: NLM_F_CREATE should be set when creating new route [ 340.627293][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 340.902531][ T9336] faux_driver vkms: [drm] Unknown color mode 138; guessing buffer size. [ 340.992713][ T9336] overlayfs: invalid origin (0000) [ 341.347144][ T5883] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 342.146903][ T5883] usb 2-1: device descriptor read/64, error -71 [ 342.390253][ T5883] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 342.546943][ T5883] usb 2-1: device descriptor read/64, error -71 [ 342.666419][ T5883] usb usb2-port1: attempt power cycle [ 342.692708][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 342.787151][ T9365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1336'. [ 342.787950][ T9365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 342.788001][ T9365] IPv6: NLM_F_CREATE should be set when creating new route [ 343.204468][ T5883] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 343.220707][ T5883] usb 2-1: device descriptor read/8, error -71 [ 343.476876][ T5883] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 343.499625][ T5883] usb 2-1: device descriptor read/8, error -71 [ 343.618153][ T5883] usb usb2-port1: unable to enumerate USB device [ 344.306537][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 344.307026][ T9393] FAULT_INJECTION: forcing a failure. [ 344.307026][ T9393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.307057][ T9393] CPU: 1 UID: 0 PID: 9393 Comm: syz.4.1351 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 344.307082][ T9393] Tainted: [L]=SOFTLOCKUP [ 344.307088][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.307099][ T9393] Call Trace: [ 344.307105][ T9393] [ 344.307114][ T9393] dump_stack_lvl+0xe8/0x150 [ 344.307145][ T9393] should_fail_ex+0x46b/0x600 [ 344.307173][ T9393] _copy_from_user+0x2d/0xb0 [ 344.307200][ T9393] ___sys_sendmsg+0x1c6/0x360 [ 344.307223][ T9393] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.307268][ T9393] ? __fget_files+0x2a/0x420 [ 344.307290][ T9393] ? __fget_files+0x3a6/0x420 [ 344.307332][ T9393] __x64_sys_sendmsg+0x1c3/0x2a0 [ 344.307352][ T9393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.307377][ T9393] ? __pfx_ksys_write+0x10/0x10 [ 344.307416][ T9393] do_syscall_64+0x14d/0xf80 [ 344.307442][ T9393] ? trace_irq_disable+0x3b/0x150 [ 344.307463][ T9393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.307481][ T9393] ? clear_bhb_loop+0x40/0x90 [ 344.307503][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.307521][ T9393] RIP: 0033:0x7f3550bdc799 [ 344.307537][ T9393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.307553][ T9393] RSP: 002b:00007f354ee2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.307572][ T9393] RAX: ffffffffffffffda RBX: 00007f3550e55fa0 RCX: 00007f3550bdc799 [ 344.307586][ T9393] RDX: 0000000000008040 RSI: 0000200000000080 RDI: 0000000000000003 [ 344.307598][ T9393] RBP: 00007f354ee2e090 R08: 0000000000000000 R09: 0000000000000000 [ 344.307609][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.307619][ T9393] R13: 00007f3550e56038 R14: 00007f3550e55fa0 R15: 00007ffd3bd53ad8 [ 344.307646][ T9393] [ 346.635141][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'. [ 347.093946][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 347.093967][ T37] audit: type=1326 audit(1773887467.973:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9448 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7942bc799 code=0x7ffc0000 [ 347.136844][ T37] audit: type=1326 audit(1773887467.973:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9448 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fe7942bc799 code=0x7ffc0000 [ 347.141738][ T37] audit: type=1326 audit(1773887468.023:1868): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=_ pid=9448 comm="syz.2.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7942bc799 code=0x7ffc0000 [ 348.413711][ T9499] syzkaller0: entered promiscuous mode [ 348.413740][ T9499] syzkaller0: entered allmulticast mode [ 348.633767][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 348.649931][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.651934][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.655746][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.656549][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 349.211810][ T9518] binder: 9516:9518 ioctl c0306201 2000000001c0 returned -14 [ 349.588237][ T873] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 349.738042][ T873] usb 2-1: Using ep0 maxpacket: 32 [ 349.743857][ T873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.743892][ T873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.743934][ T873] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 349.743959][ T873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.800600][ T873] usb 2-1: config 0 descriptor?? [ 349.818182][ T873] hub 2-1:0.0: USB hub found [ 350.251734][ T873] hub 2-1:0.0: 1 port detected [ 350.786869][ T5115] Bluetooth: hci5: command tx timeout [ 351.079170][ T873] hub 2-1:0.0: activate --> -90 [ 351.482898][ T5814] usb 2-1: USB disconnect, device number 47 [ 351.539135][ T9555] input: syz1 as /devices/virtual/input/input10 [ 351.666735][ T5882] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 351.695441][ T1388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.816925][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 351.819240][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.819274][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.819315][ T5882] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.819341][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.875303][ T5882] usb 1-1: config 0 descriptor?? [ 351.890861][ T5882] hub 1-1:0.0: USB hub found [ 352.088698][ T5882] hub 1-1:0.0: 1 port detected [ 352.423940][ T5882] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 352.423968][ T5882] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 352.447992][ T5882] usbhid 1-1:0.0: can't add hid device: -71 [ 352.448101][ T5882] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 352.859723][ T5115] Bluetooth: hci5: command tx timeout [ 353.257336][ T5882] usb 1-1: USB disconnect, device number 26 [ 353.508467][ T1388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.686782][ T5882] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 353.849585][ T5882] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.849614][ T5882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 353.849638][ T5882] usb 1-1: config 1 has no interface number 0 [ 353.849686][ T5882] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 353.849716][ T5882] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 353.849747][ T5882] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 353.849782][ T5882] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 353.849806][ T5882] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.852471][ T5882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.852500][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.852520][ T5882] usb 1-1: Product: syz [ 353.852539][ T5882] usb 1-1: Manufacturer: syz [ 353.852551][ T5882] usb 1-1: SerialNumber: syz [ 353.972578][ T9574] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 353.992731][ T1388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.117180][ T9508] chnl_net:caif_netlink_parms(): no params data found [ 354.319987][ T1388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.394692][ T9574] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 354.815516][ T5882] cdc_ncm 1-1:1.1: bind() failure [ 354.937175][ T5115] Bluetooth: hci5: command tx timeout [ 354.958613][ T9508] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.963114][ T9508] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.963391][ T9508] bridge_slave_0: entered allmulticast mode [ 354.999601][ T9508] bridge_slave_0: entered promiscuous mode [ 355.016029][ T5883] usb 1-1: USB disconnect, device number 27 [ 355.028997][ T9508] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.029168][ T9508] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.029444][ T9508] bridge_slave_1: entered allmulticast mode [ 355.122130][ T9508] bridge_slave_1: entered promiscuous mode [ 355.411906][ T9508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.490346][ T9508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.881003][ T9508] team0: Port device team_slave_0 added [ 355.906908][ T9508] team0: Port device team_slave_1 added [ 355.989727][ T1388] bridge_slave_1: left allmulticast mode [ 355.989939][ T1388] bridge_slave_1: left promiscuous mode [ 355.993744][ T1388] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.811654][ T9612] binder: BINDER_SET_CONTEXT_MGR already set [ 356.811672][ T9612] binder: 9610:9612 ioctl 4018620d 200000001000 returned -16 [ 357.017244][ T5115] Bluetooth: hci5: command tx timeout [ 357.642981][ T37] audit: type=1326 audit(1773887478.503:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9613 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 357.643042][ T37] audit: type=1326 audit(1773887478.503:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9613 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 357.643091][ T37] audit: type=1326 audit(1773887478.503:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9613 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 357.643138][ T37] audit: type=1326 audit(1773887478.503:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9613 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 357.643187][ T37] audit: type=1326 audit(1773887478.503:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9613 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 357.643235][ T37] audit: type=1326 audit(1773887478.513:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9613 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 357.643283][ T37] audit: type=1326 audit(1773887478.513:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9613 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 357.643330][ T37] audit: type=1326 audit(1773887478.513:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9613 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 357.643377][ T37] audit: type=1326 audit(1773887478.513:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9613 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 357.643424][ T37] audit: type=1326 audit(1773887478.513:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9613 comm="syz.0.1436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3af547c799 code=0x7ffc0000 [ 357.706730][ T5814] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 357.869847][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 357.880237][ T5814] usb 3-1: config 0 has no interfaces? [ 357.899577][ T5814] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 357.899609][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.899632][ T5814] usb 3-1: Product: syz [ 357.899647][ T5814] usb 3-1: Manufacturer: syz [ 357.899670][ T5814] usb 3-1: SerialNumber: syz [ 357.948027][ T5814] usb 3-1: config 0 descriptor?? [ 357.987522][ T1388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.085393][ T1388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.120232][ T1388] bond0 (unregistering): Released all slaves [ 358.205833][ T10] usb 3-1: USB disconnect, device number 34 [ 358.291914][ T9508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.291928][ T9508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.291949][ T9508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.358667][ T9508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.358687][ T9508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.358718][ T9508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.640281][ T9508] hsr_slave_0: entered promiscuous mode [ 358.641690][ T9508] hsr_slave_1: entered promiscuous mode [ 358.642636][ T9508] debugfs: 'hsr0' already exists in 'hsr' [ 358.642662][ T9508] Cannot create hsr debugfs directory [ 361.327485][ T5889] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 361.493199][ T5889] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 361.493232][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.493253][ T5889] usb 5-1: Product: syz [ 361.493269][ T5889] usb 5-1: Manufacturer: syz [ 361.493284][ T5889] usb 5-1: SerialNumber: syz [ 361.896864][ T5882] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 361.946938][ T9693] input: syz1 as /devices/virtual/input/input11 [ 361.946979][ T9693] input: failed to attach handler leds to device input11, error: -6 [ 362.058419][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 362.062323][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.062349][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.068660][ T5882] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 362.068719][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.068742][ T5882] usb 3-1: Product: syz [ 362.068758][ T5882] usb 3-1: Manufacturer: syz [ 362.068799][ T5882] usb 3-1: SerialNumber: syz [ 362.235078][ T5889] rtl8150 5-1:1.0: couldn't reset the device [ 362.235423][ T5889] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 362.268891][ T5889] usb 5-1: USB disconnect, device number 18 [ 362.460489][ T1388] hsr_slave_0: left promiscuous mode [ 362.516249][ T1388] hsr_slave_1: left promiscuous mode [ 362.523913][ T1388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.524008][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.565855][ T1388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.565886][ T1388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.590725][ T5882] usb 3-1: 0:2 : does not exist [ 362.682164][ T1388] veth1_macvtap: left promiscuous mode [ 362.682435][ T1388] veth0_macvtap: left promiscuous mode [ 362.682723][ T1388] veth1_vlan: left promiscuous mode [ 362.683090][ T1388] veth0_vlan: left promiscuous mode [ 362.896832][ T5964] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 363.026588][ T5882] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 363.048552][ T5964] usb 2-1: Using ep0 maxpacket: 8 [ 363.053163][ T5964] usb 2-1: unable to get BOS descriptor or descriptor too short [ 363.075373][ T5964] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 363.075409][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.075424][ T5964] usb 2-1: Product: syz [ 363.075435][ T5964] usb 2-1: Manufacturer: syz [ 363.075449][ T5964] usb 2-1: SerialNumber: syz [ 363.410765][ T5964] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.412003][ T5964] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 363.417163][ T5882] usb 3-1: USB disconnect, device number 35 [ 363.565205][ T5964] usb 2-1: USB disconnect, device number 48 [ 363.922987][ T9165] udevd[9165]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.062329][ T9768] loop9: detected capacity change from 0 to 7 [ 365.158609][ T9165] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.158648][ T9165] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.158674][ T9165] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.158695][ T9165] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.158734][ T9165] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.158769][ T9165] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.158791][ T9165] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.158814][ T9165] ldm_validate_partition_table(): Disk read failed. [ 365.158833][ T9165] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.158854][ T9165] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.158876][ T9165] Buffer I/O error on dev loop9, logical block 0, async page read [ 365.158900][ T9165] Dev loop9: unable to read RDB block 0 [ 365.158948][ T9165] loop9: unable to read partition table [ 365.159113][ T9165] loop9: partition table beyond EOD, truncated [ 365.282477][ T9768] ldm_validate_partition_table(): Disk read failed. [ 365.282566][ T9768] Dev loop9: unable to read RDB block 0 [ 365.282633][ T9768] loop9: unable to read partition table [ 365.282838][ T9768] loop9: partition table beyond EOD, truncated [ 365.282878][ T9768] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 365.282878][ T9768] ) failed (rc=-5) [ 366.408543][ T1388] team0 (unregistering): Port device team_slave_1 removed [ 366.477553][ T1388] team0 (unregistering): Port device team_slave_0 removed [ 366.530488][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 366.530574][ T37] audit: type=1800 audit(1773887487.413:1894): pid=9792 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1477" name="file1" dev="tmpfs" ino=1132 res=0 errno=0 [ 367.766900][ T873] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 367.922655][ T873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.922687][ T873] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 367.934959][ T873] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 367.934993][ T873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.935015][ T873] usb 2-1: Product: syz [ 367.935030][ T873] usb 2-1: Manufacturer: syz [ 367.935045][ T873] usb 2-1: SerialNumber: syz [ 367.988275][ T873] usb 2-1: config 0 descriptor?? [ 369.996982][ T5905] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 370.146742][ T5905] usb 1-1: Using ep0 maxpacket: 32 [ 370.152002][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.152039][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.152081][ T5905] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 370.152108][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.218579][ T5905] usb 1-1: config 0 descriptor?? [ 370.233481][ T5905] hub 1-1:0.0: USB hub found [ 370.472159][ T5905] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 370.686876][ T5905] usbhid 1-1:0.0: can't add hid device: -71 [ 370.687007][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 370.936868][ T5889] usb 2-1: USB disconnect, device number 49 [ 370.957412][ T5905] usb 1-1: USB disconnect, device number 28 [ 371.546703][ T5905] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 371.658221][ T9508] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 371.726783][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 371.806801][ T9508] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 371.890587][ T9508] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 372.017514][ T9508] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 372.198007][ T31] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 372.358103][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 372.360430][ T31] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.360463][ T31] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.360489][ T31] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 372.360518][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 372.360554][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 372.360579][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.438065][ T31] usb 2-1: config 0 descriptor?? [ 372.934119][ T31] hid (null): invalid report_size 24793 [ 372.934159][ T31] hid (null): invalid report_count 57448 [ 372.934190][ T31] hid (null): bogus close delimiter [ 373.120307][ T9508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.235513][ T31] usb 2-1: USB disconnect, device number 50 [ 373.382366][ T9508] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.424873][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.425034][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.534892][ T9753] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.535034][ T9753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.457541][ T5905] usb 3-1: unable to get BOS descriptor or descriptor too short [ 374.458583][ T5905] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 374.458620][ T5905] usb 3-1: can't read configurations, error -71 [ 375.179359][ T9910] ------------[ cut here ]------------ [ 375.179375][ T9910] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 375.179432][ T9910] WARNING: kernel/bpf/verifier.c:2823 at reg_bounds_sanity_check+0x201/0xc30, CPU#1: syz.2.1507/9910 [ 375.179574][ T9910] Modules linked in: [ 375.179601][ T9910] CPU: 1 UID: 0 PID: 9910 Comm: syz.2.1507 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 375.179697][ T9910] Tainted: [L]=SOFTLOCKUP [ 375.179706][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.179725][ T9910] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 375.179795][ T9910] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 375.179818][ T9910] RSP: 0018:ffffc9000ecceeb0 EFLAGS: 00010246 [ 375.179866][ T9910] RAX: dffffc0000000000 RBX: 1ffff1100bf26a4a RCX: 00000000ffffdfcd [ 375.179884][ T9910] RDX: ffffffff8b5494e0 RSI: ffffffff8b551e80 RDI: ffffffff8f6e2230 [ 375.179901][ T9910] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 375.179918][ T9910] R10: ffff88805f935358 R11: 1ffff1100bf26a50 R12: ffff88805f935250 [ 375.179936][ T9910] R13: 00000000ffffdfcd R14: 1ffff1100bf26a49 R15: 00000000ffffdfcc [ 375.179952][ T9910] FS: 00007fe7925166c0(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 375.179972][ T9910] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.179988][ T9910] CR2: 00007fd9a0925d58 CR3: 000000003559c000 CR4: 00000000003526f0 [ 375.180014][ T9910] Call Trace: [ 375.180023][ T9910] [ 375.180065][ T9910] reg_set_min_max+0x264/0x340 [ 375.180142][ T9910] check_cond_jmp_op+0x1dbb/0x31a0 [ 375.180194][ T9910] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 375.180262][ T9910] ? compute_scc_callchain+0x2f9/0x350 [ 375.180296][ T9910] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 375.180382][ T9910] do_check+0x7970/0x10690 [ 375.180484][ T9910] ? __pfx_do_check+0x10/0x10 [ 375.180513][ T9910] ? init_func_state+0x1ab2/0x28d0 [ 375.180555][ T9910] do_check_common+0x19c8/0x25b0 [ 375.180603][ T9910] bpf_check+0x5f4b/0x1ce10 [ 375.180643][ T9910] ? try_to_take_rt_mutex+0x840/0xb00 [ 375.180778][ T9910] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 375.180813][ T9910] ? __lock_acquire+0x6b5/0x2cf0 [ 375.180860][ T9910] ? __lock_acquire+0x6b5/0x2cf0 [ 375.180895][ T9910] ? __lock_acquire+0x6b5/0x2cf0 [ 375.180922][ T9910] ? css_rstat_updated+0x23a/0x530 [ 375.180975][ T9910] ? __pfx_css_rstat_updated+0x10/0x10 [ 375.181012][ T9910] ? __lock_acquire+0x6b5/0x2cf0 [ 375.181045][ T9910] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 375.181137][ T9910] ? __pfx_bpf_check+0x10/0x10 [ 375.181161][ T9910] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 375.181200][ T9910] ? ktime_get_with_offset+0x93/0x2a0 [ 375.181244][ T9910] ? ktime_get_with_offset+0x93/0x2a0 [ 375.181278][ T9910] ? __asan_memset+0x22/0x50 [ 375.181346][ T9910] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 375.181405][ T9910] ? security_bpf_prog_load+0x125/0x3c0 [ 375.181490][ T9910] bpf_prog_load+0x1484/0x1ae0 [ 375.181537][ T9910] ? __pfx_bpf_prog_load+0x10/0x10 [ 375.181565][ T9910] ? futex_wait+0x29a/0x380 [ 375.181616][ T9910] ? bpf_lsm_bpf+0x9/0x20 [ 375.181648][ T9910] ? security_bpf+0x7e/0x2d0 [ 375.181675][ T9910] __sys_bpf+0x618/0x950 [ 375.181707][ T9910] ? __pfx___sys_bpf+0x10/0x10 [ 375.181758][ T9910] ? rcu_is_watching+0x15/0xb0 [ 375.181793][ T9910] __x64_sys_bpf+0x7c/0x90 [ 375.181820][ T9910] do_syscall_64+0x14d/0xf80 [ 375.181923][ T9910] ? trace_irq_disable+0x3b/0x150 [ 375.181956][ T9910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.182005][ T9910] ? clear_bhb_loop+0x40/0x90 [ 375.182034][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.182058][ T9910] RIP: 0033:0x7fe7942bc799 [ 375.182082][ T9910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.182102][ T9910] RSP: 002b:00007fe792516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.182126][ T9910] RAX: ffffffffffffffda RBX: 00007fe794535fa0 RCX: 00007fe7942bc799 [ 375.182143][ T9910] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 375.182158][ T9910] RBP: 00007fe794352c99 R08: 0000000000000000 R09: 0000000000000000 [ 375.182172][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.182186][ T9910] R13: 00007fe794536038 R14: 00007fe794535fa0 R15: 00007ffd264e7b98 [ 375.182221][ T9910] [ 375.182243][ T9910] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 375.182264][ T9910] CPU: 1 UID: 0 PID: 9910 Comm: syz.2.1507 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 375.182296][ T9910] Tainted: [L]=SOFTLOCKUP [ 375.182305][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.182319][ T9910] Call Trace: [ 375.182328][ T9910] [ 375.182338][ T9910] vpanic+0x56c/0xa60 [ 375.182396][ T9910] ? __pfx__printk+0x10/0x10 [ 375.182421][ T9910] ? __pfx_vpanic+0x10/0x10 [ 375.182454][ T9910] ? is_bpf_text_address+0x292/0x2b0 [ 375.182487][ T9910] ? is_bpf_text_address+0x26/0x2b0 [ 375.182528][ T9910] panic+0xc5/0xd0 [ 375.182561][ T9910] ? __pfx_panic+0x10/0x10 [ 375.182612][ T9910] __warn+0x315/0x4f0 [ 375.182667][ T9910] ? reg_bounds_sanity_check+0x201/0xc30 [ 375.182705][ T9910] ? reg_bounds_sanity_check+0x201/0xc30 [ 375.182742][ T9910] __report_bug+0x29a/0x540 [ 375.182830][ T9910] ? __pfx_stack_trace_save+0x10/0x10 [ 375.182867][ T9910] ? reg_bounds_sanity_check+0x201/0xc30 [ 375.182904][ T9910] ? __pfx___report_bug+0x10/0x10 [ 375.182943][ T9910] ? copy_verifier_state+0x876/0xf90 [ 375.182973][ T9910] ? push_stack+0x19d/0x3a0 [ 375.182993][ T9910] ? check_cond_jmp_op+0x1c5b/0x31a0 [ 375.183025][ T9910] ? do_check+0x7970/0x10690 [ 375.183053][ T9910] ? do_check_common+0x19c8/0x25b0 [ 375.183081][ T9910] ? bpf_check+0x5f4b/0x1ce10 [ 375.183102][ T9910] ? bpf_prog_load+0x1484/0x1ae0 [ 375.183129][ T9910] ? __x64_sys_bpf+0x7c/0x90 [ 375.183152][ T9910] ? do_syscall_64+0x14d/0xf80 [ 375.183185][ T9910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.183213][ T9910] report_bug_entry+0x19a/0x290 [ 375.183247][ T9910] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 375.183282][ T9910] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 375.183316][ T9910] handle_bug+0xce/0x200 [ 375.183341][ T9910] exc_invalid_op+0x1a/0x50 [ 375.183367][ T9910] asm_exc_invalid_op+0x1a/0x20 [ 375.183388][ T9910] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 375.183426][ T9910] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 375.183445][ T9910] RSP: 0018:ffffc9000ecceeb0 EFLAGS: 00010246 [ 375.183466][ T9910] RAX: dffffc0000000000 RBX: 1ffff1100bf26a4a RCX: 00000000ffffdfcd [ 375.183483][ T9910] RDX: ffffffff8b5494e0 RSI: ffffffff8b551e80 RDI: ffffffff8f6e2230 [ 375.183501][ T9910] RBP: 00000000ffffdfcc R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 375.183518][ T9910] R10: ffff88805f935358 R11: 1ffff1100bf26a50 R12: ffff88805f935250 [ 375.183533][ T9910] R13: 00000000ffffdfcd R14: 1ffff1100bf26a49 R15: 00000000ffffdfcc [ 375.183598][ T9910] reg_set_min_max+0x264/0x340 [ 375.183660][ T9910] check_cond_jmp_op+0x1dbb/0x31a0 [ 375.183712][ T9910] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 375.183750][ T9910] ? compute_scc_callchain+0x2f9/0x350 [ 375.183783][ T9910] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 375.183825][ T9910] do_check+0x7970/0x10690 [ 375.183925][ T9910] ? __pfx_do_check+0x10/0x10 [ 375.183955][ T9910] ? init_func_state+0x1ab2/0x28d0 [ 375.183997][ T9910] do_check_common+0x19c8/0x25b0 [ 375.184046][ T9910] bpf_check+0x5f4b/0x1ce10 [ 375.184078][ T9910] ? try_to_take_rt_mutex+0x840/0xb00 [ 375.184120][ T9910] ? rtlock_slowlock_locked+0xfb/0x3c80 [ 375.184157][ T9910] ? __lock_acquire+0x6b5/0x2cf0 [ 375.184185][ T9910] ? __lock_acquire+0x6b5/0x2cf0 [ 375.184220][ T9910] ? __lock_acquire+0x6b5/0x2cf0 [ 375.184248][ T9910] ? css_rstat_updated+0x23a/0x530 [ 375.184282][ T9910] ? __pfx_css_rstat_updated+0x10/0x10 [ 375.184319][ T9910] ? __lock_acquire+0x6b5/0x2cf0 [ 375.184351][ T9910] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 375.184379][ T9910] ? __pfx_bpf_check+0x10/0x10 [ 375.184402][ T9910] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 375.184442][ T9910] ? ktime_get_with_offset+0x93/0x2a0 [ 375.184473][ T9910] ? ktime_get_with_offset+0x93/0x2a0 [ 375.184508][ T9910] ? __asan_memset+0x22/0x50 [ 375.184537][ T9910] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 375.184562][ T9910] ? security_bpf_prog_load+0x125/0x3c0 [ 375.184592][ T9910] bpf_prog_load+0x1484/0x1ae0 [ 375.184646][ T9910] ? __pfx_bpf_prog_load+0x10/0x10 [ 375.184672][ T9910] ? futex_wait+0x29a/0x380 [ 375.184723][ T9910] ? bpf_lsm_bpf+0x9/0x20 [ 375.184746][ T9910] ? security_bpf+0x7e/0x2d0 [ 375.184774][ T9910] __sys_bpf+0x618/0x950 [ 375.184804][ T9910] ? __pfx___sys_bpf+0x10/0x10 [ 375.184855][ T9910] ? rcu_is_watching+0x15/0xb0 [ 375.184890][ T9910] __x64_sys_bpf+0x7c/0x90 [ 375.184917][ T9910] do_syscall_64+0x14d/0xf80 [ 375.184951][ T9910] ? trace_irq_disable+0x3b/0x150 [ 375.184980][ T9910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.185004][ T9910] ? clear_bhb_loop+0x40/0x90 [ 375.185033][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.185057][ T9910] RIP: 0033:0x7fe7942bc799 [ 375.185079][ T9910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.185099][ T9910] RSP: 002b:00007fe792516028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.185123][ T9910] RAX: ffffffffffffffda RBX: 00007fe794535fa0 RCX: 00007fe7942bc799 [ 375.185141][ T9910] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 375.185157][ T9910] RBP: 00007fe794352c99 R08: 0000000000000000 R09: 0000000000000000 [ 375.185172][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.185186][ T9910] R13: 00007fe794536038 R14: 00007fe794535fa0 R15: 00007ffd264e7b98 [ 375.185221][ T9910] [ 375.185408][ T9910] Kernel Offset: disabled