last executing test programs: 12.500926501s ago: executing program 1 (id=1945): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) eventfd2(0x4, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) syz_open_dev$dri(&(0x7f00000000c0), 0xa, 0x88441) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000000)=""/2, &(0x7f0000001080)=0x2) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r1, 0x200000000000003, 0x104, 0x800003}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x80) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.861024471s ago: executing program 0 (id=1947): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x1, 0x200000, 0x4, "00000000020000f50800", '\x00', '\x00', '\x00', ["2db8ad79400f0b0000d5c010", "d78cb8b0211a83be12ff0bff", "0000000000000000e500"]}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0) 6.784048219s ago: executing program 0 (id=1949): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 6.709305802s ago: executing program 3 (id=1950): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="e8700e444d50a969ff", 0x9}], 0x1}], 0x1, 0x40800) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.682423542s ago: executing program 1 (id=1951): r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x20000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x4]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000002c0)=0x7) 6.42547368s ago: executing program 3 (id=1952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 6.42471037s ago: executing program 0 (id=1960): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 6.11881582s ago: executing program 0 (id=1953): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0x23, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_delete(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r0, r1, 0x0, 0x201f00) 5.605481176s ago: executing program 1 (id=1954): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="ebe3", 0x2}], 0x1}], 0x1, 0x4000000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000200)=0x17) 5.604129286s ago: executing program 2 (id=1955): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x7, 0x0, 0x8, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in6=@empty, 0x10000, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe24000480200001800700010063740000140002800800014000000002080002400000000d0900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6c, 0x7, 0x5, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x1, 0x8, 0x200, 0x5}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x40}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) 4.490859331s ago: executing program 3 (id=1956): r0 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xb1\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x0f\x00\x00\x10\x00\x00\x00\x06^\xb4', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x2, 0x0) ftruncate(r0, 0x8800000) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0x42, 0xfe, "87"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xa, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x60c0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r3 = accept$alg(r1, 0x0, 0x0) r4 = dup3(r3, r1, 0x0) sendfile(r4, r0, 0x0, 0x1000009) 3.777980223s ago: executing program 0 (id=1957): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x10000}, 0x28) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40088d4) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) 3.678402626s ago: executing program 2 (id=1958): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x1, 0x200000, 0x4, "00000000020000f50800", '\x00', '\x00', '\x00', ["2db8ad79400f0b0000d5c010", "d78cb8b0211a83be12ff0bff", "0000000000000000e500"]}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0) 2.630659489s ago: executing program 0 (id=1959): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$poke(0x4, r0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) add_key(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000640)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x34, 0x33]}}}}], [{@dont_hash}, {@euid_lt}, {@fowner_eq}, {@obj_type={'obj_type', 0x3d, 'mpol'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='+0-]\x00', 0x1, &(0x7f00000000c0)={@_ha_fsid={[0xd2, 0x4]}, {0x7, 0x7fff, 0x7fffffff, 0x3}}, 0xfffffffd, &(0x7f0000000100), &(0x7f0000000140)=0x1}) 2.592872899s ago: executing program 2 (id=1961): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xffffffff, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xa7ba) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 2.558417121s ago: executing program 3 (id=1962): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000300)=""/102400, 0x19000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 2.422656625s ago: executing program 3 (id=1963): r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x20000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x4]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000002c0)=0x7) 2.349390167s ago: executing program 2 (id=1964): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x1, 0x2, 0x7, 0xf, 0x0, [{0xfd, 0x10, 0x8, '\x00', 0x5}, {0x4, 0x5, 0x2, '\x00', 0x2}, {0x5, 0xd3}, {0x0, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0x2, 0x0, '\x00', 0x7}, {0x81, 0x0, 0x4, '\x00', 0x8}, {0xa3, 0xb, 0x1, '\x00', 0x7}, {0x8, 0xe7, 0xff, '\x00', 0x2}, {0xc, 0x3, 0x4a, '\x00', 0x9}, {0xcd, 0x6, 0x6b, '\x00', 0x8c}, {0x6, 0x0, 0x0, '\x00', 0xe}, {0x6, 0xe, 0x4}, {0x0, 0x2, 0xf9, '\x00', 0xb}, {0x1, 0x2, 0x3, '\x00', 0x10}, {0x6f, 0x7, 0xd, '\x00', 0x5}, {0x7, 0x10, 0x40, '\x00', 0x3}, {0xe, 0x9, 0x4c}, {0x75, 0x98, 0x1, '\x00', 0x6c}, {0x1, 0x1, 0x67, '\x00', 0x9}, {0x7f, 0x9, 0x11, '\x00', 0x6}, {0x8, 0x2, 0xc, '\x00', 0x7}, {0x6, 0x10, 0x2, '\x00', 0x4}, {0xa1, 0x40, 0x7, '\x00', 0x3}, {0x52, 0x0, 0x7, '\x00', 0x8}]}}) 2.167283203s ago: executing program 1 (id=1965): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x80, 0x0) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000100)={0x2, 0x5, 0x8001, 0x3, 0x6, 0x6, 0x6}) 1.904742011s ago: executing program 1 (id=1966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendmsg$rds(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1.833603863s ago: executing program 2 (id=1967): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$kcm(0x23, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) timer_delete(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r1, r2, 0x0, 0x201f00) 1.32015723s ago: executing program 3 (id=1968): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40801, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x7, 0x0, 0x8, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in6=@empty, 0x10000, 0x0, 0x3, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200fffe24000480200001800700010063740000140002800800014000000002080002400000000d0900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6c, 0x7, 0x5, 0x24, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x1, 0x8, 0x200, 0x5}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x40}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840), 0x4) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) 17.3921ms ago: executing program 1 (id=1969): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 0s ago: executing program 2 (id=1970): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x1, 0x200000, 0x4, "00000000020000f50800", '\x00', '\x00', '\x00', ["2db8ad79400f0b0000d5c010", "d78cb8b0211a83be12ff0bff", "0000000000000000e500"]}) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): 2.779083][ T5813] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 332.790998][ T5813] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 332.803976][ T8891] CPU: 0 PID: 8891 Comm: syz.1.1040 Not tainted syzkaller #0 [ 332.811382][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 332.821468][ T8891] Call Trace: [ 332.824780][ T8891] [ 332.827730][ T8891] dump_stack_lvl+0x18c/0x250 [ 332.832446][ T8891] ? show_regs_print_info+0x20/0x20 [ 332.837682][ T8891] ? load_image+0x420/0x420 [ 332.842218][ T8891] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 332.848677][ T8891] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 332.855216][ T8891] warn_alloc+0x246/0x340 [ 332.859585][ T8891] ? zone_watermark_ok_safe+0x230/0x230 [ 332.865181][ T8891] ? _raw_spin_unlock+0x28/0x40 [ 332.870075][ T8891] ? __vb2_queue_alloc+0x78f/0x1410 [ 332.875331][ T8891] __vmalloc_node_range+0x661/0x1320 [ 332.880672][ T8891] ? free_vm_area+0x50/0x50 [ 332.885568][ T8891] vmalloc_user+0x74/0x80 [ 332.890088][ T8891] ? vb2_vmalloc_alloc+0xef/0x330 [ 332.895114][ T8891] vb2_vmalloc_alloc+0xef/0x330 [ 332.899985][ T8891] ? __copy_timestamp+0x1f0/0x1f0 [ 332.905001][ T8891] __vb2_queue_alloc+0x78f/0x1410 [ 332.910034][ T8891] vb2_core_reqbufs+0x9e8/0x10d0 [ 332.915001][ T8891] ? vb2_verify_memory_type+0x570/0x570 [ 332.920565][ T8891] ? do_vfs_ioctl+0x156c/0x1cc0 [ 332.925423][ T8891] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 332.930788][ T8891] __video_do_ioctl+0xa34/0xde0 [ 332.935638][ T8891] ? video_ioctl2+0x30/0x30 [ 332.940141][ T8891] ? __might_fault+0xc6/0x120 [ 332.944815][ T8891] ? __might_fault+0xaa/0x120 [ 332.949503][ T8891] video_usercopy+0x889/0x1360 [ 332.954302][ T8891] ? video_ioctl2+0x30/0x30 [ 332.958827][ T8891] ? v4l_printk_ioctl+0x160/0x160 [ 332.963883][ T8891] v4l2_ioctl+0x18a/0x1e0 [ 332.968229][ T8891] ? v4l2_poll+0x2b0/0x2b0 [ 332.972647][ T8891] __se_sys_ioctl+0xfd/0x170 [ 332.977255][ T8891] do_syscall_64+0x55/0xb0 [ 332.981672][ T8891] ? clear_bhb_loop+0x40/0x90 [ 332.986353][ T8891] ? clear_bhb_loop+0x40/0x90 [ 332.991034][ T8891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 332.996931][ T8891] RIP: 0033:0x7f9a3f39ce59 [ 333.001336][ T8891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.020946][ T8891] RSP: 002b:00007f9a40287028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.029354][ T8891] RAX: ffffffffffffffda RBX: 00007f9a3f615fa0 RCX: 00007f9a3f39ce59 [ 333.037329][ T8891] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 333.045302][ T8891] RBP: 00007f9a3f432e6f R08: 0000000000000000 R09: 0000000000000000 [ 333.053268][ T8891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.061227][ T8891] R13: 00007f9a3f616038 R14: 00007f9a3f615fa0 R15: 00007ffc496c8878 [ 333.069203][ T8891] [ 333.233367][ T5813] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 333.244128][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.252169][ T5813] usb 3-1: Product: syz [ 333.268033][ T5813] usb 3-1: Manufacturer: syz [ 333.272638][ T5813] usb 3-1: SerialNumber: syz [ 333.333058][ T8904] syz.3.1043: attempt to access beyond end of device [ 333.333058][ T8904] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 333.345981][ T8904] qnx4: unable to read the superblock [ 333.848411][ T8891] Mem-Info: [ 333.851667][ T8891] active_anon:8863 inactive_anon:0 isolated_anon:0 [ 333.851667][ T8891] active_file:12780 inactive_file:40065 isolated_file:0 [ 333.851667][ T8891] unevictable:768 dirty:85 writeback:0 [ 333.851667][ T8891] slab_reclaimable:10449 slab_unreclaimable:92312 [ 333.851667][ T8891] mapped:24941 shmem:4231 pagetables:624 [ 333.851667][ T8891] sec_pagetables:0 bounce:0 [ 333.851667][ T8891] kernel_misc_reclaimable:0 [ 333.851667][ T8891] free:1344601 free_pcp:13262 free_cma:0 [ 333.912285][ T8885] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 333.953174][ T5813] usb 3-1: Expected 3 endpoints, found: 2 [ 333.965715][ T8891] Node 0 active_anon:35352kB inactive_anon:0kB active_file:51120kB inactive_file:160056kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99764kB dirty:340kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10628kB pagetables:2396kB sec_pagetables:0kB all_unreclaimable? no [ 334.031179][ T8891] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 334.099384][ T8891] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 334.142519][ T8891] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 334.927989][ T8891] Node 0 DMA32 free:1473184kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35344kB inactive_anon:0kB active_file:51120kB inactive_file:159240kB unevictable:1536kB writepending:340kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:28864kB local_pcp:15792kB free_cma:0kB [ 335.030127][ T8891] lowmem_reserve[]: 0 0 0 0 0 [ 335.344018][ T8891] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 335.517617][ T5813] usb 3-1: USB disconnect, device number 22 [ 335.517948][ T8891] lowmem_reserve[]: 0 0 0 0 0 [ 335.528818][ T8891] Node 1 Normal free:3889612kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24304kB local_pcp:10048kB free_cma:0kB [ 335.579513][ T8891] lowmem_reserve[]: 0 0 0 0 0 [ 335.592840][ T8891] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 335.614359][ T8891] Node 0 DMA32: 2*4kB (UM) 241*8kB (UM) 635*16kB (UE) 1038*32kB (UME) 745*64kB (UME) 129*128kB (UM) 38*256kB (UM) 18*512kB (UM) 13*1024kB (UME) 8*2048kB (UME) 321*4096kB (M) = 1472960kB [ 335.659880][ T8891] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 335.678767][ T8891] Node 1 Normal: 265*4kB (UME) 65*8kB (UME) 46*16kB (UME) 62*32kB (UME) 20*64kB (UME) 8*128kB (UME) 2*256kB (UM) 1*512kB (U) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3889612kB [ 335.717966][ T8891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.728338][ T8891] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.740432][ T8891] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.758702][ T8891] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.784992][ T8891] 57078 total pagecache pages [ 335.791344][ T8891] 0 pages in swap cache [ 335.797041][ T8891] Free swap = 124472kB [ 335.842852][ T8891] Total swap = 124996kB [ 335.975442][ T8891] 2097051 pages RAM [ 335.979287][ T8891] 0 pages HighMem/MovableOnly [ 335.985068][ T8891] 416931 pages reserved [ 336.001929][ T8891] 0 pages cma reserved [ 336.072504][ T8927] tmpfs: Bad value for 'mpol' [ 337.193696][ T8940] syz.2.1054: attempt to access beyond end of device [ 337.193696][ T8940] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 337.207116][ T8940] qnx4: unable to read the superblock [ 338.398355][ T8960] tmpfs: Bad value for 'mpol' [ 339.352783][ T788] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 339.362799][ T5156] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 339.610675][ T788] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 339.610702][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.610714][ T788] usb 1-1: config 0 has no interfaces? [ 339.610731][ T788] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 339.610745][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.612152][ T788] usb 1-1: config 0 descriptor?? [ 339.621903][ T5156] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 339.621931][ T5156] usb 3-1: config 1 has no interface number 0 [ 339.621974][ T5156] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 339.622000][ T5156] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 339.622023][ T5156] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 339.633590][ T5156] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 339.633621][ T5156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.633643][ T5156] usb 3-1: Product: syz [ 339.633658][ T5156] usb 3-1: Manufacturer: syz [ 339.633674][ T5156] usb 3-1: SerialNumber: syz [ 339.638605][ T8957] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 339.657171][ T5156] usb 3-1: Expected 3 endpoints, found: 2 [ 339.682774][ T27] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 339.893661][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 339.904463][ T27] usb 2-1: config 3 has an invalid interface number: 34 but max is 0 [ 340.164474][ T27] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 340.202255][ T27] usb 2-1: config 3 has no interface number 0 [ 340.228008][ T27] usb 2-1: config 3 interface 34 has no altsetting 0 [ 340.256322][ T27] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 340.265764][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.278541][ T5813] usb 3-1: USB disconnect, device number 23 [ 340.289749][ T27] usb 2-1: Product: syz [ 340.316071][ T27] usb 2-1: Manufacturer: syz [ 340.338172][ T27] usb 2-1: SerialNumber: syz [ 341.151713][ T8981] syz.2.1067: attempt to access beyond end of device [ 341.151713][ T8981] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 341.165048][ T8981] qnx4: unable to read the superblock [ 341.714262][ T27] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 342.391994][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 342.532691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 342.873367][ T27] usb 2-1: device firmware changed [ 342.888347][ T27] usb 2-1: USB disconnect, device number 20 [ 343.230096][ T788] usb 1-1: string descriptor 0 read error: -71 [ 343.294316][ T8995] tmpfs: Bad value for 'mpol' [ 343.666514][ T788] usb 1-1: USB disconnect, device number 19 [ 344.432787][ T788] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 344.515669][ T9014] syz.3.1078: attempt to access beyond end of device [ 344.515669][ T9014] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 344.528480][ T9014] qnx4: unable to read the superblock [ 344.565511][ T5813] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 344.623266][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 344.636045][ T788] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 344.645880][ T788] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 344.657028][ T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 344.666491][ T788] usb 1-1: config 1 has no interface number 0 [ 344.673046][ T788] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.686756][ T788] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 344.700029][ T788] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 344.709504][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.733881][ T788] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 344.782248][ T5813] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 344.790858][ T5813] usb 2-1: config 1 has no interface number 0 [ 344.797779][ T5813] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 344.808199][ T5813] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 344.819905][ T5813] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 344.849008][ T5813] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 344.858385][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.866960][ T5813] usb 2-1: Product: syz [ 344.871422][ T5813] usb 2-1: Manufacturer: syz [ 344.876699][ T5813] usb 2-1: SerialNumber: syz [ 344.887400][ T9011] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 344.899339][ T5813] usb 2-1: Expected 3 endpoints, found: 2 [ 345.000810][ T788] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 345.682687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 345.762695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 345.852697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 346.045251][ T788] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 346.155571][ T5813] usb 1-1: USB disconnect, device number 20 [ 346.163228][ T5813] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 346.338675][ T788] usb 2-1: USB disconnect, device number 21 [ 346.551266][ T9021] tmpfs: Bad value for 'mpol' [ 347.743438][ T788] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 347.990571][ T9046] syz.1.1088: attempt to access beyond end of device [ 347.990571][ T9046] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 348.003845][ T9046] qnx4: unable to read the superblock [ 348.033006][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 348.044803][ T788] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.060045][ T788] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 348.078626][ T788] usb 1-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 348.091192][ T788] usb 1-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 348.106074][ T788] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 348.115915][ T788] usb 1-1: config 1 interface 1 has no altsetting 0 [ 348.129615][ T788] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 348.139163][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.147322][ T788] usb 1-1: Product: syz [ 348.151819][ T788] usb 1-1: Manufacturer: syz [ 348.156689][ T788] usb 1-1: SerialNumber: syz [ 348.208158][ T9035] syz.3.1085: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 348.226362][ T9035] CPU: 0 PID: 9035 Comm: syz.3.1085 Not tainted syzkaller #0 [ 348.233767][ T9035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.243843][ T9035] Call Trace: [ 348.247126][ T9035] [ 348.250048][ T9035] dump_stack_lvl+0x18c/0x250 [ 348.254725][ T9035] ? show_regs_print_info+0x20/0x20 [ 348.259919][ T9035] ? load_image+0x420/0x420 [ 348.264419][ T9035] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 348.270838][ T9035] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 348.277331][ T9035] warn_alloc+0x246/0x340 [ 348.281663][ T9035] ? zone_watermark_ok_safe+0x230/0x230 [ 348.287226][ T9035] ? _raw_spin_unlock+0x28/0x40 [ 348.292099][ T9035] ? __vb2_queue_alloc+0x78f/0x1410 [ 348.297311][ T9035] __vmalloc_node_range+0x661/0x1320 [ 348.302631][ T9035] ? free_vm_area+0x50/0x50 [ 348.307144][ T9035] vmalloc_user+0x74/0x80 [ 348.311478][ T9035] ? vb2_vmalloc_alloc+0xef/0x330 [ 348.316499][ T9035] vb2_vmalloc_alloc+0xef/0x330 [ 348.321343][ T9035] ? __copy_timestamp+0x1f0/0x1f0 [ 348.326371][ T9035] __vb2_queue_alloc+0x78f/0x1410 [ 348.331433][ T9035] vb2_core_reqbufs+0x9e8/0x10d0 [ 348.336402][ T9035] ? vb2_verify_memory_type+0x570/0x570 [ 348.341976][ T9035] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 348.347361][ T9035] __video_do_ioctl+0xa34/0xde0 [ 348.352216][ T9035] ? video_ioctl2+0x30/0x30 [ 348.356726][ T9035] ? finish_task_switch+0x262/0x8f0 [ 348.361932][ T9035] ? __might_fault+0xc6/0x120 [ 348.366616][ T9035] ? __might_fault+0xaa/0x120 [ 348.371286][ T9035] video_usercopy+0x889/0x1360 [ 348.376067][ T9035] ? video_ioctl2+0x30/0x30 [ 348.380605][ T9035] ? v4l_printk_ioctl+0x160/0x160 [ 348.385662][ T9035] v4l2_ioctl+0x18a/0x1e0 [ 348.390014][ T9035] ? v4l2_poll+0x2b0/0x2b0 [ 348.394428][ T9035] __se_sys_ioctl+0xfd/0x170 [ 348.399112][ T9035] do_syscall_64+0x55/0xb0 [ 348.403546][ T9035] ? clear_bhb_loop+0x40/0x90 [ 348.408226][ T9035] ? clear_bhb_loop+0x40/0x90 [ 348.412913][ T9035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.418819][ T9035] RIP: 0033:0x7f76eb99ce59 [ 348.423225][ T9035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.442836][ T9035] RSP: 002b:00007f76ec791028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.451263][ T9035] RAX: ffffffffffffffda RBX: 00007f76ebc15fa0 RCX: 00007f76eb99ce59 [ 348.459237][ T9035] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 348.467202][ T9035] RBP: 00007f76eba32e6f R08: 0000000000000000 R09: 0000000000000000 [ 348.475254][ T9035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.483228][ T9035] R13: 00007f76ebc16038 R14: 00007f76ebc15fa0 R15: 00007ffd8fbe8958 [ 348.491250][ T9035] [ 348.497866][ T9035] Mem-Info: [ 348.511722][ T9035] active_anon:11783 inactive_anon:0 isolated_anon:0 [ 348.511722][ T9035] active_file:12780 inactive_file:40071 isolated_file:0 [ 348.511722][ T9035] unevictable:768 dirty:66 writeback:0 [ 348.511722][ T9035] slab_reclaimable:10340 slab_unreclaimable:92525 [ 348.511722][ T9035] mapped:27842 shmem:7101 pagetables:657 [ 348.511722][ T9035] sec_pagetables:0 bounce:0 [ 348.511722][ T9035] kernel_misc_reclaimable:0 [ 348.511722][ T9035] free:1331144 free_pcp:10228 free_cma:0 [ 348.561552][ T9035] Node 0 active_anon:47132kB inactive_anon:0kB active_file:51120kB inactive_file:160080kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111368kB dirty:264kB writeback:0kB shmem:26868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10812kB pagetables:2628kB sec_pagetables:0kB all_unreclaimable? no [ 348.595134][ T9035] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 348.865802][ T9035] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 349.167444][ T9035] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 349.226724][ T9035] Node 0 DMA32 free:1417328kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35360kB inactive_anon:0kB active_file:52376kB inactive_file:159264kB unevictable:1536kB writepending:316kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:28440kB local_pcp:15896kB free_cma:0kB [ 350.094013][ T9035] lowmem_reserve[]: 0 0 0 0 0 [ 350.098831][ T9035] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 350.190405][ T9035] lowmem_reserve[]: 0 0 0 0 0 [ 350.237966][ T9035] Node 1 Normal free:3889612kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24336kB local_pcp:14288kB free_cma:0kB [ 350.509966][ T788] usb 1-1: selecting invalid altsetting 0 [ 350.515958][ T9035] lowmem_reserve[]: 0 0 0 0 0 [ 350.520694][ T9035] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 350.541393][ T788] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 350.587348][ T9058] tmpfs: Bad value for 'mpol' [ 351.135285][ T9035] Node 0 DMA32: 4*4kB (UE) 8*8kB (UE) 14*16kB (ME) 242*32kB (ME) 410*64kB (ME) 30*128kB (ME) 17*256kB (UME) 17*512kB (UM) 12*1024kB (UME) 7*2048kB (UME) 322*4096kB (M) = 1396720kB [ 351.203464][ T788] usb 1-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 351.266040][ T9035] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 351.295057][ T788] usb 1-1: USB disconnect, device number 21 [ 351.302132][ T9035] Node 1 Normal: 265*4kB (UME) 65*8kB (UME) 46*16kB (UME) 62*32kB (UME) 20*64kB (UME) 8*128kB (UME) 2*256kB (UM) 1*512kB (U) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3889612kB [ 351.338927][ T9035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.362451][ T9035] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.386589][ T9035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.399886][ T9035] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.433381][ T9035] 57102 total pagecache pages [ 351.438083][ T9035] 0 pages in swap cache [ 351.442214][ T9035] Free swap = 124472kB [ 351.474147][ T9035] Total swap = 124996kB [ 351.478336][ T9035] 2097051 pages RAM [ 351.482124][ T9035] 0 pages HighMem/MovableOnly [ 351.497189][ T9035] 416931 pages reserved [ 351.501368][ T9035] 0 pages cma reserved [ 352.831143][ T9075] syz.0.1097: attempt to access beyond end of device [ 352.831143][ T9075] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 352.843964][ T9075] qnx4: unable to read the superblock [ 352.922827][ T27] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 354.084773][ T27] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 354.146070][ T9084] tmpfs: Bad value for 'mpol' [ 354.722997][ T27] usb 3-1: config 1 has no interface number 0 [ 354.724137][ T9085] 9pnet_fd: Insufficient options for proto=fd [ 354.735979][ T27] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 354.748561][ T27] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 354.814896][ T27] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 355.616797][ T27] usb 3-1: string descriptor 0 read error: -71 [ 355.647331][ T9104] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 355.654601][ T27] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 355.693007][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.840620][ T27] usb 3-1: can't set config #1, error -71 [ 355.858542][ T27] usb 3-1: USB disconnect, device number 24 [ 355.881326][ T9110] syz.2.1110: attempt to access beyond end of device [ 355.881326][ T9110] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 355.894506][ T9110] qnx4: unable to read the superblock [ 356.849458][ T9115] tmpfs: Bad value for 'mpol' [ 358.557028][ T9120] 9pnet_fd: Insufficient options for proto=fd [ 358.899650][ T9136] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 359.148399][ T9140] syz.1.1121: attempt to access beyond end of device [ 359.148399][ T9140] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 359.161527][ T9140] qnx4: unable to read the superblock [ 359.167650][ T788] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 359.529380][ T788] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 359.540662][ T788] usb 4-1: config 1 has no interface number 0 [ 359.572400][ T788] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 359.590262][ T788] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 359.601322][ T788] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 359.622379][ T788] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 359.638568][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.647306][ T788] usb 4-1: Product: syz [ 359.651670][ T788] usb 4-1: Manufacturer: syz [ 359.659149][ T788] usb 4-1: SerialNumber: syz [ 359.694379][ T9131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.722571][ T788] usb 4-1: Expected 3 endpoints, found: 2 [ 360.067643][ T788] usb 4-1: USB disconnect, device number 22 [ 360.154536][ T9150] tmpfs: Bad value for 'mpol' [ 360.843210][ T9143] syz.2.1123: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 360.873228][ T9143] CPU: 1 PID: 9143 Comm: syz.2.1123 Not tainted syzkaller #0 [ 360.880638][ T9143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.890701][ T9143] Call Trace: [ 360.894079][ T9143] [ 360.897117][ T9143] dump_stack_lvl+0x18c/0x250 [ 360.901960][ T9143] ? show_regs_print_info+0x20/0x20 [ 360.907231][ T9143] ? load_image+0x420/0x420 [ 360.911738][ T9143] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 360.918180][ T9143] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 360.924674][ T9143] warn_alloc+0x246/0x340 [ 360.929015][ T9143] ? zone_watermark_ok_safe+0x230/0x230 [ 360.934576][ T9143] ? _raw_spin_unlock+0x28/0x40 [ 360.939547][ T9143] ? __vb2_queue_alloc+0x78f/0x1410 [ 360.944858][ T9143] __vmalloc_node_range+0x661/0x1320 [ 360.950206][ T9143] ? free_vm_area+0x50/0x50 [ 360.954757][ T9143] vmalloc_user+0x74/0x80 [ 360.959128][ T9143] ? vb2_vmalloc_alloc+0xef/0x330 [ 360.964150][ T9143] vb2_vmalloc_alloc+0xef/0x330 [ 360.968992][ T9143] ? __copy_timestamp+0x1f0/0x1f0 [ 360.974014][ T9143] __vb2_queue_alloc+0x78f/0x1410 [ 360.979045][ T9143] vb2_core_reqbufs+0x9e8/0x10d0 [ 360.983978][ T9143] ? vb2_verify_memory_type+0x570/0x570 [ 360.989514][ T9143] ? do_vfs_ioctl+0x156c/0x1cc0 [ 360.994414][ T9143] v4l2_m2m_ioctl_reqbufs+0x16c/0x230 [ 360.999810][ T9143] __video_do_ioctl+0xa34/0xde0 [ 361.004667][ T9143] ? video_ioctl2+0x30/0x30 [ 361.009160][ T9143] ? __might_fault+0xc6/0x120 [ 361.013825][ T9143] ? __might_fault+0xaa/0x120 [ 361.018490][ T9143] video_usercopy+0x889/0x1360 [ 361.023511][ T9143] ? video_ioctl2+0x30/0x30 [ 361.028013][ T9143] ? v4l_printk_ioctl+0x160/0x160 [ 361.033065][ T9143] v4l2_ioctl+0x18a/0x1e0 [ 361.037380][ T9143] ? v4l2_poll+0x2b0/0x2b0 [ 361.041779][ T9143] __se_sys_ioctl+0xfd/0x170 [ 361.046364][ T9143] do_syscall_64+0x55/0xb0 [ 361.050766][ T9143] ? clear_bhb_loop+0x40/0x90 [ 361.055499][ T9143] ? clear_bhb_loop+0x40/0x90 [ 361.060188][ T9143] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.066187][ T9143] RIP: 0033:0x7f789bf9ce59 [ 361.070695][ T9143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.090348][ T9143] RSP: 002b:00007f789cf00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.098823][ T9143] RAX: ffffffffffffffda RBX: 00007f789c215fa0 RCX: 00007f789bf9ce59 [ 361.106785][ T9143] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 361.114743][ T9143] RBP: 00007f789c032e6f R08: 0000000000000000 R09: 0000000000000000 [ 361.122706][ T9143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.130695][ T9143] R13: 00007f789c216038 R14: 00007f789c215fa0 R15: 00007fffed915c28 [ 361.138661][ T9143] [ 361.187355][ T9143] Mem-Info: [ 361.190512][ T9143] active_anon:8933 inactive_anon:0 isolated_anon:0 [ 361.190512][ T9143] active_file:12780 inactive_file:40075 isolated_file:0 [ 361.190512][ T9143] unevictable:768 dirty:67 writeback:0 [ 361.190512][ T9143] slab_reclaimable:10292 slab_unreclaimable:92878 [ 361.190512][ T9143] mapped:24986 shmem:4231 pagetables:608 [ 361.190512][ T9143] sec_pagetables:0 bounce:0 [ 361.190512][ T9143] kernel_misc_reclaimable:0 [ 361.190512][ T9143] free:1343704 free_pcp:14509 free_cma:0 [ 361.200995][ T9154] 9pnet_fd: Insufficient options for proto=fd [ 361.250919][ T9143] Node 0 active_anon:35832kB inactive_anon:0kB active_file:51120kB inactive_file:160096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99944kB dirty:268kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10672kB pagetables:2532kB sec_pagetables:0kB all_unreclaimable? no [ 361.297483][ T9143] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 361.329922][ T9143] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.357435][ T9143] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 361.363350][ T9143] Node 0 DMA32 free:1469836kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35696kB inactive_anon:0kB active_file:51120kB inactive_file:159280kB unevictable:1536kB writepending:268kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:33488kB local_pcp:18832kB free_cma:0kB [ 361.395993][ T9143] lowmem_reserve[]: 0 0 0 0 0 [ 361.400715][ T9143] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 361.428447][ T9143] lowmem_reserve[]: 0 0 0 0 0 [ 361.435639][ T9143] Node 1 Normal free:3889612kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24336kB local_pcp:14288kB free_cma:0kB [ 361.465704][ T9143] lowmem_reserve[]: 0 0 0 0 0 [ 361.470412][ T9143] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 361.483325][ T9143] Node 0 DMA32: 2117*4kB (UME) 487*8kB (UME) 670*16kB (UME) 789*32kB (UME) 723*64kB (UME) 126*128kB (UME) 25*256kB (UME) 16*512kB (UM) 11*1024kB (UME) 7*2048kB (UME) 322*4096kB (M) = 1469836kB [ 361.503027][ T9143] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 361.522932][ T9143] Node 1 Normal: 265*4kB (UME) 65*8kB (UME) 46*16kB (UME) 62*32kB (UME) 20*64kB (UME) 8*128kB (UME) 2*256kB (UM) 1*512kB (U) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3889612kB [ 361.546305][ T9143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.556382][ T9143] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.566992][ T9143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.576896][ T9143] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.586473][ T9143] 57086 total pagecache pages [ 361.591155][ T9143] 0 pages in swap cache [ 361.596615][ T9143] Free swap = 124716kB [ 361.600777][ T9143] Total swap = 124996kB [ 361.606305][ T9143] 2097051 pages RAM [ 361.610618][ T9143] 0 pages HighMem/MovableOnly [ 361.617265][ T9143] 416931 pages reserved [ 361.621594][ T9143] 0 pages cma reserved [ 362.682796][ T788] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 362.800098][ T9170] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 362.877598][ T788] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 362.897425][ T788] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 362.911447][ T788] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 362.922764][ T5843] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 362.937520][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.950994][ T788] usb 2-1: Product: syz [ 362.957017][ T788] usb 2-1: Manufacturer: syz [ 362.965710][ T788] usb 2-1: SerialNumber: syz [ 362.997718][ T788] usb 2-1: config 0 descriptor?? [ 363.126672][ T5843] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 363.136520][ T5843] usb 1-1: config 1 has no interface number 0 [ 363.143649][ T5843] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 363.154256][ T5843] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 363.165756][ T5843] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 363.190019][ T5843] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 363.201719][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.212633][ T5843] usb 1-1: Product: syz [ 363.219243][ T5843] usb 1-1: Manufacturer: syz [ 363.224544][ T5843] usb 1-1: SerialNumber: syz [ 363.238820][ T9161] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 363.256929][ T5843] usb 1-1: Expected 3 endpoints, found: 2 [ 363.301296][ T27] usb 2-1: USB disconnect, device number 22 [ 363.602941][ T5843] usb 1-1: USB disconnect, device number 22 [ 364.093625][ T9180] syz.2.1133: attempt to access beyond end of device [ 364.093625][ T9180] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 364.106826][ T9180] qnx4: unable to read the superblock [ 364.297836][ T9184] tmpfs: Bad value for 'mpol' [ 365.091335][ T9189] 9pnet_fd: Insufficient options for proto=fd [ 365.464091][ T9204] vlan2: entered promiscuous mode [ 365.469203][ T9204] bridge0: entered promiscuous mode [ 365.933370][ T5843] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 366.228806][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.259774][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.383446][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.396985][ T5843] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.413777][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.434704][ T5843] usb 4-1: config 0 descriptor?? [ 366.507010][ T9216] syz.0.1146: attempt to access beyond end of device [ 366.507010][ T9216] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 366.519884][ T9216] qnx4: unable to read the superblock [ 367.224156][ T5843] usbhid 4-1:0.0: can't add hid device: -71 [ 367.243069][ T5813] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 367.253055][ T5843] usbhid: probe of 4-1:0.0 failed with error -71 [ 367.291552][ T5843] usb 4-1: USB disconnect, device number 23 [ 367.473053][ T5813] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 367.502850][ T5813] usb 3-1: config 1 has no interface number 0 [ 367.509000][ T5813] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 367.553016][ T5813] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 367.573712][ T5813] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 367.606433][ T5813] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 367.623634][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.638807][ T5813] usb 3-1: Product: syz [ 367.647259][ T5813] usb 3-1: Manufacturer: syz [ 367.661308][ T5813] usb 3-1: SerialNumber: syz [ 367.675640][ T9215] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 367.714583][ T5813] usb 3-1: Expected 3 endpoints, found: 2 [ 367.997828][ T5813] usb 3-1: USB disconnect, device number 25 [ 368.076166][ T9225] tmpfs: Bad value for 'mpol' [ 369.188991][ T9234] 9pnet_fd: Insufficient options for proto=fd [ 369.723617][ T9250] syz.2.1157: attempt to access beyond end of device [ 369.723617][ T9250] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 369.736436][ T9250] qnx4: unable to read the superblock [ 369.945772][ T9253] tmpfs: Bad value for 'mpol' [ 370.424133][ T5813] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 370.634970][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 370.646774][ T5813] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 370.664010][ T5813] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 370.678378][ T5813] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 370.701066][ T5813] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 370.715802][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.726314][ T5813] usb 1-1: Product: syz [ 370.730519][ T5813] usb 1-1: Manufacturer: syz [ 370.736590][ T5813] usb 1-1: SerialNumber: syz [ 370.758526][ T5813] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 370.773209][ T5813] imon 1-1:155.0: unable to initialize intf0, err -19 [ 370.780061][ T5813] imon:imon_probe: failed to initialize context! [ 370.787572][ T5813] imon 1-1:155.0: unable to register, err -19 [ 372.700609][ T5813] usb 1-1: USB disconnect, device number 23 [ 372.794568][ T9267] 9pnet_fd: Insufficient options for proto=fd [ 373.202957][ T5843] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 373.242916][ T5813] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 373.435687][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 373.444562][ T5843] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 373.454974][ T5813] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.470226][ T5843] usb 3-1: config 1 has no interface number 0 [ 373.481556][ T5813] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 373.503200][ T5843] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 373.514181][ T5843] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 373.525345][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 373.533788][ T5813] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 373.543293][ T5843] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 373.555425][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.568935][ T5843] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 373.580113][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.590128][ T5813] usb 4-1: config 0 descriptor?? [ 373.601621][ T5843] usb 3-1: Product: syz [ 373.611702][ T5843] usb 3-1: Manufacturer: syz [ 373.619958][ T5843] usb 3-1: SerialNumber: syz [ 373.639402][ T9272] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 373.717430][ T5843] usb 3-1: Expected 3 endpoints, found: 2 [ 373.933940][ T5843] usb 3-1: USB disconnect, device number 26 [ 374.196853][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.242981][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.250582][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.258608][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.267524][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.283764][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.292929][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.300359][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.322592][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.332263][ T9286] syz.0.1170: attempt to access beyond end of device [ 374.332263][ T9286] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 374.345743][ T9286] qnx4: unable to read the superblock [ 374.517644][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.526879][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.534465][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.542277][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.550456][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.558902][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.566689][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.574327][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.582514][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.590828][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.598366][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.606029][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.614499][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.622043][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.629586][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.637202][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.645046][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.653775][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.664415][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.671946][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.681089][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.690960][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.700748][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.709744][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.719225][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.729016][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.737948][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.748113][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.758932][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.767834][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.777575][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.786684][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.797381][ T5813] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 374.808359][ T5813] steelseries 0003:1038:1410.0003: missing HID_OUTPUT_REPORT 0 [ 374.841103][ T5813] usb 4-1: USB disconnect, device number 24 [ 375.229956][ T9294] tmpfs: Bad value for 'mpol' [ 376.148950][ T9301] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1176'. [ 376.364394][ T9305] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 376.675946][ T9311] 9pnet_fd: Insufficient options for proto=fd [ 377.100355][ T9321] syz.0.1182: attempt to access beyond end of device [ 377.100355][ T9321] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 377.113392][ T9321] qnx4: unable to read the superblock [ 377.243191][ T5813] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 377.508338][ T9328] tmpfs: Bad value for 'mpol' [ 378.030204][ T5813] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 378.070175][ T5813] usb 3-1: config 1 has no interface number 0 [ 378.077172][ T5813] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 378.091547][ T5813] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 378.103414][ T5813] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 378.202861][ T5813] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 378.268266][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.347584][ T5813] usb 3-1: Product: syz [ 378.395211][ T5813] usb 3-1: Manufacturer: syz [ 378.429751][ T5813] usb 3-1: SerialNumber: syz [ 378.457490][ T9319] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 378.476843][ T5813] usb 3-1: Expected 3 endpoints, found: 2 [ 378.629930][ T9338] 9pnet_fd: Insufficient options for proto=fd [ 378.747242][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.753725][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.086743][ T27] usb 3-1: USB disconnect, device number 27 [ 380.252058][ T9354] tmpfs: Bad value for 'mpol' [ 380.316857][ T9351] syz.2.1194: attempt to access beyond end of device [ 380.316857][ T9351] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 380.330073][ T9351] qnx4: unable to read the superblock [ 380.663607][ T9356] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 381.114239][ T9368] 9pnet_fd: Insufficient options for proto=fd [ 381.742184][ T5813] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 381.758241][ T9386] syz.2.1204: attempt to access beyond end of device [ 381.758241][ T9386] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 381.771197][ T9386] qnx4: unable to read the superblock [ 382.192859][ T5813] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 382.217943][ T5813] usb 4-1: config 1 has no interface number 0 [ 382.234030][ T5813] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 382.285261][ T9397] tmpfs: Bad value for 'mpol' [ 382.922832][ T5813] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 383.004795][ T5813] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 383.053680][ T5813] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 383.073020][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.091401][ T5813] usb 4-1: Product: syz [ 383.113715][ T9402] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 383.121479][ T5813] usb 4-1: Manufacturer: syz [ 383.138367][ T5813] usb 4-1: SerialNumber: syz [ 383.140383][ T27] kernel read not supported for file /video9 (pid: 27 comm: kworker/1:1) [ 383.164643][ T9382] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 383.239235][ T5813] usb 4-1: Expected 3 endpoints, found: 2 [ 384.584192][ T5813] usb 4-1: USB disconnect, device number 25 [ 384.679020][ T9422] syz.2.1216: attempt to access beyond end of device [ 384.679020][ T9422] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 384.691974][ T9422] qnx4: unable to read the superblock [ 385.216268][ T9434] tmpfs: Bad value for 'mpol' [ 385.920518][ T27] kernel read not supported for file /video9 (pid: 27 comm: kworker/1:1) [ 386.077681][ T9443] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 386.655665][ T9453] syz.1.1227: attempt to access beyond end of device [ 386.655665][ T9453] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 386.668646][ T9453] qnx4: unable to read the superblock [ 387.004583][ T9460] tmpfs: Bad value for 'mpol' [ 387.558569][ T9466] 9pnet_fd: Insufficient options for proto=fd [ 387.584730][ T5813] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 387.876628][ T5813] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 387.895127][ T5813] usb 2-1: config 1 has no interface number 0 [ 387.924793][ T5813] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 387.982974][ T5813] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 388.017572][ T5813] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 388.166325][ T5813] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 388.223001][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.249715][ T5813] usb 2-1: Product: syz [ 388.262779][ T5813] usb 2-1: Manufacturer: syz [ 388.273008][ T5813] usb 2-1: SerialNumber: syz [ 388.294755][ T9464] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 388.334137][ T5813] usb 2-1: Expected 3 endpoints, found: 2 [ 388.696500][ T5813] usb 2-1: USB disconnect, device number 23 [ 388.859127][ T9482] 9pnet_fd: Insufficient options for proto=fd [ 389.033094][ T9484] netlink: 'syz.3.1238': attribute type 10 has an invalid length. [ 389.041102][ T9484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1238'. [ 389.512935][ T9475] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1236'. [ 389.664531][ T9491] syz.2.1241: attempt to access beyond end of device [ 389.664531][ T9491] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 389.677744][ T9491] qnx4: unable to read the superblock [ 390.107027][ T9500] tmpfs: Bad value for 'mpol' [ 390.528458][ T5813] kernel read not supported for file /video9 (pid: 5813 comm: kworker/0:3) [ 391.035726][ T9519] comedi: valid board names for 8255 driver are: [ 391.081769][ T9519] 8255 [ 391.098904][ T9519] comedi: valid board names for vmk80xx driver are: [ 391.139159][ T9519] vmk80xx [ 391.142283][ T9519] comedi: valid board names for usbduxsigma driver are: [ 391.151651][ T9519] usbduxsigma [ 391.155507][ T9519] comedi: valid board names for usbduxfast driver are: [ 391.166926][ T9519] usbduxfast [ 391.170371][ T9519] comedi: valid board names for usbdux driver are: [ 391.177052][ T9519] usbdux [ 391.180069][ T9519] comedi: valid board names for ni6501 driver are: [ 391.192923][ T9519] ni6501 [ 391.195960][ T9519] comedi: valid board names for dt9812 driver are: [ 391.221785][ T9519] dt9812 [ 391.231618][ T9519] comedi: valid board names for ni_labpc_cs driver are: [ 391.250126][ T9519] ni_labpc_cs [ 391.258334][ T9519] comedi: valid board names for ni_daq_700 driver are: [ 391.272553][ T9519] ni_daq_700 [ 391.285989][ T9519] comedi: valid board names for labpc_pci driver are: [ 391.320081][ T9519] labpc_pci [ 391.328347][ T9519] comedi: valid board names for adl_pci9118 driver are: [ 391.336509][ T9519] pci9118dg [ 391.339862][ T9519] pci9118hg [ 391.360571][ T9519] pci9118hr [ 391.364232][ T5813] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 391.377888][ T9519] comedi: valid board names for 8255_pci driver are: [ 391.752915][ T9519] 8255_pci [ 392.286438][ T9519] comedi: valid board names for s526 driver are: [ 392.341775][ T9519] s526 [ 392.354512][ T9519] comedi: valid board names for multiq3 driver are: [ 392.378925][ T9519] multiq3 [ 392.383513][ T9519] comedi: valid board names for pcmuio driver are: [ 392.390158][ T9519] pcmuio48 [ 392.531080][ T5813] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 392.550853][ T9519] pcmuio96 [ 392.564485][ T5813] usb 3-1: config 1 has no interface number 0 [ 392.573147][ T9519] comedi: valid board names for pcmmio driver are: [ 392.582903][ T9519] pcmmio [ 392.585925][ T9519] comedi: valid board names for pcmda12 driver are: [ 392.591133][ T5813] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 392.592538][ T9519] pcmda12 [ 392.605552][ T9519] comedi: valid board names for pcmad driver are: [ 392.612097][ T9519] pcmad12 [ 392.618799][ T5813] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 392.640829][ T5813] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 392.643298][ T9519] pcmad16 [ 392.662650][ T5813] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 392.677320][ T9528] syz.0.1252: attempt to access beyond end of device [ 392.677320][ T9528] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 392.690179][ T9528] qnx4: unable to read the superblock [ 392.700662][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.709264][ T5813] usb 3-1: Product: syz [ 392.716564][ T5813] usb 3-1: Manufacturer: syz [ 392.721486][ T5813] usb 3-1: SerialNumber: syz [ 392.724144][ T9519] comedi: valid board names for ni_labpc driver are: [ 392.732990][ T9519] lab-pc-1200 [ 392.736515][ T9519] lab-pc-1200ai [ 392.741646][ T9519] lab-pc+ [ 392.741976][ T9516] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 392.744804][ T9519] comedi: valid board names for atmio16 driver are: [ 392.758753][ T9519] atmio16 [ 392.761892][ T9519] atmio16d [ 392.765246][ T9519] comedi: valid board names for ni_at_ao driver are: [ 392.772045][ T9519] at-ao-6 [ 392.775271][ T9519] at-ao-10 [ 392.778527][ T9519] comedi: valid board names for ni_at_a2150 driver are: [ 392.785785][ T9519] ni_at_a2150 [ 392.789257][ T9519] comedi: valid board names for adq12b driver are: [ 392.795913][ T9519] adq12b [ 392.798999][ T9519] comedi: valid board names for mpc624 driver are: [ 392.805740][ T9519] mpc624 [ 392.808795][ T9519] comedi: valid board names for c6xdigio driver are: [ 392.815983][ T9519] c6xdigio [ 392.819191][ T9519] comedi: valid board names for aio_iiro_16 driver are: [ 392.933006][ T5813] usb 3-1: Expected 3 endpoints, found: 2 [ 392.967147][ T9519] aio_iiro_16 [ 392.971544][ T9519] comedi: valid board names for aio_aio12_8 driver are: [ 392.983755][ T9519] aio_aio12_8 [ 392.987405][ T9519] aio_ai12_8 [ 392.994500][ T9531] syz.1.1253: attempt to access beyond end of device [ 392.994500][ T9531] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 393.007610][ T9531] exFAT-fs (nbd1): unable to read boot sector [ 393.013713][ T9531] exFAT-fs (nbd1): failed to read boot sector [ 393.019788][ T9531] exFAT-fs (nbd1): failed to recognize exfat type [ 393.031413][ T9519] aio_ao12_4 [ 393.042278][ T9519] comedi: valid board names for fl512 driver are: [ 393.125126][ T9519] fl512 [ 393.165562][ T9519] comedi: valid board names for dmm32at driver are: [ 393.176804][ T9519] dmm32at [ 393.180153][ T9519] comedi: valid board names for dt282x driver are: [ 393.189070][ T9519] dt2821 [ 393.192215][ T9519] dt2821-f [ 393.196066][ T9519] dt2821-g [ 393.200062][ T9519] dt2823 [ 393.208140][ T9519] dt2824-pgh [ 393.219571][ T9519] dt2824-pgl [ 393.231327][ T9519] dt2825 [ 393.246399][ T9519] dt2827 [ 393.255866][ T9519] dt2828 [ 393.265074][ T9519] dt2829 [ 393.277428][ T9519] dt21-ez [ 393.295708][ T9519] dt23-ez [ 393.302807][ T9519] dt24-ez [ 393.305936][ T9519] dt24-ez-pgl [ 393.309335][ T9519] comedi: valid board names for dt2817 driver are: [ 393.316198][ T9519] dt2817 [ 393.319272][ T9519] comedi: valid board names for dt2815 driver are: [ 393.326053][ T9519] dt2815 [ 393.329291][ T9519] comedi: valid board names for dt2814 driver are: [ 393.356672][ T9519] dt2814 [ 393.366268][ T9519] comedi: valid board names for dt2811 driver are: [ 393.382045][ T9519] dt2811-pgh [ 393.394677][ T9519] dt2811-pgl [ 393.398114][ T9519] comedi: valid board names for dt2801 driver are: [ 393.406238][ T9519] dt2801 [ 393.409425][ T9519] comedi: valid board names for das6402 driver are: [ 393.416904][ T9519] das6402-12 [ 393.420325][ T9519] das6402-16 [ 393.424096][ T9519] comedi: valid board names for das1800 driver are: [ 393.431079][ T9519] das-1701st [ 393.434799][ T9519] das-1701st-da [ 393.438556][ T9519] das-1702st [ 393.442223][ T9519] das-1702st-da [ 393.446189][ T9519] das-1702hr [ 393.449628][ T9519] das-1702hr-da [ 393.453831][ T9519] das-1701ao [ 393.458315][ T9519] das-1702ao [ 393.461730][ T9519] das-1801st [ 393.465998][ T9519] das-1801st-da [ 393.469679][ T9519] das-1802st [ 393.473368][ T9519] das-1802st-da [ 393.477239][ T9519] das-1802hr [ 393.480744][ T9519] das-1802hr-da [ 393.484706][ T9519] das-1801hc [ 393.488294][ T9519] das-1802hc [ 393.491809][ T9519] das-1801ao [ 393.497797][ T9519] das-1802ao [ 393.501470][ T9519] comedi: valid board names for das800 driver are: [ 393.508893][ T9519] das-800 [ 393.512297][ T9519] cio-das800 [ 393.515959][ T9519] das-801 [ 393.519079][ T9519] cio-das801 [ 393.523041][ T9519] das-802 [ 393.526219][ T9519] cio-das802 [ 393.529637][ T9519] cio-das802/16 [ 393.533881][ T9519] comedi: valid board names for isa-das08 driver are: [ 393.540863][ T9519] isa-das08 [ 393.544745][ T9519] das08-pgm [ 393.548074][ T9519] das08-pgh [ 393.551379][ T9519] das08-pgl [ 393.555301][ T9519] das08-aoh [ 393.559125][ T9519] das08-aol [ 393.563562][ T9519] das08-aom [ 393.567089][ T9519] das08/jr-ao [ 393.570582][ T9519] das08jr-16-ao [ 393.574529][ T9519] pc104-das08 [ 393.578334][ T9519] das08jr/16 [ 393.581737][ T9519] comedi: valid board names for das16m1 driver are: [ 393.588953][ T9519] das16m1 [ 393.651956][ T9519] comedi: valid board names for dac02 driver are: [ 393.676989][ T9519] dac02 [ 393.692865][ T9519] comedi: valid board names for rti802 driver are: [ 393.711375][ T9519] rti802 [ 393.718319][ T9519] comedi: valid board names for rti800 driver are: [ 393.724623][ T27] kernel read not supported for file /video9 (pid: 27 comm: kworker/1:1) [ 393.736948][ T9519] rti800 [ 393.742621][ T9519] rti815 [ 393.754836][ T9519] comedi: valid board names for pcm3724 driver are: [ 393.769716][ T9519] pcm3724 [ 393.779668][ T9519] comedi: valid board names for pcl818 driver are: [ 393.798251][ T9519] pcl818l [ 393.806616][ T9519] pcl818h [ 393.814185][ T9519] pcl818hd [ 393.827698][ T9519] pcl818hg [ 393.839183][ T9519] pcl818 [ 393.847420][ T9519] pcl718 [ 393.855494][ T9519] pcm3718 [ 393.861874][ T9519] comedi: valid board names for pcl816 driver are: [ 393.889387][ T9519] pcl816 [ 393.900159][ T9519] pcl814b [ 393.915374][ T9519] comedi: valid board names for pcl812 driver are: [ 393.943428][ T9519] pcl812 [ 393.958618][ T9519] pcl812pg [ 393.975928][ T9519] acl8112pg [ 393.990028][ T9519] acl8112dg [ 394.000631][ T9519] acl8112hg [ 394.004378][ T9519] a821pgl [ 394.007588][ T9519] a821pglnda [ 394.013278][ T9519] a821pgh [ 394.016421][ T9519] a822pgl [ 394.019514][ T9519] a822pgh [ 394.027515][ T9519] a823pgl [ 394.031384][ T9519] a823pgh [ 394.035753][ T9519] pcl813 [ 394.039053][ T9519] pcl813b [ 394.042353][ T9519] acl8113 [ 394.047919][ T9519] iso813 [ 394.059503][ T9519] acl8216 [ 394.064484][ T9519] a826pg [ 394.067728][ T9519] comedi: valid board names for pcl730 driver are: [ 394.076027][ T9519] pcl730 [ 394.079074][ T9519] iso730 [ 394.082434][ T9519] acl7130 [ 394.086047][ T9519] pcm3730 [ 394.090553][ T9519] pcl725 [ 394.094406][ T9519] p8r8dio [ 394.097552][ T9519] acl7225b [ 394.100733][ T9519] p16r16dio [ 394.104794][ T9519] pcl733 [ 394.107888][ T9519] pcl734 [ 394.111065][ T9519] opmm-1616-xt [ 394.120563][ T9519] pearl-mm-p [ 394.124647][ T9519] ir104-pbf [ 394.128082][ T9519] comedi: valid board names for pcl726 driver are: [ 394.138623][ T9519] pcl726 [ 394.143247][ T9519] pcl727 [ 394.146348][ T9519] pcl728 [ 394.149646][ T9519] acl6126 [ 394.159569][ T9519] acl6128 [ 394.163243][ T9519] comedi: valid board names for pcl724 driver are: [ 394.169906][ T9519] pcl724 [ 394.177842][ T9519] pcl722 [ 394.180928][ T9519] pcl731 [ 394.184400][ T9519] acl7122 [ 394.187517][ T9519] acl7124 [ 394.190612][ T9519] pet48dio [ 394.200057][ T9519] pcmio48 [ 394.203489][ T9519] onyx-mm-dio [ 394.207022][ T9519] comedi: valid board names for pcl711 driver are: [ 394.207447][ T27] usb 3-1: USB disconnect, device number 28 [ 394.223306][ T9519] pcl711 [ 394.231755][ T9519] pcl711b [ 394.248157][ T9519] acl8112hg [ 394.257925][ T9519] acl8112dg [ 394.261174][ T9519] comedi: valid board names for amplc_pc263 driver are: [ 394.279378][ T9519] pc263 [ 394.282275][ T9519] comedi: valid board names for amplc_pc236 driver are: [ 394.302736][ T9519] pc36at [ 394.308208][ T9519] comedi: valid board names for amplc_dio200 driver are: [ 394.315921][ T9519] pc212e [ 394.322901][ T9519] pc214e [ 394.325871][ T9519] pc215e [ 394.332476][ T9519] pc218e [ 394.338620][ T9519] pc272e [ 394.345891][ T9519] comedi: valid board names for comedi_parport driver are: [ 394.355672][ T9519] comedi_parport [ 394.359331][ T9519] comedi: valid board names for comedi_test driver are: [ 394.368605][ T9519] comedi_test [ 394.372006][ T9519] comedi: valid board names for comedi_bond driver are: [ 394.385217][ T9519] comedi_bond [ 394.581093][ T9540] tmpfs: Bad value for 'mpol' [ 394.978709][ T5813] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 395.494304][ T5813] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 395.513609][ T5813] usb 4-1: config 8 has an invalid descriptor of length 48, skipping remainder of the config [ 395.558607][ T5813] usb 4-1: config 8 has no interface number 0 [ 395.572998][ T5813] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 395.603291][ T5813] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 395.657106][ T5813] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 395.680374][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.695296][ T5813] usb 4-1: Product: syz [ 395.699661][ T5813] usb 4-1: Manufacturer: syz [ 395.704874][ T5813] usb 4-1: SerialNumber: syz [ 395.710972][ T5843] kernel read not supported for file /video9 (pid: 5843 comm: kworker/0:6) [ 396.254965][ T9573] syz.0.1266: attempt to access beyond end of device [ 396.254965][ T9573] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 396.268148][ T9573] qnx4: unable to read the superblock [ 396.417508][ T5813] usb 4-1: USB disconnect, device number 26 [ 396.956055][ T9578] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 398.893710][ T9589] tmpfs: Bad value for 'mpol' [ 399.527807][ T9598] 9pnet_fd: Insufficient options for proto=fd [ 399.933289][ T9608] ªªªªªª: renamed from vlan0 (while UP) [ 400.655735][ T5843] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 400.812557][ T9618] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 400.883376][ T5843] usb 1-1: Using ep0 maxpacket: 32 [ 400.896663][ T5843] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 401.010489][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.030105][ T5843] usb 1-1: config 0 descriptor?? [ 401.053927][ T5843] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 401.157720][ T9622] syz.1.1283: attempt to access beyond end of device [ 401.157720][ T9622] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 401.170520][ T9622] qnx4: unable to read the superblock [ 402.344083][ T9629] 9pnet_fd: Insufficient options for proto=fd [ 402.667122][ T9634] tmpfs: Bad value for 'mpol' [ 402.679136][ T5843] gspca_vc032x: reg_w err -71 [ 402.686424][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 402.691757][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 402.716301][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 402.721644][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 402.745703][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 402.766088][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 402.792952][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 402.798295][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 402.815691][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 402.821109][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.074980][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.306715][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.312068][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.562308][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.567932][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.573764][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.579077][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.584671][ T5843] gspca_vc032x: I2c Bus Busy Wait 00 [ 403.589981][ T5843] gspca_vc032x: Unknown sensor... [ 403.596143][ T5843] vc032x: probe of 1-1:0.0 failed with error -22 [ 403.605269][ T5843] usb 1-1: USB disconnect, device number 24 [ 405.250331][ T9657] syz.0.1294: attempt to access beyond end of device [ 405.250331][ T9657] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 405.263308][ T9657] qnx4: unable to read the superblock [ 405.803955][ T9665] 9pnet_fd: Insufficient options for proto=fd [ 406.331008][ T9672] tmpfs: Bad value for 'mpol' [ 408.306886][ T9687] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 408.486369][ T9693] usb usb9: usbfs: process 9693 (syz.3.1305) did not claim interface 0 before use [ 408.512636][ T9695] 9pnet_fd: Insufficient options for proto=fd [ 408.588221][ T9696] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 409.175450][ T9709] tmpfs: Bad value for 'mpol' [ 409.204317][ T9710] syz.0.1310: attempt to access beyond end of device [ 409.204317][ T9710] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 409.217379][ T9710] qnx4: unable to read the superblock [ 411.407113][ T9719] 9pnet_fd: Insufficient options for proto=fd [ 413.052013][ T9734] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 413.764491][ T9752] tmpfs: Bad value for 'mpol' [ 414.615649][ T9759] syz.1.1325: attempt to access beyond end of device [ 414.615649][ T9759] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 414.630397][ T9759] qnx4: unable to read the superblock [ 414.689259][ T9761] trusted_key: encrypted_key: insufficient parameters specified [ 414.803909][ T9765] 9pnet_fd: Insufficient options for proto=fd [ 415.233601][ T27] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 415.332911][ T9774] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 415.463021][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 415.472967][ T27] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 415.491313][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 415.499250][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 415.512008][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.540854][ T27] usb 4-1: config 0 descriptor?? [ 415.995855][ T9780] tmpfs: Bad value for 'mpol' [ 416.211281][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 416.219564][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 416.227101][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 416.234457][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 416.241965][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 416.272838][ T5773] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 416.949172][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.721037][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.729342][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.736551][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.743746][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.750898][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.758088][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.765267][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.772425][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.779654][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.814151][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.821601][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.830739][ T5773] usb 3-1: Using ep0 maxpacket: 16 [ 417.888286][ T5773] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.903406][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.912597][ T5773] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 417.927566][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.936117][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.943537][ T5773] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 417.958711][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.966889][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.978405][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 417.989227][ T5773] usb 3-1: config 0 descriptor?? [ 418.001544][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.009699][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.021282][ T5773] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 418.042982][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.050309][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.058551][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.065840][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.073082][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.080317][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.092710][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.099884][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.107855][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.115102][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.122345][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.129603][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.141082][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.148548][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.157778][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.168616][ T27] logitech 0003:046D:C294.0004: unknown main item tag 0x0 [ 418.262559][ T27] logitech 0003:046D:C294.0004: hidraw0: USB HID v0.04 Device [HID 046d:c294] on usb-dummy_hcd.3-1/input0 [ 418.274852][ T5156] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 418.335917][ T5773] usb 3-1: USB disconnect, device number 29 [ 418.401570][ T27] logitech 0003:046D:C294.0004: no inputs found [ 418.696031][ T27] usb 4-1: USB disconnect, device number 27 [ 418.770616][ T5156] usb 1-1: unable to get BOS descriptor or descriptor too short [ 418.896867][ T5156] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 418.979760][ T5156] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 419.051678][ T5156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.118295][ T5156] usb 1-1: Product: syz [ 419.122613][ T5156] usb 1-1: Manufacturer: syz [ 419.152806][ T5773] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 419.167251][ T9807] fido_id[9807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 419.191814][ T5156] usb 1-1: SerialNumber: syz [ 419.368027][ T9809] tmpfs: Bad value for 'mpol' [ 419.451381][ T5156] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 419.492446][ T5773] usb 3-1: device descriptor read/all, error -71 [ 420.810077][ T5156] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 420.898991][ T5156] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 421.108387][ T9826] capability: warning: `syz.3.1349' uses 32-bit capabilities (legacy support in use) [ 421.304503][ T9829] syz.1.1345: attempt to access beyond end of device [ 421.304503][ T9829] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 421.317921][ T9829] qnx4: unable to read the superblock [ 421.653092][ T5843] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 421.667846][ T5156] usb 1-1: invalid uac2 rates [ 421.682240][ T5156] usb 1-1: invalid uac2 rates [ 421.688316][ T5156] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 421.696836][ T5156] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 421.862777][ T5843] usb 4-1: device descriptor read/64, error -71 [ 421.956889][ T5156] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 422.014247][ T5156] usb 1-1: USB disconnect, device number 25 [ 422.070322][ T5904] udevd[5904]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.153134][ T5843] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 422.303006][ T5843] usb 4-1: device descriptor read/64, error -71 [ 422.433076][ T5843] usb usb4-port1: attempt power cycle [ 422.873870][ T5843] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 423.105675][ T5843] usb 4-1: device descriptor read/8, error -71 [ 423.462989][ T5843] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 423.642972][ T9845] tmpfs: Bad value for 'mpol' [ 423.728105][ T5843] usb 4-1: device descriptor read/8, error -71 [ 423.864276][ T5843] usb usb4-port1: unable to enumerate USB device [ 426.108664][ T9871] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 426.199592][ T9875] syz.0.1360: attempt to access beyond end of device [ 426.199592][ T9875] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 426.212449][ T9875] qnx4: unable to read the superblock [ 427.241205][ T9881] tmpfs: Bad value for 'mpol' [ 428.843450][ T5843] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 429.043768][ T5843] usb 3-1: Using ep0 maxpacket: 16 [ 429.064545][ T5843] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 429.102205][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 429.143730][ T5843] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 429.182789][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.190835][ T5843] usb 3-1: Product: syz [ 429.213677][ T5843] usb 3-1: Manufacturer: syz [ 429.218358][ T5843] usb 3-1: SerialNumber: syz [ 429.235730][ T5843] usb 3-1: config 0 descriptor?? [ 429.327325][ T9908] tmpfs: Bad value for 'mpol' [ 429.524943][ T5843] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 429.546422][ T9909] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 429.769525][ T9914] syz.0.1376: attempt to access beyond end of device [ 429.769525][ T9914] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 429.783428][ T9914] qnx4: unable to read the superblock [ 429.865370][ T5843] rc_core: IR keymap rc-imon-pad not found [ 429.880780][ T5843] Registered IR keymap rc-empty [ 429.890940][ T5843] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 429.953036][ T5843] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 429.968657][ T9916] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.005021][ T5843] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 430.039774][ T5843] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input34 [ 430.059991][ T5843] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:32> initialized [ 430.138056][ T9916] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.282883][ T5156] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 430.379116][ T9916] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.500385][ T9916] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.542511][ T5156] usb 2-1: config 0 has no interfaces? [ 430.572090][ T5156] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 430.601645][ T5156] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 430.622716][ T5156] usb 2-1: Product: syz [ 430.638285][ T5156] usb 2-1: Manufacturer: syz [ 430.655379][ T5156] usb 2-1: SerialNumber: syz [ 430.673184][ T5156] usb 2-1: config 0 descriptor?? [ 430.765340][ T9916] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.813332][ T9916] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.843713][ C0] imon 3-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 3, intf0) [ 430.860679][ T9916] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.955943][ T9916] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.073674][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 431.084969][ T5843] usb 3-1: USB disconnect, device number 32 [ 431.273119][ T9931] netlink: 'syz.3.1383': attribute type 6 has an invalid length. [ 431.322822][ T9929] netlink: 'syz.3.1383': attribute type 6 has an invalid length. [ 432.312894][ T5813] usb 2-1: USB disconnect, device number 24 [ 432.746934][ T9950] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 432.756974][ T9951] tmpfs: Bad value for 'mpol' [ 434.693497][ T27] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 434.965379][ T27] usb 1-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config [ 434.976029][ T27] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.997779][ T27] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 435.007244][ T27] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 435.019135][ T27] usb 1-1: Manufacturer: syz [ 435.023993][ T27] usb 1-1: SerialNumber: syz [ 435.050084][ T9970] syz.2.1396 (9970) used greatest stack depth: 17896 bytes left [ 435.079380][ T9977] syz.1.1393: attempt to access beyond end of device [ 435.079380][ T9977] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 435.092564][ T9977] qnx4: unable to read the superblock [ 435.112795][ T5813] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 435.272052][ T27] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 435.288675][ T27] usb 1-1: USB disconnect, device number 26 [ 435.295173][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 435.357812][ T5813] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 435.372265][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.393625][ T5813] usb 4-1: Product: syz [ 435.397839][ T5813] usb 4-1: Manufacturer: syz [ 435.416823][ T5813] usb 4-1: SerialNumber: syz [ 435.485161][ T5813] usb 4-1: config 0 descriptor?? [ 435.524090][ T5813] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 436.870079][ T9993] tmpfs: Bad value for 'mpol' [ 437.442637][ T27] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 437.468272][ T9997] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 437.642732][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 437.751760][ T5813] gspca_topro: reg_r err -71 [ 437.774942][ T5813] gspca_topro: Sensor soi763a [ 437.937409][ T5813] usb 4-1: USB disconnect, device number 32 [ 438.352215][ T27] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 438.360817][ T27] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 438.369476][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 438.378497][ T27] usb 2-1: config 1 has no interface number 0 [ 438.384678][ T27] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 438.395692][ T27] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 438.423043][ T27] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 438.432107][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.465384][ T27] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 438.853521][ T27] snd_usb_pod 2-1:1.1: invalid control EP [ 438.859417][ T27] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 438.867776][ T27] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 438.878581][ T27] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 439.193013][ T5813] usb 2-1: USB disconnect, device number 25 [ 439.902908][T10028] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 439.975710][T10030] tmpfs: Bad value for 'mpol' [ 440.589812][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.596362][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.011108][T10038] syz.3.1411: attempt to access beyond end of device [ 441.011108][T10038] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 441.062368][ T27] IPVS: starting estimator thread 0... [ 441.069350][T10038] qnx4: unable to read the superblock [ 441.076284][T10041] IPVS: sed: FWM 3 0x00000003 - no destination available [ 441.163410][T10042] IPVS: using max 18 ests per chain, 43200 per kthread [ 441.182786][ T5156] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 441.382882][ T5156] usb 3-1: Using ep0 maxpacket: 8 [ 441.394326][ T5156] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.412763][ T5156] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 441.428347][ T5156] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 441.440018][ T5156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.456926][ T5156] usb 3-1: Product: syz [ 441.462912][ T5156] usb 3-1: Manufacturer: syz [ 441.467573][ T5156] usb 3-1: SerialNumber: syz [ 441.908521][T10035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.933357][T10035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.287266][T10056] netlink: 'syz.2.1416': attribute type 10 has an invalid length. [ 442.465840][T10056] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.473716][T10056] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.581632][T10056] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.588836][T10056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.597202][T10056] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.604343][T10056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.616496][T10056] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 442.667069][T10059] binder: 10058:10059 ioctl 4018620d 0 returned -22 [ 442.717919][ T5156] usb 3-1: USB disconnect, device number 33 [ 442.806549][ T5813] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 442.870657][ T5813] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 443.226467][T10067] tmpfs: Bad value for 'mpol' [ 444.150563][T10072] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 445.476908][T10088] syz.1.1431: attempt to access beyond end of device [ 445.476908][T10088] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 445.490806][T10059] syz.0.1423 (10059): drop_caches: 2 [ 445.544807][T10088] qnx4: unable to read the superblock [ 447.914479][T10114] tmpfs: Bad value for 'mpol' [ 450.485328][T10130] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 450.673607][T10135] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.681673][T10135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 450.689424][T10135] IPv6: NLM_F_CREATE should be set when creating new route [ 451.232756][T10145] syz.3.1447: attempt to access beyond end of device [ 451.232756][T10145] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 451.234827][T10145] qnx4: unable to read the superblock [ 454.196464][T10162] tmpfs: Bad value for 'mpol' [ 455.595101][T10169] ufs: You didn't specify the type of your ufs filesystem [ 455.595101][T10169] [ 455.595101][T10169] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 455.595101][T10169] [ 455.595101][T10169] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 455.626641][T10169] ufs: ufstype=old is supported read-only [ 455.633739][T10169] syz.2.1453: attempt to access beyond end of device [ 455.633739][T10169] loop5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 456.453262][ T5773] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 456.681372][ T5773] usb 4-1: not running at top speed; connect to a high speed hub [ 456.711729][ T5773] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 159, changing to 4 [ 456.727280][ T5773] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 456.796487][ T5773] usb 4-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 456.811403][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.819860][ T5773] usb 4-1: Product: syz [ 456.824993][ T5773] usb 4-1: Manufacturer: syz [ 456.829995][ T5773] usb 4-1: SerialNumber: syz [ 457.113970][ T5773] usb 4-1: USB disconnect, device number 33 [ 457.202126][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.017625][T10199] syz.0.1460: attempt to access beyond end of device [ 458.017625][T10199] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 458.031105][T10199] qnx4: unable to read the superblock [ 458.057896][ T5773] IPVS: starting estimator thread 0... [ 458.063072][ T5813] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 458.420262][T10206] tmpfs: Bad value for 'mpol' [ 458.530929][T10202] IPVS: using max 19 ests per chain, 45600 per kthread [ 459.073133][ T5813] usb 2-1: Using ep0 maxpacket: 8 [ 459.086462][ T5813] usb 2-1: config 39 has an invalid interface number: 145 but max is 1 [ 459.102150][ T5813] usb 2-1: config 39 has an invalid interface number: 94 but max is 1 [ 459.145307][ T5813] usb 2-1: config 39 has an invalid descriptor of length 0, skipping remainder of the config [ 459.181760][ T5813] usb 2-1: config 39 has no interface number 0 [ 459.210009][ T5813] usb 2-1: config 39 has no interface number 1 [ 459.237400][ T5813] usb 2-1: config 39 interface 94 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 459.272192][ T5813] usb 2-1: config 39 interface 145 has no altsetting 0 [ 459.302923][ T5773] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 459.306024][ T5813] usb 2-1: config 39 interface 94 has no altsetting 0 [ 459.341155][ T5813] usb 2-1: New USB device found, idVendor=054c, idProduct=0169, bcdDevice=c7.b0 [ 459.376612][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.414200][ T5813] usb 2-1: Product: syz [ 459.428643][ T5813] usb 2-1: Manufacturer: syz [ 459.449882][ T5813] usb 2-1: SerialNumber: syz [ 459.989400][ T5773] usb 1-1: Using ep0 maxpacket: 8 [ 460.323190][ T5773] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 460.331749][ T5773] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 460.342991][ T5773] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 460.360450][ T5773] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 460.372864][ T5773] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 460.386496][ T5773] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.401182][ T5773] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 460.411912][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.672146][ T5773] usb 1-1: GET_CAPABILITIES returned 0 [ 460.682720][ T5773] usbtmc 1-1:16.0: can't read capabilities [ 460.868643][T10222] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 460.881965][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 460.894857][T10209] usbtmc 1-1:16.0: Unable to send data, error -71 [ 460.921962][ T5773] usb 1-1: USB disconnect, device number 27 [ 461.550533][T10187] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 461.718069][T10217] syz.1.1458 (10217): drop_caches: 2 [ 461.788563][ T5813] usb 2-1: active config #39 != 1 ?? [ 461.808086][ T5813] cdc_mbim: probe of 2-1:39.94 failed with error -71 [ 461.815741][ T5813] usb 2-1: active config #39 != 1 ?? [ 461.863096][ T5813] usb 2-1: USB disconnect, device number 26 [ 461.933063][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 462.528520][T10239] syz.1.1472: attempt to access beyond end of device [ 462.528520][T10239] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 462.541625][T10239] qnx4: unable to read the superblock [ 463.763512][T10252] tmpfs: Bad value for 'mpol' [ 464.664585][T10258] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 464.720519][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 465.441408][T10280] syz.0.1485: attempt to access beyond end of device [ 465.441408][T10280] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 465.455059][T10280] qnx4: unable to read the superblock [ 467.122539][T10298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1492'. [ 467.593060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 468.002695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 468.195851][T10304] xt_HMARK: spi-set and port-set can't be combined [ 468.522878][T10309] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 469.200234][T10323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1500'. [ 469.265271][T10325] syz.0.1498: attempt to access beyond end of device [ 469.265271][T10325] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 469.278157][T10325] qnx4: unable to read the superblock [ 471.727171][T10348] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 472.271942][T10358] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 472.562372][T10363] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1512'. [ 472.949770][T10364] syz.2.1513: attempt to access beyond end of device [ 472.949770][T10364] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 472.962825][T10364] qnx4: unable to read the superblock [ 475.551877][T10396] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 476.154470][T10405] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 476.639392][T10409] syz.2.1526: attempt to access beyond end of device [ 476.639392][T10409] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 476.652336][T10409] qnx4: unable to read the superblock [ 477.521258][T10415] tmpfs: Bad value for 'mpol' [ 478.546121][T10429] tmpfs: Bad value for 'mpol' [ 479.492037][T10444] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 479.666491][T10448] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 479.756376][T10450] syz.2.1537: attempt to access beyond end of device [ 479.756376][T10450] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 479.769838][T10450] qnx4: unable to read the superblock [ 480.467014][ T5773] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 480.842354][T10465] tmpfs: Bad value for 'mpol' [ 481.537179][ T5773] usb 2-1: unable to get BOS descriptor or descriptor too short [ 481.610381][ T5773] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 481.647660][ T5773] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 481.657489][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.668612][ T5773] usb 2-1: Product: syz [ 481.693727][ T5773] usb 2-1: Manufacturer: syz [ 481.698728][ T5773] usb 2-1: SerialNumber: syz [ 482.836143][ T5773] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 483.396669][T10481] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 483.435069][T10486] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 483.619447][T10487] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 483.996610][ T5773] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 484.005464][ T5773] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 484.490183][T10493] syz.2.1553: attempt to access beyond end of device [ 484.490183][T10493] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 484.503304][T10493] qnx4: unable to read the superblock [ 486.788846][ T5773] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 486.839463][T10511] tmpfs: Bad value for 'mpol' [ 486.930890][ T5773] usb 2-1: USB disconnect, device number 27 [ 486.986671][T10194] udevd[10194]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.070660][T10516] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 487.478007][ T5813] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 487.772737][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 487.782583][ T5813] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 487.802290][ T5813] usb 3-1: config 0 has no interface number 0 [ 487.815012][ T5813] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 487.854881][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.873970][ T5813] usb 3-1: Product: syz [ 487.878200][ T5813] usb 3-1: Manufacturer: syz [ 487.891601][ T5813] usb 3-1: SerialNumber: syz [ 487.913554][ T5813] usb 3-1: config 0 descriptor?? [ 487.934327][ T5813] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 488.358842][T10527] syz.0.1564: attempt to access beyond end of device [ 488.358842][T10527] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 488.372072][T10527] qnx4: unable to read the superblock [ 488.443942][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 488.840460][ T5813] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 488.925644][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 488.980571][T10525] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 489.293180][ T5813] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 489.331643][ T5813] usb 3-1: USB disconnect, device number 34 [ 489.352287][ T5813] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 489.385316][ T5813] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 489.410407][ T5813] quatech2 3-1:0.51: device disconnected [ 490.402788][ T5843] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 490.865068][ T5843] usb 1-1: unable to get BOS descriptor or descriptor too short [ 490.874336][ T5843] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 490.893322][ T5843] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 490.963758][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.024256][ T5843] usb 1-1: Product: syz [ 491.078135][ T5843] usb 1-1: Manufacturer: syz [ 491.121977][T10560] tmpfs: Bad value for 'mpol' [ 491.132616][ T5843] usb 1-1: SerialNumber: syz [ 491.548151][ T5843] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 491.982905][T10571] syz.1.1575: attempt to access beyond end of device [ 491.982905][T10571] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 491.995957][T10571] qnx4: unable to read the superblock [ 492.762920][ T5813] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 493.084341][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 493.118637][ T5813] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 493.136976][ T5813] usb 3-1: config 0 has no interface number 0 [ 493.153938][ T5813] usb 3-1: config 0 interface 12 has no altsetting 0 [ 493.185505][ T5813] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 493.202580][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.283795][T10578] warning: `syz.1.1578' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 494.041466][ T5813] usb 3-1: Product: syz [ 494.072862][ T5813] usb 3-1: Manufacturer: syz [ 494.077519][ T5813] usb 3-1: SerialNumber: syz [ 494.100245][T10536] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 494.135026][ T5843] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 494.198498][ T5813] usb 3-1: config 0 descriptor?? [ 494.217054][ T5843] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 494.750073][T10569] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1577'. [ 494.825819][T10585] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1577'. [ 494.925690][ T5843] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 495.011487][ T5843] usb 1-1: USB disconnect, device number 28 [ 495.079747][ T5813] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 495.210005][ T5813] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 495.366210][ T5813] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 495.494140][T10194] udevd[10194]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.536619][ T5813] f81534: probe of 3-1:0.12 failed with error -71 [ 495.623350][ T5813] usb 3-1: USB disconnect, device number 35 [ 497.134302][T10614] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 498.409053][T10631] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 498.668071][T10635] tmpfs: Bad value for 'mpol' [ 500.393810][T10652] syz.1.1597: attempt to access beyond end of device [ 500.393810][T10652] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 500.406730][T10652] qnx4: unable to read the superblock [ 501.637478][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.644909][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.863162][ T27] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 503.014050][T10673] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 503.047635][T10675] tmpfs: Bad value for 'mpol' [ 503.070754][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 503.172543][ T27] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 503.291402][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 503.368842][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.442061][ T27] usb 3-1: Product: syz [ 503.478530][ T27] usb 3-1: Manufacturer: syz [ 503.516320][ T27] usb 3-1: SerialNumber: syz [ 503.904830][ T27] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 505.709437][T10689] syz.0.1611: attempt to access beyond end of device [ 505.709437][T10689] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 505.722516][T10689] qnx4: unable to read the superblock [ 506.562077][T10694] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 506.777883][T10693] sctp: [Deprecated]: syz.3.1612 (pid 10693) Use of int in max_burst socket option deprecated. [ 506.777883][T10693] Use struct sctp_assoc_value instead [ 508.022695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 508.555883][T10693] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1612'. [ 508.939837][ T27] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 508.963228][ T27] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 508.984461][ T27] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 509.049241][ T27] usb 3-1: USB disconnect, device number 36 [ 509.096610][T10194] udevd[10194]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.397407][T10718] tmpfs: Bad value for 'mpol' [ 512.954020][T10742] wg1 speed is unknown, defaulting to 1000 [ 513.013286][T10742] wg1 speed is unknown, defaulting to 1000 [ 513.056172][T10742] wg1 speed is unknown, defaulting to 1000 [ 513.069467][T10742] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 513.478779][T10765] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 513.574234][T10742] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 515.165727][T10742] wg1 speed is unknown, defaulting to 1000 [ 515.180800][T10742] wg1 speed is unknown, defaulting to 1000 [ 515.216317][T10742] wg1 speed is unknown, defaulting to 1000 [ 515.270882][T10742] wg1 speed is unknown, defaulting to 1000 [ 516.272128][T10786] bridge_slave_0: left allmulticast mode [ 516.277979][T10786] bridge_slave_0: left promiscuous mode [ 516.283814][T10786] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.299875][T10786] bridge_slave_1: left allmulticast mode [ 516.305684][T10786] bridge_slave_1: left promiscuous mode [ 516.311434][T10786] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.325128][T10786] bond0: (slave bond_slave_0): Releasing backup interface [ 516.431705][T10786] bond0: (slave bond_slave_1): Releasing backup interface [ 516.542898][T10792] tmpfs: Bad value for 'mpol' [ 516.739176][T10786] team0: Port device team_slave_0 removed [ 516.859410][T10786] team0: Port device team_slave_1 removed [ 516.903807][T10786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.911627][T10786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.948242][T10786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.956523][T10786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.045083][T10786] team0: Port device geneve0 removed [ 517.267374][ T27] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 517.664806][T10807] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 517.674942][ T27] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 517.686055][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.757200][T10808] syz.2.1645: attempt to access beyond end of device [ 517.757200][T10808] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 517.770720][T10808] qnx4: unable to read the superblock [ 517.781867][ T27] usb 2-1: config 0 has no interfaces? [ 517.789026][ T27] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 517.798570][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.890262][ T27] usb 2-1: config 0 descriptor?? [ 519.833157][ T5813] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 519.936514][T10830] tmpfs: Bad value for 'mpol' [ 520.444311][ T5813] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 521.012776][ T5813] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 521.053026][ T5813] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 521.062055][ T5813] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 521.195160][ T5813] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 521.214849][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 521.247640][ T5813] usb 1-1: Product: syz [ 521.408283][ T5813] usb 1-1: Manufacturer: syz [ 521.433009][T10828] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 521.461144][ T5813] cdc_wdm 1-1:1.0: skipping garbage [ 521.466813][ T5813] cdc_wdm 1-1:1.0: skipping garbage [ 521.526481][T10841] syz.2.1658: attempt to access beyond end of device [ 521.526481][T10841] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 521.539622][T10841] qnx4: unable to read the superblock [ 521.961843][T10842] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 522.027241][ T5813] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 522.067204][ T5813] usb 1-1: USB disconnect, device number 29 [ 522.194923][ T27] usb 2-1: string descriptor 0 read error: -71 [ 522.214727][ T27] usb 2-1: USB disconnect, device number 28 [ 522.752973][ T27] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 522.842870][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 523.010635][ T27] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 523.023793][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.040706][ T27] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 523.050450][ T27] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 523.062874][ T27] usb 2-1: Manufacturer: syz [ 523.072227][ T27] usb 2-1: config 0 descriptor?? [ 523.085242][ T27] igorplugusb 2-1:0.0: incorrect number of endpoints [ 523.265381][T10865] tmpfs: Bad value for 'mpol' [ 523.821989][T10872] syz.2.1668: attempt to access beyond end of device [ 523.821989][T10872] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 523.905071][T10872] qnx4: unable to read the superblock [ 524.155436][T10881] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 524.992983][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 525.724663][ T5773] usb 2-1: USB disconnect, device number 29 [ 525.873832][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1675'. [ 526.256751][T10909] wg1 speed is unknown, defaulting to 1000 [ 526.382121][T10913] tmpfs: Bad value for 'mpol' [ 526.531495][T10916] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 526.803080][ T27] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 527.000028][ T27] usb 3-1: unable to get BOS descriptor or descriptor too short [ 527.009610][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.020141][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 527.029916][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 49599, setting to 1024 [ 527.030672][T10924] wg1 speed is unknown, defaulting to 1000 [ 527.046358][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 527.075295][ T27] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 527.088860][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.099168][ T27] usb 3-1: Product: syz [ 527.103873][ T27] usb 3-1: Manufacturer: syz [ 527.109315][ T27] usb 3-1: SerialNumber: syz [ 527.125574][ T27] usb 3-1: config 0 descriptor?? [ 527.135804][T10908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.152216][T10908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 527.190404][ C1] usb 3-1: NFC: Urb failure (status -71) [ 527.219402][ C1] usb 3-1: NFC: Urb failure (status -71) [ 527.247171][ T27] usb 3-1: NFC: Unable to get FW version [ 527.296767][ T27] pn533_usb: probe of 3-1:0.0 failed with error -71 [ 527.389880][ T27] usb 3-1: USB disconnect, device number 37 [ 528.078780][T10941] syz.0.1689: attempt to access beyond end of device [ 528.078780][T10941] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 528.144578][T10941] qnx4: unable to read the superblock [ 528.496376][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1690'. [ 530.275341][T10967] tmpfs: Bad value for 'mpol' [ 531.423259][ T5843] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 531.589632][ T5843] usb 1-1: device descriptor read/64, error -71 [ 531.912853][ T5843] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 532.064071][ T5843] usb 1-1: device descriptor read/64, error -71 [ 532.183219][ T5843] usb usb1-port1: attempt power cycle [ 532.835924][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1703'. [ 532.885435][ T5843] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 532.935371][ T5843] usb 1-1: device descriptor read/8, error -71 [ 532.961257][T10997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1706'. [ 533.212971][ T5843] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 533.372107][ T5843] usb 1-1: device descriptor read/8, error -71 [ 533.592193][ T5843] usb usb1-port1: unable to enumerate USB device [ 534.243337][T11015] tmpfs: Bad value for 'mpol' [ 534.273100][ T788] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 534.467010][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.492953][ T788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.514329][ T788] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 534.533171][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.554232][ T788] usb 1-1: config 0 descriptor?? [ 535.108238][ T788] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 535.120952][ T788] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 535.131591][ T788] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0006/input/input35 [ 535.222279][T11022] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20004 [ 535.974517][ T788] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 536.048258][ T788] usb 1-1: USB disconnect, device number 34 [ 536.093205][T11031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1716'. [ 536.183166][T11030] fido_id[11030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 536.952952][ T5843] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 537.007519][T11046] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 537.154428][ T5843] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 537.226078][ T5843] usb 3-1: config 1 has no interface number 0 [ 537.256620][ T5843] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 537.304925][ T5843] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x5A, skipping [ 537.367913][ T5843] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 537.402039][ T5843] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 537.426432][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.468714][ T5843] usb 3-1: Product: syz [ 537.473075][ T5843] usb 3-1: Manufacturer: syz [ 537.477942][ T5843] usb 3-1: SerialNumber: syz [ 537.485976][T11042] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 537.495985][ T5843] usb 3-1: Expected 3 endpoints, found: 2 [ 537.620537][ T28] audit: type=1326 audit(1782135589.047:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.1.1719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3f39ce59 code=0x7ffc0000 [ 537.683934][ T28] audit: type=1326 audit(1782135589.077:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.1.1719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3f39ce59 code=0x7ffc0000 [ 537.711338][ T5843] usb 3-1: USB disconnect, device number 38 [ 537.839551][ T28] audit: type=1326 audit(1782135589.077:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.1.1719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3f39ce59 code=0x7ffc0000 [ 537.927374][ T28] audit: type=1326 audit(1782135589.077:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.1.1719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3f39ce59 code=0x7ffc0000 [ 538.013517][ T28] audit: type=1326 audit(1782135589.077:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.1.1719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a3f39ce59 code=0x7ffc0000 [ 538.041264][ T28] audit: type=1326 audit(1782135589.077:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.1.1719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3f39ce59 code=0x7ffc0000 [ 538.111811][ T28] audit: type=1326 audit(1782135589.087:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.1.1719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3f39ce59 code=0x7ffc0000 [ 538.204159][ T28] audit: type=1326 audit(1782135589.087:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.1.1719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3f39ce59 code=0x7ffc0000 [ 538.443936][T11057] syz.0.1722: attempt to access beyond end of device [ 538.443936][T11057] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 538.457430][T11057] qnx4: unable to read the superblock [ 539.273041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 540.143013][ T28] audit: type=1326 audit(1782135589.087:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.1.1719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a3f39ce59 code=0x7ffc0000 [ 540.273760][ T28] audit: type=1326 audit(1782135589.087:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11035 comm="syz.1.1719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a3f39ce59 code=0x7ffc0000 [ 540.901425][T11070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1728'. [ 541.065508][T11062] tmpfs: Bad value for 'mpol' [ 545.572042][T11089] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 547.810685][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'. [ 548.027424][T11079] udevd[11079]: symlink '../../loop9' '/dev/disk/by-diskseq/74.tmp-b7:9' failed: Read-only file system [ 548.108293][T11079] udevd[11079]: symlink '../../loop9' '/dev/disk/by-diskseq/74.tmp-b7:9' failed: Read-only file system [ 548.176638][T11079] udevd[11079]: symlink '../../loop9' '/dev/disk/by-diskseq/74.tmp-b7:9' failed: Read-only file system [ 548.226062][T11079] udevd[11079]: symlink '../../loop9' '/dev/disk/by-diskseq/75.tmp-b7:9' failed: Read-only file system [ 548.798108][T11121] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 549.059491][T11125] tmpfs: Bad value for 'mpol' [ 549.944494][T11134] Cannot find set identified by id 0 to match [ 553.803151][T11156] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 555.340139][T11161] tmpfs: Bad value for 'mpol' [ 556.766986][T11173] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1760'. [ 558.571386][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1763'. [ 560.467644][T11198] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 560.700051][T11202] tmpfs: Bad value for 'mpol' [ 561.733902][T11213] syz.0.1770: attempt to access beyond end of device [ 561.733902][T11213] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 561.746715][T11213] qnx4: unable to read the superblock [ 563.068603][T11219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1774'. [ 563.086021][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.092405][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.649429][T11239] tmpfs: Bad value for 'mpol' [ 566.319506][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1783'. [ 567.288588][T11256] syzkaller0: entered promiscuous mode [ 567.295486][T11256] syzkaller0: entered allmulticast mode [ 567.304154][T11256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.312807][ T3457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.677735][T11271] syz.0.1790: attempt to access beyond end of device [ 568.677735][T11271] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 568.693449][T11271] qnx4: unable to read the superblock [ 568.740143][T11272] tmpfs: Bad value for 'mpol' [ 570.128787][T11278] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 570.652408][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1794'. [ 570.677865][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'. [ 572.002210][T11304] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 572.260278][T11310] tmpfs: Bad value for 'mpol' [ 573.449896][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 579.602203][T11340] tmpfs: Bad value for 'mpol' [ 582.174456][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1822'. [ 584.124860][T11362] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1821'. [ 585.222899][T11373] tmpfs: Bad value for 'mpol' [ 587.985841][T11395] syz.0.1834: attempt to access beyond end of device [ 587.985841][T11395] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 587.999101][T11395] qnx4: unable to read the superblock [ 588.773698][T11408] tmpfs: Bad value for 'mpol' [ 590.472966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 592.240780][T11429] capability: warning: `syz.3.1845' uses deprecated v2 capabilities in a way that may be insecure [ 592.502108][T11434] syz.0.1846: attempt to access beyond end of device [ 592.502108][T11434] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 592.515030][T11434] qnx4: unable to read the superblock [ 592.626035][T11437] tmpfs: Bad value for 'mpol' [ 597.903674][T11462] syz.2.1857: attempt to access beyond end of device [ 597.903674][T11462] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 597.916422][T11462] qnx4: unable to read the superblock [ 598.232103][T11469] tmpfs: Bad value for 'mpol' [ 602.094321][T11507] syz.0.1868: attempt to access beyond end of device [ 602.094321][T11507] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 602.107247][T11507] qnx4: unable to read the superblock [ 602.208785][ T27] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 602.235803][T11509] tmpfs: Bad value for 'mpol' [ 602.856380][ T27] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 602.883302][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 602.891362][ T27] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 602.901110][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.923478][ T27] usb 3-1: config 0 descriptor?? [ 604.094271][ T27] prodikeys 0003:041E:2801.0007: unknown main item tag 0x2 [ 604.101552][ T27] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 604.146591][ T27] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 604.313419][ T27] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 604.383061][ T27] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 604.572986][ T27] prodikeys 0003:041E:2801.0007: unknown main item tag 0x0 [ 604.580312][ T27] prodikeys 0003:041E:2801.0007: bogus close delimiter [ 604.587236][ T27] prodikeys 0003:041E:2801.0007: item 0 2 2 10 parsing failed [ 604.595485][ T27] prodikeys 0003:041E:2801.0007: hid parse failed [ 604.603165][ T27] prodikeys: probe of 0003:041E:2801.0007 failed with error -22 [ 604.639139][ T27] usb 3-1: USB disconnect, device number 39 [ 606.039413][T11539] syz.2.1879: attempt to access beyond end of device [ 606.039413][T11539] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 606.052355][T11539] qnx4: unable to read the superblock [ 608.168648][T11550] tmpfs: Bad value for 'mpol' [ 608.451231][T11559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1887'. [ 611.373760][T11585] syz.0.1894: attempt to access beyond end of device [ 611.373760][T11585] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 611.386700][T11585] qnx4: unable to read the superblock [ 611.736976][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 611.737065][ T28] audit: type=1800 audit(1782135663.167:51): pid=11580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1893" name="bus" dev="ramfs" ino=32978 res=0 errno=0 [ 612.413311][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1897'. [ 612.432949][T11592] 8021q: adding VLAN 0 to HW filter on device team1 [ 614.651331][T11609] 9pnet_fd: Insufficient options for proto=fd [ 614.806116][T11613] tmpfs: Bad value for 'mpol' [ 614.957632][T11614] syz.0.1905: attempt to access beyond end of device [ 614.957632][T11614] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 614.970595][T11614] qnx4: unable to read the superblock [ 615.172693][ T27] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 615.383363][ T27] usb 3-1: config 0 has no interfaces? [ 615.407429][ T27] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 615.451668][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.509814][ T27] usb 3-1: config 0 descriptor?? [ 615.795721][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1906'. [ 616.206355][T11621] 8021q: adding VLAN 0 to HW filter on device team1 [ 616.585049][ T788] usb 3-1: USB disconnect, device number 40 [ 622.808885][T11673] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1922'. [ 623.173557][T11678] tmpfs: Bad value for 'mpol' [ 623.871758][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1923'. [ 623.894249][T11682] 8021q: adding VLAN 0 to HW filter on device team1 [ 624.536176][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.542881][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.780797][T11716] random: crng reseeded on system resumption [ 628.172412][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1933'. [ 628.191667][T11719] 8021q: adding VLAN 0 to HW filter on device team1 [ 628.654752][T11727] syz.2.1936: attempt to access beyond end of device [ 628.654752][T11727] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 628.668039][T11727] qnx4: unable to read the superblock [ 628.679278][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 630.073063][T11741] tmpfs: Bad value for 'mpol' [ 631.617614][T11749] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 631.901224][T11753] ubi16: attaching mtd0 [ 631.915299][T11753] ubi16: scanning is finished [ 631.920099][T11753] ubi16: empty MTD device detected [ 632.739144][T11756] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 633.074593][T11753] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 633.092588][T11753] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 633.105320][T11753] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 633.127703][T11753] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 633.513936][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'. [ 633.567431][T11753] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 633.639396][T11753] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 633.682450][T11753] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1512011756 [ 633.696723][T11753] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 633.717979][T11758] ubi16: background thread "ubi_bgt16d" started, PID 11758 [ 633.995018][T11761] 8021q: adding VLAN 0 to HW filter on device team2 [ 638.483844][T11768] syz.0.1947: attempt to access beyond end of device [ 638.483844][T11768] nbd0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 638.497365][T11768] qnx4: unable to read the superblock [ 638.999513][T11772] syzkaller0: entered promiscuous mode [ 639.010017][T11772] syzkaller0: entered allmulticast mode [ 641.541680][T11792] ubi: mtd0 is already attached to ubi16 [ 642.290636][T11804] syz.2.1958: attempt to access beyond end of device [ 642.290636][T11804] nbd2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 642.303654][T11804] qnx4: unable to read the superblock [ 644.150338][T11830] tmpfs: Bad value for 'mpol' [ 645.686152][T11835] ================================================================== [ 645.694285][T11835] BUG: KASAN: slab-out-of-bounds in try_module_get+0x46/0xc0 [ 645.701784][T11835] Write of size 4 at addr ffff8881433856f8 by task syz.1.1969/11835 [ 645.709762][T11835] [ 645.712178][T11835] CPU: 0 PID: 11835 Comm: syz.1.1969 Not tainted syzkaller #0 [ 645.719648][T11835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 645.729706][T11835] Call Trace: [ 645.732993][T11835] [ 645.735920][T11835] dump_stack_lvl+0x18c/0x250 [ 645.740606][T11835] ? read_lock_is_recursive+0x20/0x20 [ 645.745988][T11835] ? show_regs_print_info+0x20/0x20 [ 645.751276][T11835] ? load_image+0x420/0x420 [ 645.755795][T11835] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 645.761258][T11835] ? __virt_addr_valid+0x10c/0x380 [ 645.766400][T11835] ? __virt_addr_valid+0x10c/0x380 [ 645.771513][T11835] ? __virt_addr_valid+0x10c/0x380 [ 645.776649][T11835] print_report+0xa8/0x210 [ 645.781090][T11835] ? try_module_get+0x46/0xc0 [ 645.785790][T11835] kasan_report+0x117/0x150 [ 645.790335][T11835] ? read_lock_is_recursive+0x20/0x20 [ 645.795715][T11835] ? try_module_get+0x46/0xc0 [ 645.800400][T11835] kasan_check_range+0x241/0x290 [ 645.805338][T11835] try_module_get+0x46/0xc0 [ 645.809842][T11835] dvb_device_open+0xf4/0x360 [ 645.814524][T11835] chrdev_open+0x58c/0x600 [ 645.818937][T11835] ? cd_forget+0x160/0x160 [ 645.823347][T11835] ? fsnotify_perm+0x3ed/0x5e0 [ 645.828146][T11835] do_dentry_open+0x880/0x14b0 [ 645.832904][T11835] ? cd_forget+0x160/0x160 [ 645.837312][T11835] path_openat+0x284f/0x3270 [ 645.841910][T11835] ? do_sys_openat2+0xda/0x1d0 [ 645.846670][T11835] ? __x64_sys_openat+0x139/0x160 [ 645.851692][T11835] ? verify_lock_unused+0x140/0x140 [ 645.856886][T11835] ? do_filp_open+0x430/0x430 [ 645.861561][T11835] do_filp_open+0x1f2/0x430 [ 645.866055][T11835] ? vfs_tmpfile+0x480/0x480 [ 645.870651][T11835] ? _raw_spin_unlock+0x28/0x40 [ 645.875503][T11835] ? alloc_fd+0x590/0x640 [ 645.879831][T11835] do_sys_openat2+0x134/0x1d0 [ 645.884502][T11835] ? do_sys_open+0xe0/0xe0 [ 645.888920][T11835] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 645.894895][T11835] ? lock_chain_count+0x20/0x20 [ 645.899739][T11835] ? lock_chain_count+0x20/0x20 [ 645.904588][T11835] __x64_sys_openat+0x139/0x160 [ 645.909444][T11835] do_syscall_64+0x55/0xb0 [ 645.913862][T11835] ? clear_bhb_loop+0x40/0x90 [ 645.918535][T11835] ? clear_bhb_loop+0x40/0x90 [ 645.923204][T11835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.929092][T11835] RIP: 0033:0x7f9a3f35d68e [ 645.933501][T11835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 645.953105][T11835] RSP: 002b:00007f9a40286b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 645.961517][T11835] RAX: ffffffffffffffda RBX: 00007f9a402876c0 RCX: 00007f9a3f35d68e [ 645.969482][T11835] RDX: 0000000000040002 RSI: 00007f9a40286c00 RDI: ffffffffffffff9c [ 645.977447][T11835] RBP: 00007f9a40286c00 R08: 0000000000000000 R09: 0000000000000000 [ 645.985411][T11835] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 645.993460][T11835] R13: 00007f9a3f616038 R14: 00007f9a3f615fa0 R15: 00007ffc496c8878 [ 646.001440][T11835] [ 646.004452][T11835] [ 646.006760][T11835] Allocated by task 1: [ 646.010814][T11835] kasan_set_track+0x4e/0x70 [ 646.015402][T11835] __kasan_kmalloc+0x8f/0xa0 [ 646.019984][T11835] __kmalloc_node+0xb6/0x240 [ 646.024573][T11835] kvmalloc_node+0x70/0x180 [ 646.029075][T11835] v4l2_ctrl_new+0x9f2/0x16e0 [ 646.033744][T11835] v4l2_ctrl_new_custom+0x540/0x7a0 [ 646.038932][T11835] vimc_debayer_add+0x98/0x330 [ 646.043799][T11835] vimc_probe+0x3a0/0x1440 [ 646.048224][T11835] platform_probe+0x13b/0x1c0 [ 646.052922][T11835] really_probe+0x247/0xae0 [ 646.057418][T11835] __driver_probe_device+0x1f5/0x390 [ 646.062694][T11835] driver_probe_device+0x4f/0x420 [ 646.067709][T11835] __driver_attach+0x444/0x6d0 [ 646.072462][T11835] bus_for_each_dev+0x235/0x2b0 [ 646.077306][T11835] bus_add_driver+0x340/0x630 [ 646.081976][T11835] driver_register+0x23a/0x310 [ 646.086732][T11835] vimc_init+0x36/0xa0 [ 646.090848][T11835] do_one_initcall+0x242/0x790 [ 646.095627][T11835] do_initcall_level+0x13d/0x1f0 [ 646.100577][T11835] do_initcalls+0x69/0xd0 [ 646.104902][T11835] kernel_init_freeable+0x3d9/0x560 [ 646.110092][T11835] kernel_init+0x1d/0x1c0 [ 646.114413][T11835] ret_from_fork+0x48/0x80 [ 646.118819][T11835] ret_from_fork_asm+0x11/0x20 [ 646.123577][T11835] [ 646.125897][T11835] The buggy address belongs to the object at ffff888143385600 [ 646.125897][T11835] which belongs to the cache kmalloc-256 of size 256 [ 646.140052][T11835] The buggy address is located 16 bytes to the right of [ 646.140052][T11835] allocated 232-byte region [ffff888143385600, ffff8881433856e8) [ 646.154626][T11835] [ 646.156938][T11835] The buggy address belongs to the physical page: [ 646.163412][T11835] page:ffffea00050ce100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x143384 [ 646.173638][T11835] head:ffffea00050ce100 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 646.182561][T11835] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 646.190625][T11835] page_type: 0xffffffff() [ 646.194944][T11835] raw: 057ff00000000840 ffff888017c41b40 ffffea0000bdf200 0000000000000006 [ 646.203516][T11835] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 646.212081][T11835] page dumped because: kasan: bad access detected [ 646.218490][T11835] page_owner tracks the page as allocated [ 646.224191][T11835] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15518898424, free_ts 0 [ 646.243892][T11835] post_alloc_hook+0x1c1/0x200 [ 646.248656][T11835] get_page_from_freelist+0x2181/0x22a0 [ 646.254192][T11835] __alloc_pages+0x1f0/0x460 [ 646.258766][T11835] alloc_page_interleave+0x24/0x1e0 [ 646.263954][T11835] alloc_slab_page+0x5d/0x180 [ 646.268621][T11835] new_slab+0x87/0x2d0 [ 646.272683][T11835] ___slab_alloc+0xc5c/0x12f0 [ 646.277353][T11835] __kmem_cache_alloc_node+0x11f/0x250 [ 646.282812][T11835] kmalloc_trace+0x2a/0xe0 [ 646.287227][T11835] bus_add_driver+0x162/0x630 [ 646.291895][T11835] driver_register+0x23a/0x310 [ 646.296649][T11835] usb_register_driver+0x205/0x3c0 [ 646.301819][T11835] sd_mod_init+0x1e/0x30 [ 646.306114][T11835] do_one_initcall+0x242/0x790 [ 646.310869][T11835] do_initcall_level+0x13d/0x1f0 [ 646.315799][T11835] do_initcalls+0x69/0xd0 [ 646.320131][T11835] page_owner free stack trace missing [ 646.325482][T11835] [ 646.327800][T11835] Memory state around the buggy address: [ 646.333415][T11835] ffff888143385580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 646.341467][T11835] ffff888143385600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 646.349539][T11835] >ffff888143385680: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 646.357594][T11835] ^ [ 646.365556][T11835] ffff888143385700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 646.373606][T11835] ffff888143385780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 646.381653][T11835] ================================================================== [ 646.404211][T11835] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 646.411442][T11835] CPU: 0 PID: 11835 Comm: syz.1.1969 Not tainted syzkaller #0 [ 646.418920][T11835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 646.428996][T11835] Call Trace: [ 646.432298][T11835] [ 646.435236][T11835] dump_stack_lvl+0x18c/0x250 [ 646.439929][T11835] ? show_regs_print_info+0x20/0x20 [ 646.445138][T11835] ? load_image+0x420/0x420 [ 646.449653][T11835] panic+0x2ca/0x720 [ 646.453603][T11835] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 646.459777][T11835] ? bpf_jit_dump+0xd0/0xd0 [ 646.464300][T11835] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 646.470296][T11835] ? _raw_spin_unlock+0x40/0x40 [ 646.475164][T11835] ? try_module_get+0x46/0xc0 [ 646.479857][T11835] check_panic_on_warn+0x84/0xa0 [ 646.484844][T11835] ? try_module_get+0x46/0xc0 [ 646.489540][T11835] end_report+0x6f/0x130 [ 646.493801][T11835] kasan_report+0x128/0x150 [ 646.498316][T11835] ? read_lock_is_recursive+0x20/0x20 [ 646.503703][T11835] ? try_module_get+0x46/0xc0 [ 646.508396][T11835] kasan_check_range+0x241/0x290 [ 646.513350][T11835] try_module_get+0x46/0xc0 [ 646.517902][T11835] dvb_device_open+0xf4/0x360 [ 646.522607][T11835] chrdev_open+0x58c/0x600 [ 646.527035][T11835] ? cd_forget+0x160/0x160 [ 646.531476][T11835] ? fsnotify_perm+0x3ed/0x5e0 [ 646.536249][T11835] do_dentry_open+0x880/0x14b0 [ 646.541028][T11835] ? cd_forget+0x160/0x160 [ 646.545467][T11835] path_openat+0x284f/0x3270 [ 646.550074][T11835] ? do_sys_openat2+0xda/0x1d0 [ 646.554847][T11835] ? __x64_sys_openat+0x139/0x160 [ 646.559880][T11835] ? verify_lock_unused+0x140/0x140 [ 646.565089][T11835] ? do_filp_open+0x430/0x430 [ 646.569791][T11835] do_filp_open+0x1f2/0x430 [ 646.574323][T11835] ? vfs_tmpfile+0x480/0x480 [ 646.578939][T11835] ? _raw_spin_unlock+0x28/0x40 [ 646.583816][T11835] ? alloc_fd+0x590/0x640 [ 646.588176][T11835] do_sys_openat2+0x134/0x1d0 [ 646.592874][T11835] ? do_sys_open+0xe0/0xe0 [ 646.597305][T11835] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 646.603305][T11835] ? lock_chain_count+0x20/0x20 [ 646.608191][T11835] ? lock_chain_count+0x20/0x20 [ 646.613083][T11835] __x64_sys_openat+0x139/0x160 [ 646.617962][T11835] do_syscall_64+0x55/0xb0 [ 646.622382][T11835] ? clear_bhb_loop+0x40/0x90 [ 646.627078][T11835] ? clear_bhb_loop+0x40/0x90 [ 646.631835][T11835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.637754][T11835] RIP: 0033:0x7f9a3f35d68e [ 646.642185][T11835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 646.661811][T11835] RSP: 002b:00007f9a40286b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 646.670245][T11835] RAX: ffffffffffffffda RBX: 00007f9a402876c0 RCX: 00007f9a3f35d68e [ 646.678240][T11835] RDX: 0000000000040002 RSI: 00007f9a40286c00 RDI: ffffffffffffff9c [ 646.686226][T11835] RBP: 00007f9a40286c00 R08: 0000000000000000 R09: 0000000000000000 [ 646.694216][T11835] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 646.702204][T11835] R13: 00007f9a3f616038 R14: 00007f9a3f615fa0 R15: 00007ffc496c8878 [ 646.710211][T11835] [ 646.713486][T11835] Kernel Offset: disabled [ 646.717796][T11835] Rebooting in 86400 seconds..