last executing test programs: 1m43.353268935s ago: executing program 1 (id=1618): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0xf7a}], 0x1) 1m42.325536262s ago: executing program 1 (id=1628): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m42.044043378s ago: executing program 1 (id=1632): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x1}}, './file1\x00'}) 1m41.809741369s ago: executing program 1 (id=1634): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 1m41.500847883s ago: executing program 1 (id=1636): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x1, 0x40000002, 0x0) 1m40.363230189s ago: executing program 1 (id=1645): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 1m39.745290342s ago: executing program 32 (id=1645): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 18.451550217s ago: executing program 5 (id=2237): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x2, 0x2) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) fcntl$setlease(r0, 0x400, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40040, 0x1) 17.392502623s ago: executing program 5 (id=2245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x74, 0x2c, 0xd27, 0x870bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_EMATCHES={0x40, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0x1}, {0x6, 0x3, 0xae8, 0x0, 0x0, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x6}, {0x1, 0x10000, 0x4, 0x2, 0xd, 0x2, 0x2}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040094}, 0x40010) 17.02476757s ago: executing program 5 (id=2247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x80, 0x200}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x10}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 16.086369661s ago: executing program 5 (id=2253): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160) 15.72484901s ago: executing program 5 (id=2256): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) accept(r0, 0x0, 0x0) 15.124060165s ago: executing program 5 (id=2260): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x1}}}}}}}, 0x0) 14.479140332s ago: executing program 33 (id=2260): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x1}}}}}}}, 0x0) 9.812271397s ago: executing program 3 (id=2283): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r2, 0x400455c8, 0x9) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) 6.586971712s ago: executing program 3 (id=2308): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) r1 = syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffb, 0x10100, 0x2, 0x4000004}, &(0x7f00000002c0)=0x0, &(0x7f00000015c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2df0, 0x3ffffffe, 0x0, 0x0, 0x0) r4 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000100)=0x9) 6.411537553s ago: executing program 3 (id=2309): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) 4.301859823s ago: executing program 4 (id=2313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) 4.260840797s ago: executing program 2 (id=2314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x0, 0x3}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.104870738s ago: executing program 4 (id=2316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000080)=""/20, 0x14}, {&(0x7f00000016c0)=""/126, 0x7e}, {&(0x7f0000000280)=""/156, 0x9c}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000440)=""/221, 0xdd}], 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.038959469s ago: executing program 2 (id=2317): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000064ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x20000, 0x1ff, 0x0, 0xfffffffd, 0x803, 0x0, 0x0, 0x100}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl,debug=0x0000000000000006,aname=,nodevmap']) 3.784307984s ago: executing program 4 (id=2318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000380)=ANY=[], 0x0) 3.733340134s ago: executing program 3 (id=2319): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000240), &(0x7f0000000540)=r0}, 0x20) 3.624350734s ago: executing program 2 (id=2320): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x4) 3.497913414s ago: executing program 3 (id=2321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000840)={0x2ff, [0x8], 0x2}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 3.363703898s ago: executing program 2 (id=2322): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) 3.119919435s ago: executing program 4 (id=2323): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = dup2(r1, r0) read$FUSE(r2, &(0x7f0000003fc0)={0x2020}, 0x2020) 3.058932682s ago: executing program 0 (id=2324): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x64, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0x6}}, @TCA_U32_SEL={0x24, 0x5, {0x7, 0x2, 0x1, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x9}]}}, @TCA_U32_LINK={0x8, 0x3, 0x3}]}}]}, 0x64}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.245790927s ago: executing program 0 (id=2325): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 2.067525826s ago: executing program 0 (id=2326): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(&(0x7f0000000580)='./file0/../file0/file0\x00', &(0x7f00000005c0)=@random={'system.', '\x00'}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0x1, 0x1, 0xfffffdfffffffff1, 0x0, 0x9, 0xbd, {0x6, 0xfff, 0x3, 0x6, 0xe3, 0x100000000000008, 0x80000000, 0x4, 0x6, 0x1000, 0x7fffffff, r2, 0x0, 0x40, 0xcc}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.911665717s ago: executing program 4 (id=2327): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) 1.863313596s ago: executing program 0 (id=2328): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xffffffef) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) 1.789304385s ago: executing program 4 (id=2329): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0x7f, 0x10000, 0x0, 0x6}) 836.727858ms ago: executing program 0 (id=2330): io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r1}, 0x3f) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 694.93582ms ago: executing program 3 (id=2331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000010000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$overlay(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010000180"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 481.126927ms ago: executing program 0 (id=2332): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) syz_io_uring_setup(0x50db, &(0x7f00000000c0)={0x0, 0x5237, 0x8000, 0x0, 0xe1}, 0x0, &(0x7f0000000180)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce010282970902120001000000000904000000020201"], 0x0) 466.576494ms ago: executing program 2 (id=2333): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000140)=""/131, 0x83) 0s ago: executing program 2 (id=2334): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 150.514577][ T37] audit: type=1326 audit(1756056662.329:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 150.514625][ T37] audit: type=1326 audit(1756056662.329:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 150.565034][ T37] audit: type=1326 audit(1756056662.379:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 150.565102][ T37] audit: type=1326 audit(1756056662.379:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 150.565153][ T37] audit: type=1326 audit(1756056662.379:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 150.578969][ T37] audit: type=1326 audit(1756056662.389:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 150.579057][ T37] audit: type=1326 audit(1756056662.389:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6682 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 152.361413][ T5924] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 152.512015][ T5924] usb 4-1: Using ep0 maxpacket: 8 [ 152.515888][ T5924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.515948][ T5924] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 152.515973][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.568325][ T5924] usb 4-1: config 0 descriptor?? [ 152.595298][ T5924] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 153.225250][ T6748] Invalid ELF header magic: != ELF [ 153.274789][ T6749] netlink: 83 bytes leftover after parsing attributes in process `syz.4.291'. [ 153.854483][ T5924] gspca_vc032x: reg_w err -71 [ 153.854580][ T5924] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 153.896330][ T5924] usb 4-1: USB disconnect, device number 4 [ 153.951449][ T5902] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.124390][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 154.128629][ T5902] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 154.128657][ T5902] usb 5-1: config 0 has no interface number 0 [ 154.128703][ T5902] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.163310][ T5902] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 154.163339][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.163359][ T5902] usb 5-1: Product: syz [ 154.163373][ T5902] usb 5-1: Manufacturer: syz [ 154.163388][ T5902] usb 5-1: SerialNumber: syz [ 154.209419][ T5902] usb 5-1: config 0 descriptor?? [ 154.228066][ T5902] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 154.229390][ T5902] em28xx 5-1:0.132: Video interface 132 found: [ 154.645047][ T5902] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 155.843420][ T5902] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 155.843494][ T5902] em28xx 5-1:0.132: board has no eeprom [ 155.867893][ T6758] em28xx 5-1:0.132: failed to trigger write to i2c address 0x2 (error=-5) [ 155.923942][ T5902] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 155.923985][ T5902] em28xx 5-1:0.132: analog set to bulk mode. [ 155.951887][ T5924] em28xx 5-1:0.132: Registering V4L2 extension [ 155.955955][ T5902] usb 5-1: USB disconnect, device number 6 [ 155.978330][ T5902] em28xx 5-1:0.132: Disconnecting em28xx [ 155.980942][ T6809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.311'. [ 156.268922][ T6818] sctp: [Deprecated]: syz.1.313 (pid 6818) Use of int in max_burst socket option deprecated. [ 156.268922][ T6818] Use struct sctp_assoc_value instead [ 156.437702][ T5924] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 156.437728][ T5924] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 156.437746][ T5924] em28xx 5-1:0.132: No AC97 audio processor [ 156.501787][ T5924] usb 5-1: Decoder not found [ 156.501808][ T5924] em28xx 5-1:0.132: failed to create media graph [ 156.501863][ T5924] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 156.510860][ T5924] em28xx 5-1:0.132: Remote control support is not available for this card. [ 156.511152][ T5902] em28xx 5-1:0.132: Closing input extension [ 156.661562][ T5991] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.692073][ T5902] em28xx 5-1:0.132: Freeing device [ 156.815515][ T5991] usb 4-1: Using ep0 maxpacket: 16 [ 156.863012][ T5991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.863048][ T5991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.863071][ T5991] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 156.863115][ T5991] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 156.863138][ T5991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.951121][ T5991] usb 4-1: config 0 descriptor?? [ 157.624488][ T5991] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0004/input/input6 [ 157.737158][ T5991] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 157.805900][ T5991] usb 4-1: USB disconnect, device number 5 [ 158.146094][ T6854] fido_id[6854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 159.171450][ T5991] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.331467][ T5991] usb 2-1: Using ep0 maxpacket: 32 [ 159.337253][ T5991] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 159.337281][ T5991] usb 2-1: config 0 has no interface number 0 [ 159.337328][ T5991] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.340569][ T5991] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 159.340598][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.340617][ T5991] usb 2-1: Product: syz [ 159.340631][ T5991] usb 2-1: Manufacturer: syz [ 159.340645][ T5991] usb 2-1: SerialNumber: syz [ 159.376536][ T5991] usb 2-1: config 0 descriptor?? [ 159.416920][ T5991] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 159.416957][ T5991] em28xx 2-1:0.132: Video interface 132 found: [ 159.862553][ T5991] em28xx 2-1:0.132: chip ID is em2884 [ 160.221048][ T6907] Bluetooth: MGMT ver 1.23 [ 160.221096][ T6907] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 160.669171][ T5991] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 160.669204][ T5991] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 160.669245][ T5991] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 160.727880][ T5991] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 160.727910][ T5991] em28xx 2-1:0.132: analog set to bulk mode. [ 160.784402][ T5991] usb 2-1: USB disconnect, device number 4 [ 160.786727][ T5991] em28xx 2-1:0.132: Disconnecting em28xx [ 160.821648][ T10] em28xx 2-1:0.132: Registering V4L2 extension [ 161.425855][ T10] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 161.425880][ T10] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 161.425893][ T10] em28xx 2-1:0.132: No AC97 audio processor [ 161.597863][ T10] usb 2-1: Decoder not found [ 161.597885][ T10] em28xx 2-1:0.132: failed to create media graph [ 161.597925][ T10] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 161.770511][ T10] em28xx 2-1:0.132: Remote control support is not available for this card. [ 161.784387][ T5991] em28xx 2-1:0.132: Closing input extension [ 161.878780][ T5991] em28xx 2-1:0.132: Freeing device [ 162.389532][ T6937] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.596639][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.628800][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.379676][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b775c00: rx timeout, send abort [ 163.382558][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c5da000: rx timeout, send abort [ 163.382859][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b775c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 163.384259][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c5da000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 164.256190][ T6983] atomic_op ffff88805f43a218 conn xmit_atomic 0000000000000000 [ 165.340910][ T7022] fuse: Bad value for 'fd' [ 166.181666][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.334517][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 166.337000][ T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 166.337063][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.337087][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.337111][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.337136][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.337179][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.337203][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.587704][ T10] usb 4-1: usb_control_msg returned -32 [ 166.587751][ T10] usbtmc 4-1:16.0: can't read capabilities [ 166.971526][ T5924] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 167.124607][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.124641][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 167.124670][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 167.124698][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.124739][ T5924] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.124763][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.133501][ T5924] usb 5-1: config 0 descriptor?? [ 167.141840][ T7055] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 167.583949][ T5924] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 167.638507][ T5924] plantronics 0003:047F:FFFF.0005: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 167.786890][ T1242] usb 5-1: USB disconnect, device number 7 [ 168.119371][ T7092] netlink: 'syz.0.413': attribute type 1 has an invalid length. [ 168.431436][ T5925] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 168.455845][ T7102] vlan2: entered allmulticast mode [ 168.455866][ T7102] macvlan0: entered allmulticast mode [ 168.455879][ T7102] veth1_vlan: entered allmulticast mode [ 168.588690][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.588718][ T5925] usb 2-1: config 1 has no interface number 0 [ 168.588763][ T5925] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.588789][ T5925] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 168.588821][ T5925] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x61, changing to 0x1 [ 168.588845][ T5925] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 168.663348][ T5925] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.663378][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.663398][ T5925] usb 2-1: Product: syz [ 168.663412][ T5925] usb 2-1: Manufacturer: syz [ 168.663427][ T5925] usb 2-1: SerialNumber: syz [ 168.941349][ T1242] IPVS: starting estimator thread 0... [ 168.945488][ T5902] usb 4-1: USB disconnect, device number 6 [ 169.032971][ T7108] IPVS: using max 7 ests per chain, 16800 per kthread [ 169.547011][ T5925] cdc_ncm 2-1:1.1: bind() failure [ 169.762228][ T5902] usb 2-1: USB disconnect, device number 5 [ 170.053376][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 170.053608][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 170.060284][ T5902] libceph: connect (1)[c::]:6789 error -101 [ 170.060505][ T5902] libceph: mon0 (1)[c::]:6789 connect error [ 170.129368][ T7143] overlayfs: failed to clone upperpath [ 170.187506][ T7145] overlayfs: failed lookup in lower (newroot/97, name='file1', err=-40): overlapping layers [ 170.312379][ T6045] libceph: connect (1)[c::]:6789 error -101 [ 170.312612][ T6045] libceph: mon0 (1)[c::]:6789 connect error [ 170.641263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 170.651339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 170.661263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 170.680063][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.824262][ T6045] libceph: connect (1)[c::]:6789 error -101 [ 170.824491][ T6045] libceph: mon0 (1)[c::]:6789 connect error [ 170.844528][ T7137] ceph: No mds server is up or the cluster is laggy [ 171.167379][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 171.582570][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.447'. [ 171.843069][ T1242] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 172.009695][ T1242] usb 1-1: Using ep0 maxpacket: 16 [ 172.018745][ T1242] usb 1-1: config 6 has an invalid interface number: 43 but max is 0 [ 172.018774][ T1242] usb 1-1: config 6 has no interface number 0 [ 172.018822][ T1242] usb 1-1: config 6 interface 43 altsetting 170 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 172.018850][ T1242] usb 1-1: config 6 interface 43 has no altsetting 0 [ 172.026669][ T1242] usb 1-1: string descriptor 0 read error: -71 [ 172.026849][ T1242] usb 1-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 172.026877][ T1242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.049941][ T1242] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 172.049971][ T1242] usb 1-1: no configuration chosen from 1 choice [ 172.072204][ T1242] usb 1-1: USB disconnect, device number 5 [ 172.280634][ T7206] netlink: 'syz.1.455': attribute type 21 has an invalid length. [ 172.280656][ T7206] netlink: 'syz.1.455': attribute type 22 has an invalid length. [ 172.280669][ T7206] netlink: 'syz.1.455': attribute type 23 has an invalid length. [ 172.280683][ T7206] netlink: 'syz.1.455': attribute type 25 has an invalid length. [ 172.280696][ T7206] netlink: 'syz.1.455': attribute type 26 has an invalid length. [ 172.280710][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.455'. [ 172.628589][ T7216] netlink: 96 bytes leftover after parsing attributes in process `syz.4.458'. [ 172.814155][ T7221] bridge0: entered allmulticast mode [ 172.815290][ T7221] bridge0: left allmulticast mode [ 173.311375][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 173.491392][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 173.494002][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 173.494032][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.505047][ T10] usb 2-1: config 0 descriptor?? [ 173.564831][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 174.011068][ T7253] netlink: 96 bytes leftover after parsing attributes in process `syz.2.473'. [ 174.760324][ T10] gspca_sunplus: reg_w_riv err -71 [ 174.760423][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 174.784330][ T10] usb 2-1: USB disconnect, device number 6 [ 178.534657][ T7333] netlink: 'syz.0.505': attribute type 29 has an invalid length. [ 178.538756][ T7333] netlink: 'syz.0.505': attribute type 29 has an invalid length. [ 178.559849][ T7333] netlink: 500 bytes leftover after parsing attributes in process `syz.0.505'. [ 178.765723][ T7340] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 179.091049][ T7352] warning: `syz.3.511' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 179.115784][ T7353] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 179.285902][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 179.446847][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.446883][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.446928][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.446950][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.466806][ T7349] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 179.528907][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.596219][ T7366] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 179.882568][ T5991] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 179.882622][ T5991] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 179.882689][ T5991] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 179.907995][ T5991] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 179.917708][ T10] usb 1-1: USB disconnect, device number 6 [ 180.396544][ T7391] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 180.396570][ T7391] netlink: 128 bytes leftover after parsing attributes in process `syz.4.530'. [ 180.396691][ T7391] netlink: 'syz.4.530': attribute type 2 has an invalid length. [ 180.396706][ T7391] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 181.682686][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'. [ 181.800558][ T7418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.852635][ T7422] bond1: (slave batadv1): Opening slave failed [ 181.920938][ T7405] syz.3.533 (7405) used greatest stack depth: 16760 bytes left [ 183.105642][ T7459] mmap: syz.0.557 (7459) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.421393][ T5991] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.588404][ T5991] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 184.588436][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.588456][ T5991] usb 5-1: Product: syz [ 184.588471][ T5991] usb 5-1: Manufacturer: syz [ 184.588486][ T5991] usb 5-1: SerialNumber: syz [ 184.610552][ T5991] usb 5-1: config 0 descriptor?? [ 184.895678][ T5991] usb 5-1: USB disconnect, device number 8 [ 185.102205][ T7514] netlink: 51 bytes leftover after parsing attributes in process `syz.1.580'. [ 185.299398][ T7516] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.583'. [ 185.737986][ T5902] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 185.888049][ T5902] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 185.888087][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.933409][ T5902] usb 2-1: config 0 descriptor?? [ 186.111533][ T5991] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 186.276354][ T5991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.276388][ T5991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.276429][ T5991] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 186.276454][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.320307][ T5991] usb 1-1: config 0 descriptor?? [ 186.821800][ T5991] cm6533_jd 0003:0D8C:0022.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 187.181862][ T5902] usb 2-1: Cannot set autoneg [ 187.182126][ T5902] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 187.187483][ T5902] usb 2-1: USB disconnect, device number 7 [ 187.279067][ T5991] kernel write not supported for file bpf-prog (pid: 5991 comm: kworker/0:6) [ 187.614776][ T5902] usb 1-1: USB disconnect, device number 7 [ 189.227876][ T7582] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 189.483684][ T7582] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.559685][ T7585] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 191.065547][ T7611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.276819][ T7619] batadv_slave_1: entered promiscuous mode [ 191.277903][ T7617] batadv_slave_1: left promiscuous mode [ 191.870576][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 191.870594][ T37] audit: type=1326 audit(1756056703.679:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7637 comm="syz.4.631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a0bbbebe9 code=0x0 [ 191.916763][ T7646] input: syz1 as /devices/virtual/input/input8 [ 191.975735][ T7649] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 194.101952][ T7672] capability: warning: `syz.2.645' uses 32-bit capabilities (legacy support in use) [ 195.315979][ T7714] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.660'. [ 195.471434][ T1233] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 195.646399][ T1233] usb 1-1: config 0 has no interfaces? [ 195.646438][ T1233] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 195.646469][ T1233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.655362][ T1233] usb 1-1: config 0 descriptor?? [ 195.906460][ T5902] usb 1-1: USB disconnect, device number 8 [ 196.811435][ T5925] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 196.979215][ T7747] netlink: 'syz.3.673': attribute type 12 has an invalid length. [ 196.979238][ T7747] netlink: 'syz.3.673': attribute type 29 has an invalid length. [ 196.979252][ T7747] netlink: 148 bytes leftover after parsing attributes in process `syz.3.673'. [ 196.979282][ T7747] netlink: 51 bytes leftover after parsing attributes in process `syz.3.673'. [ 196.989476][ T5925] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 196.989533][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.989559][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.989584][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 196.989609][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 196.989652][ T5925] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.989674][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.113401][ T5925] usb 2-1: config 0 descriptor?? [ 197.114619][ T7730] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.211659][ T5902] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 197.381417][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 197.386290][ T5902] usb 1-1: config 0 has no interfaces? [ 197.386327][ T5902] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 197.386350][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.431335][ T5902] usb 1-1: config 0 descriptor?? [ 197.537798][ T5925] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 197.537839][ T5925] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 197.537867][ T5925] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 197.537894][ T5925] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 197.537920][ T5925] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 197.537947][ T5925] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 197.594986][ T5925] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 197.634282][ T7759] input: syz1 as /devices/virtual/input/input9 [ 197.686508][ T1242] usb 1-1: USB disconnect, device number 9 [ 197.827060][ T5991] usb 2-1: USB disconnect, device number 8 [ 199.700288][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.700362][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.051491][ T5925] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 200.196646][ T7818] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.706'. [ 200.199802][ T7820] overlayfs: failed to clone lowerpath [ 200.223054][ T5925] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 200.223088][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.223109][ T5925] usb 1-1: Product: syz [ 200.223124][ T5925] usb 1-1: Manufacturer: syz [ 200.223138][ T5925] usb 1-1: SerialNumber: syz [ 200.264880][ T5925] usb 1-1: config 0 descriptor?? [ 200.408671][ T7826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.504388][ T5925] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 201.597579][ T5925] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 201.600976][ T5925] usb 1-1: USB disconnect, device number 10 [ 201.658830][ T5925] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 202.124630][ T5925] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 202.437435][ T7880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.061418][ T5925] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.189826][ T7916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.221349][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 204.227628][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.227660][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.227696][ T5925] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 204.227718][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.287224][ T5925] usb 5-1: config 0 descriptor?? [ 204.765241][ T5925] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 204.771439][ T1233] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 204.921330][ T1233] usb 1-1: Using ep0 maxpacket: 16 [ 204.924061][ T1233] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 204.924086][ T1233] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.924105][ T1233] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.928923][ T1233] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.928953][ T1233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.928973][ T1233] usb 1-1: Product: syz [ 204.928988][ T1233] usb 1-1: Manufacturer: syz [ 204.929003][ T1233] usb 1-1: SerialNumber: syz [ 204.972017][ T5925] usb 5-1: USB disconnect, device number 9 [ 205.136886][ T7928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.748'. [ 205.421932][ T1233] usb 1-1: 0:2 : does not exist [ 206.269324][ T1233] usb 1-1: USB disconnect, device number 11 [ 206.907351][ T3575] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xa8 [ 207.176907][ T7980] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 208.302082][ T5924] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 208.459344][ T5924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.459433][ T5924] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 208.501251][ T5924] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.501282][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.501302][ T5924] usb 4-1: Product: syz [ 208.501316][ T5924] usb 4-1: Manufacturer: syz [ 208.501330][ T5924] usb 4-1: SerialNumber: syz [ 209.551126][ T5902] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 209.588305][ T5924] cdc_ncm 4-1:1.0: bind() failure [ 209.612604][ T5902] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 209.634178][ T5924] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 209.634227][ T5924] cdc_ncm 4-1:1.1: bind() failure [ 209.799143][ T1233] usb 4-1: USB disconnect, device number 7 [ 211.195787][ T8070] loop6: detected capacity change from 0 to 7 [ 211.223605][ T8070] Dev loop6: unable to read RDB block 7 [ 211.223643][ T8070] loop6: AHDI p3 p4 [ 211.223690][ T8070] loop6: partition table partially beyond EOD, truncated [ 211.223879][ T8070] loop6: p3 start 1886353253 is beyond EOD, truncated [ 211.934026][ T8085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.585808][ T8138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.331410][ T1242] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 214.514195][ T1242] usb 4-1: config 0 has no interfaces? [ 214.514238][ T1242] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 214.514264][ T1242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.520091][ T1242] usb 4-1: config 0 descriptor?? [ 214.741028][ T1233] usb 4-1: USB disconnect, device number 8 [ 216.915127][ T8205] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 216.923810][ T8205] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.927408][ T8205] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.130910][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 217.130958][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 217.130988][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 217.131016][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 219.325242][ T8251] kvm: MONITOR instruction emulated as NOP! [ 219.359316][ T8256] netlink: 165 bytes leftover after parsing attributes in process `syz.0.883'. [ 221.931122][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'. [ 222.069750][ T8301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.156748][ T37] audit: type=1326 audit(1756056734.966:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8298 comm="syz.0.898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f871f45ebe9 code=0x0 [ 222.214740][ T8301] bond2: (slave batadv1): Opening slave failed [ 223.031428][ T5925] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 223.184447][ T5925] usb 2-1: config index 0 descriptor too short (expected 30768, got 18) [ 223.184477][ T5925] usb 2-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 223.184497][ T5925] usb 2-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 223.184524][ T5925] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 223.184563][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 223.184586][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.469810][ T5925] usb 2-1: string descriptor 0 read error: -22 [ 223.680723][ T5925] usb 2-1: USB disconnect, device number 9 [ 223.711468][ T5991] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 223.877558][ T5991] usb 5-1: Using ep0 maxpacket: 8 [ 223.901407][ T5991] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 223.901438][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.962527][ T8326] Invalid source name [ 223.962545][ T8326] UBIFS error (pid: 8326): cannot open "./file0", error -22 [ 223.972139][ T5991] pvrusb2: Hardware description: Terratec Grabster AV400 [ 223.972164][ T5991] pvrusb2: ********** [ 223.972170][ T5991] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 223.972185][ T5991] pvrusb2: Important functionality might not be entirely working. [ 223.972213][ T5991] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 223.972228][ T5991] pvrusb2: ********** [ 224.122151][ T8328] netlink: 'syz.0.906': attribute type 12 has an invalid length. [ 224.122174][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 224.215831][ T2372] pvrusb2: Invalid write control endpoint [ 224.219951][ T8328] netlink: 'syz.0.906': attribute type 12 has an invalid length. [ 224.219974][ T8328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.906'. [ 224.230757][ T68] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.236653][ T68] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.238766][ T68] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.238808][ T68] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.484407][ T8320] pvrusb2: Invalid write control endpoint [ 224.488988][ T1242] usb 5-1: USB disconnect, device number 10 [ 224.496673][ T2372] pvrusb2: Invalid write control endpoint [ 224.496690][ T2372] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 224.496700][ T2372] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 224.496708][ T2372] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 224.496717][ T2372] pvrusb2: Device being rendered inoperable [ 224.501424][ T2372] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 224.503722][ T2372] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 224.543369][ T2372] pvrusb2: Attached sub-driver cx25840 [ 224.543397][ T2372] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 224.543409][ T2372] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 224.975291][ T37] audit: type=1326 audit(1756056737.786:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8336 comm="syz.1.910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ac932ebe9 code=0x0 [ 225.070330][ T8339] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 225.732885][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'. [ 225.858876][ T8363] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 225.977927][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 226.123044][ T8378] netlink: 68 bytes leftover after parsing attributes in process `syz.3.923'. [ 228.790498][ T8423] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 228.791361][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.793561][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.094648][ T8456] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 230.096042][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.099829][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.091242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 231.207301][ T8492] netlink: 5 bytes leftover after parsing attributes in process `syz.2.973'. [ 231.212508][ T8492] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 231.272898][ T8492] 0ªî{X¹¦: entered allmulticast mode [ 231.273473][ T8492] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 232.011450][ T1242] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 232.179554][ T1242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.179588][ T1242] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.179633][ T1242] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 232.179655][ T1242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.186200][ T1242] usb 5-1: config 0 descriptor?? [ 232.686585][ T1242] cm6533_jd 0003:0D8C:0022.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 233.441905][ T1233] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 233.479969][ T5925] usb 5-1: USB disconnect, device number 11 [ 233.591606][ T1233] usb 2-1: Using ep0 maxpacket: 32 [ 233.594831][ T1233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.594882][ T1233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.594920][ T1233] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 233.594943][ T1233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.612795][ T1233] usb 2-1: config 0 descriptor?? [ 233.628938][ T1233] hub 2-1:0.0: USB hub found [ 233.838537][ T1233] hub 2-1:0.0: 1 port detected [ 234.484615][ T1242] hub 2-1:0.0: activate --> -90 [ 234.619850][ T8566] syz_tun: entered promiscuous mode [ 234.635531][ T8566] batadv_slave_0: entered promiscuous mode [ 234.648674][ T8566] batadv_slave_0: left promiscuous mode [ 234.674338][ T8566] syz_tun: left promiscuous mode [ 234.689414][ T1233] usb 2-1: USB disconnect, device number 10 [ 234.689541][ T1242] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 235.068133][ T8576] pim6reg1: entered promiscuous mode [ 235.068166][ T8576] pim6reg1: entered allmulticast mode [ 235.731352][ T1233] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 235.895435][ T1233] usb 5-1: Using ep0 maxpacket: 16 [ 235.897984][ T1233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.898016][ T1233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.898039][ T1233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 235.898081][ T1233] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 235.898103][ T1233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.914074][ T1233] usb 5-1: config 0 descriptor?? [ 236.363497][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.364050][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.382866][ T1233] HID 045e:07da: Invalid code 65791 type 1 [ 236.405008][ T1233] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000C/input/input10 [ 236.461560][ T1233] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 236.636656][ T5924] usb 5-1: USB disconnect, device number 12 [ 237.052877][ T8629] netlink: 'syz.2.1027': attribute type 29 has an invalid length. [ 237.053303][ T8631] netlink: 'syz.2.1027': attribute type 29 has an invalid length. [ 237.492644][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1032'. [ 237.492928][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1032'. [ 237.847019][ T1242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.850993][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.185032][ T8665] bridge0: entered allmulticast mode [ 238.215527][ T8665] pim6reg: entered allmulticast mode [ 238.231342][ T8665] pim6reg: left allmulticast mode [ 238.231641][ T8665] bridge0: left allmulticast mode [ 238.294339][ T8668] GUP no longer grows the stack in syz.4.1043 (8668): 200000004000-200000008000 (200000002000) [ 238.294392][ T8668] CPU: 1 UID: 0 PID: 8668 Comm: syz.4.1043 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 238.294414][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.294429][ T8668] Call Trace: [ 238.294437][ T8668] [ 238.294445][ T8668] dump_stack_lvl+0x189/0x250 [ 238.294483][ T8668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.294518][ T8668] ? __pfx__printk+0x10/0x10 [ 238.294539][ T8668] ? find_vma+0xe7/0x160 [ 238.294585][ T8668] __get_user_pages+0x237e/0x2b60 [ 238.294660][ T8668] get_user_pages_remote+0x2f1/0xad0 [ 238.294691][ T8668] ? __pfx_mtree_load+0x10/0x10 [ 238.294729][ T8668] ? __pfx_get_user_pages_remote+0x10/0x10 [ 238.294764][ T8668] ? __access_remote_vm+0x367/0x7d0 [ 238.294805][ T8668] __access_remote_vm+0x211/0x7d0 [ 238.294863][ T8668] ? __pfx___access_remote_vm+0x10/0x10 [ 238.294895][ T8668] ? set_page_refcounted+0xa0/0x1e0 [ 238.294926][ T8668] ? alloc_pages_noprof+0xe4/0x1e0 [ 238.294962][ T8668] proc_pid_cmdline_read+0x433/0x810 [ 238.294992][ T8668] ? __asan_memset+0x22/0x50 [ 238.295023][ T8668] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 238.295059][ T8668] ? rw_verify_area+0x2ac/0x4e0 [ 238.295088][ T8668] vfs_readv+0x5b3/0x850 [ 238.295122][ T8668] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 238.295158][ T8668] ? __pfx_vfs_readv+0x10/0x10 [ 238.295209][ T8668] ? __fget_files+0x2a/0x420 [ 238.295250][ T8668] ? __fget_files+0x3a6/0x420 [ 238.295275][ T8668] ? __fget_files+0x2a/0x420 [ 238.295310][ T8668] __x64_sys_preadv+0x19a/0x2a0 [ 238.295339][ T8668] ? __pfx___x64_sys_preadv+0x10/0x10 [ 238.295361][ T8668] ? rcu_is_watching+0x15/0xb0 [ 238.295394][ T8668] ? do_syscall_64+0xbe/0x3b0 [ 238.295436][ T8668] do_syscall_64+0xfa/0x3b0 [ 238.295462][ T8668] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.295488][ T8668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.295508][ T8668] ? clear_bhb_loop+0x60/0xb0 [ 238.295532][ T8668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.295550][ T8668] RIP: 0033:0x7f5a0bbbebe9 [ 238.295568][ T8668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.295583][ T8668] RSP: 002b:00007f5a09e1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 238.295604][ T8668] RAX: ffffffffffffffda RBX: 00007f5a0bde5fa0 RCX: 00007f5a0bbbebe9 [ 238.295618][ T8668] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003 [ 238.295630][ T8668] RBP: 00007f5a0bc41e19 R08: 0000000000000200 R09: 0000000000000000 [ 238.295642][ T8668] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 238.295653][ T8668] R13: 00007f5a0bde6038 R14: 00007f5a0bde5fa0 R15: 00007fff56143218 [ 238.295685][ T8668] [ 238.722001][ T1233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.882444][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.534147][ T8693] vxcan1: entered allmulticast mode [ 239.591344][ T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 239.750970][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.751004][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.751027][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.751072][ T44] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 239.751096][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.815537][ T44] usb 1-1: config 0 descriptor?? [ 239.921694][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.287895][ T44] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 240.647792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.704291][ T1233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.705846][ T5991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.961523][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.615162][ T8742] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1073'. [ 241.796775][ T8749] netlink: 'syz.1.1075': attribute type 29 has an invalid length. [ 241.854324][ T8749] netlink: 'syz.1.1075': attribute type 29 has an invalid length. [ 241.855739][ T8749] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1075'. [ 242.231349][ T1233] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 242.420032][ T1242] usb 1-1: USB disconnect, device number 12 [ 242.571337][ T1233] usb 4-1: device not accepting address 9, error -71 [ 242.749232][ T8769] input: syz0 as /devices/virtual/input/input11 [ 242.842871][ T8771] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1084'. [ 242.929582][ T8772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.762211][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.763435][ T1233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.767696][ T1242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.329676][ T8816] netlink: 'syz.1.1105': attribute type 4 has an invalid length. [ 244.329699][ T8816] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.1105'. [ 244.636139][ T8825] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1109'. [ 245.390528][ T1242] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 245.413096][ T1242] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 245.665672][ T8863] loop2: detected capacity change from 0 to 7 [ 245.681846][ T8863] Dev loop2: unable to read RDB block 7 [ 245.681886][ T8863] loop2: AHDI p1 p2 p3 [ 245.681920][ T8863] loop2: partition table partially beyond EOD, truncated [ 245.682045][ T8863] loop2: p1 start 1601398130 is beyond EOD, truncated [ 245.682063][ T8863] loop2: p2 start 1702059890 is beyond EOD, truncated [ 246.250037][ T8882] veth1_to_bond: entered allmulticast mode [ 246.250168][ T8882] veth1_to_bond: entered promiscuous mode [ 246.288869][ T8881] veth1_to_bond: left promiscuous mode [ 246.289084][ T8881] veth1_to_bond: left allmulticast mode [ 246.809173][ T1242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.951521][ T8902] input: syz1 as /devices/virtual/input/input12 [ 247.206777][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 247.282132][ T8909] netlink: 'syz.0.1146': attribute type 12 has an invalid length. [ 247.282157][ T8909] netlink: 'syz.0.1146': attribute type 29 has an invalid length. [ 247.282170][ T8909] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1146'. [ 247.282198][ T8909] netlink: 'syz.0.1146': attribute type 3 has an invalid length. [ 247.282211][ T8909] netlink: 'syz.0.1146': attribute type 2 has an invalid length. [ 247.282222][ T8909] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1146'. [ 247.785932][ T8920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.323245][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.332713][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.478032][ T8947] netlink: 'syz.0.1161': attribute type 1 has an invalid length. [ 248.537794][ T8947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.649586][ T8951] bond1: (slave geneve2): making interface the new active one [ 248.674047][ T8951] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 248.689732][ T37] audit: type=1326 audit(1756056761.496:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0bbbebe9 code=0x7ffc0000 [ 248.690166][ T37] audit: type=1326 audit(1756056761.496:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a0bbbebe9 code=0x7ffc0000 [ 248.690571][ T37] audit: type=1326 audit(1756056761.496:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0bbbebe9 code=0x7ffc0000 [ 248.699042][ T37] audit: type=1326 audit(1756056761.506:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f5a0bbbebe9 code=0x7ffc0000 [ 248.736906][ T37] audit: type=1326 audit(1756056761.506:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0bbbebe9 code=0x7ffc0000 [ 248.736968][ T37] audit: type=1326 audit(1756056761.516:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0bbbebe9 code=0x7ffc0000 [ 248.737009][ T37] audit: type=1326 audit(1756056761.516:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f5a0bbbebe9 code=0x7ffc0000 [ 248.737051][ T37] audit: type=1326 audit(1756056761.516:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0bbbebe9 code=0x7ffc0000 [ 248.741333][ T1242] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 248.746109][ T37] audit: type=1326 audit(1756056761.546:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8953 comm="syz.4.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0bbbebe9 code=0x7ffc0000 [ 248.931564][ T1242] usb 4-1: Using ep0 maxpacket: 32 [ 248.942780][ T1242] usb 4-1: config 0 interface 0 has no altsetting 0 [ 248.942823][ T1242] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 248.942846][ T1242] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.975490][ T1242] usb 4-1: config 0 descriptor?? [ 249.410296][ T1242] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 249.410334][ T1242] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 249.410361][ T1242] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 249.410387][ T1242] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 249.410414][ T1242] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 249.421526][ T5925] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 249.466719][ T1242] corsair-cpro 0003:1B1C:0C10.000F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 249.590502][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 249.590537][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 249.590596][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 249.590619][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.617147][ T5925] usb 2-1: config 0 descriptor?? [ 249.621064][ T8965] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 249.655473][ T1242] corsair-cpro 0003:1B1C:0C10.000F: probe with driver corsair-cpro failed with error -71 [ 249.697604][ T1242] usb 4-1: USB disconnect, device number 11 [ 249.767347][ T8977] Invalid ELF header magic: != ELF [ 249.780356][ T8977] Invalid ELF header magic: != ELF [ 249.842218][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.155446][ T5925] logitech 0003:046D:C298.0010: unknown main item tag 0x4 [ 250.155482][ T5925] logitech 0003:046D:C298.0010: unknown main item tag 0x0 [ 250.155509][ T5925] logitech 0003:046D:C298.0010: unknown main item tag 0x0 [ 250.155534][ T5925] logitech 0003:046D:C298.0010: unbalanced collection at end of report description [ 250.180478][ T5925] logitech 0003:046D:C298.0010: parse failed [ 250.180606][ T5925] logitech 0003:046D:C298.0010: probe with driver logitech failed with error -22 [ 250.252854][ T1242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.365196][ T5909] usb 2-1: USB disconnect, device number 11 [ 250.926178][ T5924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.978981][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 251.980656][ T9026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 252.711431][ T5909] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 252.864384][ T5909] usb 2-1: config 0 has no interfaces? [ 252.864424][ T5909] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 252.864448][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.902197][ T5909] usb 2-1: config 0 descriptor?? [ 253.205533][ T1233] usb 2-1: USB disconnect, device number 12 [ 253.591415][ T5925] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 253.756475][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 253.759961][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.759995][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.760039][ T5925] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 253.760063][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.780510][ T5925] usb 4-1: config 0 descriptor?? [ 253.818780][ T9064] netlink: 'syz.2.1213': attribute type 22 has an invalid length. [ 253.818867][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 253.870930][ T9064] netlink: 'syz.2.1213': attribute type 22 has an invalid length. [ 253.870954][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1213'. [ 253.872341][ T43] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.899299][ T43] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.899360][ T43] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.899449][ T43] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.961420][ T1233] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 254.014479][ T1242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.095782][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.111405][ T1233] usb 1-1: Using ep0 maxpacket: 32 [ 254.113980][ T1233] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 254.114010][ T1233] usb 1-1: config 0 has no interface number 0 [ 254.114107][ T1233] usb 1-1: config 0 interface 184 has no altsetting 0 [ 254.117476][ T1233] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 254.117524][ T1233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.117545][ T1233] usb 1-1: Product: syz [ 254.117560][ T1233] usb 1-1: Manufacturer: syz [ 254.117575][ T1233] usb 1-1: SerialNumber: syz [ 254.186561][ T1233] usb 1-1: config 0 descriptor?? [ 254.215361][ T1233] smsc75xx v1.0.0 [ 254.299917][ T5925] HID 045e:07da: Invalid code 65791 type 1 [ 254.357520][ T5925] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0011/input/input13 [ 254.393756][ T5925] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 255.104844][ T5925] usb 4-1: USB disconnect, device number 12 [ 255.526542][ T1233] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 255.526576][ T1233] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 255.527422][ T1233] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 255.527461][ T1233] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 255.527480][ T1233] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 255.527502][ T1233] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 255.527812][ T1233] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 255.611421][ T44] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 255.622285][ T1233] usb 1-1: USB disconnect, device number 13 [ 255.764856][ T44] usb 5-1: config 0 has no interfaces? [ 255.764907][ T44] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 255.764931][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.801325][ T44] usb 5-1: config 0 descriptor?? [ 256.006570][ T1242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.050372][ T1233] usb 5-1: USB disconnect, device number 13 [ 256.278617][ T9109] Invalid ELF header magic: != ELF [ 256.292105][ T9109] Invalid ELF header magic: != ELF [ 256.956782][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.957035][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.957178][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.957339][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.957478][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.957610][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.957754][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.957890][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.958037][ T9121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.094353][ T9126] syzkaller1: entered promiscuous mode [ 257.094384][ T9126] syzkaller1: entered allmulticast mode [ 257.711549][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.371361][ T1242] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 258.521412][ T1242] usb 4-1: Using ep0 maxpacket: 16 [ 258.524220][ T1242] usb 4-1: config 5 has an invalid interface number: 168 but max is 0 [ 258.524248][ T1242] usb 4-1: config 5 has no interface number 0 [ 258.524296][ T1242] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 258.524324][ T1242] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 258.524350][ T1242] usb 4-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 258.524375][ T1242] usb 4-1: config 5 interface 168 has no altsetting 0 [ 258.527823][ T1242] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 258.527851][ T1242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.527870][ T1242] usb 4-1: Product: syz [ 258.527884][ T1242] usb 4-1: Manufacturer: syz [ 258.527898][ T1242] usb 4-1: SerialNumber: syz [ 258.568537][ T9157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 258.568907][ T9157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 258.719583][ T9173] support for the xor transformation has been removed. [ 258.864945][ C0] usb 4-1: NFC: Urb failure (status -71) [ 258.894571][ C0] usb 4-1: NFC: Urb failure (status -71) [ 258.911604][ T1242] usb 4-1: NFC: Unable to get FW version [ 258.947583][ T1242] pn533_usb 4-1:5.168: probe with driver pn533_usb failed with error -71 [ 259.008791][ T1242] usb 4-1: USB disconnect, device number 13 [ 259.772314][ T37] audit: type=1326 audit(1756056772.586:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9208 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871f45ebe9 code=0x7ffc0000 [ 259.773376][ T37] audit: type=1326 audit(1756056772.586:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9208 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f871f45ebe9 code=0x7ffc0000 [ 259.783756][ T37] audit: type=1326 audit(1756056772.586:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9208 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871f45ebe9 code=0x7ffc0000 [ 259.783819][ T37] audit: type=1326 audit(1756056772.596:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9208 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871f45ebe9 code=0x7ffc0000 [ 259.788091][ T37] audit: type=1326 audit(1756056772.596:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9208 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f871f45ebe9 code=0x7ffc0000 [ 259.800922][ T37] audit: type=1326 audit(1756056772.606:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9208 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871f45ebe9 code=0x7ffc0000 [ 260.761478][ T1242] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 260.935978][ T1242] usb 1-1: config 0 has no interfaces? [ 260.936015][ T1242] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 260.936038][ T1242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.979345][ T1242] usb 1-1: config 0 descriptor?? [ 261.135434][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.135527][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.220657][ T44] usb 1-1: USB disconnect, device number 14 [ 261.394232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 261.443946][ T9247] net_ratelimit: 219 callbacks suppressed [ 261.443962][ T9247] IPv6: addrconf: prefix option has invalid lifetime [ 262.141427][ T44] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 262.262631][ T9266] Invalid ELF header magic: != ELF [ 262.301517][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 262.307836][ T44] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 262.307908][ T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.307932][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.307957][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.307982][ T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.308026][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 262.308049][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.591333][ T44] usb 2-1: usb_control_msg returned -32 [ 262.591384][ T44] usbtmc 2-1:16.0: can't read capabilities [ 263.126022][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.883492][ T1242] usb 2-1: USB disconnect, device number 13 [ 264.961775][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.002224][ T9343] hsr0: entered allmulticast mode [ 265.002246][ T9343] hsr_slave_0: entered allmulticast mode [ 265.002271][ T9343] hsr_slave_1: entered allmulticast mode [ 265.052877][ T9343] hsr_slave_0: left promiscuous mode [ 265.078901][ T9343] hsr_slave_1: left promiscuous mode [ 265.278856][ T9343] hsr0 (unregistering): left allmulticast mode [ 265.604015][ T1120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.642549][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.780088][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1336'. [ 265.996834][ T9363] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1337'. [ 266.091315][ T5925] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 266.109626][ T9367] gtp0: entered promiscuous mode [ 266.157692][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1338'. [ 266.242017][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.274638][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 266.279490][ T5925] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 266.279519][ T5925] usb 2-1: config 0 has no interface number 0 [ 266.298271][ T5925] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 266.298307][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.298329][ T5925] usb 2-1: Product: syz [ 266.298347][ T5925] usb 2-1: Manufacturer: syz [ 266.298362][ T5925] usb 2-1: SerialNumber: syz [ 266.325578][ T5925] usb 2-1: config 0 descriptor?? [ 266.359344][ T5925] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 267.639914][ T9391] netlink: 'syz.2.1349': attribute type 1 has an invalid length. [ 267.765141][ T5925] gspca_topro: reg_r err -71 [ 267.765194][ T5925] gspca_topro: Sensor soi763a [ 267.785096][ T5925] usb 2-1: USB disconnect, device number 14 [ 267.869684][ T9391] bond3: entered promiscuous mode [ 267.870230][ T9391] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.989894][ T9394] bond3: (slave bridge2): making interface the new active one [ 267.989946][ T9394] bridge2: entered promiscuous mode [ 267.994559][ T9394] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 268.012902][ T1233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.521445][ T44] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 269.681342][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 269.700947][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 269.714227][ T44] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 269.714255][ T44] usb 5-1: config 8 has no interface number 0 [ 269.714290][ T44] usb 5-1: config 8 interface 255 has no altsetting 0 [ 269.718836][ T44] usb 5-1: string descriptor 0 read error: -22 [ 269.718976][ T44] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 269.718998][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.017691][ T44] catc 5-1:8.255: Can't set altsetting 1. [ 270.017768][ T44] catc 5-1:8.255: probe with driver catc failed with error -5 [ 270.048412][ T44] usb 5-1: USB disconnect, device number 14 [ 270.521408][ T9452] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 270.569248][ T9452] overlayfs: failed lookup in lower (/, name='bus', err=-66): unsupported object type [ 271.041763][ T1242] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.193776][ T9476] binder: 9475:9476 ioctl c0306201 200000000640 returned -22 [ 271.362043][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.367132][ T68] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.370164][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.431438][ T5909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.460485][ T9483] sg_read: process 607 (syz.1.1379) changed security contexts after opening file descriptor, this is not allowed. [ 273.441170][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1397'. [ 273.442822][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1397'. [ 273.450091][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1398'. [ 275.092911][ T37] audit: type=1326 audit(1756056787.906:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9561 comm="syz.4.1413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a0bbbebe9 code=0x0 [ 275.226059][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 275.274873][ T9567] vxlan0: entered promiscuous mode [ 275.309516][ T68] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.338928][ T68] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.338983][ T68] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.339020][ T68] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.439993][ T9571] loop2: detected capacity change from 0 to 7 [ 275.451410][ T9571] Dev loop2: unable to read RDB block 7 [ 275.451450][ T9571] loop2: AHDI p2 [ 275.451486][ T9571] loop2: partition table partially beyond EOD, truncated [ 276.061413][ T9576] ALSA: seq fatal error: cannot create timer (-16) [ 277.716966][ T44] kernel write not supported for file bpf-prog (pid: 44 comm: kworker/1:1) [ 278.141637][ T44] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 278.331397][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 278.337995][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.338029][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.338069][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 278.338092][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.391821][ T44] usb 5-1: config 0 descriptor?? [ 278.397340][ T44] hub 5-1:0.0: USB hub found [ 278.640813][ T44] hub 5-1:0.0: 1 port detected [ 279.262032][ T44] hub 5-1:0.0: activate --> -90 [ 279.467333][ T44] usb 5-1-port1: config error [ 279.690294][ T5902] usb 5-1: USB disconnect, device number 15 [ 279.697785][ T44] usb 5-1-port1: attempt power cycle [ 279.709354][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 279.709375][ T9676] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1458'. [ 279.709767][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 280.584009][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.704575][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 282.778474][ T9752] netlink: 13740 bytes leftover after parsing attributes in process `syz.2.1483'. [ 283.681789][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 283.863809][ T9770] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 283.865043][ T9770] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 283.966305][ T9770] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 283.992775][ T9770] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 284.104970][ T9770] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 284.105680][ T9770] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 284.148859][ T9782] binder: 9781:9782 ioctl c0306201 200000000040 returned -14 [ 284.149419][ T9782] binder: 9781:9782 ioctl 40044591 0 returned -22 [ 284.261308][ T9770] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 284.261428][ T9770] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 284.345384][ T9770] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 284.345527][ T9770] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 284.886768][ T9804] tipc: Failed to remove unknown binding: 66,1,1/0:3581260797/3581260799 [ 284.886817][ T9804] tipc: Failed to remove unknown binding: 66,1,1/0:3581260797/3581260799 [ 285.786833][ T9833] bridge_slave_0: left allmulticast mode [ 285.786869][ T9833] bridge_slave_0: left promiscuous mode [ 285.787177][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.884026][ T9837] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1516'. [ 285.889944][ T9837] unsupported nlmsg_type 40 [ 285.910831][ T9833] bridge_slave_1: left allmulticast mode [ 285.910866][ T9833] bridge_slave_1: left promiscuous mode [ 285.911291][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.921452][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 286.001383][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 286.062548][ T9833] bond0: (slave bond_slave_0): Releasing backup interface [ 286.132350][ T9833] bond0: (slave bond_slave_1): Releasing backup interface [ 286.164281][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 286.246152][ T9833] team0: Port device team_slave_0 removed [ 286.297878][ T9833] team0: Port device team_slave_1 removed [ 286.299917][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.299949][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.321865][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 286.360717][ T9833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.360905][ T9833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.402015][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 286.910053][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 286.943104][ T9082] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.943282][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 286.943402][ T9082] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.944217][ T9082] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.944263][ T9082] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.596041][ T37] audit: type=1326 audit(1756056800.406:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9854 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x7fc00000 [ 288.001479][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 288.081353][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 288.241385][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 288.401504][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 288.486623][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 289.015089][ T9923] netlink: 'syz.2.1559': attribute type 1 has an invalid length. [ 289.092991][ T9923] 8021q: adding VLAN 0 to HW filter on device bond4 [ 289.761856][ T5902] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 289.914004][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.914038][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.914079][ T5902] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 289.914102][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.920293][ T5902] usb 4-1: config 0 descriptor?? [ 290.551494][ T5909] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 290.704985][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1561'. [ 290.724265][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.724303][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.724348][ T5909] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 290.724373][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.756848][ T5909] usb 1-1: config 0 descriptor?? [ 290.961585][ T9959] fuse: root generation should be zero [ 291.070555][ T5902] uclogic 0003:256C:006D.0012: interface is invalid, ignoring [ 291.231727][ T5909] hid-led 0003:1294:1320.0013: hidraw0: USB HID vff.fe Device [HID 1294:1320] on usb-dummy_hcd.0-1/input0 [ 291.263090][ T5909] hid-led 0003:1294:1320.0013: Riso Kagaku Webmail Notifier initialized [ 291.291750][ T5902] usb 4-1: USB disconnect, device number 14 [ 291.395754][ T5909] usb 1-1: USB disconnect, device number 15 [ 291.429973][ T3575] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 291.441517][ T3575] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 291.445388][ T3575] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 292.117168][ T9983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1571'. [ 292.117325][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 292.256587][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 292.257116][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 292.459254][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'. [ 292.459291][ T9999] netlink: 'syz.1.1576': attribute type 18 has an invalid length. [ 292.527244][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'. [ 292.527326][ T9999] netlink: 'syz.1.1576': attribute type 18 has an invalid length. [ 292.652089][ T37] audit: type=1326 audit(1756056805.456:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10002 comm="syz.2.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 292.658703][ T37] audit: type=1326 audit(1756056805.466:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10002 comm="syz.2.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 292.658762][ T37] audit: type=1326 audit(1756056805.466:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10002 comm="syz.2.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 293.097977][T10024] netlink: 'syz.2.1589': attribute type 1 has an invalid length. [ 293.097999][T10024] netlink: 'syz.2.1589': attribute type 4 has an invalid length. [ 293.098013][T10024] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1589'. [ 293.574511][T10034] syzkaller0: entered promiscuous mode [ 293.574556][T10034] syzkaller0: entered allmulticast mode [ 293.781679][ T5909] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 293.931396][ T5909] usb 1-1: Using ep0 maxpacket: 32 [ 293.949340][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 293.949379][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 293.949409][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 293.949436][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 293.949465][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 293.955515][ T5909] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 293.955560][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.955582][ T5909] usb 1-1: Product: syz [ 293.955600][ T5909] usb 1-1: Manufacturer: syz [ 293.955617][ T5909] usb 1-1: SerialNumber: syz [ 293.965896][ T5909] usb 1-1: config 0 descriptor?? [ 294.389412][ T5909] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 294.389471][ T5909] input input14: Device does not respond to id packet M [ 294.390460][ T5909] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 294.390555][ T5909] input input14: Device does not respond to id packet P [ 294.391407][ T5909] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 294.391447][ T5909] input input14: Device does not respond to id packet B [ 294.392611][ T5909] input input14: Limiting number of effects to 32 (device reports 109) [ 294.594176][ T5909] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 294.594669][ T5909] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 294.595146][ T5909] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 294.595623][ T5909] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 294.630640][ T5909] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 294.658699][T10049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1598'. [ 294.722128][ T5909] usb 1-1: USB disconnect, device number 16 [ 294.751710][ T5190] iforce 1-1:0.0: usb_submit_urb failed -19 [ 295.580348][ T37] audit: type=1326 audit(1756056808.386:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10062 comm="syz.0.1604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f871f45ebe9 code=0x0 [ 308.111780][T10049] netlink: 'syz.3.1598': attribute type 1 has an invalid length. [ 308.111807][T10049] netlink: 'syz.3.1598': attribute type 2 has an invalid length. [ 308.111822][T10049] netlink: 'syz.3.1598': attribute type 3 has an invalid length. [ 308.342685][ T37] audit: type=1326 audit(1756056821.146:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.2.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 308.343035][ T37] audit: type=1326 audit(1756056821.156:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.2.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 308.346322][ T37] audit: type=1326 audit(1756056821.156:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.2.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 308.409067][ T37] audit: type=1326 audit(1756056821.216:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.2.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 308.409966][ T37] audit: type=1326 audit(1756056821.216:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.2.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 308.410162][ T37] audit: type=1326 audit(1756056821.216:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.2.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x7ffc0000 [ 308.628060][ T5902] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 308.661614][ T5902] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 309.023113][T10117] loop2: detected capacity change from 0 to 7 [ 309.027531][T10117] loop2: [POWERTEC] p1 p2 p3 [ 309.070760][T10117] loop2: p2 start 4294967287 is beyond EOD, truncated [ 309.070787][T10117] loop2: p3 start 1932423285 is beyond EOD, truncated [ 309.425899][T10126] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 310.628519][ T37] audit: type=1326 audit(1756056823.436:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10118 comm="syz.2.1625" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9ebbdebe9 code=0x0 [ 312.059807][T10169] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 312.059987][T10169] vlan2: entered promiscuous mode [ 312.847804][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 312.851677][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 312.874254][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 312.897261][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 312.902267][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.201645][ T5902] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 313.353425][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 313.356320][ T5902] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 313.356349][ T5902] usb 1-1: config 0 has no interface number 0 [ 313.356403][ T5902] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 313.356429][ T5902] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 313.356453][ T5902] usb 1-1: config 0 interface 41 has no altsetting 0 [ 313.359815][ T5902] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 313.359845][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.359873][ T5902] usb 1-1: Product: syz [ 313.359888][ T5902] usb 1-1: Manufacturer: syz [ 313.359902][ T5902] usb 1-1: SerialNumber: syz [ 313.464774][ T5902] usb 1-1: config 0 descriptor?? [ 313.473868][T10186] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 313.474017][T10186] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 313.517671][T10182] chnl_net:caif_netlink_parms(): no params data found [ 313.705530][T10186] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 313.705913][T10186] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 314.258099][T10182] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.258243][T10182] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.258620][T10182] bridge_slave_0: entered allmulticast mode [ 314.264790][T10182] bridge_slave_0: entered promiscuous mode [ 314.283583][T10182] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.285652][T10182] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.285975][T10182] bridge_slave_1: entered allmulticast mode [ 314.298633][T10182] bridge_slave_1: entered promiscuous mode [ 314.318216][ T5902] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 314.677416][T10222] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 314.722415][ T5902] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 314.722472][ T5902] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 314.722766][ T5902] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 314.731430][T10182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.792053][ T5902] usb 1-1: USB disconnect, device number 17 [ 314.792452][T10182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.961657][ T5843] Bluetooth: hci4: command tx timeout [ 315.260098][T10182] team0: Port device team_slave_0 added [ 315.278458][T10182] team0: Port device team_slave_1 added [ 315.720284][T10182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.720304][T10182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.720337][T10182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.727783][T10182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.727804][T10182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.727839][T10182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.204310][T10253] netlink: 'syz.4.1679': attribute type 1 has an invalid length. [ 316.252352][T10257] netlink: 'syz.2.1680': attribute type 4 has an invalid length. [ 316.252375][T10257] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.1680'. [ 316.305584][T10259] netlink: 'syz.2.1680': attribute type 4 has an invalid length. [ 316.305608][T10259] netlink: 14345 bytes leftover after parsing attributes in process `syz.2.1680'. [ 317.041397][ T5843] Bluetooth: hci4: command tx timeout [ 318.325696][T10261] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3742998066 (479103752448 ns) > initial count (440160584064 ns). Using initial count to start timer. [ 319.087429][T10258] bond1: (slave veth3): Enslaving as an active interface with a down link [ 319.121435][ T5843] Bluetooth: hci4: command tx timeout [ 319.179526][T10182] hsr_slave_0: entered promiscuous mode [ 319.188148][T10182] hsr_slave_1: entered promiscuous mode [ 319.189255][T10182] debugfs: 'hsr0' already exists in 'hsr' [ 319.189282][T10182] Cannot create hsr debugfs directory [ 319.455019][T10273] ALSA: seq fatal error: cannot create timer (-16) [ 319.841489][ T5909] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 320.022855][ T5909] usb 4-1: unable to get BOS descriptor or descriptor too short [ 320.024702][ T5909] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.028125][ T5909] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.028153][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.028173][ T5909] usb 4-1: Product: syz [ 320.028187][ T5909] usb 4-1: Manufacturer: syz [ 320.028202][ T5909] usb 4-1: SerialNumber: syz [ 320.437276][ T5909] usb 4-1: USB disconnect, device number 15 [ 321.147819][T10182] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.201506][ T5843] Bluetooth: hci4: command tx timeout [ 321.229921][T10182] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.279306][T10182] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.394800][T10182] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 321.912401][T10182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.001942][T10182] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.030689][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.031398][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.071364][ T5909] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 322.080666][ T9082] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.080820][ T9082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.221398][ T5909] usb 5-1: Using ep0 maxpacket: 32 [ 322.223978][ T5909] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 322.224008][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.264981][ T5909] usb 5-1: config 0 descriptor?? [ 322.308177][ T5909] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 322.572183][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.572326][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.719005][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'. [ 322.971787][T10334] vxlan0: entered promiscuous mode [ 323.680274][T10182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.708128][ T5909] usb 5-1: USB disconnect, device number 20 [ 324.014999][T10354] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 324.488603][T10367] overlayfs: failed to clone upperpath [ 324.776274][ T37] audit: type=1326 audit(1756056837.549:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10373 comm="syz.2.1717" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9ebbdebe9 code=0x0 [ 324.936923][T10182] veth0_vlan: entered promiscuous mode [ 324.973520][T10182] veth1_vlan: entered promiscuous mode [ 325.021572][ T37] audit: type=1326 audit(1756056837.773:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0517f6ebe9 code=0x7ffc0000 [ 325.022015][ T37] audit: type=1326 audit(1756056837.773:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0517f6ebe9 code=0x7ffc0000 [ 325.022602][ T37] audit: type=1326 audit(1756056837.773:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0517f6ebe9 code=0x7ffc0000 [ 325.022881][ T37] audit: type=1326 audit(1756056837.773:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0517f6ebe9 code=0x7ffc0000 [ 325.023506][ T37] audit: type=1326 audit(1756056837.773:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0517f6ebe9 code=0x7ffc0000 [ 325.023862][ T37] audit: type=1326 audit(1756056837.773:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0517f6ebe9 code=0x7ffc0000 [ 325.024134][ T37] audit: type=1326 audit(1756056837.773:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0517f6ebe9 code=0x7ffc0000 [ 325.025153][ T37] audit: type=1326 audit(1756056837.773:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0517f6ebe9 code=0x7ffc0000 [ 325.028528][ T37] audit: type=1326 audit(1756056837.782:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10381 comm="syz.3.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0517f6ebe9 code=0x7ffc0000 [ 325.483431][T10182] veth0_macvtap: entered promiscuous mode [ 325.513208][T10182] veth1_macvtap: entered promiscuous mode [ 325.567419][T10182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.602714][T10182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.627170][ T3575] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.631825][ T1120] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.631875][ T1120] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.631913][ T1120] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.163415][ T3575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.163449][ T3575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.303984][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.304008][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.388293][ T5925] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 327.554902][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.554964][ T5925] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 327.554990][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.607450][ T5925] usb 1-1: config 0 descriptor?? [ 327.622504][ T5925] pwc: Askey VC010 type 2 USB webcam detected. [ 328.085110][ T5925] pwc: recv_control_msg error -32 req 02 val 2b00 [ 328.092624][ T5925] pwc: recv_control_msg error -32 req 02 val 2700 [ 328.113636][ T5925] pwc: recv_control_msg error -32 req 02 val 2c00 [ 328.117064][ T5925] pwc: recv_control_msg error -32 req 04 val 1000 [ 328.336070][ T5925] pwc: recv_control_msg error -71 req 04 val 1400 [ 328.336634][ T5925] pwc: recv_control_msg error -71 req 02 val 2000 [ 328.337170][ T5925] pwc: recv_control_msg error -71 req 02 val 2100 [ 328.337666][ T5925] pwc: recv_control_msg error -71 req 04 val 1500 [ 328.338184][ T5925] pwc: recv_control_msg error -71 req 02 val 2500 [ 328.338723][ T5925] pwc: recv_control_msg error -71 req 02 val 2400 [ 328.339482][ T5925] pwc: recv_control_msg error -71 req 02 val 2600 [ 328.393811][ T5925] pwc: recv_control_msg error -71 req 02 val 2900 [ 328.395453][ T5925] pwc: recv_control_msg error -71 req 02 val 2800 [ 328.396207][ T5925] pwc: recv_control_msg error -71 req 04 val 1100 [ 328.396704][ T5925] pwc: recv_control_msg error -71 req 04 val 1200 [ 328.399240][ T5925] pwc: Registered as video103. [ 328.402389][ T5925] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 328.455419][ T5925] usb 1-1: USB disconnect, device number 18 [ 328.735890][T10443] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.903678][T10449] netlink: 'syz.5.1746': attribute type 2 has an invalid length. [ 328.903704][T10449] netlink: 'syz.5.1746': attribute type 8 has an invalid length. [ 328.903718][T10449] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1746'. [ 333.335696][T10534] overlayfs: failed to decode file handle (len=7, type=251, flags=0, err=-61) [ 334.560789][T10566] loop3: detected capacity change from 0 to 1 [ 334.581739][T10566] Dev loop3: unable to read RDB block 1 [ 334.581796][T10566] loop3: unable to read partition table [ 334.582092][T10566] loop3: partition table beyond EOD, truncated [ 334.582112][T10566] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 334.619131][T10566] Dev loop3: unable to read RDB block 1 [ 334.619182][T10566] loop3: unable to read partition table [ 334.619656][T10566] loop3: partition table beyond EOD, truncated [ 336.892269][ T6045] IPVS: starting estimator thread 0... [ 337.002758][T10614] IPVS: using max 7 ests per chain, 16800 per kthread [ 337.713465][T10639] netlink: 'syz.4.1823': attribute type 4 has an invalid length. [ 338.319740][T10653] block nbd0: NBD_DISCONNECT [ 338.320596][T10653] block nbd0: Send disconnect failed -22 [ 338.326165][T10653] block nbd0: Disconnected due to user request. [ 338.326190][T10653] block nbd0: shutting down sockets [ 338.805946][ T1242] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 338.982878][ T1242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 338.982917][ T1242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.982958][ T1242] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 338.982991][ T1242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.991230][ T1242] usb 1-1: config 0 descriptor?? [ 339.163336][T10668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.469842][ T1242] savu 0003:1E7D:2D5A.0015: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 339.733574][ T6045] usb 1-1: USB disconnect, device number 19 [ 342.974745][T10730] netlink: set zone limit has 4 unknown bytes [ 343.011866][T10737] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.014198][T10737] bridge0: entered promiscuous mode [ 343.014234][T10737] bridge0: entered allmulticast mode [ 343.092170][T10739] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.092345][T10739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.550518][T10772] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1874'. [ 345.733409][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 345.863525][T10795] syz.4.1883 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 345.893930][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 345.896621][ T10] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 345.896656][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 345.896692][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 345.896716][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.921405][ T10] usb 4-1: config 0 descriptor?? [ 346.702120][ T5910] usb 4-1: USB disconnect, device number 16 [ 346.792635][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 346.962930][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 346.965454][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 346.968700][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 346.968730][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.968752][ T10] usb 1-1: Product: syz [ 346.968767][ T10] usb 1-1: Manufacturer: syz [ 346.968782][ T10] usb 1-1: SerialNumber: syz [ 346.989759][ T10] usb 1-1: config 0 descriptor?? [ 347.013792][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 347.016008][ T10] usb 1-1: Detected FT232R [ 347.077823][T10825] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1894'. [ 347.109317][T10825] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1894'. [ 347.260887][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 347.508696][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 347.725211][ T6045] usb 1-1: USB disconnect, device number 20 [ 347.883348][ T6045] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 347.884030][ T6045] ftdi_sio 1-1:0.0: device disconnected [ 348.549453][T10866] ceph: No mds server is up or the cluster is laggy [ 348.609287][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 348.645561][T10864] syz.4.1912 (10864) used obsolete PPPIOCDETACH ioctl [ 348.769575][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 348.772621][ T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 348.772651][ T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 75, changing to 10 [ 348.772680][ T10] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 25344, setting to 1024 [ 348.772710][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 348.776895][ T10] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 348.776934][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.776963][ T10] usb 6-1: Product: syz [ 348.776983][ T10] usb 6-1: Manufacturer: syz [ 348.777005][ T10] usb 6-1: SerialNumber: syz [ 348.941267][ T10] usb 6-1: config 0 descriptor?? [ 349.069785][T10875] netlink: 'syz.0.1916': attribute type 2 has an invalid length. [ 349.069810][T10875] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1916'. [ 349.069829][T10875] nbd: must specify at least one socket [ 349.140662][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.201579][ T10] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input16 [ 349.349386][T10878] netlink: 'syz.3.1918': attribute type 12 has an invalid length. [ 349.553712][ T5925] usb 6-1: USB disconnect, device number 2 [ 349.553863][ C0] synaptics_usb 6-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 351.402023][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 351.402042][ T37] audit: type=1326 audit(1756056863.448:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10928 comm="syz.4.1938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a0bbbebe9 code=0x0 [ 353.804827][ T5925] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 353.998541][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.998579][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.998620][ T5925] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 353.998644][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.094637][ T5925] usb 6-1: config 0 descriptor?? [ 355.014265][T10975] overlayfs: failed to clone upperpath [ 355.064316][ T5925] hid-led 0003:27B8:01ED.0017: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 355.111608][ T5925] hid-led 0003:27B8:01ED.0017: ThingM blink(1) initialized [ 355.242485][ T5910] usb 6-1: USB disconnect, device number 3 [ 355.770335][T10990] overlayfs: failed to clone upperpath [ 356.664457][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1970'. [ 358.745924][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1989'. [ 359.228549][T11077] overlayfs: failed to decode file handle (len=4, type=248, flags=0, err=-22) [ 360.107812][T11102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 360.341236][T11106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2006'. [ 360.541217][T11114] batadv_slave_1: entered promiscuous mode [ 360.542993][T11113] batadv_slave_1: left promiscuous mode [ 360.826249][T11119] loop6: detected capacity change from 0 to 7 [ 360.827536][T11119] Dev loop6: unable to read RDB block 7 [ 360.827567][T11119] loop6: AHDI p1 p2 p3 [ 360.827594][T11119] loop6: partition table partially beyond EOD, truncated [ 360.827694][T11119] loop6: p1 start 1405162169 is beyond EOD, truncated [ 360.827714][T11119] loop6: p2 size 46 extends beyond EOD, truncated [ 361.265916][T11131] loop6: detected capacity change from 0 to 1 [ 361.283853][T11131] Dev loop6: unable to read RDB block 1 [ 361.283913][T11131] loop6: unable to read partition table [ 361.289986][T11131] loop6: partition table beyond EOD, truncated [ 361.290015][T11131] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 361.352989][T11133] overlayfs: failed to clone upperpath [ 363.118382][ T37] audit: type=1326 audit(1756056874.411:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11161 comm="syz.4.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a0bbbebe9 code=0x7fc00000 [ 363.723523][ T37] audit: type=1326 audit(1756056874.972:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11161 comm="syz.4.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a0bb5ade9 code=0x7fc00000 [ 364.148084][T11180] syzkaller1: entered promiscuous mode [ 364.148118][T11180] syzkaller1: entered allmulticast mode [ 365.045517][T11201] vcan0: tx drop: invalid sa for name 0xbffffffffffffffd [ 365.394354][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 365.394662][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 365.615293][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2048'. [ 368.655844][T11274] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2070'. [ 368.910584][ T5925] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 369.092444][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 369.112066][ T5925] usb 4-1: config 1 has an invalid descriptor of length 254, skipping remainder of the config [ 369.112094][ T5925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.119163][ T5925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 369.119195][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.119215][ T5925] usb 4-1: Product: syz [ 369.119229][ T5925] usb 4-1: Manufacturer: syz [ 369.119245][ T5925] usb 4-1: SerialNumber: syz [ 369.767652][ T5925] usb 4-1: 0:2 : does not exist [ 370.217556][ T5925] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 370.291679][ T5925] usb 4-1: USB disconnect, device number 17 [ 370.931506][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 371.334828][ T9] usb 6-1: config 0 has no interfaces? [ 371.334872][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.334898][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.405342][ T9] usb 6-1: config 0 descriptor?? [ 371.792950][ T6045] usb 6-1: USB disconnect, device number 4 [ 372.550448][ T5925] hid-generic 0003:00FF:0101.0018: unknown main item tag 0x0 [ 372.550487][ T5925] hid-generic 0003:00FF:0101.0018: unknown main item tag 0x0 [ 372.550515][ T5925] hid-generic 0003:00FF:0101.0018: unknown main item tag 0x0 [ 372.550542][ T5925] hid-generic 0003:00FF:0101.0018: unknown main item tag 0x0 [ 372.550569][ T5925] hid-generic 0003:00FF:0101.0018: unknown main item tag 0x0 [ 372.550604][ T5925] hid-generic 0003:00FF:0101.0018: unknown main item tag 0x0 [ 372.550631][ T5925] hid-generic 0003:00FF:0101.0018: unknown main item tag 0x0 [ 372.550658][ T5925] hid-generic 0003:00FF:0101.0018: unknown main item tag 0x0 [ 372.550686][ T5925] hid-generic 0003:00FF:0101.0018: unknown main item tag 0x0 [ 372.550713][ T5925] hid-generic 0003:00FF:0101.0018: unknown main item tag 0x0 [ 372.625436][ T5925] hid-generic 0003:00FF:0101.0018: hidraw0: USB HID v0.04 Device [syz0] on syz0 [ 372.855499][ T6045] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 373.016460][ T6045] usb 5-1: Using ep0 maxpacket: 32 [ 373.019271][ T6045] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 373.019305][ T6045] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 373.019327][ T6045] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 373.019350][ T6045] usb 5-1: config 1 has no interface number 0 [ 373.019399][ T6045] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.019427][ T6045] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 373.019473][ T6045] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 373.019500][ T6045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.053023][ T6045] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 373.323661][ T6045] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 373.766833][ T6045] usb 5-1: USB disconnect, device number 21 [ 373.786570][ T6045] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 373.972174][T11352] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.718321][ T5925] kernel write not supported for file bpf-prog (pid: 5925 comm: kworker/1:6) [ 377.308901][T11412] Failed to get privilege flags for destination (handle=0x0:0x0) [ 377.644854][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 377.721995][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2125'. [ 377.807725][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.807755][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 377.807817][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 377.807841][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.813479][ T9] usb 1-1: config 0 descriptor?? [ 378.329654][ T9] kovaplus 0003:1E7D:2D50.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 379.474354][ T9] kovaplus 0003:1E7D:2D50.0019: couldn't init struct kovaplus_device [ 379.474416][ T9] kovaplus 0003:1E7D:2D50.0019: couldn't install mouse [ 379.479365][ T9] kovaplus 0003:1E7D:2D50.0019: probe with driver kovaplus failed with error -71 [ 379.528257][ T9] usb 1-1: USB disconnect, device number 21 [ 380.489773][T11459] kvm: user requested TSC rate below hardware speed [ 381.536255][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 381.698371][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 381.728393][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 381.728422][ T9] usb 4-1: config 0 has no interface number 0 [ 381.728483][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 381.757966][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 381.777022][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 381.777056][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 381.777079][ T9] usb 4-1: Product: syz [ 381.777094][ T9] usb 4-1: SerialNumber: syz [ 381.814314][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 381.817434][ T9] usb 4-1: config 0 descriptor?? [ 381.845513][ T9] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 381.855958][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input17 [ 381.976757][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 381.981192][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.981292][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.981316][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.981371][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.981393][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.054410][ T10] usb 5-1: config 0 descriptor?? [ 382.105910][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 382.111538][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 382.111666][ T5902] usb 4-1: USB disconnect, device number 18 [ 382.112091][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 382.112115][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 382.234629][ T5902] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 382.555506][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.001A/input/input18 [ 382.685581][ T10] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 382.774236][ T5902] usb 5-1: USB disconnect, device number 22 [ 383.537299][T11529] sch_tbf: burst 19872 is lower than device lo mtu (393234) ! [ 384.077712][ T37] audit: type=1804 audit(1756056893.970:68): pid=11546 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.2176" name="bus" dev="ramfs" ino=33111 res=1 errno=0 [ 385.072882][T11562] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 385.736610][ T1101] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 386.642404][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2190'. [ 388.002900][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2196'. [ 388.144689][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.144762][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.508457][T11611] netlink: 'syz.3.2198': attribute type 10 has an invalid length. [ 388.765532][T11611] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 388.854477][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2199'. [ 389.676876][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2207'. [ 389.741417][T11637] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2208'. [ 390.603825][ T5910] libceph: connect (1)[c::]:6789 error -1 [ 390.604068][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 390.604766][ T5910] libceph: connect (1)[c::]:6789 error -1 [ 390.605590][ T5910] libceph: mon0 (1)[c::]:6789 connect error [ 390.657743][T11662] ceph: No mds server is up or the cluster is laggy [ 391.158493][T11672] sctp: [Deprecated]: syz.2.2220 (pid 11672) Use of int in maxseg socket option. [ 391.158493][T11672] Use struct sctp_assoc_value instead [ 391.503849][ T5910] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 391.664704][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 391.664730][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 391.664750][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 391.664770][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 391.664804][ T5910] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 391.664821][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.740172][ T5910] usb 5-1: config 0 descriptor?? [ 391.741151][T11677] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 392.197774][ T5910] plantronics 0003:047F:FFFF.001B: reserved main item tag 0xd [ 392.247974][ T5910] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 392.377378][T11692] overlayfs: failed to clone upperpath [ 392.487718][ T10] usb 5-1: USB disconnect, device number 23 [ 393.148630][T11703] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2234'. [ 393.202903][T11703] batadv1: entered promiscuous mode [ 393.202936][T11703] batadv1: entered allmulticast mode [ 394.407822][ T5910] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 394.568137][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 394.600437][ T5910] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 394.600482][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.631576][ T5910] usb 5-1: config 0 descriptor?? [ 394.905799][ T5910] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 396.002697][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2255'. [ 396.216656][ T5910] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 396.216688][ T5910] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 396.216992][ T5910] asix 5-1:0.0: probe with driver asix failed with error -71 [ 396.260720][ T5910] usb 5-1: USB disconnect, device number 24 [ 396.385655][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 396.556529][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 396.559263][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.559317][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.00 [ 396.559343][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.614310][ T9] usb 4-1: config 0 descriptor?? [ 397.108896][ T9] logitech-hidpp-device 0003:046D:C091.001C: hidraw0: USB HID v0.05 Device [HID 046d:c091] on usb-dummy_hcd.3-1/input0 [ 397.278295][ T980] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.300017][ T5925] usb 4-1: USB disconnect, device number 19 [ 397.933176][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.964345][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.978020][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.988698][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 398.023425][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 398.930398][T11778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.975761][T11778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.230474][ T37] audit: type=1326 audit(1756056908.198:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11797 comm="syz.0.2272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f871f45ebe9 code=0x0 [ 400.191420][ T5837] Bluetooth: hci4: command tx timeout [ 401.110635][T10942] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.110664][T10942] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.189330][T11817] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.189513][T11817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.193631][T11817] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.193851][T11817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.251001][T11817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.459321][T11822] sctp: [Deprecated]: syz.2.2281 (pid 11822) Use of int in max_burst socket option deprecated. [ 401.459321][T11822] Use struct sctp_assoc_value instead [ 401.535653][ T980] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.617327][T10942] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.617355][T10942] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.623252][T10942] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.623279][T10942] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.668122][T10942] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.668155][T10942] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.103023][ T980] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.368304][ T37] audit: type=1800 audit(1756056911.116:70): pid=11835 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2287" name="bus" dev="overlay" ino=2415 res=0 errno=0 [ 402.415042][ T5843] Bluetooth: hci4: command tx timeout [ 402.441564][T11837] overlayfs: failed to clone upperpath [ 402.590950][ T980] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.273776][ T1101] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 403.521272][T11785] chnl_net:caif_netlink_parms(): no params data found [ 403.567874][ T980] bridge_slave_1: left allmulticast mode [ 403.571312][ T980] bridge_slave_1: left promiscuous mode [ 403.590609][ T980] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.657986][ T980] bridge_slave_0: left allmulticast mode [ 403.658025][ T980] bridge_slave_0: left promiscuous mode [ 403.659812][ T980] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.216835][ T5837] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 404.638978][ T5837] Bluetooth: hci4: command tx timeout [ 405.346127][T11895] evm: overlay not supported [ 405.516943][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 405.691012][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.691042][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.692658][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 405.692685][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 405.692706][ T9] usb 4-1: SerialNumber: syz [ 405.974348][ T9] usb 4-1: 0:2 : does not exist [ 406.016833][ T9] usb 4-1: USB disconnect, device number 20 [ 406.864939][ T5837] Bluetooth: hci4: command tx timeout [ 406.964668][ T980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.048587][ T980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.074516][ T980] bond0 (unregistering): Released all slaves [ 407.173632][T11887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.112220][T11928] overlayfs: failed to clone upperpath [ 408.503509][T11785] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.503665][T11785] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.503953][T11785] bridge_slave_0: entered allmulticast mode [ 408.508295][T11785] bridge_slave_0: entered promiscuous mode [ 408.554393][T11785] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.554625][T11785] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.554906][T11785] bridge_slave_1: entered allmulticast mode [ 408.573608][T11785] bridge_slave_1: entered promiscuous mode [ 409.550895][T11785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.602528][T11785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.786838][ T980] hsr_slave_0: left promiscuous mode [ 409.835947][ T980] hsr_slave_1: left promiscuous mode [ 409.837232][ T980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.837338][ T980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.900622][ T980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.900657][ T980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.062731][T11956] blktrace: Concurrent blktraces are not allowed on loop3 [ 410.463959][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 411.067874][ T980] veth1_macvtap: left promiscuous mode [ 411.068188][ T980] veth0_macvtap: left promiscuous mode [ 411.068578][ T980] veth1_vlan: left promiscuous mode [ 411.074654][ T980] veth0_vlan: left promiscuous mode [ 411.526455][ T5902] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 411.685128][ T5902] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 411.731806][ T5902] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 411.731829][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 411.731844][ T5902] usb 1-1: Product: syz [ 411.731855][ T5902] usb 1-1: Manufacturer: syz [ 411.731865][ T5902] usb 1-1: SerialNumber: syz [ 411.740928][ T5902] usb 1-1: config 0 descriptor?? [ 411.797480][ T5902] ims_pcu 1-1:0.0: Zero length descriptor [ 411.797551][ T5902] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 412.037611][ T5902] usb 1-1: USB disconnect, device number 22 [ 412.091242][ C0] ------------[ cut here ]------------ [ 412.091269][ C0] WARNING: CPU: 0 PID: 16 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 412.091317][ C0] Modules linked in: [ 412.091347][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 412.091374][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.091397][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 412.091424][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 3b 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 03 e2 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 412.091445][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 412.091466][ C0] RAX: ffffffff88dc58bb RBX: 0000000000000001 RCX: ffff88801c2cd940 [ 412.091484][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 412.091499][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 412.091515][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000007 [ 412.091532][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88805d602e68 [ 412.091548][ C0] FS: 0000000000000000(0000) GS:ffff8881268c2000(0000) knlGS:0000000000000000 [ 412.091569][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.091585][ C0] CR2: 000000110c2ff2c2 CR3: 000000005dc5a000 CR4: 00000000003526f0 [ 412.091617][ C0] Call Trace: [ 412.091625][ C0] [ 412.091654][ C0] ? __pfx_est_timer+0x10/0x10 [ 412.091693][ C0] call_timer_fn+0x17b/0x5f0 [ 412.091725][ C0] ? __pfx_est_timer+0x10/0x10 [ 412.091748][ C0] ? call_timer_fn+0xbe/0x5f0 [ 412.091778][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 412.091820][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.091850][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.091878][ C0] ? __pfx_est_timer+0x10/0x10 [ 412.091905][ C0] __run_timer_base+0x648/0x970 [ 412.091954][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 412.092004][ C0] run_timer_softirq+0xb7/0x180 [ 412.092034][ C0] handle_softirqs+0x22c/0x710 [ 412.092101][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 412.092163][ C0] run_ktimerd+0xcf/0x190 [ 412.092197][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 412.092227][ C0] ? schedule+0x91/0x360 [ 412.092266][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 412.092295][ C0] smpboot_thread_fn+0x542/0xa60 [ 412.092327][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 412.092368][ C0] kthread+0x711/0x8a0 [ 412.092408][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 412.092438][ C0] ? __pfx_kthread+0x10/0x10 [ 412.092481][ C0] ? __pfx_kthread+0x10/0x10 [ 412.092518][ C0] ret_from_fork+0x3fc/0x770 [ 412.092551][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 412.092587][ C0] ? __switch_to_asm+0x39/0x70 [ 412.092609][ C0] ? __switch_to_asm+0x33/0x70 [ 412.092628][ C0] ? __pfx_kthread+0x10/0x10 [ 412.092665][ C0] ret_from_fork_asm+0x1a/0x30 [ 412.092707][ C0] [ 412.092720][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 412.092737][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 412.092764][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.092777][ C0] Call Trace: [ 412.092786][ C0] [ 412.092796][ C0] dump_stack_lvl+0x99/0x250 [ 412.092831][ C0] ? __asan_memcpy+0x40/0x70 [ 412.092858][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.092893][ C0] ? __pfx__printk+0x10/0x10 [ 412.092936][ C0] vpanic+0x281/0x750 [ 412.092971][ C0] ? __pfx__printk+0x10/0x10 [ 412.092996][ C0] ? __pfx_vpanic+0x10/0x10 [ 412.093031][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 412.093086][ C0] panic+0xb9/0xc0 [ 412.093120][ C0] ? __pfx_panic+0x10/0x10 [ 412.093174][ C0] __warn+0x31b/0x4b0 [ 412.093207][ C0] ? est_timer+0x6dc/0x9f0 [ 412.093234][ C0] ? est_timer+0x6dc/0x9f0 [ 412.093259][ C0] report_bug+0x2be/0x4f0 [ 412.093286][ C0] ? est_timer+0x6dc/0x9f0 [ 412.093312][ C0] ? est_timer+0x6dc/0x9f0 [ 412.093335][ C0] ? est_timer+0x6de/0x9f0 [ 412.093360][ C0] handle_bug+0x84/0x160 [ 412.093395][ C0] exc_invalid_op+0x1a/0x50 [ 412.093429][ C0] asm_exc_invalid_op+0x1a/0x20 [ 412.093452][ C0] RIP: 0010:est_timer+0x6dc/0x9f0 [ 412.093477][ C0] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 7d 3b 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 95 03 e2 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 412.093497][ C0] RSP: 0018:ffffc900001577a0 EFLAGS: 00010246 [ 412.093517][ C0] RAX: ffffffff88dc58bb RBX: 0000000000000001 RCX: ffff88801c2cd940 [ 412.093535][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 412.093550][ C0] RBP: ffffc900001578b0 R08: 0000000000000000 R09: 0000000000000100 [ 412.093566][ C0] R10: dffffc0000000000 R11: fffff5200002af0a R12: 0000000000000007 [ 412.093583][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88805d602e68 [ 412.093610][ C0] ? est_timer+0x6db/0x9f0 [ 412.093662][ C0] ? __pfx_est_timer+0x10/0x10 [ 412.093701][ C0] call_timer_fn+0x17b/0x5f0 [ 412.093732][ C0] ? __pfx_est_timer+0x10/0x10 [ 412.093755][ C0] ? call_timer_fn+0xbe/0x5f0 [ 412.093786][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 412.093829][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.093859][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.093886][ C0] ? __pfx_est_timer+0x10/0x10 [ 412.093915][ C0] __run_timer_base+0x648/0x970 [ 412.093963][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 412.094013][ C0] run_timer_softirq+0xb7/0x180 [ 412.094044][ C0] handle_softirqs+0x22c/0x710 [ 412.094093][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 412.094138][ C0] run_ktimerd+0xcf/0x190 [ 412.094171][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 412.094201][ C0] ? schedule+0x91/0x360 [ 412.094238][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 412.094266][ C0] smpboot_thread_fn+0x542/0xa60 [ 412.094298][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 412.094339][ C0] kthread+0x711/0x8a0 [ 412.094379][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 412.094408][ C0] ? __pfx_kthread+0x10/0x10 [ 412.094451][ C0] ? __pfx_kthread+0x10/0x10 [ 412.094489][ C0] ret_from_fork+0x3fc/0x770 [ 412.094524][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 412.094563][ C0] ? __switch_to_asm+0x39/0x70 [ 412.094585][ C0] ? __switch_to_asm+0x33/0x70 [ 412.094606][ C0] ? __pfx_kthread+0x10/0x10 [ 412.094644][ C0] ret_from_fork_asm+0x1a/0x30 [ 412.094688][ C0] [ 412.094874][ C0] Kernel Offset: disabled