last executing test programs: 17.559566511s ago: executing program 4 (id=819): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000f1ff00402505a19d40000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12.980654559s ago: executing program 4 (id=842): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000008c0)="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", 0x8c6) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0000886c020000"], 0x19) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000040)=0x40, 0x4) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) 11.997194876s ago: executing program 4 (id=848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) accept4(r3, &(0x7f0000000180)=@isdn, 0x0, 0x0) 10.985448304s ago: executing program 4 (id=852): socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 10.541324136s ago: executing program 4 (id=855): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000080)={0x2d, 0x31, 0x5, 0x1a, 0xa, 0x100, 0x5, 0x155, 0xffffffffffffffff}) 9.108618147s ago: executing program 4 (id=860): r0 = socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x20400) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 5.429366869s ago: executing program 1 (id=878): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1d}, {0x2, [{@any, 0x7, 0x1, 0x5, "22e510", 0x896}, {@none, 0x2, 0xe0, 0x9, "cfb2a3", 0x6}]}}}, 0x20) 5.429172139s ago: executing program 1 (id=879): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000340)={0x20, 0x1, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), 0x0, &(0x7f0000000380)="932348", 0x3, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)) syz_open_dev$vim2m(&(0x7f00000005c0), 0x5, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x4000880) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2.356548224s ago: executing program 2 (id=893): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.270291917s ago: executing program 1 (id=895): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa3a91d80c44f6aeaaaaaaaaaaaaaa0008004e00004c00000000000690788a010102ac1414aa070f0476bc4b5b9e3e260cbfad990444140b01e000000100000000e00000010000000000", @ANYRES32=0x41424344], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb0, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c"}, 0x50) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0xc, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 2.14479284s ago: executing program 2 (id=896): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc4", 0x94}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmmsg$unix(r1, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000700)=""/218, 0xda}, {&(0x7f0000003ac0)=""/222, 0xde}], 0x2}}], 0x1, 0x41, 0x0) 2.029531593s ago: executing program 2 (id=897): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 1.980143334s ago: executing program 1 (id=899): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5b, 0x0, &(0x7f0000000900)="b44c80630562443108347301af47fa0ff9b11fe7d5fe008c6392009c5bbd04080000000000000fae7a6a53200386ce51dec4a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240ca1fce3ee804892565862580967c", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x401) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.805362799s ago: executing program 1 (id=900): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) 1.80515739s ago: executing program 3 (id=901): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5e0}], 0x1}, 0x4) 1.80156037s ago: executing program 2 (id=902): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r1 = epoll_create(0x8) pselect6(0x40, &(0x7f0000000040)={0xc, 0x1, 0xfffffffffffffff3, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$inet(r2, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000480)={0x20002000, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), {0x31}, &(0x7f00000002c0)=""/247, 0xf7, 0x0, &(0x7f0000000400), 0x0, {r5}}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) 1.753753171s ago: executing program 1 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d60, 0x9}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @broadcast, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 1.585219796s ago: executing program 3 (id=904): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)='*', 0x1}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000001980)='\x00', 0x1}, {&(0x7f0000000580)="ff", 0x1}, {&(0x7f0000000140)='m', 0x1}, {&(0x7f0000000200)='d', 0x1}, {&(0x7f0000000180)='s', 0x1}, {&(0x7f0000000380)='9', 0x1}, {&(0x7f0000000400)="b5", 0x1}], 0x9}}], 0x1, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.490866588s ago: executing program 3 (id=905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc141200004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.376001451s ago: executing program 0 (id=907): socket$kcm(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x5}}, 0x14}}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) 1.07345148s ago: executing program 3 (id=908): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x109) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40081208, 0x0, 0x3, 0x7, 0xa15, 0x0, 0x0, 0x40}}, 0x50) 997.356472ms ago: executing program 0 (id=909): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aa3a91d80c44f6aeaaaaaaaaaaaaaa0008004e00004c00000000000690788a010102ac1414aa070f0476bc4b5b9e3e260cbfad990444140b01e000000100000000e00000010000000000", @ANYRES32=0x41424344], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb0, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c"}, 0x50) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0xc, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) 914.643904ms ago: executing program 3 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000003c0)=r3, 0x4) 902.716655ms ago: executing program 2 (id=911): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x4, 0x3, 0x0, 0x0, "f759ca34000400", '\x00', "03000100", '\x00', ["8bada940edffea0a0800", "c211513e897c3aa100", '\x00', "00000000000000000100"]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000003c0)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10) io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc90, 0x0, 0x20002fb}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 757.381199ms ago: executing program 2 (id=912): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, 0x0, 0x0) 671.744161ms ago: executing program 0 (id=913): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000000", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 626.525543ms ago: executing program 3 (id=914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x8, 0xb}, {0xd, 0xd}}}, 0x24}}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5e0}], 0x1}, 0x4) 445.678688ms ago: executing program 0 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x7, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x20000404) 123.346567ms ago: executing program 0 (id=916): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c0000000400000004"], 0x48) 0s ago: executing program 0 (id=917): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x15) write$binfmt_misc(r0, &(0x7f0000000dc0), 0x386) kernel console output (not intermixed with test programs): man_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.207001][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.217558][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.229821][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.252432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.263031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.273539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.282551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.292068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.302277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.311151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.319510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.340060][ T4191] device veth0_macvtap entered promiscuous mode [ 70.347784][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.358519][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.369816][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.380887][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.393322][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.413253][ T4194] device veth0_vlan entered promiscuous mode [ 70.420249][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 70.426418][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 70.433142][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 70.441333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.449689][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 70.456731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.471369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.480741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.490938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.499589][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 70.514409][ T4191] device veth1_macvtap entered promiscuous mode [ 70.525447][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.536445][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.560969][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.571817][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.582910][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.592018][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.602682][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.611561][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.625846][ T4194] device veth1_vlan entered promiscuous mode [ 70.682040][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.705979][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.716485][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.727237][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.741137][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.751942][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.763989][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.803856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.813324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.834474][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.842739][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.857373][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.860817][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.871324][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.885842][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.896002][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.907194][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.921166][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.948422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.985407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.996079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.009859][ T1455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.017779][ T1455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.025879][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.036216][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.045040][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.054116][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.091148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.106558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.123696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.148497][ T4194] device veth0_macvtap entered promiscuous mode [ 71.161201][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.170359][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.216202][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.237082][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.264997][ T4194] device veth1_macvtap entered promiscuous mode [ 71.280454][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.304012][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.311602][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.327456][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.344189][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.357347][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.396348][ T1455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.405735][ T1455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.440521][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.457795][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.482761][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.494741][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.507317][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.517437][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.529199][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.540739][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.551546][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.563646][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.601416][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.633893][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.667446][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.712404][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.734964][ T4273] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 71.756492][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.805948][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.919886][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.943413][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.957146][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.025107][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.037729][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.516708][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 72.535447][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 72.715187][ T4278] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 72.724096][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 72.724709][ T4280] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 72.730500][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 72.746576][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 72.792806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.858854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.931771][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.985176][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.994866][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.037324][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.283128][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.291945][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.034853][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.051471][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.077586][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.088870][ T4308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 74.107836][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 74.134523][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.163236][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.189118][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.242382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.378108][ T4233] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 74.429848][ T4320] Zero length message leads to an empty skb [ 74.536443][ T4325] vivid-001: ================= START STATUS ================= [ 74.576281][ T4325] vivid-001: Test Pattern: 75% Colorbar [ 74.713137][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 74.721585][ T4325] vivid-001: Fill Percentage of Frame: 100 [ 74.727471][ T4325] vivid-001: Horizontal Movement: No Movement [ 74.734093][ T4325] vivid-001: Vertical Movement: No Movement [ 74.741421][ T4325] vivid-001: OSD Text Mode: All [ 74.746464][ T4325] vivid-001: Show Border: false [ 74.751979][ T4325] vivid-001: Show Square: false [ 74.757016][ T4325] vivid-001: Sensor Flipped Horizontally: false [ 74.788326][ T4234] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.806691][ T4325] vivid-001: Sensor Flipped Vertically: false [ 74.817360][ T4325] vivid-001: Insert SAV Code in Image: false [ 74.824739][ T4325] vivid-001: Insert EAV Code in Image: false [ 74.833224][ T4325] vivid-001: Reduced Framerate: false [ 74.839329][ T4233] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 74.852061][ T4325] vivid-001: Enable Capture Cropping: true [ 74.858215][ T4233] usb 1-1: config 0 has no interface number 0 [ 74.858274][ T4233] usb 1-1: config 0 interface 89 altsetting 2 has an invalid endpoint with address 0xBD, skipping [ 74.879430][ T4325] vivid-001: Enable Capture Composing: true [ 74.885530][ T4325] vivid-001: Enable Capture Scaler: true [ 74.891660][ T4233] usb 1-1: config 0 interface 89 has no altsetting 0 [ 74.914833][ T4325] vivid-001: Timestamp Source: End of Frame [ 74.927130][ T4325] vivid-001: Colorspace: sRGB [ 74.936511][ T4325] vivid-001: Transfer Function: Default [ 74.950532][ T4325] vivid-001: Y'CbCr Encoding: Default [ 74.956911][ T4325] vivid-001: HSV Encoding: Hue 0-179 [ 74.964860][ T4325] vivid-001: Quantization: Default [ 74.974264][ T4325] vivid-001: Apply Alpha To Red Only: false [ 75.012056][ T4337] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.018160][ T4325] vivid-001: Standard Aspect Ratio: 4x3 [ 75.035003][ T4325] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 75.047875][ T4325] vivid-001: DV Timings: 640x480p59 inactive [ 75.057735][ T4325] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 75.078490][ T4234] usb 3-1: Using ep0 maxpacket: 32 [ 75.084562][ T4325] vivid-001: Maximum EDID Blocks: 2 [ 75.090542][ T4325] vivid-001: Limited RGB Range (16-235): false [ 75.097068][ T4325] vivid-001: Rx RGB Quantization Range: Automatic [ 75.104234][ T4325] vivid-001: Power Present: 0x00000001 [ 75.110954][ T4233] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 75.120863][ T4325] tpg source WxH: 640x360 (Y'CbCr) [ 75.126048][ T4325] tpg field: 1 [ 75.129863][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.138378][ T4325] tpg crop: 640x360@0x0 [ 75.142622][ T4325] tpg compose: 640x360@0x0 [ 75.147198][ T4325] tpg colorspace: 8 [ 75.152725][ T4233] usb 1-1: Product: syz [ 75.156941][ T4233] usb 1-1: Manufacturer: syz [ 75.176933][ T4233] usb 1-1: SerialNumber: syz [ 75.182771][ T4325] tpg transfer function: 0/0 [ 75.187433][ T4325] tpg Y'CbCr encoding: 0/0 [ 75.208080][ T4234] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 75.218437][ T4233] usb 1-1: config 0 descriptor?? [ 75.226931][ T4234] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 75.239923][ T4325] tpg quantization: 0/0 [ 75.244135][ T4325] tpg RGB range: 0/2 [ 75.248836][ T4234] usb 3-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 75.274099][ T4325] vivid-001: ================== END STATUS ================== [ 75.291157][ T4234] usb 3-1: config 0 interface 0 has no altsetting 0 [ 75.498243][ T4234] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 75.535053][ T7] usb 1-1: USB disconnect, device number 2 [ 75.614460][ T4234] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 75.623517][ T4234] usb 3-1: Product: syz [ 75.627731][ T4234] usb 3-1: Manufacturer: syz [ 75.632989][ T4234] usb 3-1: SerialNumber: syz [ 75.642780][ T4234] usb 3-1: config 0 descriptor?? [ 75.699971][ T4234] ldusb 3-1:0.0: Interrupt in endpoint not found [ 75.890678][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 75.935286][ T4233] usb 3-1: USB disconnect, device number 2 [ 75.974459][ T4370] netlink: 56 bytes leftover after parsing attributes in process `syz.1.28'. [ 75.996480][ T7] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 76.108042][ T4198] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 76.168373][ T4377] fido_id[4377]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 76.232555][ T4381] vivid-001: ================= START STATUS ================= [ 76.247521][ T4381] vivid-001: Test Pattern: 75% Colorbar [ 76.255642][ T4381] vivid-001: Fill Percentage of Frame: 100 [ 76.268591][ T4381] vivid-001: Horizontal Movement: No Movement [ 76.288253][ T4381] vivid-001: Vertical Movement: No Movement [ 76.294231][ T4381] vivid-001: OSD Text Mode: All [ 76.323306][ T4381] vivid-001: Show Border: false [ 76.333487][ T4381] vivid-001: Show Square: false [ 76.343795][ T4381] vivid-001: Sensor Flipped Horizontally: false [ 76.359315][ T4381] vivid-001: Sensor Flipped Vertically: false [ 76.373666][ T4381] vivid-001: Insert SAV Code in Image: false [ 76.381019][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 76.393540][ T4381] vivid-001: Insert EAV Code in Image: false [ 76.409367][ T4381] vivid-001: Reduced Framerate: false [ 76.422442][ T4388] batman_adv: Cannot find parent device [ 76.438081][ T4381] vivid-001: Enable Capture Cropping: true [ 76.445053][ T4381] vivid-001: Enable Capture Composing: true [ 76.470009][ T4381] vivid-001: Enable Capture Scaler: true [ 76.498349][ T4381] vivid-001: Timestamp Source: End of Frame [ 76.518639][ T4381] vivid-001: Colorspace: sRGB [ 76.530047][ T4381] vivid-001: Transfer Function: Default [ 76.553813][ T4381] vivid-001: Y'CbCr Encoding: Default [ 76.568532][ T4381] vivid-001: HSV Encoding: Hue 0-179 [ 76.583093][ T4381] vivid-001: Quantization: Default [ 76.608094][ T4381] vivid-001: Apply Alpha To Red Only: false [ 76.618640][ T4381] vivid-001: Standard Aspect Ratio: 4x3 [ 76.634800][ T4381] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 76.648071][ T4381] vivid-001: DV Timings: 640x480p59 inactive [ 76.658628][ T4198] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 76.678126][ T4381] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 76.685737][ T4198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.816620][ T4381] vivid-001: Maximum EDID Blocks: 2 [ 76.837716][ T4381] vivid-001: Limited RGB Range (16-235): false [ 76.852516][ T4381] vivid-001: Rx RGB Quantization Range: Automatic [ 76.864855][ T4381] vivid-001: Power Present: 0x00000001 [ 76.882772][ T4198] usb 4-1: Product: syz [ 76.887009][ T4198] usb 4-1: Manufacturer: syz [ 76.888338][ T4381] tpg source WxH: 640x360 (Y'CbCr) [ 76.891682][ T4198] usb 4-1: SerialNumber: syz [ 76.900271][ T4198] usb 4-1: config 0 descriptor?? [ 76.910274][ T4381] tpg field: 1 [ 76.914457][ T4381] tpg crop: 640x360@0x0 [ 76.919192][ T4381] tpg compose: 640x360@0x0 [ 76.930994][ T4397] ======================================================= [ 76.930994][ T4397] WARNING: The mand mount option has been deprecated and [ 76.930994][ T4397] and is ignored by this kernel. Remove the mand [ 76.930994][ T4397] option from the mount to silence this warning. [ 76.930994][ T4397] ======================================================= [ 76.971829][ T4397] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 76.997968][ T4381] tpg colorspace: 8 [ 77.002295][ T4397] overlayfs: failed to look up (tracing) for ino (-66) [ 77.005511][ T4381] tpg transfer function: 0/0 [ 77.048148][ T4381] tpg Y'CbCr encoding: 0/0 [ 77.054867][ T4381] tpg quantization: 0/0 [ 77.061604][ T4381] tpg RGB range: 0/2 [ 77.073883][ T4381] vivid-001: ================== END STATUS ================== [ 77.178127][ T4198] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 77.297008][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'. [ 77.350741][ T4406] netlink: 56 bytes leftover after parsing attributes in process `syz.0.40'. [ 77.365502][ T1111] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 77.606217][ T4412] fido_id[4412]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 78.620352][ T4439] vivid-001: ================= START STATUS ================= [ 78.658919][ T4439] vivid-001: Test Pattern: 75% Colorbar [ 78.665521][ T4439] vivid-001: Fill Percentage of Frame: 100 [ 78.692059][ T4439] vivid-001: Horizontal Movement: No Movement [ 78.710167][ T4439] vivid-001: Vertical Movement: No Movement [ 78.721799][ T4439] vivid-001: OSD Text Mode: All [ 78.747547][ T4439] vivid-001: Show Border: false [ 78.759931][ T4439] vivid-001: Show Square: false [ 78.768232][ T4439] vivid-001: Sensor Flipped Horizontally: false [ 78.805294][ T4439] vivid-001: Sensor Flipped Vertically: false [ 78.828398][ T4439] vivid-001: Insert SAV Code in Image: false [ 78.845652][ T4439] vivid-001: Insert EAV Code in Image: false [ 78.857801][ T4439] vivid-001: Reduced Framerate: false [ 78.865096][ T4439] vivid-001: Enable Capture Cropping: true [ 78.871965][ T4439] vivid-001: Enable Capture Composing: true [ 78.878647][ T4439] vivid-001: Enable Capture Scaler: true [ 78.884472][ T4439] vivid-001: Timestamp Source: End of Frame [ 78.891047][ T4439] vivid-001: Colorspace: sRGB [ 78.895980][ T4439] vivid-001: Transfer Function: Default [ 78.902373][ T4439] vivid-001: Y'CbCr Encoding: Default [ 78.908162][ T4439] vivid-001: HSV Encoding: Hue 0-179 [ 78.913701][ T4439] vivid-001: Quantization: Default [ 78.934831][ T4439] vivid-001: Apply Alpha To Red Only: false [ 78.955356][ T4439] vivid-001: Standard Aspect Ratio: 4x3 [ 78.971275][ T4447] binder: 4446:4447 ioctl 4018620d 0 returned -22 [ 78.974787][ T4439] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 78.988102][ T4198] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 78.992218][ T4198] usb 4-1: USB disconnect, device number 2 [ 79.028016][ T4439] vivid-001: DV Timings: 640x480p59 inactive [ 79.044086][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 79.072241][ T4439] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 79.098723][ T4439] vivid-001: Maximum EDID Blocks: 2 [ 79.107316][ T1111] hid-generic 0005:16C0:5505.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 79.118982][ T4449] netlink: 56 bytes leftover after parsing attributes in process `syz.4.54'. [ 79.128668][ T4439] vivid-001: Limited RGB Range (16-235): false [ 79.147667][ T4439] vivid-001: Rx RGB Quantization Range: Automatic [ 79.174596][ T4439] vivid-001: Power Present: 0x00000001 [ 79.184750][ T4439] tpg source WxH: 640x360 (Y'CbCr) [ 79.211641][ T4439] tpg field: 1 [ 79.215185][ T4439] tpg crop: 640x360@0x0 [ 79.228038][ T4439] tpg compose: 640x360@0x0 [ 79.248653][ T4439] tpg colorspace: 8 [ 79.252668][ T4439] tpg transfer function: 0/0 [ 79.308328][ T4439] tpg Y'CbCr encoding: 0/0 [ 79.366538][ T4439] tpg quantization: 0/0 [ 79.406375][ T4452] fido_id[4452]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 79.411466][ T4439] tpg RGB range: 0/2 [ 79.434682][ T4439] vivid-001: ================== END STATUS ================== [ 79.553726][ T26] audit: type=1326 audit(1777629980.129:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.4.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838be8fdd9 code=0x7ffc0000 [ 79.598743][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 79.628028][ T26] audit: type=1326 audit(1777629980.189:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.4.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f838be8fdd9 code=0x7ffc0000 [ 79.651733][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.713435][ T26] audit: type=1326 audit(1777629980.189:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.4.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838be8fdd9 code=0x7ffc0000 [ 79.737313][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.814940][ T26] audit: type=1326 audit(1777629980.189:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.4.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f838be8fdd9 code=0x7ffc0000 [ 79.838623][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.871178][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'. [ 79.897017][ T26] audit: type=1326 audit(1777629980.189:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.4.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838be8fdd9 code=0x7ffc0000 [ 79.920901][ C0] vkms_vblank_simulate: vblank timer overrun [ 79.959768][ T4476] netlink: 56 bytes leftover after parsing attributes in process `syz.2.66'. [ 79.969831][ T7] hid-generic 0005:16C0:5505.0004: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 80.024162][ T26] audit: type=1326 audit(1777629980.189:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.4.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f838be8fdd9 code=0x7ffc0000 [ 80.103210][ T4480] fido_id[4480]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 80.126243][ T26] audit: type=1326 audit(1777629980.189:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.4.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838be8fdd9 code=0x7ffc0000 [ 80.150150][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.196397][ T4488] vivid-001: ================= START STATUS ================= [ 80.235580][ T4488] vivid-001: Test Pattern: 75% Colorbar [ 80.295716][ T4490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 80.308288][ T4490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 80.363750][ T26] audit: type=1326 audit(1777629980.189:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4460 comm="syz.4.59" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f838be8fdd9 code=0x7ffc0000 [ 80.468786][ T4488] vivid-001: Fill Percentage of Frame: 100 [ 80.474832][ T4488] vivid-001: Horizontal Movement: No Movement [ 81.237958][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.247962][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.257936][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.267936][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.277934][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.287927][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.297930][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.307933][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.317936][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.327931][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.495486][ T4488] vivid-001: Vertical Movement: No Movement [ 81.515030][ T4488] vivid-001: OSD Text Mode: All [ 81.548720][ T4488] vivid-001: Show Border: false [ 81.567033][ T4488] vivid-001: Show Square: false [ 81.588801][ T4488] vivid-001: Sensor Flipped Horizontally: false [ 81.601341][ T4488] vivid-001: Sensor Flipped Vertically: false [ 81.619815][ T4488] vivid-001: Insert SAV Code in Image: false [ 81.629457][ T4488] vivid-001: Insert EAV Code in Image: false [ 81.635799][ T4488] vivid-001: Reduced Framerate: false [ 81.642192][ T4488] vivid-001: Enable Capture Cropping: true [ 81.648591][ T4488] vivid-001: Enable Capture Composing: true [ 81.657631][ T4488] vivid-001: Enable Capture Scaler: true [ 81.663853][ T4488] vivid-001: Timestamp Source: End of Frame [ 81.678529][ T4488] vivid-001: Colorspace: sRGB [ 81.695639][ T4488] vivid-001: Transfer Function: Default [ 81.712994][ T4488] vivid-001: Y'CbCr Encoding: Default [ 81.738994][ T4488] vivid-001: HSV Encoding: Hue 0-179 [ 81.744471][ T4488] vivid-001: Quantization: Default [ 81.775134][ T4488] vivid-001: Apply Alpha To Red Only: false [ 81.798047][ T4488] vivid-001: Standard Aspect Ratio: 4x3 [ 81.820454][ T4488] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 81.841595][ T4488] vivid-001: DV Timings: 640x480p59 inactive [ 81.847680][ T4488] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 81.888393][ T4488] vivid-001: Maximum EDID Blocks: 2 [ 81.893829][ T4488] vivid-001: Limited RGB Range (16-235): false [ 81.903866][ T4488] vivid-001: Rx RGB Quantization Range: Automatic [ 81.917948][ T4488] vivid-001: Power Present: 0x00000001 [ 81.924462][ T4488] tpg source WxH: 640x360 (Y'CbCr) [ 81.937298][ T4488] tpg field: 1 [ 81.944402][ T4488] tpg crop: 640x360@0x0 [ 81.953887][ T4488] tpg compose: 640x360@0x0 [ 81.961226][ T4488] tpg colorspace: 8 [ 81.967729][ T4488] tpg transfer function: 0/0 [ 81.985246][ T4488] tpg Y'CbCr encoding: 0/0 [ 82.001043][ T4488] tpg quantization: 0/0 [ 82.014358][ T4488] tpg RGB range: 0/2 [ 82.028106][ T1111] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.058065][ T4488] vivid-001: ================== END STATUS ================== [ 82.278159][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 82.589901][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.698047][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.747718][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 82.816645][ T1111] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 82.868353][ T1111] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.988263][ T1111] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 82.997385][ T1111] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 83.016910][ T1111] usb 1-1: Manufacturer: syz [ 83.052669][ T1111] usb 1-1: config 0 descriptor?? [ 83.228090][ T4198] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 83.264702][ T4553] vivid-001: ================= START STATUS ================= [ 83.278099][ T4553] vivid-001: Test Pattern: 75% Colorbar [ 83.283730][ T4553] vivid-001: Fill Percentage of Frame: 100 [ 83.295614][ T4553] vivid-001: Horizontal Movement: No Movement [ 83.302126][ T4553] vivid-001: Vertical Movement: No Movement [ 83.318395][ T4553] vivid-001: OSD Text Mode: All [ 83.323335][ T4553] vivid-001: Show Border: false [ 83.334862][ T4553] vivid-001: Show Square: false [ 83.349955][ T4553] vivid-001: Sensor Flipped Horizontally: false [ 83.387124][ T4553] vivid-001: Sensor Flipped Vertically: false [ 83.422157][ T4553] vivid-001: Insert SAV Code in Image: false [ 83.445147][ T4553] vivid-001: Insert EAV Code in Image: false [ 83.459814][ T4553] vivid-001: Reduced Framerate: false [ 83.478035][ T4553] vivid-001: Enable Capture Cropping: true [ 83.483961][ T4553] vivid-001: Enable Capture Composing: true [ 83.489997][ T4553] vivid-001: Enable Capture Scaler: true [ 83.495687][ T4553] vivid-001: Timestamp Source: End of Frame [ 83.507487][ T4553] vivid-001: Colorspace: sRGB [ 83.512320][ T4553] vivid-001: Transfer Function: Default [ 83.523373][ T4553] vivid-001: Y'CbCr Encoding: Default [ 83.544661][ T4553] vivid-001: HSV Encoding: Hue 0-179 [ 83.573220][ T4553] vivid-001: Quantization: Default [ 83.698967][ T4553] vivid-001: Apply Alpha To Red Only: false [ 83.938485][ T4553] vivid-001: Standard Aspect Ratio: 4x3 [ 84.101518][ T4198] usb 4-1: Using ep0 maxpacket: 32 [ 84.500713][ T4553] vivid-001: DV Timings Signal Mode: Current DV Timings inactive [ 84.523862][ T4553] vivid-001: DV Timings: 640x480p59 inactive [ 84.536888][ T4553] vivid-001: DV Timings Aspect Ratio: Source Width x Height [ 84.558249][ T4198] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 84.566567][ T1111] rc_core: IR keymap rc-hauppauge not found [ 84.576671][ T1111] Registered IR keymap rc-empty [ 84.591067][ T4198] usb 4-1: config 0 has no interface number 0 [ 84.617306][ T1111] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.638180][ T4553] vivid-001: Maximum EDID Blocks: 2 [ 84.639173][ T4198] usb 4-1: config 0 interface 12 has no altsetting 0 [ 84.650758][ T4553] vivid-001: Limited RGB Range (16-235): false [ 84.657143][ T4565] device syzkaller0 entered promiscuous mode [ 84.663528][ T4553] vivid-001: Rx RGB Quantization Range: Automatic [ 84.679580][ T4553] vivid-001: Power Present: 0x00000001 [ 84.685428][ T4553] tpg source WxH: 640x360 (Y'CbCr) [ 84.698060][ T1111] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.707029][ T4553] tpg field: 1 [ 84.714410][ T4553] tpg crop: 640x360@0x0 [ 84.721344][ T4553] tpg compose: 640x360@0x0 [ 84.725821][ T4553] tpg colorspace: 8 [ 84.733888][ T4553] tpg transfer function: 0/0 [ 84.745717][ T1111] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 84.764600][ T4553] tpg Y'CbCr encoding: 0/0 [ 84.769497][ T4553] tpg quantization: 0/0 [ 84.773689][ T4553] tpg RGB range: 0/2 [ 84.777610][ T4553] vivid-001: ================== END STATUS ================== [ 84.793745][ T1111] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 84.848324][ T4198] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 84.857449][ T4198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.875735][ T1111] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.892538][ T4570] netlink: 76 bytes leftover after parsing attributes in process `syz.1.99'. [ 84.915214][ T4198] usb 4-1: Product: syz [ 84.927204][ T4570] netlink: 52 bytes leftover after parsing attributes in process `syz.1.99'. [ 84.928785][ T1111] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.943713][ T4198] usb 4-1: Manufacturer: syz [ 84.958373][ T4198] usb 4-1: SerialNumber: syz [ 84.975254][ T4198] usb 4-1: config 0 descriptor?? [ 84.988222][ T1111] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 84.993795][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.003983][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.018185][ T1111] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 85.059004][ T1111] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 85.266759][ T1111] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 85.302152][ T1111] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 85.348021][ T1111] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 85.379718][ T1111] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 85.428380][ T1111] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 85.473636][ T1111] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 85.512631][ T1111] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 85.628892][ T1111] usb 1-1: USB disconnect, device number 3 [ 85.637565][ T4593] device syzkaller0 entered promiscuous mode [ 86.666870][ T1108] cfg80211: failed to load regulatory.db [ 86.817183][ T4608] device syzkaller0 entered promiscuous mode [ 86.824492][ T4607] netlink: 112 bytes leftover after parsing attributes in process `syz.4.113'. [ 87.114958][ T4620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 87.150684][ T4237] hid-generic 0005:16C0:5505.0005: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 87.163871][ T4620] netlink: 56 bytes leftover after parsing attributes in process `syz.4.118'. [ 87.250120][ T4625] fido_id[4625]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 87.410511][ T4631] tipc: Started in network mode [ 87.418666][ T4631] tipc: Node identity ae43c4618c2e, cluster identity 4711 [ 87.426215][ T4631] tipc: Enabled bearer , priority 0 [ 87.439217][ T4633] device syzkaller0 entered promiscuous mode [ 87.453574][ T4631] device syzkaller0 entered promiscuous mode [ 87.644071][ T4631] tipc: Resetting bearer [ 87.650477][ T1111] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.658174][ T4198] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 87.673803][ T4198] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 87.685600][ T4198] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 87.710407][ T4198] f81534: probe of 4-1:0.12 failed with error -71 [ 87.754825][ T4198] usb 4-1: USB disconnect, device number 3 [ 87.817485][ T4629] tipc: Resetting bearer [ 87.902350][ T4629] tipc: Disabling bearer [ 87.918151][ T1111] usb 3-1: Using ep0 maxpacket: 8 [ 87.977192][ T4642] device syzkaller0 entered promiscuous mode [ 88.038542][ T1111] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 88.055485][ T1111] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.071691][ T1111] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.092014][ T1111] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.102399][ T1111] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.116681][ T1111] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.128054][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.413079][ T1111] usb 3-1: usb_control_msg returned -32 [ 88.422580][ T1111] usbtmc 3-1:16.0: can't read capabilities [ 88.600996][ T4660] device syzkaller0 entered promiscuous mode [ 88.856548][ T4666] tipc: Enabled bearer , priority 0 [ 88.864036][ T4666] device syzkaller0 entered promiscuous mode [ 88.899570][ T4666] tipc: Resetting bearer [ 88.920112][ T4665] tipc: Resetting bearer [ 88.961778][ T4665] tipc: Disabling bearer [ 89.361462][ T4670] device syzkaller0 entered promiscuous mode [ 89.819389][ T4240] usb 3-1: USB disconnect, device number 3 [ 89.851995][ T4663] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -71 [ 90.963280][ T4690] capability: warning: `syz.0.144' uses 32-bit capabilities (legacy support in use) [ 91.017344][ T4690] program syz.0.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.098886][ T4692] device syzkaller0 entered promiscuous mode [ 91.310499][ T4707] tipc: Enabled bearer , priority 0 [ 91.333756][ T4703] device syzkaller0 entered promiscuous mode [ 91.862480][ T4706] tipc: Resetting bearer [ 92.006908][ T4701] tipc: Resetting bearer [ 92.162829][ T4701] tipc: Disabling bearer [ 92.210179][ T4713] device syzkaller0 entered promiscuous mode [ 95.583654][ T4741] loop4: detected capacity change from 0 to 16 [ 96.491142][ T4741] erofs: Unknown parameter 'ãé' [ 96.891546][ T4760] atomic_op ffff8880789f3198 conn xmit_atomic 0000000000000000 [ 97.742083][ T4765] netlink: 'syz.0.164': attribute type 12 has an invalid length. [ 97.750075][ T4765] netlink: 'syz.0.164': attribute type 29 has an invalid length. [ 97.758077][ T4765] netlink: 148 bytes leftover after parsing attributes in process `syz.0.164'. [ 97.767341][ T4765] netlink: 59 bytes leftover after parsing attributes in process `syz.0.164'. [ 98.095469][ T4776] device syzkaller0 entered promiscuous mode [ 98.559104][ T4796] device syzkaller0 entered promiscuous mode [ 98.808226][ T4198] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 99.098121][ T4198] usb 4-1: Using ep0 maxpacket: 32 [ 99.229237][ T4198] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.558411][ T4198] usb 4-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 99.567651][ T4198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.617021][ T4198] usb 4-1: Product: syz [ 99.627164][ T4198] usb 4-1: Manufacturer: syz [ 99.655664][ T4198] usb 4-1: SerialNumber: syz [ 99.828530][ T4816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 99.995949][ T4820] device syzkaller0 entered promiscuous mode [ 100.680815][ T4198] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input7 [ 100.752578][ T3547] bcm5974 4-1:1.0: could not read from device [ 100.863996][ T4198] usb 4-1: USB disconnect, device number 4 [ 101.314112][ T4847] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.397404][ T4877] device syzkaller0 entered promiscuous mode [ 102.519383][ T4884] program syz.3.200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.511261][ T4883] sctp: failed to load transform for md5: -2 [ 105.471109][ T4942] device syzkaller0 entered promiscuous mode [ 106.730283][ T4969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 106.785360][ T4969] netlink: 56 bytes leftover after parsing attributes in process `syz.3.222'. [ 106.794821][ T23] hid-generic 0005:16C0:5505.0006: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 106.887197][ T4973] fido_id[4973]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 107.036394][ T4977] tipc: Started in network mode [ 107.044896][ T4977] tipc: Node identity 4a4ef428dab9, cluster identity 4711 [ 107.057793][ T4977] tipc: Enabled bearer , priority 0 [ 107.073969][ T4977] device syzkaller0 entered promiscuous mode [ 107.088623][ T4977] tipc: Resetting bearer [ 107.100055][ T4976] tipc: Resetting bearer [ 107.115423][ T4976] tipc: Disabling bearer [ 107.295817][ T4981] device syzkaller0 entered promiscuous mode [ 111.637682][ T4992] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.645318][ T4992] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.180940][ T4992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.234865][ T4992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.726600][ T4992] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.736452][ T4992] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.746299][ T4992] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.756463][ T4992] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.933826][ T4992] syz.0.230 (4992) used greatest stack depth: 19792 bytes left [ 113.003078][ T5022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.236'. [ 113.064695][ T5022] netlink: 56 bytes leftover after parsing attributes in process `syz.3.236'. [ 113.065892][ T5004] hid-generic 0005:16C0:5505.0007: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 113.136078][ T5025] tipc: Started in network mode [ 113.153614][ T5025] tipc: Node identity e6f42efc82fa, cluster identity 4711 [ 113.218859][ T5025] tipc: Enabled bearer , priority 0 [ 113.333009][ T5027] device syzkaller0 entered promiscuous mode [ 113.339134][ T5028] fido_id[5028]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 113.361115][ T5037] device syzkaller0 entered promiscuous mode [ 113.411468][ T5025] tipc: Resetting bearer [ 113.424070][ T5023] tipc: Resetting bearer [ 113.439884][ T5023] tipc: Disabling bearer [ 114.198494][ T4240] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.433811][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 114.468147][ T4240] usb 3-1: Using ep0 maxpacket: 32 [ 114.490272][ T5075] netlink: 56 bytes leftover after parsing attributes in process `syz.3.250'. [ 114.517719][ T4318] hid-generic 0005:16C0:5505.0008: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 114.588383][ T4240] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.609910][ T4240] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.678475][ T5078] fido_id[5078]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 114.721019][ T5085] tipc: Enabled bearer , priority 0 [ 114.747129][ T5085] device syzkaller0 entered promiscuous mode [ 114.768189][ T4240] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.795697][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.809433][ T5085] tipc: Resetting bearer [ 114.823659][ T4240] usb 3-1: SerialNumber: syz [ 114.842953][ T5082] tipc: Resetting bearer [ 114.909313][ T4240] usb 3-1: bad CDC descriptors [ 115.059184][ T5082] tipc: Disabling bearer [ 115.166273][ T5096] device syzkaller0 entered promiscuous mode [ 115.366218][ T5098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 115.457414][ T4233] usb 3-1: USB disconnect, device number 4 [ 115.588643][ T5105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 115.613069][ T5105] netlink: 56 bytes leftover after parsing attributes in process `syz.3.262'. [ 115.625165][ T4240] hid-generic 0005:16C0:5505.0009: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 115.757185][ T5112] comedi comedi1: comedi_config --init_data is deprecated [ 115.807282][ T5107] fido_id[5107]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 115.945311][ T5122] netlink: 224 bytes leftover after parsing attributes in process `syz.4.267'. [ 115.982371][ T5123] tipc: Started in network mode [ 116.028213][ T5123] tipc: Node identity 465a7cb28252, cluster identity 4711 [ 116.070412][ T5123] tipc: Enabled bearer , priority 0 [ 116.110461][ T5128] device syzkaller0 entered promiscuous mode [ 116.206950][ T5127] device syzkaller0 entered promiscuous mode [ 117.089407][ T4234] tipc: Node number set to 3288890546 [ 117.126743][ T5142] tipc: Resetting bearer [ 117.236143][ T5142] tipc: Disabling bearer [ 117.366128][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 117.469945][ T5168] netlink: 56 bytes leftover after parsing attributes in process `syz.3.275'. [ 117.480130][ T4240] hid-generic 0005:16C0:5505.000A: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 117.540825][ T5176] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 117.673944][ T5178] fido_id[5178]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 119.028309][ T5213] process 'syz.3.288' launched '/dev/fd/3' with NULL argv: empty string added [ 119.049185][ T5211] tipc: Started in network mode [ 119.057217][ T5211] tipc: Node identity 4a541df5a665, cluster identity 7 [ 119.067178][ T5211] tipc: Enabled bearer , priority 0 [ 119.130429][ T5211] device syzkaller0 entered promiscuous mode [ 119.154184][ T5216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.290'. [ 119.215414][ T5211] tipc: Resetting bearer [ 119.290764][ T5216] netlink: 56 bytes leftover after parsing attributes in process `syz.3.290'. [ 119.364818][ T4233] hid-generic 0005:16C0:5505.000B: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 119.405642][ T5207] tipc: Resetting bearer [ 119.479737][ T5207] tipc: Disabling bearer [ 119.556253][ T5227] fido_id[5227]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 120.655183][ T5249] device syzkaller0 entered promiscuous mode [ 121.787766][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 121.862885][ T4233] hid-generic 0005:16C0:5505.000C: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 121.877825][ T5263] netlink: 56 bytes leftover after parsing attributes in process `syz.3.302'. [ 121.999884][ T5272] tipc: Enabled bearer , priority 0 [ 122.048612][ T5272] device syzkaller0 entered promiscuous mode [ 122.062793][ T5270] fido_id[5270]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 122.107402][ T5272] tipc: Resetting bearer [ 122.127726][ T5271] tipc: Resetting bearer [ 122.185332][ T5271] tipc: Disabling bearer [ 122.411260][ T5301] autofs4:pid:5301:autofs_fill_super: called with bogus options [ 122.540957][ T5308] program syz.2.313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.573879][ T5309] device syzkaller0 entered promiscuous mode [ 122.769627][ T5323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 122.846169][ T5276] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 123.522363][ T23] hid-generic 0005:16C0:5505.000D: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 123.534548][ T5323] netlink: 56 bytes leftover after parsing attributes in process `syz.4.318'. [ 123.867405][ T5344] fido_id[5344]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 123.961089][ T5345] device syzkaller0 entered promiscuous mode [ 124.136977][ T5353] tipc: Enabled bearer , priority 0 [ 124.271451][ T5353] device syzkaller0 entered promiscuous mode [ 124.835044][ T5351] tipc: Resetting bearer [ 124.877556][ T5351] tipc: Disabling bearer [ 124.925020][ T5370] device syzkaller0 entered promiscuous mode [ 126.894532][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 126.964298][ T5004] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.972004][ T4318] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 127.166710][ T5410] device syzkaller0 entered promiscuous mode [ 127.278015][ T4318] usb 3-1: Using ep0 maxpacket: 16 [ 127.398292][ T5004] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 127.409018][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.444147][ T5004] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 127.454623][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.505246][ T5004] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 127.517426][ T5415] device syzkaller0 entered promiscuous mode [ 127.525857][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 127.563212][ T5417] tipc: Enabled bearer , priority 0 [ 127.570255][ T5004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.583840][ T4318] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 127.597301][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.647305][ T4318] usb 3-1: config 0 descriptor?? [ 127.657204][ T5417] device syzkaller0 entered promiscuous mode [ 127.677683][ T5417] tipc: Resetting bearer [ 127.686987][ T5416] tipc: Resetting bearer [ 127.709288][ T5416] tipc: Disabling bearer [ 127.753165][ T5420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.345'. [ 127.876409][ T4240] usb 2-1: USB disconnect, device number 2 [ 128.142012][ T4318] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 128.163997][ T4318] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max [ 128.978570][ T4318] microsoft 0003:045E:07DA.000E: No inputs registered, leaving [ 129.003262][ T4318] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 129.035136][ T4318] microsoft 0003:045E:07DA.000E: no inputs found [ 129.065514][ T4318] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway [ 129.176089][ T5450] device syzkaller0 entered promiscuous mode [ 129.204679][ T4237] usb 3-1: USB disconnect, device number 5 [ 129.465032][ T5457] fido_id[5457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 129.832838][ T5460] device syzkaller0 entered promiscuous mode [ 129.969941][ T5475] binder: BINDER_SET_CONTEXT_MGR already set [ 129.994899][ T5475] binder: 5474:5475 ioctl 4018620d 200000004a80 returned -16 [ 130.022459][ T5477] tipc: Enabled bearer , priority 0 [ 130.070609][ T5477] device syzkaller0 entered promiscuous mode [ 130.092383][ T5480] program syz.1.361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.151335][ T5477] tipc: Resetting bearer [ 130.194921][ T5476] tipc: Resetting bearer [ 130.230219][ T5476] tipc: Disabling bearer [ 131.822147][ T5503] device syzkaller0 entered promiscuous mode [ 131.982272][ T5516] device syzkaller0 entered promiscuous mode [ 132.768423][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.774818][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.844828][ T5004] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.298945][ T5004] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.404109][ T5004] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 133.417054][ T5552] netlink: 'syz.0.384': attribute type 13 has an invalid length. [ 133.448433][ T5004] usb 2-1: config 1 has no interface number 0 [ 133.454759][ T5004] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.478100][ T5552] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.384'. [ 133.631558][ T5536] capability: warning: `syz.2.378' uses deprecated v2 capabilities in a way that may be insecure [ 133.720407][ T5004] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.740679][ T5004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.925031][ T5557] device syzkaller0 entered promiscuous mode [ 134.153686][ T5004] usb 2-1: Product: syz [ 134.158764][ T5004] usb 2-1: Manufacturer: syz [ 134.163407][ T5004] usb 2-1: SerialNumber: syz [ 134.231094][ T5004] usb 2-1: selecting invalid altsetting 1 [ 135.099711][ T5004] cdc_ncm 2-1:1.1: bind() failure [ 135.111609][ T5004] usb 2-1: USB disconnect, device number 3 [ 137.711217][ T5613] device syzkaller0 entered promiscuous mode [ 139.500365][ T5652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 139.530078][ T5652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.413'. [ 140.517555][ T5688] device syzkaller0 entered promiscuous mode [ 142.308000][ T4240] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 142.612625][ T5736] device syzkaller0 entered promiscuous mode [ 142.848300][ T4240] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 142.872786][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.912765][ T4240] usb 5-1: Product: syz [ 142.946997][ T4240] usb 5-1: Manufacturer: syz [ 143.007507][ T4240] usb 5-1: SerialNumber: syz [ 143.154925][ T4240] usb 5-1: config 0 descriptor?? [ 143.388910][ T4240] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 143.589470][ T5757] loop2: detected capacity change from 0 to 7 [ 143.633688][ T5757] Dev loop2: unable to read RDB block 7 [ 143.671786][ T5757] loop2: unable to read partition table [ 143.693476][ T5757] loop2: partition table beyond EOD, truncated [ 143.749240][ T5757] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 144.892419][ T5764] sched: RT throttling activated [ 145.966363][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 146.608013][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.748324][ T4240] gspca_stk1135: reg_w 0xd err -71 [ 146.755369][ T4240] gspca_stk1135: serial bus timeout: status=0x00 [ 146.768200][ T4240] gspca_stk1135: Sensor write failed [ 146.773568][ T4240] gspca_stk1135: serial bus timeout: status=0x00 [ 146.788208][ T4240] gspca_stk1135: Sensor write failed [ 146.793586][ T4240] gspca_stk1135: serial bus timeout: status=0x00 [ 146.808424][ T4240] gspca_stk1135: Sensor read failed [ 146.818504][ T4240] gspca_stk1135: serial bus timeout: status=0x00 [ 146.824905][ T4240] gspca_stk1135: Sensor read failed [ 146.861052][ T4240] gspca_stk1135: Detected sensor type unknown (0x0) [ 146.867741][ T4240] gspca_stk1135: serial bus timeout: status=0x00 [ 146.888227][ T4240] gspca_stk1135: Sensor read failed [ 146.893533][ T4240] gspca_stk1135: serial bus timeout: status=0x00 [ 146.898543][ T1108] usb 1-1: Using ep0 maxpacket: 32 [ 146.908246][ T4240] gspca_stk1135: Sensor read failed [ 146.913519][ T4240] gspca_stk1135: serial bus timeout: status=0x00 [ 146.928211][ T4240] gspca_stk1135: Sensor write failed [ 146.933632][ T4240] gspca_stk1135: serial bus timeout: status=0x00 [ 146.957946][ T4240] gspca_stk1135: Sensor write failed [ 146.963357][ T4240] stk1135: probe of 5-1:0.0 failed with error -71 [ 147.026406][ T4240] usb 5-1: USB disconnect, device number 2 [ 147.170039][ T5790] device syzkaller0 entered promiscuous mode [ 147.228128][ T1108] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.344640][ T1108] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 147.578228][ T1108] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 147.599931][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.642442][ T1108] usb 1-1: Product: syz [ 147.655345][ T1108] usb 1-1: Manufacturer: syz [ 147.669691][ T1108] usb 1-1: SerialNumber: syz [ 148.368152][ T1108] usb 1-1: Limiting number of CPorts to U8_MAX [ 148.380238][ T1108] usb 1-1: Not enough endpoints found in device, aborting! [ 148.614851][ T23] usb 1-1: USB disconnect, device number 4 [ 148.841627][ T5814] tipc: Enabled bearer , priority 0 [ 148.873701][ T5814] device syzkaller0 entered promiscuous mode [ 148.945688][ T5813] tipc: Resetting bearer [ 149.140663][ T5813] tipc: Disabling bearer [ 150.424854][ T5831] device syzkaller0 entered promiscuous mode [ 151.243345][ T5843] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.263815][ T5843] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.390603][ T5838] netlink: 'syz.3.471': attribute type 14 has an invalid length. [ 152.227717][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 155.094146][ T5897] device syzkaller0 entered promiscuous mode [ 156.519017][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 158.385451][ T5938] device syzkaller0 entered promiscuous mode [ 158.808391][ T4233] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 159.278657][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 159.492090][ T4233] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 159.551492][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.606906][ T4233] usb 1-1: config 0 descriptor?? [ 159.678397][ T5947] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 159.753912][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 160.862522][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.875612][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.884120][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.891652][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.899141][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.906571][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.922854][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.933564][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.941296][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.948978][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.956424][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.964237][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.978100][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 160.998069][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.005662][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.018042][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.025497][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.044251][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.057455][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.071850][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.250423][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.257942][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.265378][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.272869][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.280336][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.287780][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.295825][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.537438][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.653763][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 161.806669][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.176290][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.184176][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.191985][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.208110][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.216240][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.249323][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.297472][ T5987] device syzkaller0 entered promiscuous mode [ 162.303679][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.311561][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.327938][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.335415][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.357627][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.369994][ T5991] netlink: 'syz.3.517': attribute type 13 has an invalid length. [ 162.388025][ T5991] netlink: 'syz.3.517': attribute type 17 has an invalid length. [ 162.395893][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.417791][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.426789][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.438819][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.454104][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.470992][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.487602][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.498746][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.510740][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.522748][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.536013][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.549262][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.562390][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.586860][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.602341][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.610150][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.617678][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.626116][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.641426][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.656941][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.672500][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.706960][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.723713][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.745743][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.765840][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.810372][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.825107][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.835490][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.849353][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.856887][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 162.869518][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.046221][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.054234][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.061955][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.091148][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.132775][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.169760][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.381286][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.410929][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.442400][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.470168][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.503895][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.526651][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.559245][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.587371][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.618232][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.647779][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.676354][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.707424][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.757672][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.789913][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.825336][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.866181][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.904045][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.915315][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.923967][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.931767][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.939906][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.947666][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.958110][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.965697][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.976373][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.984404][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 163.993567][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.001600][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.010767][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.018732][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.026261][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.036935][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.045097][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.054323][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.065515][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.105825][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.142416][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.178448][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.188360][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.195820][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.206160][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.214008][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x1 [ 164.223045][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.230857][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.238781][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.246312][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.254765][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.263407][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.271327][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.279075][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.286774][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.294664][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.302679][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.310435][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.318352][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.325870][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.346120][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x2 [ 164.353965][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.361869][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.370161][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.377718][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.385532][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.393356][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.406189][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.413948][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.421648][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.429134][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.436570][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.444051][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.451512][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.459002][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.466954][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.474475][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.481955][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.489429][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.496853][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.504371][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.511847][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.519353][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.526776][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.534237][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.541701][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.549204][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.556619][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.564110][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.572164][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.579677][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.587109][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.594590][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.602064][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.609555][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.616977][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.624479][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.631967][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.639670][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.647113][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.654599][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.663022][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.670967][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.678487][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.685922][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.693421][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.700897][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.708473][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.715902][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.723388][ T4233] hid-generic 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 164.730884][ T4233] hid-generic 0003:0B05:1ABE.000F: unexpected long global item [ 164.739670][ T4233] hid-generic: probe of 0003:0B05:1ABE.000F failed with error -22 [ 164.757535][ T4233] usb 1-1: USB disconnect, device number 5 [ 164.852861][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.864608][ T5991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.932852][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 166.013789][ T6026] netlink: 56 bytes leftover after parsing attributes in process `syz.1.528'. [ 166.031013][ T4263] hid-generic 0005:16C0:5505.0010: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 166.134812][ T6031] fido_id[6031]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 166.258170][ T4233] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 166.598448][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 166.858344][ T4233] usb 1-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 166.890650][ T4233] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 166.972556][ T4233] usb 1-1: config 253 has 0 interfaces, different from the descriptor's value: 1 [ 167.080487][ T6044] device syzkaller0 entered promiscuous mode [ 169.338106][ T4233] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 169.357567][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.432775][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.539'. [ 169.449875][ T4233] usb 1-1: Product: syz [ 169.459434][ T4233] usb 1-1: Manufacturer: syz [ 169.481834][ T6077] syz.2.541 uses obsolete (PF_INET,SOCK_PACKET) [ 169.489357][ T4233] usb 1-1: can't set config #253, error -71 [ 169.545472][ T4233] usb 1-1: USB disconnect, device number 6 [ 169.628253][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.048608][ T6086] syz.1.542 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 170.066797][ T6086] ubi31: attaching mtd0 [ 170.081276][ T6086] ubi31: scanning is finished [ 170.086076][ T6086] ubi31: empty MTD device detected [ 170.707595][ T6086] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 170.719949][ T21] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 171.012692][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.168258][ T21] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.177444][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.198140][ T21] usb 5-1: config 0 descriptor?? [ 172.218323][ T21] usb 5-1: can't set config #0, error -71 [ 172.228725][ T21] usb 5-1: USB disconnect, device number 3 [ 172.947068][ T6105] device syzkaller0 entered promiscuous mode [ 173.415616][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.555'. [ 174.365120][ T4263] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.922715][ T4263] usb 1-1: Using ep0 maxpacket: 8 [ 175.824866][ T6167] device syzkaller0 entered promiscuous mode [ 175.968178][ T4263] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 175.981397][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.995574][ T4263] usb 1-1: Product: syz [ 176.003553][ T4263] usb 1-1: Manufacturer: syz [ 176.010779][ T4263] usb 1-1: SerialNumber: syz [ 176.023242][ T4263] usb 1-1: config 0 descriptor?? [ 176.049615][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 176.070166][ T4263] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 176.086292][ T4263] pctv452e: pctv452e_power_ctrl: 1 [ 176.086292][ T4263] [ 176.094445][ T4263] usb 1-1: selecting invalid altsetting 3 [ 176.110192][ T4263] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 176.110192][ T4263] [ 176.136741][ T4263] dvb-usb: bulk message failed: -22 (5/0) [ 176.328906][ T4263] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.372373][ T4263] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 176.781297][ T4263] usb 1-1: media controller created [ 176.790065][ T4263] dvb-usb: bulk message failed: -22 (8/0) [ 176.796144][ T4263] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 177.088118][ T4263] dvb-usb: MAC address reading failed. [ 177.132921][ T4263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.614634][ T4263] DVB: Unable to find symbol stb0899_attach() [ 177.626955][ T4263] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 178.692258][ T6212] netlink: 49 bytes leftover after parsing attributes in process `syz.2.580'. [ 178.771104][ T6211] device syzkaller0 entered promiscuous mode [ 179.100766][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 179.109749][ T4263] rc_core: IR keymap rc-tt-1500 not found [ 179.109766][ T4263] Registered IR keymap rc-empty [ 179.112852][ T4263] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 179.141951][ T4263] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input9 [ 179.158564][ T4263] dvb-usb: schedule remote query interval to 100 msecs. [ 179.165574][ T4263] pctv452e: pctv452e_power_ctrl: 0 [ 179.165574][ T4263] [ 179.174372][ T4263] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 179.186912][ T4263] usb 1-1: USB disconnect, device number 7 [ 179.273147][ T6225] loop2: detected capacity change from 0 to 7 [ 179.314507][ T4263] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 179.421879][ T3562] Dev loop2: unable to read RDB block 7 [ 179.427812][ T3562] loop2: unable to read partition table [ 179.465586][ T3562] loop2: partition table beyond EOD, truncated [ 179.502658][ T6225] Dev loop2: unable to read RDB block 7 [ 179.515394][ T6225] loop2: unable to read partition table [ 179.538468][ T6225] loop2: partition table beyond EOD, truncated [ 179.547711][ T6225] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 180.896163][ T6256] device syzkaller0 entered promiscuous mode [ 181.309526][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 184.430222][ T4237] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 184.697950][ T4237] usb 4-1: Using ep0 maxpacket: 32 [ 185.429812][ T4237] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 185.530028][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.637922][ T4237] usb 4-1: Product: syz [ 185.642169][ T4237] usb 4-1: Manufacturer: syz [ 185.701435][ T4237] usb 4-1: SerialNumber: syz [ 185.742710][ T6326] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 185.757625][ T4237] usb 4-1: config 0 descriptor?? [ 186.169403][ T4237] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 186.258471][ T4237] airspy 4-1:0.0: Could not detect board [ 186.383679][ T4237] airspy: probe of 4-1:0.0 failed with error -71 [ 186.683402][ T4237] usb 4-1: USB disconnect, device number 5 [ 186.863062][ T6340] device ip_vti0 entered promiscuous mode [ 186.887541][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 187.127431][ T6347] device syzkaller0 entered promiscuous mode [ 191.139512][ T21] Bluetooth: hci3: command 0x0406 tx timeout [ 191.147287][ T21] Bluetooth: hci0: command 0x0406 tx timeout [ 191.269116][ T21] Bluetooth: hci2: command 0x0406 tx timeout [ 191.558971][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 191.620024][ T6401] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 192.498494][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 193.378585][ T4237] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 193.687949][ T4237] usb 2-1: Using ep0 maxpacket: 16 [ 193.905965][ T4237] usb 2-1: config 0 has no interfaces? [ 194.329752][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.330129][ T4237] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 194.336111][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.357439][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.375674][ T4237] usb 2-1: Product: syz [ 194.464587][ T4237] usb 2-1: Manufacturer: syz [ 194.544621][ T4237] usb 2-1: SerialNumber: syz [ 194.695865][ T4237] usb 2-1: config 0 descriptor?? [ 196.836859][ T4235] usb 2-1: USB disconnect, device number 4 [ 196.904747][ T6460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 197.201071][ T6469] binder: 6468:6469 ioctl c0306201 0 returned -14 [ 199.249389][ T6492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 201.528004][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.595762][ T6516] netlink: 'syz.4.674': attribute type 1 has an invalid length. [ 201.618623][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.674'. [ 201.808527][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 202.098265][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.470691][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 202.487131][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.506967][ T23] usb 1-1: config 0 descriptor?? [ 202.570340][ T23] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 203.144086][ T6533] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 203.178064][ T4235] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 203.458372][ T4235] usb 4-1: Using ep0 maxpacket: 8 [ 203.628827][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 203.640859][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.655325][ T4235] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.668014][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 203.682740][ T4235] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 203.697341][ T4235] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 203.707988][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.736722][ T4235] usb 4-1: config 0 descriptor?? [ 203.823030][ T6529] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 205.641606][ T6529] udc-core: couldn't find an available UDC or it's busy [ 205.812736][ T6529] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 206.377879][ T4233] usb 1-1: USB disconnect, device number 8 [ 206.995197][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 207.325513][ T7] usb 4-1: USB disconnect, device number 6 [ 208.718860][ T6577] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 209.365890][ T6594] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 210.208298][ T4236] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 210.908055][ T4236] usb 5-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 213.593697][ T4236] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 213.604917][ T4236] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.614882][ T4236] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 213.628456][ T4236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 213.635115][ T4236] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 213.644227][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.355321][ T4236] usb 5-1: config 0 descriptor?? [ 214.398087][ T4236] usb 5-1: can't set config #0, error -71 [ 214.427912][ T4236] usb 5-1: USB disconnect, device number 4 [ 215.355586][ T6640] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 216.442464][ T6656] syz.4.710: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 216.458428][ T6656] CPU: 0 PID: 6656 Comm: syz.4.710 Not tainted syzkaller #0 [ 216.465763][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.475942][ T6656] Call Trace: [ 216.479258][ T6656] [ 216.482214][ T6656] dump_stack_lvl+0x188/0x250 [ 216.486940][ T6656] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 216.492613][ T6656] ? show_regs_print_info+0x20/0x20 [ 216.497859][ T6656] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 216.503534][ T6656] warn_alloc+0x243/0x320 [ 216.507901][ T6656] ? zone_watermark_ok_safe+0x240/0x240 [ 216.513485][ T6656] ? lock_chain_count+0x20/0x20 [ 216.518384][ T6656] __vmalloc_node_range+0x2b1/0x8b0 [ 216.523625][ T6656] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 216.529296][ T6656] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 216.535137][ T6656] vmalloc+0x75/0x80 [ 216.539062][ T6656] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 216.544906][ T6656] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 216.550595][ T6656] dvb_demux_do_ioctl+0x450/0x530 [ 216.555652][ T6656] dvb_usercopy+0x191/0x2b0 [ 216.560182][ T6656] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 216.565756][ T6656] ? dvb_generic_ioctl+0xb0/0xb0 [ 216.570745][ T6656] ? bpf_lsm_file_free_security+0x10/0x10 [ 216.576500][ T6656] ? dvb_demux_poll+0x210/0x210 [ 216.581385][ T6656] dvb_demux_ioctl+0x25/0x30 [ 216.586006][ T6656] __se_sys_ioctl+0xfa/0x170 [ 216.590628][ T6656] do_syscall_64+0x4c/0xa0 [ 216.595080][ T6656] ? clear_bhb_loop+0x30/0x80 [ 216.599795][ T6656] ? clear_bhb_loop+0x30/0x80 [ 216.604512][ T6656] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 216.610450][ T6656] RIP: 0033:0x7f838be8fdd9 [ 216.614922][ T6656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.634589][ T6656] RSP: 002b:00007f838a0a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.643038][ T6656] RAX: ffffffffffffffda RBX: 00007f838c109180 RCX: 00007f838be8fdd9 [ 216.651039][ T6656] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 216.659066][ T6656] RBP: 00007f838bf25d69 R08: 0000000000000000 R09: 0000000000000000 [ 216.667061][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.675058][ T6656] R13: 00007f838c109218 R14: 00007f838c109180 R15: 00007ffe542d88a8 [ 216.683077][ T6656] [ 216.687425][ T6656] Mem-Info: [ 216.691257][ T6656] active_anon:2071 inactive_anon:8691 isolated_anon:0 [ 216.691257][ T6656] active_file:4851 inactive_file:36420 isolated_file:0 [ 216.691257][ T6656] unevictable:768 dirty:160 writeback:0 [ 216.691257][ T6656] slab_reclaimable:20252 slab_unreclaimable:112557 [ 216.691257][ T6656] mapped:32900 shmem:6317 pagetables:664 bounce:0 [ 216.691257][ T6656] kernel_misc_reclaimable:0 [ 216.691257][ T6656] free:1359147 free_pcp:8930 free_cma:0 [ 216.733555][ T6656] Node 0 active_anon:8252kB inactive_anon:34256kB active_file:19204kB inactive_file:145680kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131600kB dirty:640kB writeback:0kB shmem:23192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10768kB pagetables:2656kB all_unreclaimable? no [ 216.764896][ T6656] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 216.794066][ T6656] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.820478][ T6656] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 216.826550][ T6656] Node 0 DMA32 free:1513320kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:8252kB inactive_anon:34256kB active_file:19204kB inactive_file:145680kB unevictable:1536kB writepending:640kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:26036kB local_pcp:7504kB free_cma:0kB [ 216.856592][ T6656] lowmem_reserve[]: 0 0 0 0 0 [ 216.861630][ T6656] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.887395][ T6656] lowmem_reserve[]: 0 0 0 0 0 [ 216.892459][ T6656] Node 1 Normal free:3907908kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:9684kB local_pcp:6408kB free_cma:0kB [ 216.921514][ T6656] lowmem_reserve[]: 0 0 0 0 0 [ 216.926616][ T6656] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.940161][ T6656] Node 0 DMA32: 2*4kB (UM) 12*8kB (E) 226*16kB (ME) 473*32kB (UME) 249*64kB (UME) 63*128kB (UME) 10*256kB (UM) 5*512kB (UM) 1*1024kB (U) 3*2048kB (UME) 356*4096kB (M) = 1513320kB [ 216.959246][ T6656] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 216.971481][ T6656] Node 1 Normal: 127*4kB (UME) 33*8kB (UME) 24*16kB (UME) 118*32kB (UE) 48*64kB (UME) 20*128kB (UME) 12*256kB (UME) 4*512kB (U) 1*1024kB (U) 2*2048kB (UM) 949*4096kB (M) = 3907908kB [ 216.990863][ T6656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.000530][ T6656] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.009942][ T6656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.019596][ T6656] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.028999][ T6656] 47588 total pagecache pages [ 217.033822][ T6656] 0 pages in swap cache [ 217.038073][ T6656] Swap cache stats: add 56, delete 56, find 18/26 [ 217.044581][ T6656] Free swap = 124472kB [ 217.048847][ T6656] Total swap = 124996kB [ 217.053072][ T6656] 2097051 pages RAM [ 217.056955][ T6656] 0 pages HighMem/MovableOnly [ 217.061756][ T6656] 411492 pages reserved [ 217.065983][ T6656] 0 pages cma reserved [ 225.878226][ T1111] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 228.220295][ T6804] warn_alloc: 2 callbacks suppressed [ 228.220311][ T6804] syz.1.762: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 228.452752][ T6804] CPU: 1 PID: 6804 Comm: syz.1.762 Not tainted syzkaller #0 [ 228.460126][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.470220][ T6804] Call Trace: [ 228.473533][ T6804] [ 228.476489][ T6804] dump_stack_lvl+0x188/0x250 [ 228.481205][ T6804] ? rcu_lock_release+0x5/0x20 [ 228.486025][ T6804] ? show_regs_print_info+0x20/0x20 [ 228.491289][ T6804] ? load_image+0x400/0x400 [ 228.495836][ T6804] warn_alloc+0x243/0x320 [ 228.500192][ T6804] ? rcu_lock_release+0x20/0x20 [ 228.505084][ T6804] ? zone_watermark_ok_safe+0x240/0x240 [ 228.510664][ T6804] ? dvb_demux_do_ioctl+0x313/0x530 [ 228.515900][ T6804] ? kfree+0xef/0x2a0 [ 228.519918][ T6804] __vmalloc_node_range+0x2b1/0x8b0 [ 228.525173][ T6804] ? mutex_lock_io_nested+0x60/0x60 [ 228.530429][ T6804] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 228.536266][ T6804] vmalloc+0x75/0x80 [ 228.540188][ T6804] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 228.546027][ T6804] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 228.551698][ T6804] dvb_demux_do_ioctl+0x450/0x530 [ 228.556762][ T6804] dvb_usercopy+0x191/0x2b0 [ 228.561298][ T6804] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 228.566881][ T6804] ? dvb_generic_ioctl+0xb0/0xb0 [ 228.571882][ T6804] ? dvb_demux_poll+0x210/0x210 [ 228.576787][ T6804] dvb_demux_ioctl+0x25/0x30 [ 228.581410][ T6804] __se_sys_ioctl+0xfa/0x170 [ 228.586033][ T6804] do_syscall_64+0x4c/0xa0 [ 228.590479][ T6804] ? clear_bhb_loop+0x30/0x80 [ 228.595184][ T6804] ? clear_bhb_loop+0x30/0x80 [ 228.599890][ T6804] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.605829][ T6804] RIP: 0033:0x7fc0da9f4dd9 [ 228.610268][ T6804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.629901][ T6804] RSP: 002b:00007fc0d8c4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.638378][ T6804] RAX: ffffffffffffffda RBX: 00007fc0dac6dfa0 RCX: 00007fc0da9f4dd9 [ 228.646382][ T6804] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 228.654387][ T6804] RBP: 00007fc0daa8ad69 R08: 0000000000000000 R09: 0000000000000000 [ 228.662381][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.670374][ T6804] R13: 00007fc0dac6e038 R14: 00007fc0dac6dfa0 R15: 00007ffd1b360a68 [ 228.678397][ T6804] [ 229.123911][ T1111] usb 3-1: device not accepting address 6, error -71 [ 229.137078][ T6804] Mem-Info: [ 229.140493][ T6804] active_anon:273 inactive_anon:7981 isolated_anon:0 [ 229.140493][ T6804] active_file:4861 inactive_file:36416 isolated_file:0 [ 229.140493][ T6804] unevictable:768 dirty:82 writeback:0 [ 229.140493][ T6804] slab_reclaimable:20194 slab_unreclaimable:112363 [ 229.140493][ T6804] mapped:32184 shmem:3825 pagetables:638 bounce:0 [ 229.140493][ T6804] kernel_misc_reclaimable:0 [ 229.140493][ T6804] free:1362203 free_pcp:9470 free_cma:0 [ 229.185816][ T6804] Node 0 active_anon:1260kB inactive_anon:31216kB active_file:19244kB inactive_file:145664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128436kB dirty:324kB writeback:0kB shmem:13224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10640kB pagetables:2552kB all_unreclaimable? no [ 229.229948][ T6804] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 229.278710][ T6804] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.323441][ T6804] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 229.329816][ T6804] Node 0 DMA32 free:1524620kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:7960kB inactive_anon:24616kB active_file:19244kB inactive_file:145664kB unevictable:1536kB writepending:324kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:29412kB local_pcp:14756kB free_cma:0kB [ 229.362744][ T6804] lowmem_reserve[]: 0 0 0 0 0 [ 229.372155][ T6804] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 229.407565][ T6804] lowmem_reserve[]: 0 0 0 0 0 [ 229.413184][ T6804] Node 1 Normal free:3907908kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:9684kB local_pcp:6408kB free_cma:0kB [ 229.449238][ T6804] lowmem_reserve[]: 0 0 0 0 0 [ 229.454191][ T6804] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 229.468590][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 229.476376][ T6804] Node 0 DMA32: 1011*4kB (UM) 1202*8kB (UME) 277*16kB (UME) 278*32kB (UME) 277*64kB (UME) 72*128kB (UME) 10*256kB (UM) 5*512kB (UM) 1*1024kB (U) 3*2048kB (UME) 356*4096kB (M) = 1524396kB [ 229.495919][ T6804] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 229.513974][ T6804] Node 1 Normal: 127*4kB (UME) 33*8kB (UME) 24*16kB (UME) 118*32kB (UE) 48*64kB (UME) 20*128kB (UME) 12*256kB (UME) 4*512kB (U) 1*1024kB (U) 2*2048kB (UM) 949*4096kB (M) = 3907908kB [ 229.538557][ T6804] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.552756][ T6804] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.564872][ T6804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.579070][ T6804] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.588557][ T1111] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 229.601186][ T6804] 42927 total pagecache pages [ 229.623252][ T6804] 0 pages in swap cache [ 229.627489][ T6804] Swap cache stats: add 70, delete 70, find 20/32 [ 229.634301][ T6804] Free swap = 124472kB [ 229.643964][ T6804] Total swap = 124996kB [ 229.648377][ T6804] 2097051 pages RAM [ 229.652224][ T6804] 0 pages HighMem/MovableOnly [ 229.656927][ T6804] 411492 pages reserved [ 229.667213][ T6804] 0 pages cma reserved [ 229.722634][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 229.868029][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 229.896733][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.917715][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.928058][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 229.949378][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 229.966533][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 229.976238][ T6827] netlink: 'syz.1.770': attribute type 1 has an invalid length. [ 229.979454][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.004879][ T23] usb 5-1: config 0 descriptor?? [ 230.048337][ T6815] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.061492][ T6827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.073151][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.770'. [ 230.108110][ T1111] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 230.127462][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.135702][ T1111] usb 3-1: Product: syz [ 230.140520][ T1111] usb 3-1: Manufacturer: syz [ 230.145167][ T1111] usb 3-1: SerialNumber: syz [ 230.160190][ T1111] usb 3-1: config 0 descriptor?? [ 230.177161][ T6829] device bond1 entered promiscuous mode [ 230.462453][ T1111] usb 3-1: ignoring: probably an ADSL modem [ 230.645338][ T6815] udc-core: couldn't find an available UDC or it's busy [ 230.702436][ T6815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 231.371997][ T23] usb 5-1: USB disconnect, device number 5 [ 231.708585][ T1111] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 231.747150][ T1111] usb 3-1: USB disconnect, device number 7 [ 232.844986][ T6860] device syzkaller0 entered promiscuous mode [ 233.077977][ T6877] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 234.191219][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.789'. [ 234.208941][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.789'. [ 235.259714][ T6912] binder: 6911:6912 unknown command 0 [ 235.273132][ T6912] binder: 6911:6912 ioctl c0306201 200000000640 returned -22 [ 240.017357][ T6925] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 240.026165][ T6925] overlayfs: missing 'lowerdir' [ 240.143832][ T6924] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 240.153901][ T6927] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 240.484166][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 240.498227][ T6951] device erspan0 entered promiscuous mode [ 240.504181][ T6951] device macvtap1 entered promiscuous mode [ 240.517389][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 240.613045][ T6952] warn_alloc: 2 callbacks suppressed [ 240.613085][ T6952] syz.1.802: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 240.633255][ T6952] CPU: 0 PID: 6952 Comm: syz.1.802 Not tainted syzkaller #0 [ 240.640581][ T6952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.650701][ T6952] Call Trace: [ 240.654012][ T6952] [ 240.657054][ T6952] dump_stack_lvl+0x188/0x250 [ 240.661787][ T6952] ? rcu_lock_release+0x5/0x20 [ 240.666594][ T6952] ? show_regs_print_info+0x20/0x20 [ 240.671835][ T6952] ? load_image+0x400/0x400 [ 240.676370][ T6952] ? __rcu_read_unlock+0x78/0xd0 [ 240.681354][ T6952] warn_alloc+0x243/0x320 [ 240.685725][ T6952] ? zone_watermark_ok_safe+0x240/0x240 [ 240.691336][ T6952] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 240.697360][ T6952] __vmalloc_node_range+0x2b1/0x8b0 [ 240.702600][ T6952] ? lockdep_hardirqs_on+0x94/0x140 [ 240.707845][ T6952] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 240.713680][ T6952] vmalloc+0x75/0x80 [ 240.717608][ T6952] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 240.723452][ T6952] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 240.729146][ T6952] dvb_demux_do_ioctl+0x450/0x530 [ 240.734211][ T6952] dvb_usercopy+0x191/0x2b0 [ 240.738749][ T6952] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 240.744327][ T6952] ? dvb_generic_ioctl+0xb0/0xb0 [ 240.749320][ T6952] ? dvb_demux_poll+0x210/0x210 [ 240.754207][ T6952] dvb_demux_ioctl+0x25/0x30 [ 240.758836][ T6952] __se_sys_ioctl+0xfa/0x170 [ 240.763470][ T6952] do_syscall_64+0x4c/0xa0 [ 240.767914][ T6952] ? clear_bhb_loop+0x30/0x80 [ 240.772614][ T6952] ? clear_bhb_loop+0x30/0x80 [ 240.777332][ T6952] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.783262][ T6952] RIP: 0033:0x7fc0da9f4dd9 [ 240.787710][ T6952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.807501][ T6952] RSP: 002b:00007fc0d8c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.815971][ T6952] RAX: ffffffffffffffda RBX: 00007fc0dac6e180 RCX: 00007fc0da9f4dd9 [ 240.823978][ T6952] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 240.831985][ T6952] RBP: 00007fc0daa8ad69 R08: 0000000000000000 R09: 0000000000000000 [ 240.839986][ T6952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.847989][ T6952] R13: 00007fc0dac6e218 R14: 00007fc0dac6e180 R15: 00007ffd1b360a68 [ 240.856018][ T6952] [ 240.859176][ T6952] Mem-Info: [ 240.862348][ T6952] active_anon:271 inactive_anon:8281 isolated_anon:0 [ 240.862348][ T6952] active_file:4940 inactive_file:36357 isolated_file:0 [ 240.862348][ T6952] unevictable:768 dirty:142 writeback:0 [ 240.862348][ T6952] slab_reclaimable:20176 slab_unreclaimable:112783 [ 240.862348][ T6952] mapped:32274 shmem:4497 pagetables:587 bounce:0 [ 240.862348][ T6952] kernel_misc_reclaimable:0 [ 240.862348][ T6952] free:1359852 free_pcp:8744 free_cma:0 [ 240.904339][ T6952] Node 0 active_anon:1052kB inactive_anon:32616kB active_file:19560kB inactive_file:145428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129096kB dirty:564kB writeback:0kB shmem:15912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10628kB pagetables:2348kB all_unreclaimable? no [ 240.935821][ T6952] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 240.965020][ T6952] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.991402][ T6952] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 240.997489][ T6952] Node 0 DMA32 free:1515884kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1052kB inactive_anon:32616kB active_file:19560kB inactive_file:145428kB unevictable:1536kB writepending:564kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:25548kB local_pcp:6436kB free_cma:0kB [ 241.027506][ T6952] lowmem_reserve[]: 0 0 0 0 0 [ 241.032591][ T6952] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 241.058468][ T6952] lowmem_reserve[]: 0 0 0 0 0 [ 241.063526][ T6952] Node 1 Normal free:3908164kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:9428kB local_pcp:6408kB free_cma:0kB [ 241.092423][ T6952] lowmem_reserve[]: 0 0 0 0 0 [ 241.097421][ T6952] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 241.110924][ T6952] Node 0 DMA32: 873*4kB (UM) 97*8kB (UME) 252*16kB (UME) 498*32kB (UME) 167*64kB (UME) 74*128kB (UME) 12*256kB (UM) 6*512kB (UM) 1*1024kB (U) 3*2048kB (UME) 356*4096kB (M) = 1515884kB [ 241.130484][ T6952] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 241.142935][ T6952] Node 1 Normal: 127*4kB (UME) 33*8kB (UME) 24*16kB (UME) 118*32kB (UE) 46*64kB (UME) 19*128kB (UME) 10*256kB (UME) 6*512kB (U) 1*1024kB (U) 2*2048kB (UM) 949*4096kB (M) = 3908164kB [ 241.162215][ T6952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.171961][ T6952] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.181371][ T6952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.191079][ T6952] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 241.200500][ T6952] 45794 total pagecache pages [ 241.205257][ T6952] 0 pages in swap cache [ 241.209515][ T6952] Swap cache stats: add 185, delete 185, find 20/32 [ 241.216204][ T6952] Free swap = 124728kB [ 241.220618][ T6952] Total swap = 124996kB [ 241.224876][ T6952] 2097051 pages RAM [ 241.228811][ T6952] 0 pages HighMem/MovableOnly [ 241.233575][ T6952] 411492 pages reserved [ 241.237798][ T6952] 0 pages cma reserved [ 241.607553][ T6951] device erspan0 left promiscuous mode [ 242.477408][ T6979] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 244.925507][ T7021] device syzkaller0 entered promiscuous mode [ 244.942713][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 245.123836][ T7027] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 245.318339][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.361918][ T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.492950][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=9da1, bcdDevice= 0.40 [ 246.502457][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.511384][ T13] usb 5-1: Product: syz [ 246.515606][ T13] usb 5-1: Manufacturer: syz [ 246.521126][ T13] usb 5-1: SerialNumber: syz [ 247.931432][ T13] cdc_ncm 5-1:1.0: bind() failure [ 248.013812][ T13] usbtest: probe of 5-1:1.1 failed with error -71 [ 248.022580][ T13] usb 5-1: USB disconnect, device number 6 [ 248.036616][ T7059] device syzkaller0 entered promiscuous mode [ 248.316695][ T7061] blktrace: Concurrent blktraces are not allowed on loop6 [ 249.841420][ T7085] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 251.341285][ T7109] blktrace: Concurrent blktraces are not allowed on loop2 [ 252.474448][ T7130] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.856'. [ 254.932368][ T7160] blktrace: Concurrent blktraces are not allowed on loop6 [ 255.690004][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.697029][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.140007][ T7174] device syzkaller0 entered promiscuous mode [ 256.425885][ T7165] chnl_net:caif_netlink_parms(): no params data found [ 256.487961][ T4264] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 256.581921][ T7165] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.593114][ T7165] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.601412][ T7165] device bridge_slave_0 entered promiscuous mode [ 256.610528][ T7165] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.617720][ T7165] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.626563][ T7165] device bridge_slave_1 entered promiscuous mode [ 256.848469][ T7165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.879896][ T7165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.972343][ T7204] program syz.2.880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.988053][ T4237] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 257.018244][ T4264] usb 4-1: Using ep0 maxpacket: 16 [ 257.095964][ T7165] team0: Port device team_slave_0 added [ 257.127457][ T7165] team0: Port device team_slave_1 added [ 257.144591][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 257.169582][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.176692][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.202685][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.214972][ T7165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.232920][ T7165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.240839][ T7165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.260746][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.268983][ T7165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.307935][ T4237] usb 2-1: Using ep0 maxpacket: 32 [ 257.335800][ T7165] device hsr_slave_0 entered promiscuous mode [ 257.352470][ T4264] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 257.365736][ T4264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.375044][ T4264] usb 4-1: Product: syz [ 257.379699][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 257.387405][ T4264] usb 4-1: Manufacturer: syz [ 257.392774][ T4264] usb 4-1: SerialNumber: syz [ 257.403703][ T4264] usb 4-1: config 0 descriptor?? [ 257.411198][ T7165] device hsr_slave_1 entered promiscuous mode [ 257.419704][ T7165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.427318][ T7165] Cannot create hsr debugfs directory [ 257.448313][ T4237] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 257.459584][ T7218] device syzkaller0 entered promiscuous mode [ 257.467463][ T4237] usb 2-1: config 0 has no interface number 0 [ 257.474592][ T4237] usb 2-1: config 0 interface 12 has no altsetting 0 [ 257.617928][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 257.631032][ T7165] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.767148][ T7165] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.778353][ T13] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 257.786483][ T13] usb 1-1: config 0 has no interface number 0 [ 257.798167][ T4237] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 257.807271][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.815659][ T4237] usb 2-1: Product: syz [ 257.819986][ T4237] usb 2-1: Manufacturer: syz [ 257.824621][ T4237] usb 2-1: SerialNumber: syz [ 257.930052][ T4237] usb 2-1: config 0 descriptor?? [ 258.556514][ T7165] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.655576][ T4264] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 258.675789][ T4264] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 258.698694][ T4264] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 258.714038][ T4264] usb 4-1: media controller created [ 258.741415][ T4264] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.768235][ T13] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 258.789974][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.812215][ T13] usb 1-1: Product: syz [ 258.816448][ T13] usb 1-1: Manufacturer: syz [ 258.825159][ T13] usb 1-1: SerialNumber: syz [ 258.833955][ T7165] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.846300][ T13] usb 1-1: config 0 descriptor?? [ 258.868273][ T4264] zl10353_read_register: readreg error (reg=127, ret==0) [ 258.875448][ T4264] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 258.888930][ T13] smsc95xx v2.0.0 [ 258.924697][ T4264] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 258.937228][ T4264] usb 4-1: USB disconnect, device number 7 [ 259.033554][ T4264] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 259.139645][ T7165] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.162871][ T7165] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.175847][ T7165] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.197615][ T7165] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 259.328720][ T13] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 259.368069][ T13] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 259.544269][ T7234] blktrace: Concurrent blktraces are not allowed on loop6 [ 259.553386][ T7165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.642888][ T7165] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.661598][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.676640][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.706398][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.733201][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.757327][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.764562][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.776871][ T4236] Bluetooth: hci4: command 0x041b tx timeout [ 259.794427][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.805551][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.815275][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.822451][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.831567][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.842906][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.883446][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.917118][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.937581][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.957499][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.968168][ T4237] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 259.978622][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.992835][ T4237] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 260.013135][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.027110][ T4237] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 260.037660][ T4237] f81534: probe of 2-1:0.12 failed with error -71 [ 260.051518][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.069688][ T4237] usb 2-1: USB disconnect, device number 5 [ 260.114649][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.119151][ T13] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 260.152412][ T13] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 260.186343][ T13] usb 1-1: USB disconnect, device number 9 [ 260.195666][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.235622][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.245387][ T7253] program syz.1.899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.270962][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.538827][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.546397][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.593510][ T7165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.781174][ T7276] device syzkaller0 entered promiscuous mode [ 261.239862][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.251872][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.287184][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.346920][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.399086][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.428543][ T3056] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.453726][ T7165] device veth0_vlan entered promiscuous mode [ 261.505715][ T7165] device veth1_vlan entered promiscuous mode [ 261.572730][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.913'. [ 261.593772][ T7165] device veth0_macvtap entered promiscuous mode [ 261.612971][ T7302] netlink: 16 bytes leftover after parsing attributes in process `syz.0.913'. [ 261.625574][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.644169][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.668584][ T7] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 261.685962][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.715455][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.740542][ T7165] device veth1_macvtap entered promiscuous mode [ 261.829982][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.876290][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 261.926436][ T7165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.955907][ T7165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.986619][ T7165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.043533][ T7165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.054906][ T7] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 262.071469][ T7] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 262.086280][ T7] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 262.097975][ T7165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.117867][ T7165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.127776][ T7165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.165182][ T7165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.180504][ T7165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.188811][ T7] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 262.203348][ T7] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 262.214963][ T7] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 262.219145][ T7313] INFO: trying to register non-static key. [ 262.231733][ T7313] The code is fine but needs lockdep annotation, or maybe [ 262.238879][ T7313] you didn't initialize this object before use? [ 262.245143][ T7313] turning off the locking correctness validator. [ 262.247423][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 262.251491][ T7313] CPU: 1 PID: 7313 Comm: syz.0.917 Not tainted syzkaller #0 [ 262.251514][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.251527][ T7313] Call Trace: [ 262.251535][ T7313] [ 262.251543][ T7313] dump_stack_lvl+0x188/0x250 [ 262.251570][ T7313] ? show_regs_print_info+0x20/0x20 [ 262.251591][ T7313] ? load_image+0x400/0x400 [ 262.251612][ T7313] ? cpumask_next+0xb3/0xd0 [ 262.251631][ T7313] ? __is_module_percpu_address+0x2a7/0x410 [ 262.251653][ T7313] ? is_kernel_percpu_address+0x143/0x160 [ 262.251688][ T7313] assign_lock_key+0x1ec/0x200 [ 262.251709][ T7313] ? SOFTIRQ_verbose+0x10/0x10 [ 262.251729][ T7313] ? handle_mm_fault+0x3928/0x4410 [ 262.251758][ T7313] register_lock_class+0x21d/0x890 [ 262.251784][ T7313] ? __rwlock_init+0x140/0x140 [ 262.251803][ T7313] ? __lock_acquire+0x13bc/0x7d10 [ 262.251827][ T7313] ? is_dynamic_key+0x1f0/0x1f0 [ 262.251850][ T7313] ? _raw_spin_unlock+0x24/0x40 [ 262.251870][ T7313] ? handle_mm_fault+0x2be9/0x4410 [ 262.251892][ T7313] __lock_acquire+0x16f/0x7d10 [ 262.251920][ T7313] ? get_page+0xe0/0xe0 [ 262.251941][ T7313] ? __up_read+0x2b2/0x6b0 [ 262.305662][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.308422][ T7313] ? mark_lock+0x94/0x320 [ 262.308449][ T7313] ? verify_lock_unused+0x140/0x140 [ 262.308476][ T7313] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 262.308503][ T7313] ? lock_chain_count+0x20/0x20 [ 262.308530][ T7313] ? exc_page_fault+0x88/0x100 [ 262.308557][ T7313] lock_acquire+0x19e/0x400 [ 262.308580][ T7313] ? gsmld_write+0x57/0x120 [ 262.308603][ T7313] ? _copy_from_iter+0x271/0x1170 [ 262.308627][ T7313] ? read_lock_is_recursive+0x10/0x10 [ 262.308652][ T7313] ? _copy_from_iter+0x5cb/0x1170 [ 262.308675][ T7313] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 262.308696][ T7313] ? lockdep_hardirqs_off+0x70/0x100 [ 262.308721][ T7313] _raw_spin_lock_irqsave+0xb0/0x100 [ 262.308741][ T7313] ? gsmld_write+0x57/0x120 [ 262.308759][ T7313] ? _raw_spin_lock+0x40/0x40 [ 262.308780][ T7313] ? __virt_addr_valid+0x3c6/0x470 [ 262.308800][ T7313] gsmld_write+0x57/0x120 [ 262.308820][ T7313] file_tty_write+0x557/0x910 [ 262.308844][ T7313] ? gsmld_read+0x10/0x10 [ 262.308863][ T7313] vfs_write+0x745/0xd60 [ 262.308884][ T7313] ? file_end_write+0x250/0x250 [ 262.308906][ T7313] ? __fget_files+0x40f/0x480 [ 262.308929][ T7313] ? __fdget_pos+0x1e2/0x370 [ 262.308954][ T7313] ? ksys_write+0x71/0x260 [ 262.308975][ T7313] ksys_write+0x152/0x260 [ 262.308994][ T7313] ? __ia32_sys_read+0x80/0x80 [ 262.309028][ T7313] ? lockdep_hardirqs_on+0x94/0x140 [ 262.318741][ T7] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 262.319544][ T7313] do_syscall_64+0x4c/0xa0 [ 262.324402][ T7] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 262.329459][ T7313] ? clear_bhb_loop+0x30/0x80 [ 262.329491][ T7313] ? clear_bhb_loop+0x30/0x80 [ 262.329512][ T7313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.329536][ T7313] RIP: 0033:0x7fa3b30f7dd9 [ 262.329556][ T7313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.329575][ T7313] RSP: 002b:00007fa3b1351028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.329598][ T7313] RAX: ffffffffffffffda RBX: 00007fa3b3370fa0 RCX: 00007fa3b30f7dd9 [ 262.329615][ T7313] RDX: 0000000000000386 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 262.329630][ T7313] RBP: 00007fa3b318dd69 R08: 0000000000000000 R09: 0000000000000000 [ 262.329644][ T7313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.329659][ T7313] R13: 00007fa3b3371038 R14: 00007fa3b3370fa0 R15: 00007ffdc3266d68 [ 262.329684][ T7313] [ 262.329757][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.695272][ T7] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 263.108235][ T7] usb 3-1: string descriptor 0 read error: -71 [ 263.114532][ T7] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 263.123686][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.148392][ T7] usb 3-1: can't set config #168, error -71 [ 263.170472][ T7] usb 3-1: USB disconnect, device number 8 [ 266.451576][ T4600] device hsr_slave_0 left promiscuous mode [ 266.458570][ T4600] device hsr_slave_1 left promiscuous mode [ 266.464832][ T4600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.472681][ T4600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.480385][ T4600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.488702][ T4600] device bridge_slave_1 left promiscuous mode [ 266.494895][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.503323][ T4600] device bridge_slave_0 left promiscuous mode [ 266.510040][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.521796][ T4600] device veth1_macvtap left promiscuous mode [ 266.528144][ T4600] device veth0_macvtap left promiscuous mode [ 266.534190][ T4600] device veth1_vlan left promiscuous mode [ 266.540060][ T4600] device veth0_vlan left promiscuous mode [ 266.643666][ T4600] team0 (unregistering): Port device team_slave_1 removed [ 266.655116][ T4600] team0 (unregistering): Port device team_slave_0 removed [ 266.667166][ T4600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.681029][ T4600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.729881][ T4600] bond0 (unregistering): Released all slaves