last executing test programs: 10.041275756s ago: executing program 4 (id=1469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb612120800a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x33}, 0x1c) 9.084350291s ago: executing program 4 (id=1481): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x2, @rand_addr, 0x6}, 0x1c) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 8.848929941s ago: executing program 4 (id=1484): socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000100), 0x1f, 0x8c00) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1400000007ffff", @ANYRES16=r2, @ANYRESOCT=r0], 0x15) mount$9p_fd(0x0, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) 8.677395454s ago: executing program 4 (id=1487): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x3000, 0x1}) 8.509683388s ago: executing program 4 (id=1490): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setpgid(0x0, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 8.424873006s ago: executing program 4 (id=1492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) 1.462628453s ago: executing program 1 (id=1605): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) close_range(r1, 0xffffffffffffffff, 0x0) 1.341500778s ago: executing program 1 (id=1607): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.2785149s ago: executing program 1 (id=1610): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xfffffbff, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x8}, 0x1c) sendmmsg$sock(r0, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}}], 0x1, 0x0) 1.126432419s ago: executing program 1 (id=1614): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9205002400128009000100626f6e6400000000140002800800030007000000080020"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 889.737978ms ago: executing program 1 (id=1620): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETVESABLANK(r2, 0x560e, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000080)={0xd, 0x8, 0x2, 0x0, 0x0, 0x1000}) 795.276777ms ago: executing program 0 (id=1624): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6bd697da00182c8000000000000000000000ffff64010101ff"], 0x0) 613.745436ms ago: executing program 2 (id=1625): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) read$FUSE(r0, &(0x7f00000043c0)={0x2020}, 0x2020) 599.930144ms ago: executing program 0 (id=1626): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x25dfdbfd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 592.44993ms ago: executing program 2 (id=1627): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc000802) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r1, @ANYBLOB="08000b00e000000108000200ac1414bb140006"], 0x60}}, 0x814) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 501.647396ms ago: executing program 3 (id=1628): openat$tun(0xffffffffffffff9c, 0x0, 0x210800, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 501.102611ms ago: executing program 0 (id=1629): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r2 = getpid() sendmmsg$unix(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x8d, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14}}], 0x38, 0x200400c1}}], 0x2, 0x4000000) 430.302014ms ago: executing program 2 (id=1630): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x11, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000400000000000000006000000181100007023b7f4fe3c4bbce223e615e927175918185c5e9c91065a6f02c943cfcefa81e573c7a35e87e1d1", @ANYRES32, @ANYBLOB="0000000000000000b702000014008000b7030000000000008500000083000000bf5a39000000000055090100000000009500000000000000852000003a250200852000003a3c"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x40}, 0x94) 407.988532ms ago: executing program 0 (id=1631): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) pwritev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000140)="f91e8ffee06c088b3a2f7044f3e6d127d0038dafd5eb04abcb62787b9e0f0de051a89eb94c441fbedbc83d21aa208f85bd0d23861f1802f842fd04ff12902df04c30373d86a520bd2b14c56eb04cd0a6d60aa3efbb60b0129c1202e06d481a52e4936126d799ada78173cfae6f633aab5840f93067721e1de2017fbe123c0721d0e703988419e7caaf6adb389b11cb9f9649019dcfe1d2402baaf262ba690d", 0x9f}], 0x1, 0x3, 0x6) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/120, 0x0, 0x80a0000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x5000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000240)=0x3) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)) 333.741728ms ago: executing program 2 (id=1632): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x19, 0x2000}, 0x20) 333.460249ms ago: executing program 3 (id=1633): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') r1 = fanotify_init(0x40, 0x40000) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0x2020) 303.093636ms ago: executing program 0 (id=1634): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32=0x0, @ANYBLOB="c88d8b5a"], 0x20) 278.2344ms ago: executing program 2 (id=1635): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="982e", 0x2, 0x400c855, 0x0, 0x0) 181.769414ms ago: executing program 3 (id=1636): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x2020) 181.490182ms ago: executing program 0 (id=1637): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="5b44f80b60dbf5c56c3594", 0xb}], 0x1, 0x1) tee(r1, r4, 0x4e, 0x0) write$binfmt_script(r2, &(0x7f00000021c0)={'#! ', './file0'}, 0xb) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file1', [{0x20, '\xaa\xaa\xaa\xaa\xaa'}]}, 0x11) 173.113837ms ago: executing program 2 (id=1638): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mq_open(&(0x7f0000000040)='\x00', 0x40, 0x22, &(0x7f0000000080)={0x4, 0xf48, 0x8, 0x556}) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='bridge0\x00') read$FUSE(r1, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x6c4000, 0x0, 0x8}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0xffff, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x2d, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0x0, r3, {0x2000000007, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x55, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x1ff, 0xa000, 0xa0000000, 0x0, r4, 0x0, 0x0, 0x1000000}}}, 0x78) 150.521158ms ago: executing program 3 (id=1639): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) 60.121764ms ago: executing program 3 (id=1640): r0 = syz_open_dev$loop(&(0x7f0000002240), 0x892d, 0x1) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 924.485µs ago: executing program 3 (id=1641): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x20142}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x24048044) 0s ago: executing program 1 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg0\x00', 0x1}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x400454c9, 0x0) kernel console output (not intermixed with test programs): onfig 0 has no interface number 0 [ 316.294714][ T1210] usb usb1-port1: unable to enumerate USB device [ 316.299107][ T5948] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 316.317269][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.329827][ T5948] usb 2-1: config 0 descriptor?? [ 316.493045][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.816'. [ 316.933204][ T5901] usb 4-1: USB disconnect, device number 17 [ 316.953756][ T5948] usb 2-1: USB disconnect, device number 29 [ 317.086221][ T5929] samsung 0003:0419:0600.000C: item fetching failed at offset 5/7 [ 317.106202][ T5929] samsung 0003:0419:0600.000C: parse failed [ 317.114697][ T5929] samsung 0003:0419:0600.000C: probe with driver samsung failed with error -22 [ 317.167797][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.174114][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.324552][ T5901] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 317.421200][ T1210] usb 5-1: USB disconnect, device number 28 [ 317.978724][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 318.000526][ T5901] usb 4-1: config 2 has an invalid interface number: 169 but max is 0 [ 318.011211][ T5901] usb 4-1: config 2 has no interface number 0 [ 318.018025][ T5901] usb 4-1: New USB device found, idVendor=0000, idProduct=0200, bcdDevice=b8.92 [ 318.027928][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.180526][ T980] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 319.367388][ T980] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 319.379204][ T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.392959][ T980] usb 2-1: config 0 has no interface number 0 [ 319.422349][ T980] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 319.437878][ T980] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.477419][ T980] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 319.491297][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.520793][ T980] usb 2-1: Product: syz [ 319.642349][ T5948] usb 4-1: USB disconnect, device number 18 [ 319.650672][ T980] usb 2-1: Manufacturer: syz [ 319.662525][ T980] usb 2-1: SerialNumber: syz [ 319.685875][ T980] usb 2-1: config 0 descriptor?? [ 320.819594][ T9027] net_ratelimit: 1 callbacks suppressed [ 320.825588][ T9027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.069481][ T9029] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.101044][ T9029] FAULT_INJECTION: forcing a failure. [ 321.101044][ T9029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.114414][ T9029] CPU: 1 UID: 0 PID: 9029 Comm: syz.0.828 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 321.114439][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.114464][ T9029] Call Trace: [ 321.114473][ T9029] [ 321.114482][ T9029] dump_stack_lvl+0x189/0x250 [ 321.114512][ T9029] ? __pfx____ratelimit+0x10/0x10 [ 321.114534][ T9029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.114555][ T9029] ? __pfx__printk+0x10/0x10 [ 321.114580][ T9029] ? __might_fault+0xb0/0x130 [ 321.114611][ T9029] should_fail_ex+0x414/0x560 [ 321.114638][ T9029] _copy_from_user+0x2d/0xb0 [ 321.114665][ T9029] ___sys_sendmsg+0x158/0x2a0 [ 321.114698][ T9029] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.114734][ T9029] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 321.114792][ T9029] ? __fget_files+0x2a/0x420 [ 321.114812][ T9029] ? __fget_files+0x3a0/0x420 [ 321.114845][ T9029] __x64_sys_sendmsg+0x19b/0x260 [ 321.114877][ T9029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.114926][ T9029] ? do_syscall_64+0xbe/0x3b0 [ 321.114952][ T9029] do_syscall_64+0xfa/0x3b0 [ 321.114975][ T9029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.114994][ T9029] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 321.115012][ T9029] ? clear_bhb_loop+0x60/0xb0 [ 321.115035][ T9029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.115054][ T9029] RIP: 0033:0x7fbb7c78ebe9 [ 321.115071][ T9029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.115087][ T9029] RSP: 002b:00007fbb7d5e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.115107][ T9029] RAX: ffffffffffffffda RBX: 00007fbb7c9b6180 RCX: 00007fbb7c78ebe9 [ 321.115122][ T9029] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 321.115135][ T9029] RBP: 00007fbb7d5e8090 R08: 0000000000000000 R09: 0000000000000000 [ 321.115147][ T9029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.115159][ T9029] R13: 00007fbb7c9b6218 R14: 00007fbb7c9b6180 R15: 00007ffca8daea98 [ 321.115191][ T9029] [ 321.316282][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.385499][ T5918] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 321.548505][ T5918] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 321.580645][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.667299][ T5918] usb 3-1: config 0 descriptor?? [ 321.691721][ T980] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 321.742687][ T980] usb 2-1: USB disconnect, device number 30 [ 321.912180][ T5918] kaweth 3-1:0.0: Firmware present in device. [ 322.022343][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 322.134504][ T5918] kaweth 3-1:0.0: Statistics collection: 0 [ 322.140369][ T5918] kaweth 3-1:0.0: Multicast filter limit: 0 [ 322.160297][ T5918] kaweth 3-1:0.0: MTU: 0 [ 322.177038][ T5918] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 322.392413][ T9053] loop6: detected capacity change from 0 to 524287487 [ 322.400213][ T9053] buffer_io_error: 7 callbacks suppressed [ 322.400231][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.416966][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.426137][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.441112][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.489860][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 322.588269][ T9055] loop6: detected capacity change from 524287487 to 0 [ 322.629192][ T9053] Buffer I/O error on dev loop6, logical block 0, async page read [ 324.157144][ T9053] ldm_validate_partition_table(): Disk read failed. [ 324.199666][ T30] audit: type=1326 audit(3511907344.089:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9056 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 324.230260][ T5918] kaweth 3-1:0.0: kaweth interface created at eth1 [ 324.237923][ T9053] Dev loop6: unable to read RDB block 0 [ 324.243521][ T9053] loop6: unable to read partition table [ 324.246159][ T30] audit: type=1326 audit(3511907344.089:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9056 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 324.271542][ T30] audit: type=1326 audit(3511907344.089:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9056 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 324.293758][ T30] audit: type=1326 audit(3511907344.089:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9056 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 324.294216][ T9053] loop6: partition table beyond EOD, [ 324.403095][ T30] audit: type=1326 audit(3511907344.099:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9056 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 324.564972][ T9053] truncated [ 324.574750][ T9053] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 324.604187][ T30] audit: type=1326 audit(3511907344.219:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9064 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0777fc14a5 code=0x7ffc0000 [ 324.654504][ T30] audit: type=1326 audit(3511907344.229:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9056 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 324.744632][ T30] audit: type=1326 audit(3511907344.229:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9056 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 324.787448][ T30] audit: type=1326 audit(3511907344.379:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9064 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 324.787886][ T5901] usb 3-1: USB disconnect, device number 22 [ 324.818462][ T30] audit: type=1326 audit(3511907344.639:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9056 comm="syz.3.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 325.145979][ T9073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.208433][ T9073] FAULT_INJECTION: forcing a failure. [ 325.208433][ T9073] name failslab, interval 1, probability 0, space 0, times 0 [ 325.221548][ T9073] CPU: 0 UID: 0 PID: 9073 Comm: syz.3.840 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 325.221572][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.221584][ T9073] Call Trace: [ 325.221592][ T9073] [ 325.221601][ T9073] dump_stack_lvl+0x189/0x250 [ 325.221627][ T9073] ? __pfx____ratelimit+0x10/0x10 [ 325.221649][ T9073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.221671][ T9073] ? __pfx__printk+0x10/0x10 [ 325.221702][ T9073] ? __pfx___might_resched+0x10/0x10 [ 325.221728][ T9073] should_fail_ex+0x414/0x560 [ 325.221754][ T9073] should_failslab+0xa8/0x100 [ 325.221777][ T9073] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 325.221798][ T9073] ? __alloc_skb+0x112/0x2d0 [ 325.221829][ T9073] __alloc_skb+0x112/0x2d0 [ 325.221860][ T9073] netlink_sendmsg+0x5c6/0xb30 [ 325.221887][ T9073] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 325.221915][ T9073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.221951][ T9073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.221970][ T9073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.222005][ T9073] __sock_sendmsg+0x21c/0x270 [ 325.222031][ T9073] ____sys_sendmsg+0x505/0x830 [ 325.222067][ T9073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.222106][ T9073] ? import_iovec+0x74/0xa0 [ 325.222136][ T9073] ___sys_sendmsg+0x21f/0x2a0 [ 325.222168][ T9073] ? __pfx____sys_sendmsg+0x10/0x10 [ 325.222236][ T9073] ? __fget_files+0x2a/0x420 [ 325.222256][ T9073] ? __fget_files+0x3a0/0x420 [ 325.222289][ T9073] __x64_sys_sendmsg+0x19b/0x260 [ 325.222321][ T9073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 325.222361][ T9073] ? __pfx_ksys_write+0x10/0x10 [ 325.222385][ T9073] ? do_syscall_64+0xbe/0x3b0 [ 325.222411][ T9073] do_syscall_64+0xfa/0x3b0 [ 325.222433][ T9073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.222451][ T9073] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 325.222470][ T9073] ? clear_bhb_loop+0x60/0xb0 [ 325.222493][ T9073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.222513][ T9073] RIP: 0033:0x7f0777f8ebe9 [ 325.222530][ T9073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.222547][ T9073] RSP: 002b:00007f0778d8c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.222567][ T9073] RAX: ffffffffffffffda RBX: 00007f07781b6180 RCX: 00007f0777f8ebe9 [ 325.222582][ T9073] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000006 [ 325.222595][ T9073] RBP: 00007f0778d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 325.222607][ T9073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.222619][ T9073] R13: 00007f07781b6218 R14: 00007f07781b6180 R15: 00007fff6190ff38 [ 325.222652][ T9073] [ 325.747089][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 326.901166][ T9091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.477745][ T9113] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.567287][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880597a4400: rx timeout, send abort [ 328.606278][ T9113] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.795588][ T9113] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.866951][ T9124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.068124][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880597a7800: rx timeout, send abort [ 329.085030][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880597a4400: abort rx timeout. Force session deactivation [ 329.400800][ T9113] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.477683][ T9113] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.492404][ T9113] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.507413][ T9113] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.522093][ T9113] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.576427][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880597a7800: abort rx timeout. Force session deactivation [ 331.422084][ T9147] : entered promiscuous mode [ 331.518341][ T980] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 332.103032][ T980] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 332.554897][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.671272][ T980] usb 1-1: Product: syz [ 332.680420][ T980] usb 1-1: Manufacturer: syz [ 332.691377][ T980] usb 1-1: SerialNumber: syz [ 332.708216][ T980] usb 1-1: config 0 descriptor?? [ 332.722990][ T980] usb 1-1: selecting invalid altsetting 1 [ 332.745266][ T980] technisat-usb2: could not set alternate setting to 0 [ 333.057091][ T9165] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2206113367/2206113369 [ 333.079072][ T9165] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2206113367/2206113369 [ 333.088916][ T9165] tipc: Failed to remove unknown binding: 66,1,1/2130706433:2206113367/2206113369 [ 333.378329][ T980] technisat-usb2: firmware version: 0.0 [ 333.451425][ T980] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 333.594625][ T980] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 333.677834][ T980] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 333.984582][ T980] usb 1-1: USB disconnect, device number 26 [ 334.151534][ T9184] tmpfs: Bad value for 'mpol' [ 334.285234][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 334.328171][ T1210] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 334.444445][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 334.489953][ T24] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.507434][ T24] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 334.521602][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 334.529652][ T24] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 334.539549][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.544774][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 334.550416][ T24] usb 3-1: config 0 descriptor?? [ 334.560032][ T1210] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 334.577483][ T1210] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 334.590882][ T1210] usb 2-1: config 0 interface 0 has no altsetting 0 [ 334.605306][ T1210] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 334.616512][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.625924][ T1210] usb 2-1: Product: syz [ 334.630351][ T1210] usb 2-1: Manufacturer: syz [ 334.635196][ T1210] usb 2-1: SerialNumber: syz [ 334.648873][ T1210] usb 2-1: config 0 descriptor?? [ 334.744805][ T5901] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 335.025180][ T9184] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 335.038698][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 335.048530][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.048566][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 335.062463][ T5901] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 335.076938][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.123252][ T5901] usb 1-1: config 0 descriptor?? [ 335.609284][ T24] usb 3-1: USB disconnect, device number 23 [ 336.305476][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 336.844900][ T24] usb 2-1: USB disconnect, device number 31 [ 336.918038][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.876'. [ 337.768152][ T9217] netlink: 'syz.2.881': attribute type 64 has an invalid length. [ 337.776799][ T9217] netlink: 164 bytes leftover after parsing attributes in process `syz.2.881'. [ 337.789008][ T9217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.881'. [ 337.803115][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.881'. [ 337.990334][ T5901] usbhid 1-1:0.0: can't add hid device: -71 [ 338.086682][ T5901] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 338.970445][ T5929] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 339.018703][ T5901] usb 1-1: USB disconnect, device number 27 [ 339.587873][ T5929] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 339.603490][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.630146][ T5929] usb 3-1: config 0 descriptor?? [ 339.860587][ T5901] usb 3-1: USB disconnect, device number 24 [ 339.867730][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 340.014670][ T5929] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 340.091369][ T24] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 340.113501][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.124903][ T24] usb 4-1: config 0 has no interface number 0 [ 340.144804][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 340.257214][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.267052][ T24] usb 4-1: Product: syz [ 340.271945][ T24] usb 4-1: Manufacturer: syz [ 340.277791][ T24] usb 4-1: SerialNumber: syz [ 340.286649][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 340.292948][ T24] usb 4-1: config 0 descriptor?? [ 340.298385][ T5929] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 340.311160][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.320192][ T5929] usb 1-1: Product: syz [ 340.534267][ T24] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 340.549683][ T24] usb 4-1: No valid video chain found. [ 340.572035][ T24] usb 4-1: USB disconnect, device number 19 [ 341.111469][ T5929] usb 1-1: Manufacturer: syz [ 341.116672][ T5929] usb 1-1: SerialNumber: syz [ 341.132185][ T5929] usb 1-1: config 0 descriptor?? [ 341.339295][ T5929] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 341.351255][ T5929] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 341.364055][ T9245] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xf [ 341.534508][ T9250] libceph: resolve '400' (ret=-3): failed [ 341.556873][ T5901] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 341.568463][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.593483][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.734402][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 341.762335][ T5901] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 341.774169][ T5901] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 342.098523][ T9259] netlink: 40 bytes leftover after parsing attributes in process `syz.2.892'. [ 342.139871][ T5901] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 342.203210][ T5901] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 342.244406][ T5901] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 342.253314][ T5901] usb 2-1: config 0 has no interface number 0 [ 342.285934][ T5901] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 342.302705][ T5901] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 342.325112][ T5901] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 342.344900][ T5901] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.368369][ T5901] usb 2-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 342.391492][ T5901] usb 2-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 342.409975][ T5901] usb 2-1: config 0 interface 125 has no altsetting 0 [ 342.419265][ T5901] usb 2-1: config 0 interface 125 has no altsetting 2 [ 342.445463][ T5901] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 342.465818][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.492905][ T5901] usb 2-1: Product: syz [ 342.503038][ T5901] usb 2-1: Manufacturer: syz [ 342.511808][ T5901] usb 2-1: SerialNumber: syz [ 342.525523][ T5901] usb 2-1: config 0 descriptor?? [ 342.548525][ T5901] usb 2-1: selecting invalid altsetting 2 [ 342.799413][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 342.799430][ T30] audit: type=1326 audit(3511907363.759:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9266 comm="syz.3.894" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x0 [ 342.845565][ T5847] usb 1-1: USB disconnect, device number 28 [ 343.624610][ T5901] get_1284_register timeout [ 343.643390][ T5901] uss720 2-1:0.125: probe with driver uss720 failed with error -5 [ 343.651659][ C0] usb 2-1: async_complete: urb error -104 [ 343.651814][ C0] usb 2-1: async_complete: urb error -104 [ 343.651953][ C0] usb 2-1: async_complete: urb error -104 [ 343.652098][ C0] usb 2-1: async_complete: urb error -104 [ 343.901057][ T9297] FAULT_INJECTION: forcing a failure. [ 343.901057][ T9297] name failslab, interval 1, probability 0, space 0, times 0 [ 343.978314][ T9297] CPU: 0 UID: 0 PID: 9297 Comm: syz.0.902 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 343.978343][ T9297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.978355][ T9297] Call Trace: [ 343.978363][ T9297] [ 343.978371][ T9297] dump_stack_lvl+0x189/0x250 [ 343.978398][ T9297] ? __pfx____ratelimit+0x10/0x10 [ 343.978419][ T9297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.978440][ T9297] ? __pfx__printk+0x10/0x10 [ 343.978469][ T9297] ? __pfx___might_resched+0x10/0x10 [ 343.978488][ T9297] ? fs_reclaim_acquire+0x7d/0x100 [ 343.978514][ T9297] should_fail_ex+0x414/0x560 [ 343.978539][ T9297] should_failslab+0xa8/0x100 [ 343.978564][ T9297] __kmalloc_noprof+0xcb/0x4f0 [ 343.978580][ T9297] ? kfree+0x4d/0x440 [ 343.978603][ T9297] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 343.978633][ T9297] tomoyo_realpath_from_path+0xe3/0x5d0 [ 343.978660][ T9297] ? tomoyo_domain+0xda/0x130 [ 343.978699][ T9297] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 343.978721][ T9297] tomoyo_path_number_perm+0x1e8/0x5a0 [ 343.978745][ T9297] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 343.978783][ T9297] ? __lock_acquire+0xab9/0xd20 [ 343.978823][ T9297] ? __fget_files+0x2a/0x420 [ 343.978848][ T9297] ? __fget_files+0x2a/0x420 [ 343.978868][ T9297] ? __fget_files+0x3a0/0x420 [ 343.978886][ T9297] ? __fget_files+0x2a/0x420 [ 343.978911][ T9297] security_file_ioctl+0xcb/0x2d0 [ 343.978935][ T9297] __se_sys_ioctl+0x47/0x170 [ 343.978964][ T9297] do_syscall_64+0xfa/0x3b0 [ 343.978983][ T9297] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.979002][ T9297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.979020][ T9297] ? clear_bhb_loop+0x60/0xb0 [ 343.979043][ T9297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.979061][ T9297] RIP: 0033:0x7fbb7c78ebe9 [ 343.979079][ T9297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.979096][ T9297] RSP: 002b:00007fbb7d62a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.979117][ T9297] RAX: ffffffffffffffda RBX: 00007fbb7c9b5fa0 RCX: 00007fbb7c78ebe9 [ 343.979130][ T9297] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 343.979143][ T9297] RBP: 00007fbb7d62a090 R08: 0000000000000000 R09: 0000000000000000 [ 343.979155][ T9297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.979178][ T9297] R13: 00007fbb7c9b6038 R14: 00007fbb7c9b5fa0 R15: 00007ffca8daea98 [ 343.979211][ T9297] [ 343.979334][ T9297] ERROR: Out of memory at tomoyo_realpath_from_path. [ 344.204509][ T55] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 344.361432][ T43] usb 2-1: USB disconnect, device number 32 [ 344.436656][ T55] usb 4-1: device descriptor read/64, error -71 [ 344.766570][ T55] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 345.116901][ T55] usb 4-1: device descriptor read/64, error -71 [ 345.266062][ T55] usb usb4-port1: attempt power cycle [ 345.814466][ T55] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 345.856137][ T55] usb 4-1: device descriptor read/8, error -71 [ 345.971801][ T5901] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 346.051870][ T9331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 346.124966][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 346.143039][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 346.152014][ T9333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 346.161392][ T5901] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 346.164513][ T55] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 346.176009][ T5901] usb 2-1: can't read configurations, error -61 [ 346.177529][ T9333] netlink: 'syz.2.914': attribute type 12 has an invalid length. [ 346.235003][ T55] usb 4-1: device descriptor read/8, error -71 [ 346.334484][ T5901] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 346.351703][ T55] usb usb4-port1: unable to enumerate USB device [ 346.425893][ T9342] pim6reg1: entered promiscuous mode [ 346.433209][ T9342] pim6reg1: entered allmulticast mode [ 346.486583][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 346.498786][ T5901] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 346.507604][ T5901] usb 2-1: can't read configurations, error -61 [ 346.522426][ T5901] usb usb2-port1: attempt power cycle [ 346.865129][ T5901] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 346.898117][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 346.909052][ T5901] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 346.921687][ T5901] usb 2-1: can't read configurations, error -61 [ 347.055041][ T5901] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 347.089963][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 347.112690][ T5901] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 347.138532][ T5901] usb 2-1: can't read configurations, error -61 [ 347.165157][ T5901] usb usb2-port1: unable to enumerate USB device [ 347.654599][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 347.807649][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.923'. [ 347.832342][ T9364] netlink: 64 bytes leftover after parsing attributes in process `syz.4.923'. [ 348.014472][ T55] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 348.091126][ T9377] MTD: Couldn't look up './file1': -15 [ 348.137020][ T30] audit: type=1326 audit(3511907369.099:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9376 comm="syz.2.927" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74c038ebe9 code=0x0 [ 348.165294][ T55] usb 1-1: device descriptor read/64, error -71 [ 348.195270][ T9385] fuse: Bad value for 'rootmode' [ 348.438091][ T55] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 348.774124][ T9386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.927'. [ 348.785467][ T55] usb 1-1: device descriptor read/64, error -71 [ 348.938377][ T9392] XFS (nullb0): Invalid superblock magic number [ 348.966968][ T55] usb usb1-port1: attempt power cycle [ 349.499504][ T9407] binder: 9406:9407 ioctl 4068aea3 200000000280 returned -22 [ 349.534530][ T55] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 349.585260][ T55] usb 1-1: device descriptor read/8, error -71 [ 349.629108][ T9411] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.636540][ T9411] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.718473][ T9411] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.726814][ T9411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.735314][ T9411] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.743196][ T9411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.772946][ T9411] team0: Port device bridge0 added [ 349.829917][ T9416] atomic_op ffff88802747e998 conn xmit_atomic 0000000000000000 [ 349.854643][ T55] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 349.896045][ T55] usb 1-1: device descriptor read/8, error -71 [ 349.996199][ T9421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.936'. [ 350.039080][ T55] usb usb1-port1: unable to enumerate USB device [ 350.078189][ T9422] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 350.086005][ T9422] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 350.093749][ T9422] netlink: 'syz.2.936': attribute type 2 has an invalid length. [ 350.101532][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 351.174977][ T9430] fuse: Unknown parameter 'use00000000000000000000' [ 351.387132][ T9432] netlink: 104 bytes leftover after parsing attributes in process `syz.0.939'. [ 351.416518][ T9432] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.758266][ T9432] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.058301][ T9432] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.131986][ T9432] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.271132][ T9432] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.290157][ T9432] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.305112][ T9432] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.323569][ T9432] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.824995][ T5901] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 353.005670][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 353.018509][ T5901] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 353.027151][ T5901] usb 4-1: config 0 has no interface number 0 [ 353.033301][ T5901] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 353.046888][ T5901] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 353.056612][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.064806][ T5901] usb 4-1: Product: syz [ 353.069245][ T5901] usb 4-1: Manufacturer: syz [ 353.073963][ T5901] usb 4-1: SerialNumber: syz [ 353.082129][ T5901] usb 4-1: config 0 descriptor?? [ 353.408572][ T5901] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 353.419350][ T5901] em28xx 4-1:0.132: Video interface 132 found: [ 353.497543][ T9455] cgroup: Unknown subsys name 'cpuset' [ 353.511707][ T9455] binder: 9454:9455 ioctl 8010aebb 2000000002c0 returned -22 [ 353.995866][ T5901] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 354.500100][ T5901] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 354.517500][ T5901] em28xx 4-1:0.132: board has no eeprom [ 354.588794][ T30] audit: type=1326 audit(3511907375.549:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9470 comm="syz.4.951" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd91f8ebe9 code=0x0 [ 354.614815][ T5901] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 354.622918][ T5901] em28xx 4-1:0.132: analog set to bulk mode. [ 354.655574][ T5847] em28xx 4-1:0.132: Registering V4L2 extension [ 354.673363][ T5901] usb 4-1: USB disconnect, device number 24 [ 354.820809][ T9474] libceph: resolve '400' (ret=-3): failed [ 354.855547][ T5901] em28xx 4-1:0.132: Disconnecting em28xx [ 354.889748][ T9483] fuse: Unknown parameter 'use00000000000000000000' [ 356.069600][ T9494] sp0: Synchronizing with TNC [ 356.079800][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 356.098839][ T9492] [U] [ 356.132893][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.956'. [ 356.152257][ T5847] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 356.211160][ T5847] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 356.252082][ T5847] em28xx 4-1:0.132: No AC97 audio processor [ 356.695548][ T5847] usb 4-1: Decoder not found [ 356.698607][ T9513] binder: BINDER_SET_CONTEXT_MGR already set [ 356.700175][ T5847] em28xx 4-1:0.132: failed to create media graph [ 356.706415][ T9513] binder: 9510:9513 ioctl 4018620d 200000000040 returned -16 [ 356.707228][ T9513] FAULT_INJECTION: forcing a failure. [ 356.707228][ T9513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.733469][ T5847] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 356.748880][ T5847] em28xx 4-1:0.132: Remote control support is not available for this card. [ 356.769903][ T5901] em28xx 4-1:0.132: Closing input extension [ 356.897298][ T5901] em28xx 4-1:0.132: Freeing device [ 356.930915][ T9513] CPU: 0 UID: 0 PID: 9513 Comm: syz.3.961 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 356.930940][ T9513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.930949][ T9513] Call Trace: [ 356.930955][ T9513] [ 356.930960][ T9513] dump_stack_lvl+0x189/0x250 [ 356.930977][ T9513] ? __pfx____ratelimit+0x10/0x10 [ 356.930988][ T9513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.931000][ T9513] ? __pfx__printk+0x10/0x10 [ 356.931014][ T9513] ? __pfx_binder_debug+0x10/0x10 [ 356.931034][ T9513] should_fail_ex+0x414/0x560 [ 356.931048][ T9513] _copy_to_user+0x31/0xb0 [ 356.931064][ T9513] binder_ioctl_write_read+0x9517/0xa000 [ 356.931087][ T9513] ? is_bpf_text_address+0x26/0x2b0 [ 356.931100][ T9513] ? kernel_text_address+0xa5/0xe0 [ 356.931117][ T9513] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 356.931138][ T9513] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 356.931152][ T9513] ? stack_trace_save+0x9c/0xe0 [ 356.931166][ T9513] ? stack_depot_save_flags+0x40/0x900 [ 356.931182][ T9513] ? kasan_save_track+0x4f/0x80 [ 356.931197][ T9513] ? kasan_save_track+0x3e/0x80 [ 356.931210][ T9513] ? kasan_save_free_info+0x46/0x50 [ 356.931222][ T9513] ? __kasan_slab_free+0x62/0x70 [ 356.931230][ T9513] ? kfree+0x18e/0x440 [ 356.931244][ T9513] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 356.931255][ T9513] ? security_file_ioctl+0xcb/0x2d0 [ 356.931265][ T9513] ? __se_sys_ioctl+0x47/0x170 [ 356.931278][ T9513] ? do_syscall_64+0xfa/0x3b0 [ 356.931288][ T9513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.931309][ T9513] ? __pfx_binder_debug+0x10/0x10 [ 356.931323][ T9513] ? do_raw_spin_lock+0x121/0x290 [ 356.931345][ T9513] ? _raw_spin_unlock+0x28/0x50 [ 356.931360][ T9513] ? binder_get_thread+0x178/0x6d0 [ 356.931385][ T9513] binder_ioctl+0x3e0/0x19c0 [ 356.931400][ T9513] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 356.931411][ T9513] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 356.931421][ T9513] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 356.931431][ T9513] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 356.931442][ T9513] ? __pfx_binder_ioctl+0x10/0x10 [ 356.931455][ T9513] ? smack_log+0xef/0x3f0 [ 356.931471][ T9513] ? __pfx_smack_log+0x10/0x10 [ 356.931484][ T9513] ? smk_access+0x14c/0x4e0 [ 356.931502][ T9513] ? smk_tskacc+0x2fc/0x370 [ 356.931518][ T9513] ? smack_file_ioctl+0x2a9/0x340 [ 356.931529][ T9513] ? __pfx_smack_file_ioctl+0x10/0x10 [ 356.931544][ T9513] ? __fget_files+0x2a/0x420 [ 356.931559][ T9513] ? __fget_files+0x3a0/0x420 [ 356.931576][ T9513] ? __fget_files+0x2a/0x420 [ 356.931597][ T9513] ? bpf_lsm_file_ioctl+0x9/0x20 [ 356.931619][ T9513] ? __pfx_binder_ioctl+0x10/0x10 [ 356.931646][ T9513] __se_sys_ioctl+0xfc/0x170 [ 356.931674][ T9513] do_syscall_64+0xfa/0x3b0 [ 356.931693][ T9513] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.931704][ T9513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.931713][ T9513] ? clear_bhb_loop+0x60/0xb0 [ 356.931726][ T9513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.931735][ T9513] RIP: 0033:0x7f0777f8ebe9 [ 356.931745][ T9513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.931755][ T9513] RSP: 002b:00007f0778dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 356.931766][ T9513] RAX: ffffffffffffffda RBX: 00007f07781b5fa0 RCX: 00007f0777f8ebe9 [ 356.931774][ T9513] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 356.931781][ T9513] RBP: 00007f0778dce090 R08: 0000000000000000 R09: 0000000000000000 [ 356.931787][ T9513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.931794][ T9513] R13: 00007f07781b6038 R14: 00007f07781b5fa0 R15: 00007fff6190ff38 [ 356.931810][ T9513] [ 356.931816][ T9513] binder: 9510:9513 ioctl c0306201 2000000001c0 returned -14 [ 356.993230][ T9521] netlink: 104 bytes leftover after parsing attributes in process `syz.0.962'. [ 357.485162][ T9517] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.578945][ T9523] libceph: resolve '400' (ret=-3): failed [ 357.651200][ T9517] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.726661][ T9525] fuse: Unknown parameter 'use00000000000000000000' [ 357.731500][ T9517] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.838064][ T9517] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.326053][ T9536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 359.108099][ T43] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 359.363205][ T9541] netlink: 'syz.1.970': attribute type 4 has an invalid length. [ 359.388567][ T9541] netlink: 'syz.1.970': attribute type 4 has an invalid length. [ 359.478266][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 359.490650][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.512598][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.537888][ T43] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 359.549602][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.587316][ T43] usb 4-1: config 0 descriptor?? [ 359.924660][ T980] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 359.973282][ T9517] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.989382][ T9517] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.006436][ T9517] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.022845][ T9517] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.129079][ T43] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 360.139020][ T43] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 360.157692][ T43] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 360.164547][ T43] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 360.171345][ T43] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 360.181121][ T43] savu 0003:1E7D:2D5A.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 360.214525][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 360.226555][ T980] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 360.228163][ T5929] usb 4-1: USB disconnect, device number 25 [ 360.243466][ T980] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 360.252911][ T980] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 360.271880][ T980] usb 2-1: Product: syz [ 360.276475][ T980] usb 2-1: Manufacturer: syz [ 360.286334][ T980] usb 2-1: SerialNumber: syz [ 360.305590][ T980] usb 2-1: config 0 descriptor?? [ 360.312461][ T9555] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 360.677888][ T9572] libceph: resolve '400' (ret=-3): failed [ 360.782787][ T5901] usb 2-1: USB disconnect, device number 37 [ 360.894609][ T43] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 361.311075][ T43] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 361.335184][ T43] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 361.364976][ T43] usb 3-1: config 8 has an invalid descriptor of length 78, skipping remainder of the config [ 361.397721][ T43] usb 3-1: config 8 has no interface number 0 [ 361.420302][ T43] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 361.447614][ T43] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.726880][ T43] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 361.757954][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.777603][ T43] usb 3-1: Product: syz [ 361.891083][ T43] usb 3-1: Manufacturer: syz [ 361.906331][ T43] usb 3-1: SerialNumber: syz [ 362.218392][ T43] usb 3-1: USB disconnect, device number 25 [ 362.297718][ T9590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 363.091115][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.984'. [ 363.432837][ T9605] netlink: 104 bytes leftover after parsing attributes in process `syz.0.986'. [ 363.901642][ T9605] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.979743][ T9605] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.444015][ T9605] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.526398][ T9605] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.004657][ T9633] libceph: resolve '400' (ret=-3): failed [ 366.111629][ T9636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.868666][ T9647] befs: (nullb0): No write support. Marking filesystem read-only [ 366.888365][ T9647] befs: (nullb0): invalid magic header [ 367.518886][ T9667] netlink: 'syz.1.1002': attribute type 3 has an invalid length. [ 368.705955][ T980] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 368.866419][ T980] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 368.875148][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.898889][ T980] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 368.914435][ T980] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 368.924638][ T980] usb 2-1: Manufacturer: syz [ 368.935267][ T980] usb 2-1: config 0 descriptor?? [ 369.053343][ T9605] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.072513][ T9605] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.092761][ T9605] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.134992][ T980] rc_core: IR keymap rc-hauppauge not found [ 369.141249][ T980] Registered IR keymap rc-empty [ 369.205931][ T980] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 369.276592][ T980] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21 [ 369.496532][ T9605] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.516291][ T9696] rc rc0: two consecutive events of type space [ 369.880894][ T1210] usb 2-1: USB disconnect, device number 38 [ 370.185149][ T9704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.320779][ T9718] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 372.657227][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1015'. [ 374.073489][ T30] audit: type=1326 audit(3511907395.029:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9739 comm="syz.0.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 374.101081][ T30] audit: type=1326 audit(3511907395.029:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9739 comm="syz.0.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 374.125638][ T30] audit: type=1326 audit(3511907395.029:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9739 comm="syz.0.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 374.192057][ T30] audit: type=1326 audit(3511907395.029:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9739 comm="syz.0.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 374.239944][ T30] audit: type=1326 audit(3511907395.029:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9739 comm="syz.0.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 374.244428][ T9743] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 374.262629][ T30] audit: type=1326 audit(3511907395.029:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9739 comm="syz.0.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 374.300844][ T30] audit: type=1326 audit(3511907395.029:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9739 comm="syz.0.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 374.558393][ T9752] Invalid source name [ 374.564623][ T9752] UBIFS error (pid: 9752): cannot open "/dev/sg0", error -22 [ 374.864518][ T30] audit: type=1326 audit(3511907395.029:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9739 comm="syz.0.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 374.884563][ T9753] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1021'. [ 374.944797][ T30] audit: type=1326 audit(3511907395.029:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9739 comm="syz.0.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 375.039494][ T30] audit: type=1326 audit(3511907395.029:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9739 comm="syz.0.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 375.355753][ T9776] No such timeout policy "syz0" [ 376.580264][ T9789] tmpfs: Bad value for 'mpol' [ 377.324976][ T5901] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 377.487904][ T5901] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 377.501121][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 377.513616][ T5901] usb 1-1: Product: syz [ 377.518199][ T5901] usb 1-1: SerialNumber: syz [ 377.531875][ T5901] usb 1-1: config 0 descriptor?? [ 377.911598][ T9818] netlink: 'syz.4.1038': attribute type 1 has an invalid length. [ 377.919837][ T9818] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1038'. [ 378.586988][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.587166][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.135303][ T9828] syz.4.1040: attempt to access beyond end of device [ 379.135303][ T9828] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 379.306915][ T5859] Bluetooth: hci5: command 0x1003 tx timeout [ 379.344478][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 379.817530][ T9825] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 379.823842][ T9825] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 379.900233][ T9825] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 379.914469][ T9825] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 379.933605][ T9825] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.940950][ T9825] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 379.959669][ T9825] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.966282][ T9825] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 379.981070][ T9825] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 379.989819][ T9825] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 380.088987][ T55] usb 1-1: USB disconnect, device number 33 [ 380.164530][ T980] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 380.376256][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 380.401902][ T980] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 380.427991][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.563884][ T980] usb 5-1: Product: syz [ 380.572576][ T980] usb 5-1: Manufacturer: syz [ 380.577438][ T980] usb 5-1: SerialNumber: syz [ 380.605621][ T980] usb 5-1: config 0 descriptor?? [ 380.626259][ T980] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 380.977911][ T5929] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 381.526839][ T980] gspca_stk1135: reg_w 0x3 err -110 [ 381.541313][ T5901] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 381.625452][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 381.633049][ T9865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.633884][ T5929] usb 2-1: config 7 has an invalid interface number: 100 but max is 0 [ 381.650636][ T980] gspca_stk1135: serial bus timeout: status=0x00 [ 381.721470][ T980] gspca_stk1135: Sensor write failed [ 381.727782][ T9865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.740488][ T5929] usb 2-1: config 7 has no interface number 0 [ 381.749660][ T980] gspca_stk1135: serial bus timeout: status=0x00 [ 381.750764][ T5929] usb 2-1: config 7 interface 100 has no altsetting 0 [ 381.784205][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.786677][ T980] gspca_stk1135: Sensor write failed [ 381.802644][ T5929] usb 2-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=93.5e [ 381.819859][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.830859][ T980] gspca_stk1135: serial bus timeout: status=0x00 [ 381.832308][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.841174][ T980] gspca_stk1135: Sensor read failed [ 381.851505][ T980] gspca_stk1135: serial bus timeout: status=0x00 [ 381.874565][ T5901] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 381.902415][ T5929] usb 2-1: Product: syz [ 381.912376][ T5929] usb 2-1: Manufacturer: syz [ 381.919171][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.939584][ T5929] usb 2-1: SerialNumber: syz [ 381.961730][ T5901] usb 1-1: config 0 descriptor?? [ 382.052693][ T980] gspca_stk1135: Sensor read failed [ 382.063007][ T980] gspca_stk1135: Detected sensor type unknown (0x0) [ 382.070992][ T980] gspca_stk1135: serial bus timeout: status=0x00 [ 382.081309][ T980] gspca_stk1135: Sensor read failed [ 382.088364][ T980] gspca_stk1135: serial bus timeout: status=0x00 [ 382.097853][ T980] gspca_stk1135: Sensor read failed [ 382.103329][ T980] gspca_stk1135: serial bus timeout: status=0x00 [ 382.168376][ T9880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.808429][ T980] gspca_stk1135: Sensor write failed [ 382.813793][ T980] gspca_stk1135: serial bus timeout: status=0x00 [ 383.018026][ T9884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1043'. [ 383.039699][ T9884] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 383.587773][ T980] gspca_stk1135: Sensor write failed [ 383.657991][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'. [ 383.667159][ T980] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 383.709814][ T980] usb 5-1: USB disconnect, device number 29 [ 383.781534][ T5901] usbhid 1-1:0.0: can't add hid device: -71 [ 383.815291][ T5901] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 383.872152][ T5901] usb 1-1: USB disconnect, device number 34 [ 384.808824][ T5929] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 384.838516][ T5929] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 384.988370][ T5929] pac7311 2-1:7.100: probe with driver pac7311 failed with error -71 [ 385.029994][ T5929] usb 2-1: USB disconnect, device number 39 [ 385.106369][ T9902] input: syz1 as /devices/virtual/input/input22 [ 385.243996][ T9910] binder: 9907:9910 ioctl c018937b 200000003540 returned -22 [ 385.413212][ T9920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 385.544238][ T9916] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 385.646863][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1057'. [ 385.807318][ T9933] overlayfs: failed to decode file handle (len=0, type=251, flags=0, err=-22) [ 387.379765][ T9960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.889910][ T9964] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1063'. [ 387.967334][ T9964] x_tables: duplicate underflow at hook 2 [ 388.335068][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 388.564047][ T9998] fuse: Bad value for 'fd' [ 388.639996][T10002] wg1: entered promiscuous mode [ 388.645242][T10002] wg1: entered allmulticast mode [ 388.682193][T10002] binder: 9997:10002 ioctl c018620c 200000000180 returned -22 [ 389.277205][T10001] afs: Unknown parameter '--}' [ 390.285014][ T5847] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 390.336193][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1077'. [ 391.145890][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.168270][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.194220][ T5847] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 391.242101][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.263772][T10035] can0: slcan on ptm0. [ 391.308426][ T5847] usb 5-1: config 0 descriptor?? [ 391.556595][T10038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1080'. [ 391.756852][ T5847] kye 0003:0458:5010.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 391.801185][ T5847] kye 0003:0458:5010.000E: item fetching failed at offset 5/7 [ 391.833416][ T5847] kye 0003:0458:5010.000E: parse failed [ 391.873038][ T5847] kye 0003:0458:5010.000E: probe with driver kye failed with error -22 [ 391.940007][T10021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.954868][T10021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.038248][ T5847] usb 5-1: USB disconnect, device number 31 [ 392.146491][T10034] can0 (unregistered): slcan off ptm0. [ 392.489652][T10058] fuse: Bad value for 'fd' [ 393.155011][ T5847] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 393.263899][T10075] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1088'. [ 393.465214][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 393.472865][ T5847] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 393.482252][ T5847] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.500129][ T5847] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 393.621043][T10088] libceph: resolve '400' (ret=-3): failed [ 394.030312][ T5847] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 394.046615][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.057430][ T5847] usb 5-1: Product: syz [ 394.061808][ T5847] usb 5-1: Manufacturer: syz [ 394.068227][ T5847] usb 5-1: SerialNumber: syz [ 394.725330][T10067] tipc: Enabled bearer , priority 0 [ 394.733025][T10067] syzkaller0: entered promiscuous mode [ 394.738818][T10067] syzkaller0: entered allmulticast mode [ 394.744873][ T5929] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 394.868931][T10067] tipc: Resetting bearer [ 394.877942][T10067] 9pnet_fd: Insufficient options for proto=fd [ 394.888553][T10066] tipc: Resetting bearer [ 394.894743][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 394.918911][ T5929] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 394.928599][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.930104][T10066] tipc: Disabling bearer [ 394.936832][ T5929] usb 3-1: Product: syz [ 394.946910][ T5929] usb 3-1: Manufacturer: syz [ 394.951554][ T5929] usb 3-1: SerialNumber: syz [ 394.954473][ T43] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 394.969297][ T5929] usb 3-1: config 0 descriptor?? [ 395.009428][ T5847] usb 5-1: 0:2 : does not exist [ 395.018830][ T5847] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 395.039835][ T5847] usb 5-1: USB disconnect, device number 32 [ 395.117281][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.127695][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.138313][ T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 395.150711][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 395.158822][ T43] usb 2-1: SerialNumber: syz [ 395.179534][ T5929] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 395.404817][ T5901] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 395.571237][T10111] team0 (unregistering): Port device team_slave_0 removed [ 395.578580][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 395.587512][ T5901] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.605196][T10111] team0 (unregistering): Port device team_slave_1 removed [ 395.612678][ T5901] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.635550][T10111] team0 (unregistering): Port device geneve0 removed [ 395.653619][ T5901] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.666808][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.794052][ T5901] usb 4-1: Product: syz [ 395.798849][ T5901] usb 4-1: Manufacturer: syz [ 395.803922][ T5901] usb 4-1: SerialNumber: syz [ 396.029519][T10110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.070883][T10110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.230934][ T5901] usb 4-1: 0:2 : does not exist [ 396.242456][ T5929] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 396.331615][ T5929] usb 3-1: USB disconnect, device number 26 [ 396.407336][ T5901] usb 4-1: USB disconnect, device number 26 [ 396.407731][ T43] usb 2-1: 0:2 : does not exist [ 396.426215][T10130] veth0: entered promiscuous mode [ 396.631463][ T43] usb 2-1: USB disconnect, device number 40 [ 396.798452][T10122] veth0: left promiscuous mode [ 397.017775][T10138] overlayfs: failed to resolve './file1/file0': -2 [ 397.061688][T10139] overlayfs: failed to resolve './file1/file0': -2 [ 397.134641][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 397.143638][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 397.494749][ T43] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 397.706450][ T43] usb 5-1: config 0 has no interfaces? [ 397.831433][ T43] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 397.872969][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.991312][T10159] libceph: resolve '400' (ret=-3): failed [ 398.408852][ T43] usb 5-1: Product: syz [ 398.413071][ T43] usb 5-1: Manufacturer: syz [ 398.417913][ T43] usb 5-1: SerialNumber: syz [ 398.436771][ T43] usb 5-1: config 0 descriptor?? [ 398.723619][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.760448][T10164] syz_tun: entered allmulticast mode [ 398.859670][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.545171][T10164] syz_tun: left allmulticast mode [ 399.676394][T10177] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 399.696147][T10179] fuse: Unknown parameter '0x0000000000000003' [ 399.785599][ T55] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 399.815340][T10181] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 399.827731][T10181] /dev/nullb0: Can't open blockdev [ 400.067855][ T55] usb 1-1: config 7 has an invalid interface number: 192 but max is 0 [ 400.078783][ T55] usb 1-1: config 7 has no interface number 0 [ 400.098303][ T55] usb 1-1: config 7 interface 192 has no altsetting 0 [ 400.124927][ T55] usb 1-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 400.150934][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.162564][T10189] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1116'. [ 400.166016][ T55] usb 1-1: Product: syz [ 400.185854][ T55] usb 1-1: Manufacturer: syz [ 400.189567][T10189] netlink: zone id is out of range [ 400.201583][ T55] usb 1-1: SerialNumber: syz [ 400.214054][T10189] netlink: zone id is out of range [ 400.241518][T10189] netlink: zone id is out of range [ 400.264164][T10189] netlink: zone id is out of range [ 400.274120][T10189] netlink: zone id is out of range [ 400.281903][T10189] netlink: zone id is out of range [ 400.289537][T10189] netlink: get zone limit has 8 unknown bytes [ 400.446882][ T55] usb 1-1: USB disconnect, device number 35 [ 400.663426][ T5929] usb 5-1: USB disconnect, device number 33 [ 402.424754][T10218] libceph: resolve '400' (ret=-3): failed [ 402.657048][T10230] fuse: Unknown parameter '0x0000000000000003' [ 402.705120][ T5901] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 402.848434][ T5901] usb 4-1: device descriptor read/64, error -71 [ 402.901806][T10239] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 402.909951][T10239] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1129'. [ 402.974694][ T55] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 403.120451][T10244] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1130'. [ 403.144518][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 403.273374][ T55] usb 1-1: config 3 has an invalid interface number: 201 but max is 0 [ 403.364391][ T55] usb 1-1: config 3 has no interface number 0 [ 403.427330][ T55] usb 1-1: config 3 interface 201 has no altsetting 0 [ 403.668225][ T55] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=74.48 [ 403.693546][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.711101][ T55] usb 1-1: Product: syz [ 403.716417][ T55] usb 1-1: Manufacturer: syz [ 403.721109][ T55] usb 1-1: SerialNumber: syz [ 403.722096][ T5901] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 403.748675][T10247] loop0: detected capacity change from 0 to 7 [ 403.759197][T10247] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 403.774460][T10247] loop0: partition table partially beyond EOD, truncated [ 403.790227][T10247] loop0: p1 size 2433217042 extends beyond EOD, truncated [ 403.935242][ T5929] IPVS: starting estimator thread 0... [ 403.974770][ T5901] usb 4-1: device descriptor read/64, error -71 [ 404.084872][T10252] IPVS: using max 27 ests per chain, 64800 per kthread [ 404.092457][ T55] int51x1 1-1:3.201: probe with driver int51x1 failed with error -71 [ 404.104581][ T55] usb 1-1: USB disconnect, device number 36 [ 404.136159][ T5901] usb usb4-port1: attempt power cycle [ 404.400598][T10260] block device autoloading is deprecated and will be removed. [ 404.915913][T10262] netlink: 'syz.4.1134': attribute type 13 has an invalid length. [ 404.969940][ T55] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 405.401064][ T55] usb 1-1: Invalid ep0 maxpacket: 16 [ 405.936675][ T5929] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 406.090140][ T55] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 406.124814][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 406.157720][ T5929] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 406.199513][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.684662][ T5929] usb 3-1: Product: syz [ 406.691537][ T5929] usb 3-1: Manufacturer: syz [ 406.699430][ T5929] usb 3-1: SerialNumber: syz [ 406.940634][ T5929] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 407.031048][ T5929] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 407.062567][ T5929] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 407.141403][ T5929] usb 3-1: USB disconnect, device number 27 [ 407.154080][ T5929] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 407.168302][ T5929] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 407.178848][ T5929] visor 3-1:1.0: device disconnected [ 407.364551][ T980] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 407.404568][ T43] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 407.444641][ T55] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 407.534640][ T980] usb 4-1: Using ep0 maxpacket: 16 [ 407.539969][ T43] usb 5-1: device descriptor read/64, error -71 [ 407.548251][ T980] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.558500][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.569628][ T980] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.578887][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.586963][ T980] usb 4-1: Product: syz [ 407.591169][ T980] usb 4-1: Manufacturer: syz [ 407.595865][ T980] usb 4-1: SerialNumber: syz [ 407.634661][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 407.641828][ T55] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 407.650219][ T55] usb 1-1: config 0 has no interface number 0 [ 407.656702][ T55] usb 1-1: config 0 interface 184 has no altsetting 0 [ 407.678468][ T55] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 407.691807][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.701679][ T55] usb 1-1: Product: syz [ 407.709990][ T55] usb 1-1: Manufacturer: syz [ 407.715615][ T55] usb 1-1: SerialNumber: syz [ 407.724268][ T55] usb 1-1: config 0 descriptor?? [ 407.736775][ T55] smsc75xx v1.0.0 [ 407.770879][T10297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1145'. [ 407.782645][T10297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1145'. [ 407.794644][ T43] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 407.808583][ T980] usb 4-1: 0:2 : does not exist [ 407.818800][ T980] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 407.838215][ T980] usb 4-1: USB disconnect, device number 30 [ 408.120088][ T43] usb 5-1: device descriptor read/64, error -71 [ 408.191368][T10300] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1146'. [ 408.201194][T10300] 8021q: VLANs not supported on sit0 [ 408.239874][ T43] usb usb5-port1: attempt power cycle [ 408.505364][ T55] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 408.519848][ T55] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 408.644551][ T43] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 408.883806][ T43] usb 5-1: device descriptor read/8, error -71 [ 409.248466][ T43] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 409.385734][ T43] usb 5-1: device descriptor read/8, error -71 [ 409.572945][ T43] usb usb5-port1: unable to enumerate USB device [ 409.599759][T10323] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 2, id = 0 [ 409.626199][T10322] vcan0: tx drop: invalid sa for name 0xbffffffffffffffd [ 409.773872][ T55] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 409.812904][ T55] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 409.891349][ T55] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 409.958603][T10329] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1155'. [ 410.129479][ T55] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 410.772971][ T55] usb 1-1: USB disconnect, device number 39 [ 410.888992][T10327] x_tables: duplicate underflow at hook 2 [ 410.947013][T10336] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 410.991184][T10328] IPVS: stopping backup sync thread 10336 ... [ 411.314754][ T55] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 411.504536][ T5901] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 411.535158][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 411.543719][ T55] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 411.561638][ T55] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.579647][ T55] usb 1-1: config 0 has no interface number 0 [ 411.586106][ T55] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 411.598022][ T55] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 411.621406][ T55] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 411.633353][ T55] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 411.667748][ T55] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 411.668624][ T5901] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.686066][ T55] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 411.719721][ T5901] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.758927][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.774633][ T5901] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 411.808482][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.837896][ T5901] usb 4-1: config 0 descriptor?? [ 411.921190][ T55] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 411.931020][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.955284][ T55] usb 1-1: config 0 descriptor?? [ 411.961393][T10337] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 411.973888][ T55] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 412.059371][T10354] netlink: 'syz.1.1161': attribute type 4 has an invalid length. [ 412.067337][T10354] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1161'. [ 412.791335][ T55] snd-usb-audio 1-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 412.824910][ T55] usb 1-1: USB disconnect, device number 40 [ 412.998851][T10360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1158'. [ 413.064115][T10361] kvm: pic: non byte write [ 413.130660][ T5901] usbhid 4-1:0.0: can't add hid device: -71 [ 413.143266][ T5901] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 413.172963][ T5901] usb 4-1: USB disconnect, device number 31 [ 413.546132][T10370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1166'. [ 414.457420][ T5948] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 414.594552][ T43] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 414.644901][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 414.656499][ T5948] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 414.674494][ T55] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 414.682216][ T5948] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.705807][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 414.736997][ T5948] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 414.753013][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.762037][ T43] usb 1-1: device descriptor read/64, error -71 [ 414.778715][ T5948] usb 5-1: Product: syz [ 414.791970][ T5948] usb 5-1: Manufacturer: syz [ 414.799875][ T5948] usb 5-1: SerialNumber: syz [ 414.854780][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 414.876130][ T55] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 414.895591][ T55] usb 2-1: config 0 has no interface number 0 [ 414.938458][ T55] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 414.958069][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.982589][ T55] usb 2-1: Product: syz [ 414.991066][ T55] usb 2-1: Manufacturer: syz [ 414.996010][ T55] usb 2-1: SerialNumber: syz [ 415.034724][ T43] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 415.185515][ T5847] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 415.199720][ T43] usb 1-1: device descriptor read/64, error -71 [ 415.212273][ T55] usb 2-1: config 0 descriptor?? [ 415.229474][ T5948] usb 5-1: 0:2 : does not exist [ 415.648476][ T43] usb usb1-port1: attempt power cycle [ 415.654483][ T55] ath6kl: Failed to submit usb control message: -71 [ 415.654665][ T5847] usb 4-1: Using ep0 maxpacket: 16 [ 415.661824][ T55] ath6kl: unable to send the bmi data to the device: -71 [ 415.673528][ T5847] usb 4-1: config 3 has an invalid interface number: 124 but max is 0 [ 415.676045][ T55] ath6kl: Unable to send get target info: -71 [ 415.684095][ T5847] usb 4-1: config 3 has no interface number 0 [ 415.691307][ T55] ath6kl: Failed to init ath6kl core: -71 [ 415.817307][ T5847] usb 4-1: config 3 interface 124 has no altsetting 0 [ 416.042859][ T5847] usb 4-1: New USB device found, idVendor=33d8, idProduct=bbce, bcdDevice=3f.d1 [ 416.058225][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.068985][ T5847] usb 4-1: Product: syz [ 416.073168][ T5847] usb 4-1: Manufacturer: syz [ 416.080499][ T5847] usb 4-1: SerialNumber: syz [ 416.103476][T10374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.119933][T10374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.315134][ T55] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 416.330827][ T55] usb 2-1: USB disconnect, device number 41 [ 416.360143][ T5948] usb 5-1: USB disconnect, device number 38 [ 416.936047][ T43] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 417.050240][ T43] usb 1-1: device descriptor read/8, error -71 [ 417.407883][T10413] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1177'. [ 417.597304][ T43] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 417.898289][ T43] usb 1-1: device descriptor read/8, error -71 [ 417.970202][ T5847] usb 4-1: USB disconnect, device number 32 [ 418.015517][ T43] usb usb1-port1: unable to enumerate USB device [ 418.207234][ T5901] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 418.464770][T10436] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1183'. [ 418.547041][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 418.867551][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 418.958825][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 418.992747][ T5901] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 419.002342][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.014721][ T5901] usb 5-1: Product: syz [ 419.018894][ T5901] usb 5-1: Manufacturer: syz [ 419.023478][ T5901] usb 5-1: SerialNumber: syz [ 419.042429][ T5901] usb 5-1: config 0 descriptor?? [ 419.051888][ T5901] usb 5-1: no audio or video endpoints found [ 419.397857][ T5948] usb 5-1: USB disconnect, device number 39 [ 419.836887][T10449] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 419.863310][T10450] misc userio: The device must be registered before sending interrupts [ 420.516335][T10462] FAULT_INJECTION: forcing a failure. [ 420.516335][T10462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.546392][T10461] vlan2: entered allmulticast mode [ 420.574605][T10462] CPU: 1 UID: 0 PID: 10462 Comm: syz.0.1190 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 420.574634][T10462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.574650][T10462] Call Trace: [ 420.574660][T10462] [ 420.574669][T10462] dump_stack_lvl+0x189/0x250 [ 420.574696][T10462] ? __pfx____ratelimit+0x10/0x10 [ 420.574719][T10462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.574740][T10462] ? __pfx__printk+0x10/0x10 [ 420.574765][T10462] ? __might_fault+0xb0/0x130 [ 420.574797][T10462] should_fail_ex+0x414/0x560 [ 420.574821][T10462] _copy_from_user+0x2d/0xb0 [ 420.574846][T10462] ___sys_sendmsg+0x158/0x2a0 [ 420.574886][T10462] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.574952][T10462] ? __fget_files+0x2a/0x420 [ 420.574973][T10462] ? __fget_files+0x3a0/0x420 [ 420.575005][T10462] __x64_sys_sendmsg+0x19b/0x260 [ 420.575037][T10462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.575076][T10462] ? __pfx_ksys_write+0x10/0x10 [ 420.575092][T10462] ? rcu_is_watching+0x15/0xb0 [ 420.575126][T10462] ? do_syscall_64+0xbe/0x3b0 [ 420.575150][T10462] do_syscall_64+0xfa/0x3b0 [ 420.575168][T10462] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.575186][T10462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.575202][T10462] ? clear_bhb_loop+0x60/0xb0 [ 420.575222][T10462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.575239][T10462] RIP: 0033:0x7fbb7c78ebe9 [ 420.575256][T10462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.575272][T10462] RSP: 002b:00007fbb7d62a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.575292][T10462] RAX: ffffffffffffffda RBX: 00007fbb7c9b5fa0 RCX: 00007fbb7c78ebe9 [ 420.575305][T10462] RDX: 0000000020000000 RSI: 0000200000001200 RDI: 0000000000000005 [ 420.575319][T10462] RBP: 00007fbb7d62a090 R08: 0000000000000000 R09: 0000000000000000 [ 420.575329][T10462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.575339][T10462] R13: 00007fbb7c9b6038 R14: 00007fbb7c9b5fa0 R15: 00007ffca8daea98 [ 420.575371][T10462] [ 420.780253][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.781144][T10461] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 420.886708][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1193'. [ 421.454521][ T5901] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 421.607695][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 421.617217][ T5901] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 421.631807][ T5901] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 421.652241][ T5901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 421.672971][ T5901] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 421.700612][ T5901] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 421.740762][ T5901] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.753014][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.870447][T10487] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1199'. [ 422.046349][T10487] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.265206][T10487] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.282955][ T5901] usb 2-1: usb_control_msg returned -32 [ 422.293504][ T5901] usbtmc 2-1:16.0: can't read capabilities [ 422.311739][T10487] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.332880][ T43] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 422.364308][T10487] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.775381][T10498] libceph: resolve '400' (ret=-3): failed [ 422.802809][T10487] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.896194][T10499] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.113283][T10487] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.125175][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 423.125680][T10487] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.137634][T10487] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.187848][T10499] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.188674][ T43] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.207720][ T43] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 423.229927][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 423.244592][ T43] usb 1-1: New USB device found, idVendor=056a, idProduct=0326, bcdDevice= 3.00 [ 423.253898][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.257140][T10499] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.282255][ T43] usb 1-1: config 0 descriptor?? [ 423.402420][T10499] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.483272][T10505] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1204'. [ 423.511695][T10499] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.530465][T10499] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.549403][T10499] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.568228][T10499] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.582466][T10510] FAULT_INJECTION: forcing a failure. [ 423.582466][T10510] name failslab, interval 1, probability 0, space 0, times 0 [ 423.599536][T10510] CPU: 0 UID: 0 PID: 10510 Comm: syz.3.1205 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 423.599563][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.599576][T10510] Call Trace: [ 423.599584][T10510] [ 423.599593][T10510] dump_stack_lvl+0x189/0x250 [ 423.599626][T10510] ? __pfx____ratelimit+0x10/0x10 [ 423.599648][T10510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 423.599670][T10510] ? __pfx__printk+0x10/0x10 [ 423.599700][T10510] ? __pfx___might_resched+0x10/0x10 [ 423.599727][T10510] should_fail_ex+0x414/0x560 [ 423.599753][T10510] should_failslab+0xa8/0x100 [ 423.599776][T10510] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 423.599796][T10510] ? __alloc_skb+0x112/0x2d0 [ 423.599827][T10510] __alloc_skb+0x112/0x2d0 [ 423.599858][T10510] netlink_sendmsg+0x5c6/0xb30 [ 423.599894][T10510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.599930][T10510] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.599949][T10510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.599977][T10510] __sock_sendmsg+0x21c/0x270 [ 423.600004][T10510] ____sys_sendmsg+0x505/0x830 [ 423.600040][T10510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.600080][T10510] ? import_iovec+0x74/0xa0 [ 423.600112][T10510] ___sys_sendmsg+0x21f/0x2a0 [ 423.600144][T10510] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.600212][T10510] ? __fget_files+0x2a/0x420 [ 423.600233][T10510] ? __fget_files+0x3a0/0x420 [ 423.600266][T10510] __x64_sys_sendmsg+0x19b/0x260 [ 423.600298][T10510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.600338][T10510] ? __pfx_ksys_write+0x10/0x10 [ 423.600353][T10510] ? rcu_is_watching+0x15/0xb0 [ 423.600380][T10510] ? do_syscall_64+0xbe/0x3b0 [ 423.600406][T10510] do_syscall_64+0xfa/0x3b0 [ 423.600426][T10510] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.600446][T10510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.600465][T10510] ? clear_bhb_loop+0x60/0xb0 [ 423.600489][T10510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.600508][T10510] RIP: 0033:0x7f0777f8ebe9 [ 423.600525][T10510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.600544][T10510] RSP: 002b:00007f0778dce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.600564][T10510] RAX: ffffffffffffffda RBX: 00007f07781b5fa0 RCX: 00007f0777f8ebe9 [ 423.600579][T10510] RDX: 0000000020000000 RSI: 0000200000001200 RDI: 0000000000000005 [ 423.600593][T10510] RBP: 00007f0778dce090 R08: 0000000000000000 R09: 0000000000000000 [ 423.600605][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.600622][T10510] R13: 00007f07781b6038 R14: 00007f07781b5fa0 R15: 00007fff6190ff38 [ 423.600656][T10510] [ 423.688057][ T43] usb 1-1: string descriptor 0 read error: -71 [ 423.910361][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 423.916729][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 423.932261][ T43] usb 1-1: USB disconnect, device number 45 [ 424.171904][ T980] usb 2-1: USB disconnect, device number 42 [ 424.264517][T10520] netlink: 'syz.1.1209': attribute type 1 has an invalid length. [ 424.272357][T10520] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1209'. [ 424.515824][T10524] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1208'. [ 425.554858][T10531] netlink: 'syz.4.1211': attribute type 1 has an invalid length. [ 425.562755][T10531] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1211'. [ 427.183222][ T980] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 427.334491][ T980] usb 2-1: Using ep0 maxpacket: 16 [ 427.362488][ T980] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 427.390133][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 427.418756][ T980] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 427.436390][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.451963][ T980] usb 2-1: Product: syz [ 427.459463][ T980] usb 2-1: Manufacturer: syz [ 427.469493][ T980] usb 2-1: SerialNumber: syz [ 427.485541][ T980] usb 2-1: config 0 descriptor?? [ 427.501682][ T980] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 427.540408][ T980] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 427.645031][ T1210] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 427.815375][ T1210] usb 3-1: Using ep0 maxpacket: 32 [ 427.841095][ T1210] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.880405][ T1210] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.927199][ T1210] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 427.952468][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 427.991634][ T1210] usb 3-1: Product: syz [ 428.011930][ T1210] usb 3-1: Manufacturer: syz [ 428.024996][ T1210] usb 3-1: SerialNumber: syz [ 428.090976][ T1210] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input23 [ 428.164261][T10574] netem: change failed [ 428.381547][ T980] em28xx 2-1:0.0: chip ID is em2870 [ 428.468914][T10578] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1221'. [ 428.571958][T10578] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.802615][T10578] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.957261][T10581] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 428.957261][T10581] program syz.4.1223 not setting count and/or reply_len properly [ 429.377258][T10578] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.410355][ T5929] usb 2-1: USB disconnect, device number 43 [ 429.446426][ T5929] em28xx 2-1:0.0: Disconnecting em28xx [ 429.496765][ T5929] em28xx 2-1:0.0: Freeing device [ 429.616937][T10578] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.742053][T10578] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.761344][T10578] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.780600][T10578] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.799750][T10578] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.967266][ T5929] usb 3-1: USB disconnect, device number 28 [ 430.002842][ T5929] appletouch 3-1:1.0: input: appletouch disconnected [ 430.494462][T10610] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1229'. [ 431.222658][T10616] IPv6: Can't replace route, no match found [ 431.278999][T10616] comedi comedi1: comedi_config --init_data is deprecated [ 431.307852][ T43] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 431.514776][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 431.531775][ T43] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 431.598590][ T43] usb 3-1: config 179 has no interface number 0 [ 431.657990][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 431.766932][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 431.853944][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 431.952215][ T43] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 431.968729][T10620] netlink: 'syz.0.1234': attribute type 1 has an invalid length. [ 431.976560][T10620] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1234'. [ 432.171109][ T43] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 432.181130][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.193224][T10612] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 432.294866][ T5929] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 432.406044][ T5901] usb 3-1: USB disconnect, device number 29 [ 432.466809][ T5929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.478246][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.488990][ T5929] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 432.499139][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 432.507276][ T5929] usb 4-1: SerialNumber: syz [ 432.719382][ T5929] usb 4-1: 0:2 : does not exist [ 432.733392][ T5929] usb 4-1: USB disconnect, device number 33 [ 433.669674][T10662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1247'. [ 433.740295][T10662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1247'. [ 433.782877][ T43] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 433.785911][ T5929] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 434.110817][T10664] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 434.121230][T10664] comedi comedi3: 8255: I/O port conflict (0x8000006,4) [ 434.135636][T10664] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 434.142137][T10664] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 434.154860][T10664] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 434.161828][T10664] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 434.163369][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 434.197546][ T5929] usb 5-1: config 0 has an invalid interface number: 90 but max is 0 [ 434.200715][ T43] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 434.217079][T10664] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 434.224248][ T5929] usb 5-1: config 0 has no interface number 0 [ 434.230463][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.233034][ T43] usb 3-1: config 0 descriptor?? [ 434.242332][T10664] comedi comedi3: 8255: I/O port conflict (0x3000000,4) [ 434.249885][T10657] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 434.276229][T10668] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 434.282915][ T5929] usb 5-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 434.284055][T10668] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1249'. [ 434.316320][ T5929] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 434.342564][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.358087][ T5929] usb 5-1: Product: syz [ 434.362549][ T5929] usb 5-1: Manufacturer: syz [ 434.371107][ T5929] usb 5-1: SerialNumber: syz [ 434.386183][ T5929] usb 5-1: config 0 descriptor?? [ 434.395239][T10655] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 434.594983][ T5901] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 435.065130][ T43] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 435.068560][ T5929] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 435.097470][ T5901] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 435.111485][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.136851][ T5929] input: Griffin PowerMate as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.90/input/input24 [ 435.157786][ T5847] usb 3-1: USB disconnect, device number 30 [ 435.174216][ T5901] usb 1-1: Product: syz [ 435.197116][ T5901] usb 1-1: Manufacturer: syz [ 435.302723][ T5901] usb 1-1: SerialNumber: syz [ 435.396692][T10677] netlink: 168928 bytes leftover after parsing attributes in process `syz.3.1251'. [ 435.476498][ T5901] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 435.496446][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.500682][T10683] netlink: 320 bytes leftover after parsing attributes in process `syz.1.1253'. [ 435.532712][T10655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.543778][T10655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.590948][ C0] powermate: config urb returned -71 [ 435.596582][ C0] powermate: config urb returned -71 [ 435.602042][ C0] powermate: config urb returned -71 [ 435.607948][ T5901] usb 5-1: USB disconnect, device number 40 [ 435.613889][ C0] powermate 5-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 435.705170][ T5929] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 436.217959][T10689] NILFS (nullb0): couldn't find nilfs on the device [ 436.284575][ T5929] usb 4-1: Using ep0 maxpacket: 8 [ 436.336736][ T5901] usb 1-1: USB disconnect, device number 46 [ 436.470927][T10693] program syz.2.1255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.779030][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 436.788099][ T9] ath9k_htc: Failed to initialize the device [ 436.795677][ T5901] usb 1-1: ath9k_htc: USB layer deinitialized [ 436.998393][ T5929] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.022956][ T5929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.123224][T10698] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1256'. [ 437.599638][ T5929] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.610264][ T5929] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.623308][ T5929] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 437.641593][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.517511][ T5929] usb 4-1: GET_CAPABILITIES returned 0 [ 438.523055][ T5929] usbtmc 4-1:16.0: can't read capabilities [ 438.730031][ T5929] usb 4-1: USB disconnect, device number 34 [ 439.054766][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 439.076865][T10711] libceph: resolve '400' (ret=-3): failed [ 439.284605][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 439.292471][ T24] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 439.300019][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 439.311226][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 439.325023][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 439.334200][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.342370][ T24] usb 1-1: Product: syz [ 439.350892][ T24] usb 1-1: Manufacturer: syz [ 439.369431][ T24] usb 1-1: SerialNumber: syz [ 439.395997][ T24] usb 1-1: config 0 descriptor?? [ 439.403647][T10710] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 439.421572][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 439.428204][ T24] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 439.435326][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 440.923569][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.934654][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.974619][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 441.154646][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 441.172376][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 441.199278][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 441.225396][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 441.238403][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.252096][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 441.261279][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.274834][ T5929] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 441.439106][ T5929] usb 2-1: config 0 has an invalid interface number: 166 but max is 0 [ 441.448344][ T5929] usb 2-1: config 0 has no interface number 0 [ 441.454839][ T5929] usb 2-1: config 0 interface 166 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 441.467322][ T5929] usb 2-1: config 0 interface 166 has no altsetting 0 [ 441.475550][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 441.486364][ T5929] usb 2-1: New USB device found, idVendor=0675, idProduct=1688, bcdDevice=59.4c [ 441.496384][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.504686][ T5929] usb 2-1: Product: syz [ 441.509336][ T5929] usb 2-1: Manufacturer: syz [ 441.514162][ T5929] usb 2-1: SerialNumber: syz [ 441.526824][ T5929] usb 2-1: config 0 descriptor?? [ 441.535521][T10721] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 441.546697][ T5929] HFC-S_USB 2-1:0.166: probe with driver HFC-S_USB failed with error -5 [ 441.564721][ T24] usbtmc 5-1:16.0: can't read capabilities [ 442.869950][ T43] usb 5-1: USB disconnect, device number 41 [ 442.889642][ T5929] usb 1-1: USB disconnect, device number 47 [ 442.957036][ T5929] mcba_usb 1-1:0.0 can0: device disconnected [ 443.773014][T10742] overlayfs: conflicting lowerdir path [ 444.547052][T10744] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 444.743761][ T43] usb 2-1: USB disconnect, device number 44 [ 445.302571][T10762] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1272'. [ 446.498660][T10772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 446.748878][T10778] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 447.214688][ T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 447.245209][T10801] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1282'. [ 447.316778][T10801] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.546329][T10801] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.673621][T10801] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.733848][T10801] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.764713][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 447.777855][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 447.792628][ T24] usb 5-1: config 4 has an invalid interface number: 111 but max is 0 [ 447.807550][ T24] usb 5-1: config 4 has no interface number 0 [ 447.821488][ T24] usb 5-1: config 4 interface 111 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 8 [ 447.843209][ T24] usb 5-1: config 4 interface 111 has no altsetting 0 [ 447.862411][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99 [ 447.887250][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.045138][ T24] usb 5-1: Product: syz [ 448.049686][ T24] usb 5-1: Manufacturer: syz [ 448.054316][ T24] usb 5-1: SerialNumber: syz [ 448.063811][T10798] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 448.188736][T10801] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.209405][T10801] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.230129][T10801] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.250899][T10801] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.297830][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 448.308940][ T24] pvrusb2: ********** [ 448.312971][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 448.323400][ T24] pvrusb2: Important functionality might not be entirely working. [ 448.332628][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 448.349439][ T24] pvrusb2: ********** [ 448.354672][ T24] usb 5-1: selecting invalid altsetting 0 [ 448.366975][ T2343] pvrusb2: control-write URB failure, status=-71 [ 448.377722][ T24] usb 5-1: USB disconnect, device number 42 [ 448.383739][ T2343] pvrusb2: Device being rendered inoperable [ 449.182967][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 449.201710][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 449.484635][ T55] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 449.494569][ T5901] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 449.515006][ T5929] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 449.611671][T10824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1291'. [ 449.621149][T10824] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1291'. [ 449.634716][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 449.652380][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 449.656756][ T5901] usb 1-1: config 4 has an invalid interface number: 88 but max is 1 [ 449.667702][ T55] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 449.672074][ T5929] usb 3-1: device descriptor read/64, error -71 [ 449.681577][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.695120][ T5901] usb 1-1: config 4 has an invalid interface number: 29 but max is 1 [ 449.695145][ T5901] usb 1-1: config 4 has no interface number 0 [ 449.695162][ T5901] usb 1-1: config 4 has no interface number 1 [ 449.695213][ T5901] usb 1-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 449.695236][ T5901] usb 1-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 449.695259][ T5901] usb 1-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 449.695286][ T5901] usb 1-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 449.695321][ T5901] usb 1-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 449.695344][ T5901] usb 1-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 449.695369][ T5901] usb 1-1: config 4 interface 88 has no altsetting 0 [ 449.695386][ T5901] usb 1-1: config 4 interface 29 has no altsetting 0 [ 449.697652][ T5901] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 449.728603][ T55] usb 2-1: config 0 descriptor?? [ 449.760697][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.842110][ T5901] usb 1-1: Product: syz [ 449.849225][ T5901] usb 1-1: Manufacturer: syz [ 449.853985][ T5901] usb 1-1: SerialNumber: syz [ 449.877305][T10820] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 450.084796][ T5929] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 450.115405][ T55] usbhid 2-1:0.0: can't add hid device: -71 [ 450.121426][ T55] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 450.130135][T10827] xt_nat: multiple ranges no longer supported [ 450.219620][ T5929] usb 3-1: device descriptor read/64, error -71 [ 450.343896][ T5929] usb usb3-port1: attempt power cycle [ 450.365922][ T55] usb 2-1: USB disconnect, device number 45 [ 450.505690][T10834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.796659][T10834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.828394][ T5901] chaoskey 1-1:4.29: Unable to register with hwrng [ 450.858935][ T5901] usb 1-1: USB disconnect, device number 48 [ 451.064499][ T5929] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 452.054508][ T55] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 452.106289][ T5929] usb 3-1: device descriptor read/8, error -71 [ 452.216361][ T55] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 452.294540][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.310621][ T55] usb 2-1: config 0 has no interface number 0 [ 452.322566][ T55] usb 2-1: config 0 interface 231 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.336941][ T55] usb 2-1: config 0 interface 231 has no altsetting 0 [ 452.357658][ T55] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 452.381659][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.410437][ T55] usb 2-1: Product: syz [ 452.422645][ T55] usb 2-1: Manufacturer: syz [ 452.432070][ T55] usb 2-1: SerialNumber: syz [ 452.443203][T10844] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1297'. [ 452.453857][ T55] usb 2-1: config 0 descriptor?? [ 453.081083][ T55] asix 2-1:0.231 (unnamed net_device) (uninitialized): invalid hw address, using random [ 453.340432][ T55] asix 2-1:0.231 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 453.374171][ T55] asix 2-1:0.231 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 453.414382][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 453.414400][ T30] audit: type=1326 audit(3511907474.369:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10853 comm="syz.3.1301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0777f8ebe9 code=0x0 [ 453.482458][T10870] tmpfs: Bad value for 'mpol' [ 453.614703][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 453.627449][ T55] asix 2-1:0.231 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 453.642076][ T55] asix 2-1:0.231 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 453.738744][T10878] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1304'. [ 453.802467][T10878] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.188957][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 454.225357][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.238730][ T55] asix 2-1:0.231 eth1: register 'asix' at usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet, e2:27:15:d1:32:37 [ 454.274230][ T24] usb 5-1: config 0 descriptor?? [ 454.286603][T10878] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.300719][ T55] usb 2-1: USB disconnect, device number 46 [ 454.321212][ T55] asix 2-1:0.231 eth1: unregister 'asix' usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet [ 454.332951][ T24] cp210x 5-1:0.0: cp210x converter detected [ 454.359901][T10878] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.378247][T10868] delete_channel: no stack [ 454.433771][T10878] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.516764][T10861] Cannot find del_set index 0 as target [ 454.559238][T10878] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.578890][T10878] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.597512][T10878] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.615354][T10878] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.687474][T10883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.753134][T10861] lo: Caught tx_queue_len zero misconfig [ 454.778942][T10885] GUP no longer grows the stack in syz.0.1308 (10885): 200000009000-200000018000 (200000008000) [ 454.793521][T10885] CPU: 0 UID: 0 PID: 10885 Comm: syz.0.1308 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 454.793549][T10885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 454.793562][T10885] Call Trace: [ 454.793570][T10885] [ 454.793579][T10885] dump_stack_lvl+0x189/0x250 [ 454.793610][T10885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.793633][T10885] ? __pfx__printk+0x10/0x10 [ 454.793655][T10885] ? find_vma+0xe7/0x160 [ 454.793689][T10885] __get_user_pages+0x2a60/0x30b0 [ 454.793749][T10885] ? __pfx___irq_work_queue_local+0x10/0x10 [ 454.793785][T10885] ? __pfx___get_user_pages+0x10/0x10 [ 454.793813][T10885] ? __gup_longterm_locked+0xbf7/0x15b0 [ 454.793841][T10885] ? down_read_killable+0x1d1/0x350 [ 454.793871][T10885] __gup_longterm_locked+0xd66/0x15b0 [ 454.793919][T10885] ? gup_fast_fallback+0x1afc/0x2260 [ 454.793951][T10885] gup_fast_fallback+0x1cd4/0x2260 [ 454.794018][T10885] ? __pfx_gup_fast_fallback+0x10/0x10 [ 454.794052][T10885] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.794076][T10885] ? is_valid_gup_args+0x11f/0x200 [ 454.794107][T10885] ? get_user_pages_fast+0x4d/0xb0 [ 454.794148][T10885] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 454.794191][T10885] iov_iter_get_pages2+0x5e/0xa0 [ 454.794222][T10885] fuse_copy_fill+0x541/0xb10 [ 454.794255][T10885] ? __pfx_fuse_copy_fill+0x10/0x10 [ 454.794293][T10885] fuse_copy_one+0x90/0x120 [ 454.794318][T10885] fuse_dev_do_read+0xc26/0x1240 [ 454.794361][T10885] ? __pfx_fuse_dev_do_read+0x10/0x10 [ 454.794384][T10885] ? preempt_schedule_thunk+0x16/0x30 [ 454.794426][T10885] fuse_dev_read+0x159/0x1f0 [ 454.794448][T10885] ? __pfx_fuse_dev_read+0x10/0x10 [ 454.794476][T10885] ? bpf_lsm_file_permission+0x9/0x20 [ 454.794497][T10885] ? security_file_permission+0x75/0x290 [ 454.794528][T10885] vfs_read+0x4d0/0x980 [ 454.794563][T10885] ? __pfx_vfs_read+0x10/0x10 [ 454.794602][T10885] ? __fget_files+0x2a/0x420 [ 454.794632][T10885] ksys_read+0x145/0x250 [ 454.794653][T10885] ? __pfx_ksys_read+0x10/0x10 [ 454.794667][T10885] ? rcu_is_watching+0x15/0xb0 [ 454.794693][T10885] ? do_syscall_64+0xbe/0x3b0 [ 454.794720][T10885] do_syscall_64+0xfa/0x3b0 [ 454.794743][T10885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.794761][T10885] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 454.794779][T10885] ? clear_bhb_loop+0x60/0xb0 [ 454.794805][T10885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.794825][T10885] RIP: 0033:0x7fbb7c78ebe9 [ 454.794844][T10885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.794861][T10885] RSP: 002b:00007fbb7d62a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 454.794883][T10885] RAX: ffffffffffffffda RBX: 00007fbb7c9b5fa0 RCX: 00007fbb7c78ebe9 [ 454.794899][T10885] RDX: 0000000000002020 RSI: 0000200000008e80 RDI: 0000000000000003 [ 454.794913][T10885] RBP: 00007fbb7c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 454.794925][T10885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.794937][T10885] R13: 00007fbb7c9b6038 R14: 00007fbb7c9b5fa0 R15: 00007ffca8daea98 [ 454.794966][T10885] [ 455.263798][T10893] binfmt_misc: register: failed to install interpreter file ./file0 [ 456.528500][ T24] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 456.541254][ T24] cp210x 5-1:0.0: querying part number failed [ 456.556564][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 456.566801][ T24] usb 5-1: USB disconnect, device number 43 [ 456.578546][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 456.586920][ T24] cp210x 5-1:0.0: device disconnected [ 458.109315][T11009] 9pnet: p9_errstr2errno: server reported unknown error 000000 [ 458.133052][T11010] 9p filesystem being mounted at /292/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 458.310177][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 458.323855][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 458.742223][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1374'. [ 460.567583][T11076] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1388'. [ 460.618343][T11076] xt_hashlimit: size too large, truncated to 1048576 [ 461.679566][T11118] support for the xor transformation has been removed. [ 462.830470][T11183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1434'. [ 463.001773][T11195] veth0_vlan: entered allmulticast mode [ 463.047744][T11195] : renamed from vlan0 [ 463.785035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.793717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.959870][T11235] 9p filesystem being mounted at /297/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 464.008552][T11238] overlayfs: overlapping lowerdir path [ 464.536755][T11266] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1468'. [ 464.755395][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1470'. [ 464.827251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.835581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.977618][ T30] audit: type=1326 audit(3511907485.919:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11280 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 465.001575][ T30] audit: type=1326 audit(3511907485.919:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11280 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 465.064321][ T30] audit: type=1326 audit(3511907485.919:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11280 comm="syz.0.1473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 465.303800][T11291] loop2: detected capacity change from 0 to 7 [ 465.314299][T11291] Dev loop2: unable to read RDB block 7 [ 465.323599][T11291] loop2: unable to read partition table [ 465.340721][T11291] loop2: partition table beyond EOD, truncated [ 465.350620][T11291] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 465.493434][T11295] loop2: detected capacity change from 0 to 7 [ 465.508050][T11295] Dev loop2: unable to read RDB block 7 [ 465.521604][T11295] loop2: unable to read partition table [ 465.548923][T11295] loop2: partition table beyond EOD, truncated [ 465.572646][T11295] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 465.623028][T11296] syz.2.1480 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 465.819804][T11311] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 465.864603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.872877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.265449][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.274384][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.407526][T11336] netlink: 'syz.3.1497': attribute type 4 has an invalid length. [ 466.492393][T11338] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 466.905022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.081096][T11364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1509'. [ 468.459052][T11397] cgroup2: Unexpected value for 'memory_localevents' [ 468.984861][ C0] net_ratelimit: 3 callbacks suppressed [ 468.984875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.998667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.024571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.032967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.225504][ T30] audit: type=1326 audit(3511907491.189:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 470.288099][ T30] audit: type=1326 audit(3511907491.189:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 470.348208][ T30] audit: type=1326 audit(3511907491.189:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm="syz.3.1545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 470.403144][ T30] audit: type=1326 audit(3511907491.189:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 470.458993][ T30] audit: type=1326 audit(3511907491.189:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 470.502621][ T30] audit: type=1326 audit(3511907491.189:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 470.553007][ T30] audit: type=1326 audit(3511907491.189:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 470.593347][ T30] audit: type=1326 audit(3511907491.189:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11459 comm=22 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0777f8ebe9 code=0x7ffc0000 [ 470.968486][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 471.029981][T11492] sctp: [Deprecated]: syz.2.1559 (pid 11492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 471.029981][T11492] Use struct sctp_sack_info instead [ 471.064933][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.073175][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.363158][ T30] audit: type=1326 audit(3511907492.319:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11507 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 471.411695][ T30] audit: type=1326 audit(3511907492.319:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11507 comm="syz.0.1566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7c78ebe9 code=0x7ffc0000 [ 472.104585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.112891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.242065][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 473.144834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.153100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.508305][T11621] netlink: 'syz.1.1614': attribute type 32 has an invalid length. [ 473.540771][T11621] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 473.562294][T11627] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 474.020202][T11653] netlink: 'syz.2.1627': attribute type 11 has an invalid length. [ 474.047747][T11653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1627'. [ 474.062261][T11653] netlink: 'syz.2.1627': attribute type 11 has an invalid length. [ 474.071094][T11653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1627'. [ 474.080791][T11653] netlink: 'syz.2.1627': attribute type 11 has an invalid length. [ 474.088886][T11653] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1627'. [ 474.184528][ C0] net_ratelimit: 1 callbacks suppressed [ 474.184547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.198513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.511012][T11681] BUG: assuming non migratable context at ./include/linux/filter.h:703 [ 474.519513][T11681] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 11681, name: syz.2.1638 [ 474.519554][T11681] 1 lock held by syz.2.1638/11681: [ 474.544610][T11681] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380 [ 474.556326][T11681] CPU: 1 UID: 0 PID: 11681 Comm: syz.2.1638 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 474.556353][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.556366][T11681] Call Trace: [ 474.556374][T11681] [ 474.556382][T11681] dump_stack_lvl+0x189/0x250 [ 474.556421][T11681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.556445][T11681] ? ipt_do_table+0x13dd/0x1630 [ 474.556476][T11681] ? print_lock_name+0xde/0x100 [ 474.556507][T11681] __cant_migrate+0x238/0x2e0 [ 474.556530][T11681] ? __pfx___cant_migrate+0x10/0x10 [ 474.556563][T11681] nf_hook_run_bpf+0x8f/0x1f0 [ 474.556582][T11681] ? __pfx_ipt_do_table+0x10/0x10 [ 474.556607][T11681] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 474.556626][T11681] ? iptable_mangle_hook+0x189/0x4c0 [ 474.556653][T11681] ? nf_hook+0x9d/0x380 [ 474.556667][T11681] ? nf_nat_ipv4_out+0x2f7/0x4e0 [ 474.556691][T11681] ? __pfx_nf_hook_run_bpf+0x10/0x10 [ 474.556711][T11681] nf_hook_slow+0xc5/0x220 [ 474.556742][T11681] nf_hook+0x217/0x380 [ 474.556763][T11681] ? nf_hook+0x9d/0x380 [ 474.556780][T11681] ? __pfx_nf_hook+0x10/0x10 [ 474.556802][T11681] ? __pfx_ip_finish_output+0x10/0x10 [ 474.556828][T11681] ? ip_fast_csum+0x1ee/0x2b0 [ 474.556857][T11681] ip_output+0x16c/0x220 [ 474.556873][T11681] ? __pfx_ip_finish_output+0x10/0x10 [ 474.556895][T11681] ip_send_skb+0x74/0x100 [ 474.556917][T11681] udp_send_skb+0xaf1/0x14c0 [ 474.556960][T11681] udp_sendmsg+0x196b/0x2180 [ 474.556999][T11681] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 474.557023][T11681] ? __pfx_udp_sendmsg+0x10/0x10 [ 474.557053][T11681] ? smack_socket_sendmsg+0x1a7/0x520 [ 474.557084][T11681] ? count_memcg_event_mm+0x21/0x260 [ 474.557124][T11681] ? __pfx___up_read+0x10/0x10 [ 474.557158][T11681] ? sock_rps_record_flow+0x19/0x410 [ 474.557181][T11681] ? inet_sendmsg+0x29c/0x370 [ 474.557200][T11681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.557224][T11681] __sock_sendmsg+0x19c/0x270 [ 474.557258][T11681] ____sys_sendmsg+0x52d/0x830 [ 474.557293][T11681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.557334][T11681] ? import_iovec+0x74/0xa0 [ 474.557365][T11681] ___sys_sendmsg+0x21f/0x2a0 [ 474.557398][T11681] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.557476][T11681] ? __fget_files+0x2a/0x420 [ 474.557497][T11681] ? __fget_files+0x3a0/0x420 [ 474.557531][T11681] __sys_sendmmsg+0x227/0x430 [ 474.557567][T11681] ? __pfx___sys_sendmmsg+0x10/0x10 [ 474.557594][T11681] ? do_futex+0x395/0x420 [ 474.557626][T11681] ? __sys_connect+0x38d/0x440 [ 474.557668][T11681] ? rcu_is_watching+0x15/0xb0 [ 474.557696][T11681] __x64_sys_sendmmsg+0xa0/0xc0 [ 474.557725][T11681] do_syscall_64+0xfa/0x3b0 [ 474.557744][T11681] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.557763][T11681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.557779][T11681] ? clear_bhb_loop+0x60/0xb0 [ 474.557801][T11681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.557820][T11681] RIP: 0033:0x7f74c038ebe9 [ 474.557836][T11681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.557854][T11681] RSP: 002b:00007f74c11e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 474.557875][T11681] RAX: ffffffffffffffda RBX: 00007f74c05b6090 RCX: 00007f74c038ebe9 [ 474.557888][T11681] RDX: 000000000000002d RSI: 0000200000007fc0 RDI: 0000000000000008 [ 474.557899][T11681] RBP: 00007f74c0411e19 R08: 0000000000000000 R09: 0000000000000000 [ 474.557910][T11681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.557922][T11681] R13: 00007f74c05b6128 R14: 00007f74c05b6090 R15: 00007ffe3f562648 [ 474.557953][T11681] [ 474.907397][ C1] vkms_vblank_simulate: vblank timer overrun [ 474.933109][T11681] CUSE: info not properly terminated [ 474.946956][T11686] pimreg0: tun_chr_ioctl cmd 1074025673 [ 475.226943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.235225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.865713][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.264553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.272788][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.304902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.313207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.344674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.394775][ C0] net_ratelimit: 1 callbacks suppressed [ 479.394798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.408585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.424603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.432845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.464886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.473087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.504700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.512999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.544896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.553208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog