last executing test programs: 3m50.305341176s ago: executing program 1 (id=4272): r0 = syz_io_uring_setup(0x5169, &(0x7f0000000e80)={0x0, 0xffffffff, 0x80}, &(0x7f0000000040), &(0x7f0000000240)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000e00)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3m50.031879325s ago: executing program 1 (id=4279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x1, 0x4000000000000002}) 3m49.979084074s ago: executing program 0 (id=4281): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x8, 0x0, 0x31) 3m49.836504648s ago: executing program 1 (id=4285): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0x1}, @IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3m49.83628797s ago: executing program 0 (id=4286): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3m49.665572925s ago: executing program 1 (id=4290): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb5008, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x4) 3m49.518761405s ago: executing program 1 (id=4294): r0 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000300)="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", 0x143}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000240)="9f", 0x1}) close(r0) 3m49.438372986s ago: executing program 0 (id=4296): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r0, 0x1) 3m49.131082832s ago: executing program 0 (id=4301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8980004000078", 0x14}], 0x1}, 0x40000) 3m49.055777172s ago: executing program 1 (id=4303): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) read(r0, &(0x7f00000011c0)=""/221, 0x8) 3m48.782210709s ago: executing program 32 (id=4303): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) read(r0, &(0x7f00000011c0)=""/221, 0x8) 3m48.775147647s ago: executing program 0 (id=4306): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) 3m48.606423489s ago: executing program 0 (id=4311): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000", @ANYRES32, @ANYBLOB="14000200ff02"], 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m33.544583034s ago: executing program 33 (id=4311): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001400b59500000000000000", @ANYRES32, @ANYBLOB="14000200ff02"], 0x34}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.737253599s ago: executing program 6 (id=7927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 2.563281107s ago: executing program 6 (id=7932): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x189901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 2.451260326s ago: executing program 5 (id=7935): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) 2.395667532s ago: executing program 6 (id=7937): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.607947179s ago: executing program 5 (id=7945): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000021c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002380)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404d091}, 0x20000004) 1.50316244s ago: executing program 5 (id=7947): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x200, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x1d0, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x1a4, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x4, 0x0, 0x7}, "645809825d93df900fa8fae387fbed6313a639f20b0238ccdd4da9fde2f0be34e659ba729925eff5ebd76dec200e0c6b209649b549944fb335b53ad7e5b0f72af98dbb05ee1778a3e952122289a807cd7b48f87fa52a56b8fa1ed950478a7e526d5afbe8006f3724cd7d7553d2825013cfb6f6c75b881ba76a73fc329b963abb903b4ac42a8121e56f0f0797ef"}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x7, 0x2, 0x3}, {0x4, 0x1, 0x6, "eb"}}}, @TCF_EM_CONTAINER={0x18, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xb}, "d0fa3d16cd50d147ba"}}]}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x0, 0x2, 0x5}, {0x7, 0x0, 0x2}}}, @TCF_EM_CONTAINER={0xa0, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x7}, "3b5fc2fa80e3cc043cc726edaa2d447569d28224edb20ee7619c9f85a7c63ad5d733714ddc40dacc05a8593dd6790998fa145ce9061c568e9d3f2eb441b1f63f129cc2e8fb4c706dac54965d26a2a002fec0089e4c2d28b88be65f295002d895806f16dd1830b2cc493b0f830a5b60b51892a32bb41d16ff5e83e772e3c847a21940f0dc01da501b24e7a9da5d6b27bafa"}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x5d12}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xb3b, 0xf2, 0x1}, {0x8, 0x9, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}]}, @TCA_FLOW_XOR={0x8, 0x7, 0xffffff7b}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7fff}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.330932013s ago: executing program 5 (id=7950): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 1.290231966s ago: executing program 6 (id=7951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="48020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x248}}, 0x0) 1.212089655s ago: executing program 5 (id=7953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x50) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000180)) 1.200437715s ago: executing program 3 (id=7955): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x88, &(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES8=0x0, @ANYBLOB="5ef8d1e7b2d4b5e6abd9eae5912ca8100c8fd189972abd0c2dba6330ba9e7e957869d03217c8eacaa11d65e105b47336babc99e31600cfc04897c803a626fb987fe0e27f6e885396473b04a5d44aebc93db8163bd701cf4c60588319fbbd404dbdcad7aa2a39203b9b53af3cfd9a8f2a3d03bd5ec01822d83114235d206f113ccec0d9edd2a7d133f1209e07df41c296b7df91ae7e37f0fbf6430b15befacfeda8c7e600f9ecfe0939bbe97c637d7c7d0b2f92d10d88f70f0484f9013fb487eb9980f478daa69d24946a71cd2000a07e8cd0689f2355754ebf6eb7e5122408c4a8929254c62fa1cedf44338d9e90ee8c22", @ANYRESOCT, @ANYBLOB="7bede43ac6e1fb13c18e", @ANYRESHEX], 0x23, 0x203, &(0x7f0000000ec0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_int(r0, 0x1, 0x26, 0x0, &(0x7f0000000040)) 1.019986204s ago: executing program 6 (id=7956): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x401}, 0x0, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 993.766855ms ago: executing program 3 (id=7957): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x1, {0x1, 0xff, 0x1}, 0xfd}, 0x18) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x1, {0x1, 0xff}, 0x2}, 0x18) 993.331756ms ago: executing program 4 (id=7958): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r1, r0}}, 0x18) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x59}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f00000024c0)="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", 0x1001}], 0x3) 970.631407ms ago: executing program 2 (id=7959): r0 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x4}) 901.596395ms ago: executing program 2 (id=7960): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{&(0x7f0000004440)={0xa, 0x4e22, 0xfffffffc, @private1, 0x20000}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000b40)="c64e", 0x2}], 0x1}}], 0x2, 0x814) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080), 0x8) 848.325873ms ago: executing program 4 (id=7961): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 848.114796ms ago: executing program 5 (id=7962): r0 = io_uring_setup(0x758a, &(0x7f0000000140)) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x40007fff}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x40012102, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 792.16762ms ago: executing program 3 (id=7963): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001fffffff8500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 544.36412ms ago: executing program 2 (id=7964): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)={0x14, r1, 0x1, 0x2, 0x25dfdbfc, {0x23}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x48084) 544.118427ms ago: executing program 3 (id=7965): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000a00)={0xf, {"a2e3ad21ed0d1bf91b28090955f70e06d038e7ff7fc6e5539b0d650e8b089b3f360768090890e0878f0e1ac6e7049b3346959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07450936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xfffffffffffffd6a}}, 0x1006) 543.840162ms ago: executing program 4 (id=7966): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000009b00)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) 433.109382ms ago: executing program 3 (id=7967): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000219802"]) 428.593776ms ago: executing program 4 (id=7968): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) 342.92227ms ago: executing program 2 (id=7969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000d8cc28e43ff30b7300000008000300", @ANYRES32=r2], 0x64}}, 0x4000840) 228.945455ms ago: executing program 4 (id=7970): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24) 228.238237ms ago: executing program 2 (id=7971): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'xfrm0\x00', &(0x7f0000000200)=@ethtool_coalesce={0xf, 0xb6, 0x9, 0x2, 0x1, 0x200, 0x4, 0x8, 0xc, 0x0, 0xae22, 0x0, 0x3, 0x5, 0x1000, 0x3, 0x8002, 0x1, 0x7, 0x9, 0x5, 0x9, 0x3}}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) 121.151068ms ago: executing program 3 (id=7972): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000002}) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000000)=""/145, 0x91}], 0x1) 80.820065ms ago: executing program 6 (id=7973): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close$binfmt(r0) syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 80.193567ms ago: executing program 4 (id=7974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000006180)=ANY=[@ANYBLOB="010000000000000023000040"]) 0s ago: executing program 2 (id=7975): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000000000000000000c0ffffffff00010000ff"]) kernel console output (not intermixed with test programs): parsing attributes in process `syz.5.6012'. [ 433.962541][T19086] netlink: 180 bytes leftover after parsing attributes in process `syz.5.6012'. [ 434.848618][ T983] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 434.859311][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 435.003546][ T983] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 435.019359][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 435.025528][ T983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.030211][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.037658][ T983] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 435.046629][T17955] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 435.060060][ T983] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 435.073907][ T983] usb 6-1: Manufacturer: syz [ 435.083664][ T983] usb 6-1: config 0 descriptor?? [ 435.086952][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 435.119154][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.155705][ T9] usb 7-1: config 0 descriptor?? [ 435.190861][ T983] rc_core: IR keymap rc-hauppauge not found [ 435.196922][ T983] Registered IR keymap rc-empty [ 435.208077][ T983] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 435.240909][ T983] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input48 [ 435.283113][T17955] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 435.299124][T17955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.342789][T17955] usb 5-1: config 0 descriptor?? [ 435.357974][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 435.358717][T17955] cp210x 5-1:0.0: cp210x converter detected [ 435.375684][ T983] usb 6-1: USB disconnect, device number 16 [ 435.409767][T19157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 435.601468][ T9] mcp2221 0003:04D8:00DD.005B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 435.625431][T19164] Failed to get privilege flags for destination (handle=0x2:0xd) [ 435.767152][T17955] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 435.967912][T17955] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -32 [ 435.987241][T17955] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 436.007828][T17955] usb 5-1: cp210x converter now attached to ttyUSB0 [ 436.019868][ T9] usb 7-1: USB disconnect, device number 13 [ 436.037579][T17955] usb 5-1: USB disconnect, device number 43 [ 436.089179][T17955] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 436.107741][T17955] cp210x 5-1:0.0: device disconnected [ 436.362981][ T983] kernel read not supported for file /dsp (pid: 983 comm: kworker/1:3) [ 436.449552][T17958] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 436.630761][T17958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.664197][T17958] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 436.674067][T17958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.685018][T17958] usb 6-1: config 0 descriptor?? [ 436.713397][T19188] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.720870][T19188] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.869290][T19188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.919089][T17968] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 437.085140][T19188] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 437.098810][T17968] usb 7-1: Using ep0 maxpacket: 32 [ 437.110074][T19191] geneve2: entered promiscuous mode [ 437.114345][T17968] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 437.117754][T19191] geneve2: entered allmulticast mode [ 437.133975][T17968] usb 7-1: config 0 has no interface number 0 [ 437.143206][ T983] syz1: Port: 1 Link DOWN [ 437.148062][T15943] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.161444][T17968] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 437.166046][T17958] kone 0003:1E7D:2CED.005C: collection stack underflow [ 437.178637][T15943] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.183425][T17958] kone 0003:1E7D:2CED.005C: item 0 4 0 12 parsing failed [ 437.187832][T17968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.204841][T15943] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 437.215763][T17958] kone 0003:1E7D:2CED.005C: parse failed [ 437.223712][T15943] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.228584][T17958] kone 0003:1E7D:2CED.005C: probe with driver kone failed with error -22 [ 437.243788][T17968] usb 7-1: Product: syz [ 437.247983][T17968] usb 7-1: Manufacturer: syz [ 437.263185][T17955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.263185][T15943] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.284982][T17968] usb 7-1: SerialNumber: syz [ 437.309612][T17968] usb 7-1: config 0 descriptor?? [ 437.314837][T15943] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 437.333569][T17968] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 437.348100][T15943] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.364748][T15943] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.387933][T15943] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 437.410004][T15944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.410844][T17955] usb 6-1: USB disconnect, device number 17 [ 437.432500][T15943] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.464465][T15943] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.495794][T15943] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 437.556495][T17968] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 437.613245][T17968] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 437.994359][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 437.994813][T17955] usb 7-1: USB disconnect, device number 14 [ 438.050135][T17955] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 438.062036][T17958] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.095713][T17955] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 438.114177][T17955] quatech2 7-1:0.51: device disconnected [ 438.451445][T15748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.488770][T15748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.859665][T17955] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 438.918593][T17958] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 438.990357][ T9] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 439.031182][T17955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.045007][T17955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.055460][T17955] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.070965][T17955] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.080471][T17955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.088710][T17958] usb 4-1: Using ep0 maxpacket: 32 [ 439.097936][T17958] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 439.107545][T17955] usb 3-1: config 0 descriptor?? [ 439.114045][T17958] usb 4-1: config 0 has no interface number 0 [ 439.139295][T17958] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 439.152508][T17958] usb 4-1: config 0 interface 196 has no altsetting 0 [ 439.164631][T17958] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 439.179752][T17958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.188867][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.204149][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.213287][T17958] usb 4-1: Product: syz [ 439.217517][T17958] usb 4-1: Manufacturer: syz [ 439.225586][T17958] usb 4-1: SerialNumber: syz [ 439.233446][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 439.244693][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.249286][ T5975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.254195][T17958] usb 4-1: config 0 descriptor?? [ 439.273192][ T9] usb 6-1: Product: syz [ 439.277456][ T9] usb 6-1: Manufacturer: syz [ 439.283437][ T9] usb 6-1: SerialNumber: syz [ 439.288529][T19257] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 439.438600][T17968] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 439.539288][T17955] plantronics 0003:047F:FFFF.005D: unknown main item tag 0x3 [ 439.547149][T17955] plantronics 0003:047F:FFFF.005D: unbalanced collection at end of report description [ 439.561627][T17955] plantronics 0003:047F:FFFF.005D: parse failed [ 439.568064][T17955] plantronics 0003:047F:FFFF.005D: probe with driver plantronics failed with error -22 [ 439.604971][T17968] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 439.614466][T17968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.622680][T17968] usb 5-1: Product: syz [ 439.627199][T17968] usb 5-1: Manufacturer: syz [ 439.631995][T17968] usb 5-1: SerialNumber: syz [ 439.642841][T17968] usb 5-1: config 0 descriptor?? [ 439.652423][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.664812][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.706913][ T9] usb 6-1: 0:2 : does not exist [ 439.762505][T17955] usb 3-1: USB disconnect, device number 43 [ 439.881190][T17968] usb 5-1: ignoring: probably an ADSL modem [ 439.919705][T17958] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 439.936972][T17958] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 439.949367][T17958] usb 4-1: USB disconnect, device number 45 [ 439.990583][T17958] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 440.069100][T17960] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 440.110894][T17955] usb 6-1: USB disconnect, device number 18 [ 440.221101][T17960] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 440.230430][T17960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.245615][T17960] usb 7-1: config 0 descriptor?? [ 440.253889][T17960] cp210x 7-1:0.0: cp210x converter detected [ 440.285455][T17968] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 440.379536][T19287] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 440.498185][T17968] usb 5-1: USB disconnect, device number 44 [ 440.673181][T17960] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 440.707134][T17960] usb 7-1: cp210x converter now attached to ttyUSB0 [ 440.903673][T17968] usb 7-1: USB disconnect, device number 15 [ 440.939102][T17968] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 440.970099][T17968] cp210x 7-1:0.0: device disconnected [ 441.577893][T19302] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 441.613083][T19302] bcachefs (/dev/loop5): error reading default superblock: IO error: -5 [ 441.638712][T19302] I/O error, dev loop5, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 441.678687][T19302] bcachefs (/dev/loop5): error reading superblock: IO error: -5 [ 441.686613][T19302] bcachefs: bch2_fs_get_tree() error: EIO [ 442.076814][T19351] EXT4-fs: Ignoring removed orlov option [ 442.094685][T19351] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 442.114250][T19351] EXT4-fs (loop4): unable to read superblock [ 442.141007][T19351] 9pnet_fd: Insufficient options for proto=fd [ 442.368653][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 442.438576][T17955] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 442.620694][T17955] usb 7-1: unable to get BOS descriptor or descriptor too short [ 442.653098][T17955] usb 7-1: no configurations [ 442.660260][T19366] syz.3.6141 (19366): drop_caches: 2 [ 442.665672][T17955] usb 7-1: can't read configurations, error -22 [ 443.284622][T19407] evm: overlay not supported [ 443.818757][T17968] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 444.000635][T17968] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 444.028626][T17968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.050621][T17968] usb 3-1: config 0 descriptor?? [ 444.121053][T19442] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 444.267435][T17968] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 444.649578][T19454] syz.4.6181 (19454): drop_caches: 2 [ 444.674314][T17968] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 444.687109][T19458] program syz.6.6182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.695758][T17968] asix 3-1:0.0: probe with driver asix failed with error -71 [ 444.713624][T17968] usb 3-1: USB disconnect, device number 44 [ 444.843239][T19466] program syz.4.6186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.129388][T17955] IPVS: starting estimator thread 0... [ 445.191967][T19480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6193'. [ 445.203048][T19480] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6193'. [ 445.228549][T19478] IPVS: using max 28 ests per chain, 67200 per kthread [ 445.871631][T19503] netlink: 'syz.3.6204': attribute type 1 has an invalid length. [ 446.039844][T19503] netlink: 'syz.3.6204': attribute type 4 has an invalid length. [ 446.047637][T19503] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6204'. [ 446.119608][T19503] NCSI netlink: No device for ifindex 458760 [ 446.215035][T19514] Bluetooth: MGMT ver 1.23 [ 446.325589][T19507] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 446.333467][T19507] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 446.341817][T19507] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 446.349642][T19507] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 447.192948][T19551] sit0: entered promiscuous mode [ 447.215711][T19551] netlink: 'syz.6.6226': attribute type 1 has an invalid length. [ 447.236252][T19551] netlink: 1 bytes leftover after parsing attributes in process `syz.6.6226'. [ 448.719549][T19628] netlink: 47 bytes leftover after parsing attributes in process `syz.2.6262'. [ 448.739242][T17960] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 448.911564][T17960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.934248][T17960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.968823][T17960] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 448.997092][T17960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.015731][T17960] usb 4-1: config 0 descriptor?? [ 449.109777][T17955] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 449.290538][T17955] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 449.308718][T17955] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.329353][T17955] usb 3-1: config 0 has no interface number 0 [ 449.335565][T17955] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 449.359253][T17955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.381163][T17955] usb 3-1: config 0 descriptor?? [ 449.409596][T17955] qmi_wwan 3-1:0.154: probe with driver qmi_wwan failed with error -22 [ 449.437819][T17960] cp2112 0003:10C4:EA90.005E: unknown main item tag 0x0 [ 449.458202][T17960] cp2112 0003:10C4:EA90.005E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 449.619531][T19635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6266'. [ 449.639292][T17960] cp2112 0003:10C4:EA90.005E: Part Number: 0x82 Device Version: 0xFE [ 449.661274][ T5975] usb 3-1: USB disconnect, device number 45 [ 449.715114][T19652] program syz.5.6273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 449.836862][T17960] cp2112 0003:10C4:EA90.005E: error requesting SMBus config [ 449.850047][T17960] cp2112 0003:10C4:EA90.005E: probe with driver cp2112 failed with error -71 [ 449.879140][T17960] usb 4-1: USB disconnect, device number 46 [ 449.912540][T19659] tap0: tun_chr_ioctl cmd 1074025676 [ 449.918033][T19659] tap0: owner set to 1 [ 450.104273][T19666] input: syz1 as /devices/virtual/input/input49 [ 450.528797][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 450.663711][T19690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6292'. [ 451.048724][ T5975] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 451.218951][ T5975] usb 5-1: Using ep0 maxpacket: 32 [ 451.256309][ T5975] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 451.288765][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.297183][ T5975] usb 5-1: Product: syz [ 451.322654][ T5975] usb 5-1: Manufacturer: syz [ 451.327342][ T5975] usb 5-1: SerialNumber: syz [ 451.345225][ T5975] usb 5-1: config 0 descriptor?? [ 451.366134][ T5975] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 451.970351][ T5975] gspca_sunplus: reg_r err -71 [ 451.978743][ T5975] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 452.015347][ T5975] usb 5-1: USB disconnect, device number 45 [ 452.248153][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6311'. [ 452.319882][T19739] netem: incorrect gi model size [ 452.325462][T19739] netem: change failed [ 452.393453][ T30] audit: type=1326 audit(2000000134.741:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19719 comm="syz.3.6304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2258eba9 code=0x7fc00000 [ 452.415820][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.473823][ T5864] block nbd3: Receive control failed (result -32) [ 453.532754][T19793] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 453.532920][ T5851] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 453.685472][T19800] kvm: user requested TSC rate below hardware speed [ 454.778371][T19850] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6364'. [ 455.047101][T19864] netlink: 'syz.5.6371': attribute type 10 has an invalid length. [ 455.078201][T19864] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 455.395773][T19871] vivid-000: disconnect [ 456.004720][T19881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6378'. [ 456.024509][T19881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6378'. [ 456.165177][T19870] vivid-000: reconnect [ 456.187303][T19886] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 456.208392][T19886] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 456.456919][T19900] vxlan1: entered promiscuous mode [ 456.501509][T19900] vxlan1: entered allmulticast mode [ 456.516770][T15940] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.534953][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6391'. [ 456.546825][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6391'. [ 456.549518][T15940] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.556140][T19909] netlink: 'syz.6.6391': attribute type 11 has an invalid length. [ 456.573768][T15940] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.592009][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.754054][T19920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.766277][T19920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.794531][T19920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.834058][T19920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.884948][T19920] bond0: (slave batadv0): Releasing backup interface [ 456.893002][T19920] batadv0 (unregistering): left allmulticast mode [ 457.630436][T17955] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 457.661372][T17960] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 457.840025][T17955] usb 5-1: Using ep0 maxpacket: 32 [ 457.845384][T17960] usb 7-1: Using ep0 maxpacket: 8 [ 457.859652][T17955] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 457.877412][T17955] usb 5-1: config 0 has no interface number 0 [ 457.886659][T17960] usb 7-1: unable to get BOS descriptor or descriptor too short [ 457.897545][T17960] usb 7-1: config 4 has an invalid interface number: 30 but max is 0 [ 457.906936][T17960] usb 7-1: config 4 has no interface number 0 [ 457.917276][T17960] usb 7-1: config 4 interface 30 has no altsetting 0 [ 457.924278][T17955] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 457.933926][T17955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.942734][T17955] usb 5-1: Product: syz [ 457.947660][T17955] usb 5-1: Manufacturer: syz [ 457.952624][T17955] usb 5-1: SerialNumber: syz [ 457.959332][T17960] usb 7-1: string descriptor 0 read error: -22 [ 457.965803][T17960] usb 7-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 457.979158][T17960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.990912][T17955] usb 5-1: config 0 descriptor?? [ 458.002773][T17955] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 458.045538][T17960] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 458.053185][T17960] dw2102: su3000_power_ctrl: 1, initialized 0 [ 458.063231][T17960] dvb-usb: bulk message failed: -22 (2/0) [ 458.076666][T17960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 458.092360][T17960] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 458.115037][T17960] usb 7-1: media controller created [ 458.139462][T17960] dvb-usb: bulk message failed: -22 (6/0) [ 458.148494][T17960] dw2102: i2c transfer failed. [ 458.153662][T17960] dvb-usb: bulk message failed: -22 (6/0) [ 458.180484][T17960] dw2102: i2c transfer failed. [ 458.186828][T17960] dvb-usb: bulk message failed: -22 (6/0) [ 458.192855][T17960] dw2102: i2c transfer failed. [ 458.197827][T17960] dvb-usb: bulk message failed: -22 (6/0) [ 458.222747][T17955] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 458.233280][T17960] dw2102: i2c transfer failed. [ 458.238189][T17960] dvb-usb: bulk message failed: -22 (6/0) [ 458.248380][T17960] dw2102: i2c transfer failed. [ 458.272132][T17955] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 458.281804][T17960] dvb-usb: bulk message failed: -22 (6/0) [ 458.287578][T17960] dw2102: i2c transfer failed. [ 458.298464][T17960] dvb-usb: MAC address: 02:02:02:02:02:02 [ 458.334211][T17960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.397694][T17960] dvb-usb: bulk message failed: -22 (3/0) [ 458.418080][ T30] audit: type=1326 audit(2000000140.761:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c378eba9 code=0x7ffc0000 [ 458.428587][T17960] dw2102: command 0x0e transfer failed. [ 458.475435][ T30] audit: type=1326 audit(2000000140.761:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c378eba9 code=0x7ffc0000 [ 458.477513][T17960] dvb-usb: bulk message failed: -22 (3/0) [ 458.548970][ T30] audit: type=1326 audit(2000000140.811:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe2c378eba9 code=0x7ffc0000 [ 458.561535][T17960] dw2102: command 0x0e transfer failed. [ 458.602029][ T30] audit: type=1326 audit(2000000140.811:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c378eba9 code=0x7ffc0000 [ 458.648713][ T30] audit: type=1326 audit(2000000140.811:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c378eba9 code=0x7ffc0000 [ 458.657490][T17968] usb 5-1: USB disconnect, device number 46 [ 458.671874][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 458.705233][T17968] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 458.709742][ T30] audit: type=1326 audit(2000000140.811:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe2c378eba9 code=0x7ffc0000 [ 458.756744][T17968] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 458.779652][ T30] audit: type=1326 audit(2000000140.811:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c378eba9 code=0x7ffc0000 [ 458.802167][T17968] quatech2 5-1:0.51: device disconnected [ 458.844223][ T30] audit: type=1326 audit(2000000140.811:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe2c378eba9 code=0x7ffc0000 [ 458.874881][ T30] audit: type=1326 audit(2000000140.811:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19975 comm="syz.2.6423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2c378eba9 code=0x7ffc0000 [ 458.921730][T17960] dvb-usb: bulk message failed: -22 (3/0) [ 458.950846][T17960] dw2102: command 0x0e transfer failed. [ 458.956537][T17960] dvb-usb: bulk message failed: -22 (3/0) [ 458.965054][T17960] dw2102: command 0x0e transfer failed. [ 458.981267][T17960] dvb-usb: bulk message failed: -22 (1/0) [ 458.997439][T17960] dw2102: command 0x51 transfer failed. [ 459.006272][T17960] dvb-usb: bulk message failed: -22 (5/0) [ 459.031068][T17960] dw2102: i2c probe for address 0x68 failed. [ 459.037346][T17960] dvb-usb: bulk message failed: -22 (5/0) [ 459.046756][T17960] dw2102: i2c probe for address 0x69 failed. [ 459.053504][T17960] dvb-usb: bulk message failed: -22 (5/0) [ 459.074267][T17960] dw2102: i2c probe for address 0x6a failed. [ 459.088493][T17960] dw2102: probing for demodulator failed. Is the external power switched on? [ 459.106620][T17960] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 459.130053][ T30] audit: type=1326 audit(2000000141.481:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19991 comm="syz.3.6430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea2258eba9 code=0x0 [ 459.134861][T19968] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 459.189534][T19968] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 459.197862][T19968] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 459.211091][T19968] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 459.249344][T17960] rc_core: IR keymap rc-tt-1500 not found [ 459.255137][T17960] Registered IR keymap rc-empty [ 459.272843][T17960] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 459.300696][T17960] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input50 [ 459.324017][T17960] dvb-usb: schedule remote query interval to 250 msecs. [ 459.333863][T17960] dw2102: su3000_power_ctrl: 0, initialized 1 [ 459.341004][T17960] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 459.354591][T17960] usb 7-1: USB disconnect, device number 18 [ 459.377357][T19995] pim6reg: entered allmulticast mode [ 459.403018][T19995] pim6reg: left allmulticast mode [ 459.426092][T17960] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 459.615417][T19988] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 459.625327][T19988] XFS (loop2): SB validate failed with error -5. [ 459.758641][T17960] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 459.926003][T17960] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 459.935451][T17960] usb 7-1: config 0 has no interface number 0 [ 459.944724][T17960] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 459.954079][T17960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.963486][T17960] usb 7-1: Product: syz [ 459.967916][T17960] usb 7-1: Manufacturer: syz [ 459.972803][T17960] usb 7-1: SerialNumber: syz [ 459.982825][T17960] usb 7-1: config 0 descriptor?? [ 460.138787][ T5975] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 460.264865][T17960] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 460.285129][T17960] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 460.302643][T17960] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 460.311150][T17960] usb 7-1: media controller created [ 460.319283][ T5975] usb 3-1: Using ep0 maxpacket: 32 [ 460.333617][ T5975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.339593][T17960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.354142][ T5975] usb 3-1: config 0 has no interfaces? [ 460.367971][ T5975] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 460.384811][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.398260][ T5975] usb 3-1: config 0 descriptor?? [ 460.479497][T17960] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 460.563462][T17960] usb 7-1: USB disconnect, device number 19 [ 460.685660][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6451'. [ 460.707817][ T5975] usb 3-1: USB disconnect, device number 46 [ 460.721582][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6451'. [ 460.743673][T20041] ip6gretap2: entered allmulticast mode [ 461.335279][T20064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6462'. [ 461.424683][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6466'. [ 461.457472][T20073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6466'. [ 462.248033][T20118] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6486'. [ 462.422076][T20123] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 462.435204][T20123] macvtap1: entered allmulticast mode [ 462.454665][T20123] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 462.478281][T20123] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 462.489274][T20123] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 462.823209][T20140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6497'. [ 462.876317][T20140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6497'. [ 463.834068][T20136] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 463.865483][T20136] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 463.890603][T20136] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 463.898412][T20136] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 464.252373][T20192] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6521'. [ 465.258562][ T5975] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 465.628743][ T5975] usb 5-1: Using ep0 maxpacket: 8 [ 465.639174][ T5975] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 465.648220][ T5975] usb 5-1: config 179 has no interface number 0 [ 465.666127][ T5975] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 465.680865][ T5975] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 465.693216][ T5975] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 465.706781][ T5975] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 465.722731][ T5975] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 465.736377][ T5975] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 465.794119][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.804225][T20245] netlink: 'syz.6.6544': attribute type 1 has an invalid length. [ 465.825032][T20222] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 465.836806][T20245] netlink: 5624 bytes leftover after parsing attributes in process `syz.6.6544'. [ 466.105659][ T5975] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input51 [ 466.419686][T17960] usb 5-1: USB disconnect, device number 47 [ 466.420995][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 466.434538][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 466.528919][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.916238][T20283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6561'. [ 467.023331][T20285] input: syz0 as /devices/virtual/input/input52 [ 467.277934][T20295] block device autoloading is deprecated and will be removed. [ 467.283445][T20273] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 467.299542][T20273] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 467.308079][T20273] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 467.329341][T20273] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 467.523949][T20309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6574'. [ 467.629879][T20313] netlink: 368 bytes leftover after parsing attributes in process `syz.6.6576'. [ 467.643835][T20315] sctp: [Deprecated]: syz.2.6577 (pid 20315) Use of int in max_burst socket option. [ 467.643835][T20315] Use struct sctp_assoc_value instead [ 467.670224][T20313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6576'. [ 467.974078][T20332] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 467.994397][T20332] EXT4-fs (loop5): unable to read superblock [ 468.013233][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6584'. [ 468.054267][T20337] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6586'. [ 468.230573][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6588'. [ 468.405662][T20352] program syz.2.6591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.416531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 468.459311][T20353] netlink: 'syz.4.6592': attribute type 10 has an invalid length. [ 468.552974][T20353] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.584016][T20353] team0: entered promiscuous mode [ 468.599357][T20353] team_slave_0: entered promiscuous mode [ 468.605512][T20353] team_slave_1: entered promiscuous mode [ 468.625957][T20353] bond0: (slave team0): Enslaving as an active interface with an up link [ 468.799171][T20365] program syz.2.6595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.444378][T20388] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6610'. [ 469.488837][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 469.714797][T20396] bridge_slave_1 (unregistering): left allmulticast mode [ 469.731560][T20396] bridge_slave_1 (unregistering): left promiscuous mode [ 469.754846][T20396] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.902531][T20399] erspan0: entered promiscuous mode [ 469.923260][T20401] sch_fq: defrate 0 ignored. [ 470.403659][T20425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6625'. [ 470.815195][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.863415][T17955] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 470.869564][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 470.869585][ T30] audit: type=1326 audit(2000000154.214:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20441 comm="syz.3.6634" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea2258eba9 code=0x0 [ 470.873665][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 471.049461][T17955] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 471.170108][T17955] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 471.501347][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6644'. [ 471.578567][ T5975] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 471.740847][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.757406][ T5975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 471.795869][ T5975] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 471.809719][T20482] netlink: 'syz.3.6653': attribute type 1 has an invalid length. [ 471.817598][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.825842][T20482] netlink: 'syz.3.6653': attribute type 1 has an invalid length. [ 471.835707][T20482] netlink: 'syz.3.6653': attribute type 1 has an invalid length. [ 471.854334][ T5975] usb 6-1: config 0 descriptor?? [ 472.028871][T17968] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 472.193866][T17968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.215418][T17968] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 472.227583][T17968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.242991][T17968] usb 3-1: config 0 descriptor?? [ 472.259435][T17955] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 472.284073][ T5975] pantherlord 0003:0F30:0111.005F: item fetching failed at offset 2/5 [ 472.296041][ T5975] pantherlord 0003:0F30:0111.005F: parse failed [ 472.306539][ T5975] pantherlord 0003:0F30:0111.005F: probe with driver pantherlord failed with error -22 [ 472.419350][T17955] usb 7-1: Using ep0 maxpacket: 16 [ 472.430405][T17955] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.444005][T17955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 472.456522][ T5184] Bluetooth: hci5: command 0x0406 tx timeout [ 472.466336][T17955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 472.468657][T17970] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 472.476519][T17955] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 472.496906][T17955] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 472.515193][T17955] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 472.523443][ T5975] usb 6-1: USB disconnect, device number 19 [ 472.535768][T17955] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 472.549317][T17955] usb 7-1: Manufacturer: syz [ 472.556868][T17955] usb 7-1: config 0 descriptor?? [ 472.662053][T17968] keytouch 0003:0926:3333.0060: fixing up Keytouch IEC report descriptor [ 472.672610][T17970] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 472.689215][T17968] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0060/input/input53 [ 472.700866][T17970] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.711523][T17970] usb 5-1: config 0 interface 0 has no altsetting 0 [ 472.721770][T17970] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 472.731543][T17970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.743142][T17970] usb 5-1: config 0 descriptor?? [ 472.809044][T17968] keytouch 0003:0926:3333.0060: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 472.854122][T17955] rc_core: IR keymap rc-hauppauge not found [ 472.860042][T20516] input: syz1 as /devices/virtual/input/input55 [ 472.861072][T17955] Registered IR keymap rc-empty [ 472.871637][T17955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 472.891415][T17955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 472.921143][T17955] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 472.943716][T17955] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input54 [ 472.973089][T17955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 472.998950][T17955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.028647][T17955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.058643][T17955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.078763][T17955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.091172][T17968] usb 3-1: USB disconnect, device number 47 [ 473.099186][T17955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.118595][T17955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.141527][T17955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.174253][T17970] hid-alps 0003:044E:120B.0061: unknown main item tag 0x0 [ 473.189326][T17955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.194248][T17970] hid-alps 0003:044E:120B.0061: unknown main item tag 0x0 [ 473.207960][T17970] hid-alps 0003:044E:120B.0061: unknown main item tag 0x0 [ 473.215987][T17970] hid-alps 0003:044E:120B.0061: unknown main item tag 0x0 [ 473.219193][T17955] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 473.226721][T17970] hid-alps 0003:044E:120B.0061: unknown main item tag 0x0 [ 473.244131][T17970] hid-alps 0003:044E:120B.0061: unknown main item tag 0x0 [ 473.252632][T17970] hid-alps 0003:044E:120B.0061: unknown main item tag 0x0 [ 473.264041][T17970] hid-alps 0003:044E:120B.0061: unknown main item tag 0x0 [ 473.272038][T17970] hid-alps 0003:044E:120B.0061: unknown main item tag 0x0 [ 473.280023][T17970] hid-alps 0003:044E:120B.0061: item fetching failed at offset 9/11 [ 473.280485][T17955] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 473.288969][T17970] hid-alps 0003:044E:120B.0061: parse failed [ 473.302547][T17970] hid-alps 0003:044E:120B.0061: probe with driver hid-alps failed with error -22 [ 473.320587][T17955] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 473.342462][T17955] usb 7-1: USB disconnect, device number 20 [ 473.404548][T17968] usb 5-1: USB disconnect, device number 48 [ 473.567091][ T30] audit: type=1326 audit(2000000156.904:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff62f8eba9 code=0x7ffc0000 [ 473.615534][ T30] audit: type=1326 audit(2000000156.944:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff62f8eba9 code=0x7ffc0000 [ 473.686826][ T30] audit: type=1326 audit(2000000156.944:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff62f8d510 code=0x7ffc0000 [ 473.711504][ T30] audit: type=1326 audit(2000000156.944:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff62f8d510 code=0x7ffc0000 [ 473.734770][ T30] audit: type=1326 audit(2000000156.944:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff62f8eba9 code=0x7ffc0000 [ 473.758747][ T30] audit: type=1326 audit(2000000156.944:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff62f8eba9 code=0x7ffc0000 [ 473.826551][ T30] audit: type=1326 audit(2000000156.944:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7eff62f8eba9 code=0x7ffc0000 [ 473.874092][ T30] audit: type=1326 audit(2000000156.944:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff62f8eba9 code=0x7ffc0000 [ 473.956071][ T30] audit: type=1326 audit(2000000156.944:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20528 comm="syz.5.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff62f8eba9 code=0x7ffc0000 [ 474.848660][T17970] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 474.919691][T17955] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 475.028606][T17970] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 475.049370][T17970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.072370][T17970] usb 4-1: config 0 descriptor?? [ 475.088757][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 475.097737][T17955] usb 5-1: Using ep0 maxpacket: 8 [ 475.130802][T17955] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 475.149382][T17955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.158253][T20601] kernel profiling enabled (shift: 0) [ 475.165611][T17955] usb 5-1: Product: syz [ 475.175956][T17955] usb 5-1: Manufacturer: syz [ 475.186085][T17955] usb 5-1: SerialNumber: syz [ 475.223171][T17955] usb 5-1: config 0 descriptor?? [ 475.456415][T17955] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 475.886180][T17970] usb 4-1: Cannot set autoneg [ 475.898859][T17970] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 475.927233][T20615] batadv_slave_0: entered promiscuous mode [ 475.940143][T20615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.959446][T17970] usb 4-1: USB disconnect, device number 47 [ 476.064682][T17960] kernel write not supported for file /snd/seq (pid: 17960 comm: kworker/0:9) [ 476.075287][T17955] gspca_sunplus: reg_w_riv err -71 [ 476.082061][T17955] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 476.122963][T17955] usb 5-1: USB disconnect, device number 49 [ 476.355317][T20601] syz.6.6706: vmalloc error: size 706600960, failed to allocated page array size 1380080, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 476.427270][T20601] CPU: 1 UID: 0 PID: 20601 Comm: syz.6.6706 Not tainted syzkaller #0 PREEMPT(full) [ 476.427301][T20601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 476.427322][T20601] Call Trace: [ 476.427331][T20601] [ 476.427341][T20601] dump_stack_lvl+0x189/0x250 [ 476.427390][T20601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.427416][T20601] ? __pfx__printk+0x10/0x10 [ 476.427445][T20601] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 476.427468][T20601] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 476.427492][T20601] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 476.427519][T20601] warn_alloc+0x214/0x310 [ 476.427547][T20601] ? __pfx_warn_alloc+0x10/0x10 [ 476.427579][T20601] ? __get_vm_area_node+0x28f/0x300 [ 476.427609][T20601] ? profile_init+0xb4/0x100 [ 476.427641][T20601] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 476.427699][T20601] ? policy_nodemask+0x27c/0x720 [ 476.427718][T20601] ? __kasan_kmalloc_large+0x1c/0xa0 [ 476.427743][T20601] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 476.427775][T20601] ? alloc_pages_mpol+0x3cd/0x4a0 [ 476.427801][T20601] ? profile_init+0xb4/0x100 [ 476.427826][T20601] vzalloc_noprof+0xb2/0xf0 [ 476.427857][T20601] ? profile_init+0xb4/0x100 [ 476.427884][T20601] profile_init+0xb4/0x100 [ 476.427908][T20601] profiling_store+0x70/0x120 [ 476.427931][T20601] ? __pfx_sysfs_kf_write+0x10/0x10 [ 476.427964][T20601] kernfs_fop_write_iter+0x3af/0x540 [ 476.427991][T20601] iter_file_splice_write+0x975/0x10e0 [ 476.428039][T20601] ? __pfx_iter_file_splice_write+0x10/0x10 [ 476.428064][T20601] ? rcu_read_lock_any_held+0xb3/0x120 [ 476.428099][T20601] ? __pfx_iter_file_splice_write+0x10/0x10 [ 476.428136][T20601] direct_splice_actor+0x101/0x160 [ 476.428168][T20601] splice_direct_to_actor+0x5a8/0xcc0 [ 476.428213][T20601] ? __pfx_direct_splice_actor+0x10/0x10 [ 476.428234][T20601] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 476.428267][T20601] do_splice_direct+0x181/0x270 [ 476.428291][T20601] ? __pfx_do_splice_direct+0x10/0x10 [ 476.428312][T20601] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 476.428343][T20601] ? rw_verify_area+0x255/0x4d0 [ 476.428378][T20601] do_sendfile+0x4da/0x7e0 [ 476.428418][T20601] ? __pfx_do_sendfile+0x10/0x10 [ 476.428449][T20601] ? __se_sys_futex+0x36f/0x400 [ 476.428478][T20601] __se_sys_sendfile64+0x13e/0x190 [ 476.428503][T20601] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 476.428530][T20601] ? do_syscall_64+0xbe/0xfa0 [ 476.428566][T20601] do_syscall_64+0xfa/0xfa0 [ 476.428594][T20601] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.428624][T20601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.428645][T20601] ? clear_bhb_loop+0x60/0xb0 [ 476.428671][T20601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.428697][T20601] RIP: 0033:0x7f3b1c98eba9 [ 476.428721][T20601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.428739][T20601] RSP: 002b:00007f3b1abee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 476.428761][T20601] RAX: ffffffffffffffda RBX: 00007f3b1cbd5fa0 RCX: 00007f3b1c98eba9 [ 476.428776][T20601] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 476.428788][T20601] RBP: 00007f3b1ca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 476.428800][T20601] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 476.428812][T20601] R13: 00007f3b1cbd6038 R14: 00007f3b1cbd5fa0 R15: 00007fffd8318558 [ 476.428850][T20601] [ 476.764230][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.790336][T20601] Mem-Info: [ 476.793524][T20601] active_anon:20426 inactive_anon:0 isolated_anon:0 [ 476.793524][T20601] active_file:16748 inactive_file:40330 isolated_file:0 [ 476.793524][T20601] unevictable:768 dirty:387 writeback:0 [ 476.793524][T20601] slab_reclaimable:7347 slab_unreclaimable:98014 [ 476.793524][T20601] mapped:29163 shmem:17735 pagetables:1379 [ 476.793524][T20601] sec_pagetables:0 bounce:0 [ 476.793524][T20601] kernel_misc_reclaimable:0 [ 476.793524][T20601] free:1275982 free_pcp:17754 free_cma:0 [ 476.847960][T20601] Node 0 active_anon:81704kB inactive_anon:0kB active_file:66968kB inactive_file:161112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116664kB dirty:1548kB writeback:0kB shmem:69404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12344kB pagetables:5420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 476.879970][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.897946][T20601] Node 1 active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 476.927932][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.941234][T20601] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 476.971152][ C1] vkms_vblank_simulate: vblank timer overrun [ 476.978148][T20601] lowmem_reserve[]: 0 2496 2498 2498 2498 [ 476.984065][T20601] Node 0 DMA32 free:1193436kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81904kB inactive_anon:0kB active_file:66968kB inactive_file:161112kB unevictable:1536kB writepending:1548kB zspages:0kB present:3129332kB managed:2556884kB mlocked:0kB bounce:0kB free_pcp:56284kB local_pcp:32008kB free_cma:0kB [ 477.017475][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.018382][T20635] netlink: 'syz.4.6723': attribute type 4 has an invalid length. [ 477.023844][T20601] lowmem_reserve[]: 0 0 1 1 1 [ 477.023928][T20601] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 477.023990][T20601] lowmem_reserve[]: 0 0 0 0 0 [ 477.024038][T20601] Node 1 Normal free:3895132kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:24kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14496kB local_pcp:1408kB free_cma:0kB [ 477.024101][T20601] lowmem_reserve[]: 0 0 0 0 0 [ 477.024149][T20601] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 477.024327][T20601] Node 0 DMA32: 9*4kB (E) 173*8kB (UME) 227*16kB (ME) 275*32kB (UME) 163*64kB (ME) 112*128kB (ME) 71*256kB (UME) 38*512kB (UM) 23*1024kB (UME) 4*2048kB (UM) 265*4096kB (UM) = 1193436kB [ 477.024532][T20601] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 477.024657][T20601] Node 1 Normal: 199*4kB (UE) 62*8kB (UE) [ 477.103893][ C1] vkms_vblank_simulate: vblank timer overrun [ 477.169103][T20601] 53*16kB (UME) 254*32kB (UME) 85*64kB (UME) 24*128kB (UME) 4*256kB (UE) 3*512kB (UME) 1*1024kB (M) 1*2048kB (E) 945*4096kB [ 477.169304][T17955] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 477.190252][T20601] (M) = 3895132kB [ 477.193953][T20601] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.212587][T20601] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 477.228536][T20601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.238167][T20601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 477.268702][T20601] 74810 total pagecache pages [ 477.273453][T20601] 0 pages in swap cache [ 477.277623][T20601] Free swap = 124996kB [ 477.298608][T20601] Total swap = 124996kB [ 477.302847][T20601] 2097051 pages RAM [ 477.308509][T20601] 0 pages HighMem/MovableOnly [ 477.313219][T20601] 425868 pages reserved [ 477.317401][T20601] 0 pages cma reserved [ 477.338679][T17955] usb 3-1: Using ep0 maxpacket: 16 [ 477.345818][T17955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.371141][T17955] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 477.406610][T17955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.436788][T17955] usb 3-1: config 0 descriptor?? [ 477.869003][T17955] mcp2221 0003:04D8:00DD.0062: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 478.272506][T17955] usb 3-1: USB disconnect, device number 48 [ 478.607014][T20668] netlink: 'syz.6.6738': attribute type 14 has an invalid length. [ 479.085898][T20691] netlink: 'syz.5.6749': attribute type 39 has an invalid length. [ 479.351692][T20702] netlink: 'syz.6.6756': attribute type 25 has an invalid length. [ 479.360064][T20702] netlink: 'syz.6.6756': attribute type 7 has an invalid length. [ 479.462105][T20706] EXT4-fs: inline encryption not supported [ 479.469022][T20706] EXT4-fs: Ignoring removed bh option [ 479.481962][T20706] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 479.495545][T20706] EXT4-fs (loop2): unable to read superblock [ 479.657226][T20718] netlink: 'syz.2.6761': attribute type 3 has an invalid length. [ 479.710700][T20720] __nla_validate_parse: 3 callbacks suppressed [ 479.710722][T20720] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6762'. [ 479.736968][T20720] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6762'. [ 479.826217][T20726] macvtap1: entered allmulticast mode [ 479.838645][T20726] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 479.873690][T20728] netlink: 'syz.4.6766': attribute type 39 has an invalid length. [ 479.886101][T20726] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 480.044833][T20732] netlink: 'syz.5.6768': attribute type 2 has an invalid length. [ 480.060269][T20732] netlink: 'syz.5.6768': attribute type 9 has an invalid length. [ 480.071416][T20732] netlink: 'syz.5.6768': attribute type 1 has an invalid length. [ 480.081800][T20732] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.6768'. [ 480.538745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 480.608796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 480.663485][T20751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 480.788892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 480.829490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 480.839000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 481.178779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 481.338855][ T983] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 481.508694][ T983] usb 7-1: Using ep0 maxpacket: 16 [ 481.520932][ T983] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.563366][ T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 481.595412][T20777] bond0: (slave bond_slave_0): Releasing backup interface [ 481.616319][ T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 481.656541][ T983] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 481.727113][ T983] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.750522][ T983] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 481.759936][ T983] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 481.768644][ T983] usb 7-1: Manufacturer: syz [ 481.794238][ T983] usb 7-1: config 0 descriptor?? [ 482.101040][ T983] rc_core: IR keymap rc-hauppauge not found [ 482.123464][ T983] Registered IR keymap rc-empty [ 482.134919][ T983] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 482.166358][T20798] bridge_slave_0: invalid flags given to default FDB implementation [ 482.176233][ T983] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 482.199699][ T983] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 482.248122][ T983] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input56 [ 482.281131][ T983] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 482.328887][ T983] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 482.358650][ T983] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 482.378678][ T983] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 482.407507][ T983] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 482.438654][ T983] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 482.468859][ T983] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 482.493729][ T983] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 482.538668][ T983] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 482.569022][ T983] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 482.598227][ T983] mceusb 7-1:0.0: Registered with mce emulator interface version 1 [ 482.618290][ T983] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 482.650556][ T983] usb 7-1: USB disconnect, device number 21 [ 482.669056][T20822] validate_nla: 2 callbacks suppressed [ 482.669076][T20822] netlink: 'syz.5.6809': attribute type 6 has an invalid length. [ 482.692710][T20822] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6809'. [ 482.820370][T20830] program syz.3.6813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.795150][T20863] befs: (nullb0): No write support. Marking filesystem read-only [ 483.808866][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 483.835760][T20863] befs: (nullb0): invalid magic header [ 483.961320][T20875] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 483.976953][T20875] FAT-fs (loop4): unable to read boot sector [ 484.089209][T17960] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 484.251735][T20886] binder: BINDER_SET_CONTEXT_MGR already set [ 484.264925][T20886] binder: 20885:20886 ioctl 4018620d 200000004a80 returned -16 [ 484.467202][T17960] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 484.498814][T17960] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 484.546594][T17960] usb 4-1: config 0 interface 0 has no altsetting 0 [ 484.583126][T17960] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 484.592341][T17960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.620213][T17960] usb 4-1: config 0 descriptor?? [ 484.820108][T20905] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 484.836503][T20905] syzkaller1: linktype set to 805 [ 485.066913][T17960] holtek 0003:1241:5015.0063: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.3-1/input0 [ 485.078605][T20914] program syz.4.6850 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.104639][T17960] holtek 0003:1241:5015.0063: no inputs found [ 485.275118][T17960] usb 4-1: USB disconnect, device number 48 [ 485.296477][T20927] netlink: 'syz.6.6858': attribute type 2 has an invalid length. [ 486.051514][T20959] program syz.3.6872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.139685][T20963] overlayfs: missing 'workdir' [ 486.319823][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 486.319842][ T30] audit: type=1326 audit(2000000169.664:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20976 comm="syz.2.6881" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2c378eba9 code=0x0 [ 486.448180][T20984] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6884'. [ 486.463415][T20984] netem: change failed [ 487.419741][T21036] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 487.440962][T21036] EXT4-fs (loop4): unable to read superblock [ 487.878784][ T983] kernel write not supported for file /vcsa1 (pid: 983 comm: kworker/1:3) [ 488.451679][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6934'. [ 488.464291][T21093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6934'. [ 488.479608][T21093] netlink: 'syz.3.6934': attribute type 14 has an invalid length. [ 488.489979][T21093] netlink: 'syz.3.6934': attribute type 11 has an invalid length. [ 489.385145][T21142] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6956'. [ 489.778395][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6964'. [ 489.804240][T21163] team0: No ports can be present during mode change [ 490.429249][T17960] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 490.639389][T17960] usb 7-1: Using ep0 maxpacket: 16 [ 490.660658][T17960] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 490.671748][T17960] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 490.694111][T17960] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 490.716411][T17960] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 490.738149][T17960] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 490.761487][T17960] usb 7-1: config 0 has no interface number 0 [ 490.778446][T17960] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 490.805010][T17960] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 490.830985][T17960] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 490.849966][T17960] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 490.882217][T17960] usb 7-1: config 0 interface 125 has no altsetting 0 [ 490.905355][T17960] usb 7-1: config 0 interface 125 has no altsetting 2 [ 490.968157][T17960] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 490.993621][T17960] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.002552][T17960] usb 7-1: Product: syz [ 491.022802][T17960] usb 7-1: Manufacturer: syz [ 491.027497][T17960] usb 7-1: SerialNumber: syz [ 491.035386][T17960] usb 7-1: config 0 descriptor?? [ 491.074037][T17960] usb 7-1: selecting invalid altsetting 2 [ 491.108925][T17970] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 491.268734][T17970] usb 3-1: Using ep0 maxpacket: 16 [ 491.280481][T17970] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.298488][T17970] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 491.326316][T17970] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.367388][T17970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.396401][T17970] usb 3-1: Product: syz [ 491.408778][T17970] usb 3-1: Manufacturer: syz [ 491.428055][T17970] usb 3-1: SerialNumber: syz [ 491.474149][T21207] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 491.500057][T21207] exFAT-fs (loop5): unable to read boot sector [ 491.518375][T21207] exFAT-fs (loop5): failed to read boot sector [ 491.524958][T21207] exFAT-fs (loop5): failed to recognize exfat type [ 491.773607][T21220] [U] ^G„ [ 491.777129][T21219] [U] ^G [ 491.868188][T17970] usb 3-1: 0:2 : does not exist [ 491.935339][ C0] usb 7-1: async_complete: urb error -71 [ 491.948810][T17960] get_1284_register: usb error -71 [ 491.954089][T17960] uss720 7-1:0.125: probe with driver uss720 failed with error -71 [ 491.981194][T17960] usb 7-1: USB disconnect, device number 22 [ 492.276686][T17970] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 492.311923][T17970] usb 3-1: USB disconnect, device number 49 [ 493.440544][T17968] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 493.621502][T17968] usb 6-1: Using ep0 maxpacket: 32 [ 493.636044][T17968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.638682][T21291] unknown channel width for channel at 909000KHz? [ 493.662321][T21293] input: syz0 as /devices/virtual/input/input59 [ 493.668908][T17968] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.685586][T17968] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 493.700976][T17968] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.731920][T17968] usb 6-1: config 0 descriptor?? [ 493.749604][T17968] hub 6-1:0.0: USB hub found [ 493.979760][T17968] hub 6-1:0.0: 1 port detected [ 494.183076][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 494.199928][T17968] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 494.215456][T17968] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 494.237865][T17968] usbhid 6-1:0.0: can't add hid device: -71 [ 494.252746][T17968] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 494.290690][T17968] usb 6-1: USB disconnect, device number 20 [ 494.759973][T17960] kernel read not supported for file /dsp (pid: 17960 comm: kworker/0:9) [ 495.173882][T21348] vivid-000: disconnect [ 495.196788][T21347] vivid-000: reconnect [ 495.775645][T21373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.784916][T21338] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 495.815981][T21338] (syz.5.7045,21338,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 495.842749][T21338] (syz.5.7045,21338,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 495.858559][T21338] (syz.5.7045,21338,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 495.867439][T21338] (syz.5.7045,21338,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 497.080558][ T983] kernel read not supported for file /vbi6 (pid: 983 comm: kworker/1:3) [ 497.248804][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.491909][T21438] ptrace attach of "./syz-executor exec"[21444] was attempted by "./syz-executor exec"[21438] [ 497.529526][T21414] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 497.572684][T21414] XFS (loop6): SB validate failed with error -5. [ 498.055443][T21477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7106'. [ 498.096476][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7107'. [ 498.678809][ T983] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 498.749037][T17960] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 498.830284][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 498.846580][ T983] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 498.864880][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.876288][ T983] usb 3-1: Product: syz [ 498.895421][ T983] usb 3-1: Manufacturer: syz [ 498.904196][ T983] usb 3-1: SerialNumber: syz [ 498.911953][ T983] usb 3-1: config 0 descriptor?? [ 498.924833][ T983] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 498.939355][T17960] usb 4-1: Using ep0 maxpacket: 32 [ 498.946574][T17960] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.961392][T17960] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 498.981835][T17960] usb 4-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 499.000205][T17960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.021490][T17960] usb 4-1: config 0 descriptor?? [ 499.257008][T17960] usb 4-1: USB disconnect, device number 49 [ 499.382685][T21509] I/O error, dev loop5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 499.398140][T21509] I/O error, dev loop5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 499.426780][T21509] Mount JFS Failure: -5 [ 499.435082][T21509] jfs_mount failed w/return code = -5 [ 499.581462][T21522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7125'. [ 499.667589][T21526] No control pipe specified [ 499.738359][ T983] gspca_sonixj: reg_r err -71 [ 499.753310][ T983] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 499.773943][ T983] usb 3-1: USB disconnect, device number 50 [ 499.894683][T21534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7129'. [ 500.332900][T21554] program syz.3.7139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 500.458672][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.097606][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.104683][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.353344][T21581] program syz.3.7149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.476411][T21587] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 501.559216][T21587] FAT-fs (loop2): unable to read boot sector [ 501.804634][T21595] Attempt to restore checkpoint with obsolete wellknown handles [ 502.255582][T21610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7163'. [ 502.281735][T21600] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.308570][T21600] FAT-fs (loop4): unable to read boot sector [ 502.356694][T21572] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 502.380986][T21572] (syz.6.7146,21572,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 502.397785][T21572] (syz.6.7146,21572,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 502.415643][T21572] (syz.6.7146,21572,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 502.434826][T21572] (syz.6.7146,21572,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 502.538558][ T983] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 502.749873][ T983] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 502.761410][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.784440][ T983] usb 6-1: config 0 descriptor?? [ 503.020566][ T983] kaweth 6-1:0.0: Firmware present in device. [ 503.166885][T21634] Falling back ldisc for ptm0. [ 503.203421][ T983] kaweth 6-1:0.0: Statistics collection: 0 [ 503.220721][ T983] kaweth 6-1:0.0: Multicast filter limit: 0 [ 503.248669][ T983] kaweth 6-1:0.0: MTU: 0 [ 503.253008][ T983] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 503.349379][T21638] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.604333][ T983] kaweth 6-1:0.0: Error setting SOFS wait [ 503.628812][ T983] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 503.677586][ T983] usb 6-1: USB disconnect, device number 21 [ 503.929341][T21660] netlink: 'syz.6.7187': attribute type 10 has an invalid length. [ 503.941806][T21660] netlink: 211924 bytes leftover after parsing attributes in process `syz.6.7187'. [ 503.953782][T21660] openvswitch: netlink: Message has 64 unknown bytes. [ 504.003776][T21664] Falling back ldisc for ptm0. [ 504.609246][T21686] netlink: 27 bytes leftover after parsing attributes in process `syz.5.7200'. [ 504.987099][T21708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7209'. [ 505.060306][T21710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.130173][ T983] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 505.213770][T17968] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 505.308662][ T983] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 505.317507][ T983] usb 7-1: config 0 has no interface number 0 [ 505.328898][ T983] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 505.346795][ T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.355331][ T983] usb 7-1: Product: syz [ 505.373792][T17968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.398750][T17970] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 505.406482][ T983] usb 7-1: Manufacturer: syz [ 505.416822][T17968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.427045][ T983] usb 7-1: SerialNumber: syz [ 505.438702][ T983] usb 7-1: config 0 descriptor?? [ 505.444209][T17968] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 505.454644][T17968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.471669][T17968] usb 3-1: config 0 descriptor?? [ 505.578591][T17970] usb 4-1: Using ep0 maxpacket: 32 [ 505.586161][T17970] usb 4-1: config 0 interface 0 has no altsetting 0 [ 505.602647][T17970] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 505.615612][T17970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.624758][T17970] usb 4-1: Product: syz [ 505.629362][T17970] usb 4-1: Manufacturer: syz [ 505.634163][T17970] usb 4-1: SerialNumber: syz [ 505.642439][T17970] usb 4-1: config 0 descriptor?? [ 505.662277][ T983] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 505.691706][ T983] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 505.703539][ T983] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 505.711953][ T983] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 505.726802][T21740] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 505.738951][ T983] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 505.748684][T21740] FAT-fs (loop5): unable to read boot sector [ 505.876363][T21702] msdos: Unknown parameter '' [ 505.888155][T17968] cp2112 0003:10C4:EA90.0064: unknown main item tag 0x0 [ 505.917097][T17968] cp2112 0003:10C4:EA90.0064: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 506.056611][T17970] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 506.069503][T17970] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 506.087813][T17968] cp2112 0003:10C4:EA90.0064: error requesting version [ 506.111158][T17968] cp2112 0003:10C4:EA90.0064: probe with driver cp2112 failed with error -71 [ 506.121954][T17970] usb 7-1: USB disconnect, device number 23 [ 506.142727][T17970] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 506.160919][T17968] usb 3-1: USB disconnect, device number 51 [ 506.171571][T17970] keyspan 7-1:0.133: device disconnected [ 506.767668][T21748] can0: slcan on ptm0. [ 506.840513][T21747] can0 (unregistered): slcan off ptm0. [ 507.198934][T17960] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 507.358719][T17960] usb 6-1: Using ep0 maxpacket: 32 [ 507.376214][T17960] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 507.392777][T17960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.414317][T17960] usb 6-1: config 0 descriptor?? [ 507.423370][T17960] gspca_main: sunplus-2.14.0 probing 041e:400b [ 507.883332][T21794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7248'. [ 508.242080][T17970] usb 4-1: USB disconnect, device number 50 [ 508.262811][T17960] gspca_sunplus: reg_w_riv err -71 [ 508.268075][T17960] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 508.309644][T17960] usb 6-1: USB disconnect, device number 22 [ 509.078515][T17960] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 509.173819][T21834] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 509.196310][T21834] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.204016][T21834] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.262047][T17960] usb 3-1: config index 0 descriptor too short (expected 19492, got 36) [ 509.283904][T17960] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 509.310788][T17960] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 509.328663][T17960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 509.349127][T17960] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.359113][T17960] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 509.394871][T17960] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 509.428532][T17960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.440830][T21847] misc userio: Invalid payload size [ 509.459634][T17960] usb 3-1: config 0 descriptor?? [ 509.562010][T17970] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 509.756786][T17970] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 509.787601][T17970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.818684][T17970] usb 6-1: Product: syz [ 509.822943][T17970] usb 6-1: Manufacturer: syz [ 509.827563][T17970] usb 6-1: SerialNumber: syz [ 509.849648][T17970] usb 6-1: config 0 descriptor?? [ 509.902806][T17960] lg-g15 0003:046D:C225.0065: unknown main item tag 0x0 [ 509.928983][T17960] lg-g15 0003:046D:C225.0065: unknown main item tag 0x0 [ 509.957846][T17960] lg-g15 0003:046D:C225.0065: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.2-1/input0 [ 510.071617][T17970] usb 6-1: USB disconnect, device number 23 [ 510.124572][T17960] usb 3-1: USB disconnect, device number 52 [ 510.151801][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.256214][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.364893][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.462405][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.502415][T21869] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7285'. [ 510.812832][ T12] bridge_slave_1: left allmulticast mode [ 510.827693][ T12] bridge_slave_1: left promiscuous mode [ 510.850019][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.929028][ T12] bridge_slave_0: left allmulticast mode [ 510.947090][ T12] bridge_slave_0: left promiscuous mode [ 510.970489][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.029165][T17970] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 511.073614][ T5184] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 511.084084][ T5184] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 511.093666][ T5184] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 511.103060][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 511.111811][ T5184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 511.125080][T21894] block nbd4: Unsupported socket: should be TCP or UNIX. [ 511.165136][T21895] program syz.4.7294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.194908][T17970] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 511.218603][T17970] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 511.238497][T17970] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 511.264355][T17970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.303977][T21878] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 511.330403][T17970] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.426712][ T12] erspan0 (unregistering): left promiscuous mode [ 511.472296][ T12] gretap0 (unregistering): left promiscuous mode [ 511.495465][T21901] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 511.509889][T21901] EXT4-fs (loop3): unable to read superblock [ 511.524907][T17970] usb 3-1: USB disconnect, device number 53 [ 511.557085][T21901] tmpfs: Unknown parameter 'noblock_validity' [ 512.084072][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.096052][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.107094][ T12] bond0 (unregistering): Released all slaves [ 512.125274][ T12] bond1 (unregistering): Released all slaves [ 512.269351][T17958] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 512.381860][T21925] NILFS (loop5): device size too small [ 512.458538][T17958] usb 5-1: Using ep0 maxpacket: 32 [ 512.466700][T17958] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 512.505013][T17958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.552678][T17958] usb 5-1: config 0 descriptor?? [ 512.788583][T17958] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 512.804976][ T12] hsr_slave_0: left promiscuous mode [ 512.823672][T17958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 512.838524][ T12] hsr_slave_1: left promiscuous mode [ 512.844689][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.849669][T17958] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 512.856734][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.877047][T17958] usb 5-1: media controller created [ 512.889957][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.907636][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.935646][T17958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 512.970782][ T12] veth1_macvtap: left promiscuous mode [ 512.976381][ T12] veth0_macvtap: left promiscuous mode [ 512.994685][T17958] az6027: usb out operation failed. (-71) [ 512.998649][ T12] veth1_vlan: left promiscuous mode [ 513.001447][T17958] az6027: usb out operation failed. (-71) [ 513.008859][ T12] veth0_vlan: left promiscuous mode [ 513.024378][T17958] stb0899_attach: Driver disabled by Kconfig [ 513.034524][T17958] az6027: no front-end attached [ 513.034524][T17958] [ 513.055192][T17958] az6027: usb out operation failed. (-71) [ 513.069545][T17958] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 513.085727][T17958] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input60 [ 513.101986][T17958] dvb-usb: schedule remote query interval to 400 msecs. [ 513.114420][T17958] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 513.119163][T17970] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 513.153627][T17958] usb 5-1: USB disconnect, device number 50 [ 513.169319][ T5864] Bluetooth: hci3: command tx timeout [ 513.241604][T17958] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 513.285063][T17970] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 513.308841][T17970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.331656][T17970] usb 6-1: config 0 descriptor?? [ 513.347773][T17970] cp210x 6-1:0.0: cp210x converter detected [ 513.651769][T17968] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 513.818802][T17968] usb 3-1: Using ep0 maxpacket: 16 [ 513.842171][T17968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.856681][T17968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.867728][T17968] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 513.884390][T17968] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 513.893693][T17968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.909997][T17968] usb 3-1: config 0 descriptor?? [ 513.967669][T17970] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 513.975772][T17970] cp210x 6-1:0.0: GPIO initialisation failed: -32 [ 513.985680][ T12] team0 (unregistering): Port device team_slave_1 removed [ 513.987735][T17970] usb 6-1: cp210x converter now attached to ttyUSB0 [ 514.002247][T17970] usb 6-1: USB disconnect, device number 24 [ 514.015858][T17970] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 514.025943][T17970] cp210x 6-1:0.0: device disconnected [ 514.050282][ T12] team0 (unregistering): Port device team_slave_0 removed [ 514.346491][T17968] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0066/input/input61 [ 514.415362][T17968] microsoft 0003:045E:07DA.0066: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 514.585623][T17968] usb 3-1: USB disconnect, device number 54 [ 514.855101][T21890] chnl_net:caif_netlink_parms(): no params data found [ 515.101437][T21890] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.109933][T21890] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.117283][T21890] bridge_slave_0: entered allmulticast mode [ 515.136011][T21890] bridge_slave_0: entered promiscuous mode [ 515.170002][T21890] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.182272][T21890] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.191486][T21890] bridge_slave_1: entered allmulticast mode [ 515.200512][T21890] bridge_slave_1: entered promiscuous mode [ 515.216619][T21982] kernel read not supported for file /file0 (pid: 21982 comm: syz.5.7333) [ 515.229588][ T30] audit: type=1800 audit(2000000198.564:206): pid=21982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7333" name="file0" dev="mqueue" ino=82024 res=0 errno=0 [ 515.250564][ T5864] Bluetooth: hci3: command tx timeout [ 515.288333][ T12] IPVS: stop unused estimator thread 0... [ 515.317679][T21890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.376776][T21890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.431245][T21890] team0: Port device team_slave_0 added [ 515.441205][T21890] team0: Port device team_slave_1 added [ 515.514411][T21988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.521737][T21988] IPv6: NLM_F_CREATE should be set when creating new route [ 515.529035][T21988] IPv6: NLM_F_CREATE should be set when creating new route [ 515.536306][T21988] IPv6: NLM_F_CREATE should be set when creating new route [ 515.550736][T21890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.565972][T21890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.619112][T21890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.634112][T21890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.644705][T21890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.671281][T21890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.855127][T21890] hsr_slave_0: entered promiscuous mode [ 515.872372][T21890] hsr_slave_1: entered promiscuous mode [ 515.899466][T21890] debugfs: 'hsr0' already exists in 'hsr' [ 515.915471][T21890] Cannot create hsr debugfs directory [ 515.967193][T22008] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7346'. [ 516.531374][T22027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7354'. [ 516.598159][T22027] ipvlan0: entered promiscuous mode [ 516.612346][T22027] ipvlan0: left promiscuous mode [ 517.298237][T21890] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 517.324101][T21890] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 517.339361][ T5864] Bluetooth: hci3: command tx timeout [ 517.372704][T21890] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 517.443802][T21890] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 517.657542][T21890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.694952][T21890] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.715584][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.722833][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.757186][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.764401][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.803789][T22075] netlink: 'syz.5.7372': attribute type 3 has an invalid length. [ 517.813640][T22075] netlink: 'syz.5.7372': attribute type 3 has an invalid length. [ 518.295070][T21890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.983303][T21890] veth0_vlan: entered promiscuous mode [ 519.018472][T21890] veth1_vlan: entered promiscuous mode [ 519.102339][T21890] veth0_macvtap: entered promiscuous mode [ 519.154476][T21890] veth1_macvtap: entered promiscuous mode [ 519.196144][T21890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.249954][T21890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.322942][T15944] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.341813][T15944] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.347495][T22136] sctp: [Deprecated]: syz.2.7394 (pid 22136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.347495][T22136] Use struct sctp_sack_info instead [ 519.390460][T15944] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.410168][ T5864] Bluetooth: hci3: command tx timeout [ 519.427403][T15944] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.539058][T17955] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 519.595027][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.614525][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.667332][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.686831][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.738976][T17955] usb 6-1: Using ep0 maxpacket: 32 [ 519.755769][T17955] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 519.779585][T17955] usb 6-1: config 0 has no interface number 0 [ 519.785868][T22150] netlink: 'syz.3.7403': attribute type 39 has an invalid length. [ 519.804044][T17955] usb 6-1: config 0 interface 184 has no altsetting 0 [ 519.819290][T17955] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 519.839404][T17955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.848472][T17955] usb 6-1: Product: syz [ 519.857748][T17955] usb 6-1: Manufacturer: syz [ 519.873557][T17955] usb 6-1: SerialNumber: syz [ 519.909674][T17955] usb 6-1: config 0 descriptor?? [ 519.929353][T17955] smsc75xx v1.0.0 [ 519.936414][T22158] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 519.951733][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 520.763171][T17955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 520.789018][T17955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 520.818961][T17955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 520.830290][T17955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 520.851117][T17955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 520.861818][T17955] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 520.884036][T17955] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 520.922199][T17955] usb 6-1: USB disconnect, device number 25 [ 520.936517][T22204] binder: 22203:22204 unknown command 76 [ 520.943632][T22204] binder: 22203:22204 ioctl c0306201 200000000340 returned -22 [ 521.048799][T17970] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 521.208744][T17970] usb 5-1: Using ep0 maxpacket: 16 [ 521.226540][T17970] usb 5-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 521.252348][T17970] usb 5-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 521.279579][T17970] usb 5-1: config 1 interface 0 has no altsetting 0 [ 521.292430][T17970] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.308872][T17970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 521.316977][T17970] usb 5-1: SerialNumber: syz [ 521.331225][T22198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.550754][T22223] debugfs: 'ttyS3' already exists in 'caif_serial' [ 521.572924][T22198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 521.611111][T22225] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 521.785891][T22231] sctp: [Deprecated]: syz.2.7440 (pid 22231) Use of int in maxseg socket option. [ 521.785891][T22231] Use struct sctp_assoc_value instead [ 522.018671][T17970] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 522.230096][T17955] usb 5-1: USB disconnect, device number 51 [ 522.757231][T22272] netem: incorrect ge model size [ 522.773404][T22272] netem: change failed [ 523.721222][T22332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.267959][T22360] kvm_intel: kvm [22359]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x3 [ 524.308695][T17960] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 524.399076][T17955] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 524.459912][T17960] usb 6-1: Using ep0 maxpacket: 32 [ 524.474497][T17960] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 524.486267][T17960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.499331][T17960] usb 6-1: config 0 descriptor?? [ 524.548625][T17955] usb 5-1: Using ep0 maxpacket: 16 [ 524.564548][T17955] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 524.577716][T17955] usb 5-1: config 0 has no interface number 0 [ 524.593956][ T5184] Bluetooth: hci5: sending frame failed (-49) [ 524.603232][ T5864] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 524.615894][T17955] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.627095][T17955] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.641330][T17955] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 524.650829][T17955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.662918][T17955] usb 5-1: config 0 descriptor?? [ 524.713960][T17960] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 524.727058][T17960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 524.751439][T17960] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 524.768566][T17960] usb 6-1: media controller created [ 524.806973][T17960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.920550][T17960] az6027: usb out operation failed. (-71) [ 524.932388][T17960] az6027: usb out operation failed. (-71) [ 524.940465][T17960] stb0899_attach: Driver disabled by Kconfig [ 524.947914][T17960] az6027: no front-end attached [ 524.947914][T17960] [ 524.960039][T17960] az6027: usb out operation failed. (-71) [ 524.965896][T17960] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 524.984660][T17960] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input62 [ 525.002354][T17960] dvb-usb: schedule remote query interval to 400 msecs. [ 525.010546][T17960] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 525.027256][T17960] usb 6-1: USB disconnect, device number 26 [ 525.075120][T17960] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 525.286991][T17955] uclogic 0003:28BD:0071.0067: pen parameters not found [ 525.295446][T17955] uclogic 0003:28BD:0071.0067: interface is invalid, ignoring [ 525.308057][T17955] usb 5-1: USB disconnect, device number 52 [ 525.915439][T22408] ntfs3(loop5): try to read out of volume at offset 0x0 [ 526.162318][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7530'. [ 526.263794][T22423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7529'. [ 526.968555][ T5975] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 527.128531][ T5975] usb 4-1: Using ep0 maxpacket: 8 [ 527.151295][ T5975] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 527.170990][ T5975] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 527.197770][ T5975] usb 4-1: Product: syz [ 527.207934][ T5975] usb 4-1: Manufacturer: syz [ 527.218656][ T5975] usb 4-1: SerialNumber: syz [ 527.230420][ T5975] usb 4-1: config 0 descriptor?? [ 527.246066][ T5975] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 527.864788][ T5975] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input63 [ 527.987967][T22492] netlink: 'syz.4.7562': attribute type 2 has an invalid length. [ 528.101212][ T5975] usb 4-1: USB disconnect, device number 51 [ 528.461982][T22525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7577'. [ 528.549549][T17968] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 528.697843][T22539] macsec1: entered allmulticast mode [ 528.711674][T17968] usb 3-1: Using ep0 maxpacket: 32 [ 528.720700][T22539] macvlan0: entered allmulticast mode [ 528.728368][T17968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.746377][T17968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.758184][T17968] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 528.769499][T17968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.782031][T17968] usb 3-1: config 0 descriptor?? [ 528.793358][T17968] hub 3-1:0.0: USB hub found [ 528.995802][T17968] hub 3-1:0.0: 1 port detected [ 529.413196][T17968] usb 3-1: USB disconnect, device number 55 [ 529.512516][T22539] macvlan0: left allmulticast mode [ 529.893355][T22557] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7593'. [ 529.979676][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 530.143621][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.166640][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.188663][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.215815][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.226047][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.247699][ T9] usb 6-1: config 0 descriptor?? [ 530.265093][ T9] hub 6-1:0.0: USB hub found [ 530.312795][T22570] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 530.479719][ T9] hub 6-1:0.0: 14 ports detected [ 530.486320][ T9] hub 6-1:0.0: insufficient power available to use all downstream ports [ 530.943393][ T9] usb 6-1: USB disconnect, device number 27 [ 531.031917][T22599] veth0: entered promiscuous mode [ 531.050210][T22598] veth0: left promiscuous mode [ 531.510699][T22619] input: syz1 as /devices/virtual/input/input64 [ 531.792182][T22634] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 531.834091][T22634] SQUASHFS error: Failed to read block 0x0: -5 [ 531.841749][T22634] unable to read squashfs_super_block [ 531.909280][T17960] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 532.096580][T17960] usb 6-1: Using ep0 maxpacket: 16 [ 532.110084][T17960] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 532.119344][T17960] usb 6-1: config 0 has no interface number 0 [ 532.126099][T17960] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 532.137335][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 532.145230][T17960] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 532.160065][T17960] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 532.169439][T17960] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.177902][T17960] usb 6-1: Product: syz [ 532.182470][T17960] usb 6-1: Manufacturer: syz [ 532.187113][T17960] usb 6-1: SerialNumber: syz [ 532.195034][T17960] usb 6-1: config 0 descriptor?? [ 532.200872][T22629] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 532.208162][T22629] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 532.208759][ T5975] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 532.318589][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 532.330509][ T9] usb 5-1: config 1 has an invalid descriptor of length 124, skipping remainder of the config [ 532.357101][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 532.373836][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 532.383224][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 532.394321][ T5975] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 532.398673][ T9] usb 5-1: SerialNumber: syz [ 532.427362][ T5975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 532.428940][T22629] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 532.447658][ T5975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 532.459899][ T9] cdc_acm 5-1:1.0: skipping garbage [ 532.477827][ T5975] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 532.478717][T22629] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 532.503980][ T5975] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 532.531229][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.552760][ T5975] usb 7-1: config 0 descriptor?? [ 532.558689][T22643] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 532.630608][ T9] usb 5-1: USB disconnect, device number 53 [ 532.946399][T22676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 532.964546][T22676] bond0: (slave bond1): Enslaving as an active interface with an up link [ 533.002380][ T5975] plantronics 0003:047F:FFFF.0068: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 533.119698][T17960] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 533.131123][T17960] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 533.158991][T17960] asix 6-1:0.251: probe with driver asix failed with error -71 [ 533.176528][T17960] usb 6-1: USB disconnect, device number 28 [ 533.188964][ T9] usb 7-1: USB disconnect, device number 24 [ 533.435272][T22693] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7652'. [ 533.467385][T22695] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7653'. [ 533.707863][T22681] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 534.078001][T22726] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.104317][T22726] MINIX-fs: unable to read superblock [ 534.118043][T22726] overlayfs: failed to resolve './cgroup': -2 [ 534.368930][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 534.498643][ T5975] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 534.658569][ T5975] usb 6-1: Using ep0 maxpacket: 8 [ 534.673998][ T5975] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 534.683774][ T5975] usb 6-1: config 0 has no interface number 0 [ 534.698692][ T5975] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.722948][ T5975] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 534.748601][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.774415][ T5975] usb 6-1: config 0 descriptor?? [ 534.814621][ T5975] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 535.039348][ T9] usb 6-1: USB disconnect, device number 29 [ 535.406256][T22747] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 535.424188][T22747] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 535.437615][T22747] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 535.453492][T22747] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 536.611061][T22798] bond0: (slave bond_slave_0): Releasing backup interface [ 536.634433][T22798] bond_slave_0 (unregistering): left allmulticast mode [ 536.849409][T22806] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.860065][T22806] I/O error, dev loop6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.898533][T22806] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 536.914947][T22806] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 536.935263][T22806] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 536.994336][T22806] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 537.018615][T22806] UDF-fs: Scanning with blocksize 512 failed [ 537.020346][T22813] kvm: kvm [22812]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xa7 [ 537.025779][T22806] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.071090][T22806] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.080748][T22806] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 537.091262][T22806] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.101436][T22806] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 537.111978][T22806] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 537.123787][T22806] UDF-fs: Scanning with blocksize 1024 failed [ 537.144230][T22806] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.162305][T22806] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.173431][T22806] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 537.187095][T22806] I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.197102][T22806] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 537.214307][T22806] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 537.226877][T22806] UDF-fs: Scanning with blocksize 2048 failed [ 537.260364][T22806] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 537.300051][T22806] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 537.333702][T22806] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 537.350877][T22806] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 537.381420][T22806] UDF-fs: Scanning with blocksize 4096 failed [ 537.388620][T22806] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 537.438659][T22821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.481150][T22821] bond1: entered promiscuous mode [ 537.487208][T22821] bond0: (slave bond1): Enslaving as an active interface with an up link [ 538.484095][T22883] netlink: 'syz.5.7738': attribute type 1 has an invalid length. [ 538.492576][T22882] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7739'. [ 538.518583][T17955] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 538.518975][T22883] netlink: 'syz.5.7738': attribute type 1 has an invalid length. [ 538.540340][T22883] netlink: 216 bytes leftover after parsing attributes in process `syz.5.7738'. [ 538.707594][T17955] usb 7-1: Using ep0 maxpacket: 8 [ 538.716955][T17955] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.734310][T17955] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.759613][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 538.770425][T17955] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 538.784519][T17955] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 538.795752][T17955] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.828887][T17955] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 538.841347][T17955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.059929][T17955] usb 7-1: GET_CAPABILITIES returned 0 [ 539.075861][T17955] usbtmc 7-1:16.0: can't read capabilities [ 539.263867][T17955] usb 7-1: USB disconnect, device number 25 [ 539.853450][T22953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 539.948607][T17955] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 540.078586][ T5975] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 540.108716][T17955] usb 5-1: Using ep0 maxpacket: 16 [ 540.133493][T17955] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.162386][T17955] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.187124][T17955] usb 5-1: config 0 interface 0 has no altsetting 0 [ 540.202725][T17955] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 540.229347][T17955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.240317][ T5975] usb 4-1: Using ep0 maxpacket: 16 [ 540.255330][ T5975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.269752][T17955] usb 5-1: config 0 descriptor?? [ 540.278511][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.310430][T22970] program syz.6.7780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 540.328511][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 540.352507][ T5975] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 540.381182][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 540.443786][ T5975] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 540.456642][T22974] syz.5.7783 (22974): /proc/22973/oom_adj is deprecated, please use /proc/22973/oom_score_adj instead. [ 540.467935][ T5975] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 540.498502][ T5975] usb 4-1: Manufacturer: syz [ 540.516222][ T5975] usb 4-1: config 0 descriptor?? [ 540.739447][T17955] cougar 0003:060B:500A.0069: unexpected long global item [ 540.761672][T17955] cougar 0003:060B:500A.0069: parse failed [ 540.783744][T17955] cougar 0003:060B:500A.0069: probe with driver cougar failed with error -22 [ 540.912490][T17955] usb 5-1: USB disconnect, device number 54 [ 540.918554][ T5975] rc_core: IR keymap rc-hauppauge not found [ 540.918574][ T5975] Registered IR keymap rc-empty [ 540.918727][ T5975] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 540.978842][ T5975] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.011374][ T5975] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 541.032001][ T5975] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input66 [ 541.072983][ T5975] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.148876][ T5975] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.179707][ T5975] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.223034][ T5975] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.258626][ T5975] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.288827][ T5975] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.318728][ T5975] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.349006][ T5975] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.378108][ T5975] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.408648][ T5975] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 541.430479][ T5975] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 541.450561][ T5975] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 541.478980][ T5975] usb 4-1: USB disconnect, device number 52 [ 541.838752][T17968] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 541.935207][T23012] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7797'. [ 542.010457][T17968] usb 7-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 542.041764][T17968] usb 7-1: config 1 interface 0 altsetting 108 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 542.078811][T17968] usb 7-1: config 1 interface 0 has no altsetting 0 [ 542.092329][T17968] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.40 [ 542.107789][T17968] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.126616][T17968] usb 7-1: Product: syz [ 542.139989][T17968] usb 7-1: Manufacturer: syz [ 542.159018][T17968] usb 7-1: SerialNumber: syz [ 542.174826][T22993] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 542.221776][ T30] audit: type=1326 audit(2000000231.572:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23025 comm="syz.4.7805" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa5e18eba9 code=0x0 [ 542.406598][T17968] usbhid 7-1:1.0: can't add hid device: -71 [ 542.422465][T17968] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 542.453908][T17968] usb 7-1: USB disconnect, device number 26 [ 543.185626][T23070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7824'. [ 543.274739][T23076] block nbd5: NBD_DISCONNECT [ 543.635990][T23086] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 544.299883][ T30] audit: type=1326 audit(2000000233.652:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23110 comm="syz.3.7843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2258eba9 code=0x7ffc0000 [ 544.326426][T23114] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7845'. [ 544.368955][ T30] audit: type=1326 audit(2000000233.652:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23110 comm="syz.3.7843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2258eba9 code=0x7ffc0000 [ 544.442757][ T30] audit: type=1326 audit(2000000233.672:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23110 comm="syz.3.7843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fea2258eba9 code=0x7ffc0000 [ 544.523430][ T30] audit: type=1326 audit(2000000233.672:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23110 comm="syz.3.7843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2258eba9 code=0x7ffc0000 [ 544.565940][ T30] audit: type=1326 audit(2000000233.672:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23110 comm="syz.3.7843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2258eba9 code=0x7ffc0000 [ 545.018631][T17955] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 545.172837][T17955] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 545.181716][T17955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.202202][T17955] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 545.213735][T17955] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 545.230352][T17955] usb 5-1: Manufacturer: syz [ 545.244815][T17955] usb 5-1: config 0 descriptor?? [ 545.340846][T17955] rc_core: IR keymap rc-hauppauge not found [ 545.347475][T17955] Registered IR keymap rc-empty [ 545.353960][T17955] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 545.379695][T17955] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input68 [ 545.397497][T23165] sctp: [Deprecated]: syz.6.7867 (pid 23165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.397497][T23165] Use struct sctp_sack_info instead [ 545.695758][ C0] igorplugusb 5-1:0.0: receive overflow, at least 1 lost [ 545.905735][T17960] usb 5-1: USB disconnect, device number 55 [ 546.609065][T17960] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 546.735845][T23209] blk_print_req_error: 2 callbacks suppressed [ 546.735860][T23209] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.752194][T23209] (syz.2.7887,23209,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 546.759933][T23209] (syz.2.7887,23209,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 546.767323][T23209] (syz.2.7887,23209,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 546.776226][T23209] (syz.2.7887,23209,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 546.788708][T17960] usb 7-1: Using ep0 maxpacket: 8 [ 546.799186][T17960] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 546.815740][T17960] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 546.826302][T17960] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 546.839793][T17960] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.855112][T17960] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 546.867109][T17960] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.906635][T23233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7898'. [ 547.092373][T17960] usb 7-1: GET_CAPABILITIES returned 0 [ 547.098190][T17960] usbtmc 7-1:16.0: can't read capabilities [ 547.296052][T17960] usb 7-1: USB disconnect, device number 27 [ 547.969609][ T5864] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 547.976285][ T5184] Bluetooth: hci5: command 0x1003 tx timeout [ 548.348316][T23257] ntfs3(loop6): try to read out of volume at offset 0x0 [ 550.737578][T23340] NILFS (loop4): device size too small [ 551.003875][T23357] erofs (device loop3): cannot find valid erofs superblock [ 551.305618][T15944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.330542][T15944] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 551.425215][T15944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.435701][T15944] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 551.574880][T15944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.602270][T15944] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 551.724755][T15944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.753567][T15944] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 551.776690][T23385] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7969'. [ 603.518696][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.118371][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 657.125378][ C0] rcu: 1-...!: (0 ticks this GP) idle=a164/1/0x4000000000000000 softirq=97306/97306 fqs=0 [ 657.136678][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13/1:b..l [ 657.144457][ C0] rcu: (detected by 0, t=10506 jiffies, g=98541, q=107 ncpus=2) [ 657.152195][ C0] Sending NMI from CPU 0 to CPUs 1: [ 657.152228][ C1] NMI backtrace for cpu 1 [ 657.152244][ C1] CPU: 1 UID: 0 PID: 23373 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 657.152264][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.152276][ C1] RIP: 0010:check_preemption_disabled+0x3/0x120 [ 657.152301][ C1] Code: 03 8c 48 c7 c6 e0 7d 03 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 53 48 83 ec 10 65 48 8b 05 be 24 40 07 48 89 44 24 08 65 8b [ 657.152317][ C1] RSP: 0018:ffffc90000a08ce0 EFLAGS: 00000082 [ 657.152332][ C1] RAX: ffffffff81adf3f7 RBX: 0000000000000001 RCX: 0000000000010000 [ 657.152344][ C1] RDX: ffff88805a97dac0 RSI: ffffffff8c037de0 RDI: ffffffff8c037da0 [ 657.152358][ C1] RBP: ffffc90000a08e90 R08: ffffffff8fc43c37 R09: 1ffffffff1f88786 [ 657.152370][ C1] R10: dffffc0000000000 R11: fffffbfff1f88787 R12: ffff88801e29e340 [ 657.152383][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b8727bc0 [ 657.152396][ C1] FS: 000055556246b500(0000) GS:ffff888125ae1000(0000) knlGS:0000000000000000 [ 657.152411][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.152423][ C1] CR2: 0000200000000182 CR3: 0000000024520000 CR4: 00000000003526f0 [ 657.152439][ C1] Call Trace: [ 657.152447][ C1] [ 657.152457][ C1] rcu_is_watching+0x15/0xb0 [ 657.152476][ C1] debug_deactivate+0x80/0x200 [ 657.152494][ C1] __hrtimer_run_queues+0x2b0/0xc60 [ 657.152531][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 657.152555][ C1] ? read_tsc+0x9/0x20 [ 657.152582][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 657.152623][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 657.152642][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 657.152668][ C1] [ 657.152674][ C1] [ 657.152681][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 657.152700][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 657.152721][ C1] Code: 08 f0 c3 92 65 8b 15 88 1a 04 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 7c 16 00 00 00 74 2c 8b 91 58 16 00 00 <83> fa 02 75 21 48 8b 91 60 16 00 00 48 8b 32 48 8d 7e 01 8b 89 5c [ 657.152736][ C1] RSP: 0018:ffffc9000b30f428 EFLAGS: 00000246 [ 657.152750][ C1] RAX: ffffffff81cecb3d RBX: 0000000000000000 RCX: ffff88805a97dac0 [ 657.152762][ C1] RDX: 0000000000000000 RSI: 00007f6bdff8e7ab RDI: ffffffffa0201658 [ 657.152774][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81ceca16 [ 657.152785][ C1] R10: ffffc9000b30f518 R11: ffffffff81ac4710 R12: ffffffffa0201658 [ 657.152804][ C1] R13: dffffc0000000000 R14: 00007f6bdff8e7ab R15: ffff888076388420 [ 657.152820][ C1] ? 0xffffffffa0201658 [ 657.152833][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 657.152852][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 657.152876][ C1] ? is_bpf_text_address+0x14d/0x2b0 [ 657.152900][ C1] ? 0xffffffffa0201658 [ 657.152916][ C1] is_bpf_text_address+0x14d/0x2b0 [ 657.152939][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 657.152964][ C1] kernel_text_address+0xa5/0xe0 [ 657.152987][ C1] __kernel_text_address+0xd/0x40 [ 657.153009][ C1] unwind_get_return_address+0x4d/0x90 [ 657.153026][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 657.153044][ C1] arch_stack_walk+0xfc/0x150 [ 657.153068][ C1] stack_trace_save+0x9c/0xe0 [ 657.153086][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 657.153111][ C1] save_stack+0xf5/0x1f0 [ 657.153139][ C1] ? __pfx_save_stack+0x10/0x10 [ 657.153163][ C1] ? post_alloc_hook+0x240/0x2a0 [ 657.153188][ C1] ? get_page_from_freelist+0x21e4/0x22c0 [ 657.153205][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 657.153222][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 657.153238][ C1] ? alloc_pages_noprof+0xa9/0x190 [ 657.153254][ C1] ? __vmalloc_node_range_noprof+0x97d/0x12f0 [ 657.153280][ C1] ? vmalloc_user_noprof+0xad/0xf0 [ 657.153304][ C1] ? kcov_ioctl+0x55/0x640 [ 657.153324][ C1] ? __se_sys_ioctl+0xfc/0x170 [ 657.153345][ C1] ? do_syscall_64+0xfa/0xfa0 [ 657.153368][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.153388][ C1] ? seqcount_lockdep_reader_access+0x102/0x180 [ 657.153416][ C1] __set_page_owner+0x8d/0x4a0 [ 657.153443][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 657.153473][ C1] post_alloc_hook+0x240/0x2a0 [ 657.153501][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 657.153545][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 657.153565][ C1] ? prepare_alloc_pages+0x213/0x610 [ 657.153587][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 657.153607][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 657.153630][ C1] ? policy_nodemask+0x27c/0x720 [ 657.153646][ C1] ? __pfx___might_resched+0x10/0x10 [ 657.153673][ C1] alloc_pages_mpol+0x232/0x4a0 [ 657.153693][ C1] alloc_pages_noprof+0xa9/0x190 [ 657.153722][ C1] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 657.153762][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 657.153797][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 657.153818][ C1] vmalloc_user_noprof+0xad/0xf0 [ 657.153842][ C1] ? kcov_ioctl+0x55/0x640 [ 657.153862][ C1] kcov_ioctl+0x55/0x640 [ 657.153883][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 657.153902][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 657.153922][ C1] __se_sys_ioctl+0xfc/0x170 [ 657.153944][ C1] do_syscall_64+0xfa/0xfa0 [ 657.153967][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.153990][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.154006][ C1] ? clear_bhb_loop+0x60/0xb0 [ 657.154024][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.154039][ C1] RIP: 0033:0x7f6bdff8e7ab [ 657.154053][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 657.154067][ C1] RSP: 002b:00007ffc7d519340 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.154082][ C1] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f6bdff8e7ab [ 657.154094][ C1] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7 [ 657.154105][ C1] RBP: 00007f6be01d5f40 R08: 00000000000000da R09: 0000000000000000 [ 657.154115][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.154125][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 657.154144][ C1] [ 657.154221][ C0] task:kworker/u8:1 state:R running task stack:21880 pid:13 tgid:13 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 657.777185][ C0] Workqueue: bat_events batadv_nc_worker [ 657.782847][ C0] Call Trace: [ 657.786136][ C0] [ 657.789101][ C0] __schedule+0x1798/0x4cc0 [ 657.793649][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.798896][ C0] ? __pfx___schedule+0x10/0x10 [ 657.803788][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 657.809106][ C0] preempt_schedule_irq+0xb5/0x150 [ 657.814242][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 657.820002][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 657.825837][ C0] irqentry_exit+0x6f/0x90 [ 657.830276][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 657.835751][ C0] RIP: 0010:lock_release+0xaa/0x3e0 [ 657.840978][ C0] Code: 92 41 83 bf 2c 0b 00 00 00 0f 85 1e 02 00 00 49 81 3e 40 b3 87 93 0f 84 11 02 00 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 <48> 8b 5c 24 20 fa 48 c7 c7 5f 59 bd 8d e8 44 49 e6 09 65 ff 05 2d [ 657.860595][ C0] RSP: 0018:ffffc90000127998 EFLAGS: 00000206 [ 657.866683][ C0] RAX: 0000000000000000 RBX: ffff8880276d4940 RCX: 048f9a42ed5b5b00 [ 657.874699][ C0] RDX: 0000000000000000 RSI: ffffffff8c037de0 RDI: ffffffff8c037da0 [ 657.882681][ C0] RBP: fffffffffffffe38 R08: 0000000000000000 R09: ffffffff8b514f62 [ 657.890665][ C0] R10: dffffc0000000000 R11: ffffffff8b514e90 R12: dffffc0000000000 [ 657.898653][ C0] R13: ffffffff8b514f62 R14: ffffffff8e33d660 R15: ffff88801c6c8000 [ 657.906639][ C0] ? batadv_nc_worker+0xd2/0x610 [ 657.911603][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 657.916995][ C0] ? batadv_nc_worker+0xd2/0x610 [ 657.921983][ C0] ? batadv_nc_worker+0xd2/0x610 [ 657.926942][ C0] batadv_nc_worker+0x28c/0x610 [ 657.931846][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 657.937599][ C0] process_scheduled_works+0xae1/0x17b0 [ 657.943211][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 657.949235][ C0] worker_thread+0x8a0/0xda0 [ 657.953879][ C0] kthread+0x711/0x8a0 [ 657.957970][ C0] ? __pfx_worker_thread+0x10/0x10 [ 657.963117][ C0] ? __pfx_kthread+0x10/0x10 [ 657.967729][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.972947][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.978169][ C0] ? __pfx_kthread+0x10/0x10 [ 657.982777][ C0] ret_from_fork+0x4bc/0x870 [ 657.987393][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 657.992536][ C0] ? __switch_to_asm+0x39/0x70 [ 657.997322][ C0] ? __switch_to_asm+0x33/0x70 [ 658.002107][ C0] ? __pfx_kthread+0x10/0x10 [ 658.006721][ C0] ret_from_fork_asm+0x1a/0x30 [ 658.011532][ C0] [ 658.014569][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g98541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 658.026963][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=45754 [ 658.034862][ C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g98541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 658.046240][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 658.056244][ C0] rcu: RCU grace-period kthread stack dump: [ 658.062156][ C0] task:rcu_preempt state:I stack:27256 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 658.074095][ C0] Call Trace: [ 658.077385][ C0] [ 658.080334][ C0] __schedule+0x1798/0x4cc0 [ 658.084894][ C0] ? __lock_acquire+0xab9/0xd20 [ 658.089774][ C0] ? __pfx___schedule+0x10/0x10 [ 658.094664][ C0] ? schedule+0x91/0x360 [ 658.098936][ C0] schedule+0x165/0x360 [ 658.103120][ C0] schedule_timeout+0x12b/0x270 [ 658.107987][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 658.113377][ C0] ? __pfx_process_timeout+0x10/0x10 [ 658.118686][ C0] ? prepare_to_swait_event+0x341/0x380 [ 658.124258][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 658.129146][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 658.134108][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.139329][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 658.144640][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 658.149859][ C0] ? finish_swait+0xcd/0x1f0 [ 658.154464][ C0] rcu_gp_kthread+0x99/0x390 [ 658.159076][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 658.164295][ C0] ? __kthread_parkme+0x7b/0x200 [ 658.169245][ C0] ? __kthread_parkme+0x1a1/0x200 [ 658.174290][ C0] kthread+0x711/0x8a0 [ 658.178377][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 658.183596][ C0] ? __pfx_kthread+0x10/0x10 [ 658.188203][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 658.193424][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 658.198645][ C0] ? __pfx_kthread+0x10/0x10 [ 658.203251][ C0] ret_from_fork+0x4bc/0x870 [ 658.207867][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 658.213006][ C0] ? __switch_to_asm+0x39/0x70 [ 658.217781][ C0] ? __switch_to_asm+0x33/0x70 [ 658.222565][ C0] ? __pfx_kthread+0x10/0x10 [ 658.227168][ C0] ret_from_fork_asm+0x1a/0x30 [ 658.231977][ C0] [ 659.236393][ C0] sched: DL replenish lagged too much