last executing test programs: 33.65649554s ago: executing program 3 (id=2028): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x4}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) 33.491301666s ago: executing program 3 (id=2031): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x59138273, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1d0}], 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x12) 32.45087547s ago: executing program 3 (id=2046): setuid(0xee00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setpriority(0x1, 0x0, 0xffffffffffffffff) 30.859075974s ago: executing program 2 (id=2061): r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x2004, @fd_index=0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 30.260104813s ago: executing program 3 (id=2067): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 30.132965273s ago: executing program 2 (id=2069): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x100000, 0x1f000, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 29.969175549s ago: executing program 3 (id=2073): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f00000001c0)={0x0, 0x31, 0x28, "c5c7b06b922ce5cff694e64e5ca68260f4fc80eca568661d31a7d7fb3c5146d5439a400d279a8f6a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 29.592165221s ago: executing program 2 (id=2076): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee6889900", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 29.508580301s ago: executing program 0 (id=2077): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) tee(r0, r3, 0x8f5, 0x100000000000000) 29.132599472s ago: executing program 0 (id=2080): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) close(0x3) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 28.90048343s ago: executing program 0 (id=2083): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r0}, 0x10) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 28.772263075s ago: executing program 1 (id=2084): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, &(0x7f00000007c0)={0x18, 0x0, {0x1, @empty, 'ipvlan1\x00'}}, 0x1e) 28.499888594s ago: executing program 2 (id=2086): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) ppoll(&(0x7f0000000180)=[{r0, 0x3680}], 0x1, &(0x7f0000000200), 0x0, 0x0) 27.539513703s ago: executing program 3 (id=2088): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) 27.156170976s ago: executing program 2 (id=2090): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 26.993123306s ago: executing program 1 (id=2091): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') openat$incfs(0xffffffffffffff9c, &(0x7f00000a0040)='.pending_reads\x00', 0x80102, 0x10) 26.676962051s ago: executing program 4 (id=2092): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x58, r0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3a, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @device_b, @initial, {0x4, 0x7f}}, @mesh_hwmp_psel={0xd, 0x1, {@val={0x82, 0x1a, {{0x0, 0x1}, 0x6, 0x20, 0x8955, @device_a, 0x2, @void, 0x8, 0x2}}, @void, @void, @void}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 26.067659894s ago: executing program 4 (id=2093): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x18, 0x841}, 0x84) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) 25.926581817s ago: executing program 1 (id=2094): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 25.771941941s ago: executing program 4 (id=2095): socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 24.527085504s ago: executing program 4 (id=2096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 24.365040614s ago: executing program 4 (id=2097): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000600)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat,Zz\r\xca~\x84\xb5\xcdgF\x00\x93E^\xbd\xb0\xe1\v\x9b\xed\xc8\xf4\xdd\xc8|\x8a\x9bJx\xa8\xda{\x1bn\xb0e\xcdk\x83gD\x81w\xc9\x115e\xd33G\x99\x87B\xe8\xb9\xee\x16\xed\x9b+\x92|\x05q'}, {0x20, '\x00\xd2D\xb2K\x94\xad\x14\xdf\\\t\x9d#\xefEY\x86\x97\x01\xa3\xa6\b\x008/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?g\x8d\xe05\xcd\x0e_\xf3\x03\x84`W\x85\x00\x10\xab\xd1W\xf0\x92\x86\x86\x05\x00\x00\x00\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0ea\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,F\xd9\xefI\x91c\xce\x97St&\x97\x9fy\x81\xe7\x90\x9c\x06\xbe[\xdbt\xb3\x84\x98\x87$\xbc\xf8?R\xdae\xa0\x10E\"U\x99\x9f\x92\r\x94&i\x13'}, {0x20, '[\'+!\x11\\'}, {0x20, '\xb9,\xec\x89]\xab\xc9\xf3\xe5\xda\xb7El O\xeb,\xc9\xae\xcc[N\xd0o\xe7\x03\x1f\x84\xc4\xb6T\x18\xac\f\x10\x18c\xb8g\xb1\x97\xa9{\xd4A]\x1d\xeb\xeb\xdaO}\xd6\xbd$\xac\xfa\xae\xb3\x8f\xe0\xf7\xac\xb7\x12\xce\f\x83\x02G\xc7\xe9\xe1\xea\xfd\xcf\xaf\\\xea\xdd\x91\xc6\r\x00\x00\xd8\xa9\xaa\xd66R\x94\x05\x8e\xc9\xe7;\xeb\x87\xeb^~\xf9dY\x8cl\x01\xcd\xc9\xfd\x0e\xfeI\xe9\x16\xc5_<\xff ]}Y\x85\f\xcb4'}, {0x20, '{@Y\xf4\xe4lC\n\x00\xc7t\xe9\xf2\xb1?77g\xa3\xb2t\x1c\x02`\x98\x12\xc3\xce\x1e\x0f\xcd\xb908|\x82\xb2Wv\xb2*\x15\xe4\xdf\xc8b9\xda\xfcIgF\x1c\x03\xa8\xcdM\x88\xb0\xcdy\xc95\xf2\"i8\xbda\xe5\xda\xf7\xee\xd7W`'}]}, 0x25f) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 24.113104484s ago: executing program 4 (id=2098): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 18.549706566s ago: executing program 2 (id=2099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 18.138455564s ago: executing program 1 (id=2100): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 17.711404328s ago: executing program 0 (id=2101): r0 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x0, 0xba10, 0x1000}], 0x2, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0xfffc}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 17.572305657s ago: executing program 1 (id=2102): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x9eff, 0x100, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x3, 0x6, @mcast2, 0xfffffffd}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffe, @empty}}}, 0x108) 17.389618904s ago: executing program 0 (id=2103): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000080)=[{0xd0, 0x0, 0x0, 0x0}, {0xc, 0x4a00, 0x0, 0x0}], 0x2}) 17.332130491s ago: executing program 1 (id=2104): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 15.540768717s ago: executing program 0 (id=2105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000003, 0x0, 0xffffffffffffffff}]}) 10.244278782s ago: executing program 32 (id=2088): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) 8.504181734s ago: executing program 33 (id=2098): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 3.016067719s ago: executing program 34 (id=2099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.996894639s ago: executing program 35 (id=2104): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 0s ago: executing program 36 (id=2105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000003, 0x0, 0xffffffffffffffff}]}) kernel console output (not intermixed with test programs): r 11 [ 173.773528][ T6032] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.867736][ T7304] fido_id[7304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 173.900898][ T7311] capability: warning: `syz.2.620' uses deprecated v2 capabilities in a way that may be insecure [ 173.934693][ T6032] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.934721][ T6032] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.936556][ T6032] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 173.936583][ T6032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 173.936604][ T6032] usb 4-1: SerialNumber: syz [ 174.236467][ T6032] usb 4-1: 0:2 : does not exist [ 174.289778][ T6032] usb 4-1: USB disconnect, device number 7 [ 174.786987][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.933398][ T6032] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 175.086130][ T6032] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 175.086164][ T6032] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 175.086190][ T6032] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 175.089715][ T6032] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 175.089741][ T6032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.089761][ T6032] usb 3-1: Product: syz [ 175.089775][ T6032] usb 3-1: Manufacturer: syz [ 175.089789][ T6032] usb 3-1: SerialNumber: syz [ 175.176802][ T6032] usb 3-1: config 0 descriptor?? [ 175.181064][ T7328] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.181233][ T7328] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 175.263925][ T6032] usb 3-1: ucan: probing device on interface #0 [ 175.615378][ T6032] usb 3-1: ucan: device reported invalid device info [ 175.615403][ T6032] usb 3-1: ucan: probe failed; try to update the device firmware [ 175.851255][ T994] usb 3-1: USB disconnect, device number 5 [ 176.363550][ T6032] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 176.513354][ T6032] usb 1-1: Using ep0 maxpacket: 16 [ 176.530007][ T6032] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 176.530039][ T6032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.530059][ T6032] usb 1-1: Product: syz [ 176.530073][ T6032] usb 1-1: Manufacturer: syz [ 176.530087][ T6032] usb 1-1: SerialNumber: syz [ 176.585473][ T6032] usb 1-1: config 0 descriptor?? [ 176.593008][ T6032] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 176.652329][ T37] audit: type=1326 audit(1757068385.834:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 176.653078][ T37] audit: type=1326 audit(1757068385.834:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 176.693455][ T37] audit: type=1326 audit(1757068385.874:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 176.693518][ T37] audit: type=1326 audit(1757068385.874:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 176.693561][ T37] audit: type=1326 audit(1757068385.874:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 176.695315][ T37] audit: type=1326 audit(1757068385.884:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 176.695367][ T37] audit: type=1326 audit(1757068385.884:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 176.695406][ T37] audit: type=1326 audit(1757068385.884:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7366 comm="syz.2.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 176.990575][ T7371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.647'. [ 177.105248][ T7376] comedi comedi0: Minor 7 could not be opened [ 177.254295][ T6032] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 177.315417][ T6032] usb 1-1: USB disconnect, device number 7 [ 177.825428][ T59] Bluetooth: latency 3388 > 499 [ 178.586069][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.668'. [ 178.993692][ T7426] tipc: Started in network mode [ 178.993725][ T7426] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 178.993789][ T7426] tipc: Enabling of bearer rejected, failed to enable media [ 179.268224][ T7434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.679'. [ 179.297234][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.680'. [ 179.773534][ T7450] hsr0: entered promiscuous mode [ 179.774263][ T7447] hsr0: left promiscuous mode [ 179.833616][ T59] Bluetooth: hci1: command tx timeout [ 180.069431][ T7456] Bluetooth: MGMT ver 1.23 [ 180.373477][ T5914] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 180.533400][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 180.537708][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.537776][ T5914] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.539368][ T5914] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 180.539392][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 180.539411][ T5914] usb 2-1: SerialNumber: syz [ 180.581646][ T5914] cdc_acm 2-1:1.0: skipping garbage [ 180.581665][ T5914] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 180.581677][ T5914] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 180.581712][ T5914] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 180.818215][ T7478] netlink: 'syz.3.700': attribute type 3 has an invalid length. [ 180.835738][ T5914] usb 2-1: USB disconnect, device number 12 [ 180.942011][ T7484] netlink: 180 bytes leftover after parsing attributes in process `syz.0.702'. [ 180.965574][ T7484] netlink: 180 bytes leftover after parsing attributes in process `syz.0.702'. [ 181.295262][ T7491] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 181.402974][ T5914] IPVS: starting estimator thread 0... [ 181.430724][ T7491] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 181.519027][ T7496] IPVS: using max 6 ests per chain, 14400 per kthread [ 182.123806][ T7509] Zero length message leads to an empty skb [ 182.293623][ T49] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 182.315751][ T991] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.448303][ T49] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 182.448335][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.463821][ T991] usb 4-1: Using ep0 maxpacket: 16 [ 182.474131][ T991] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 182.474161][ T991] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.474231][ T991] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.474253][ T991] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.503868][ T991] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.503897][ T991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.503914][ T991] usb 4-1: Product: syz [ 182.503926][ T991] usb 4-1: Manufacturer: syz [ 182.503939][ T991] usb 4-1: SerialNumber: syz [ 182.551668][ T49] usb 5-1: config 0 descriptor?? [ 182.802806][ T49] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 183.034924][ T49] [drm:udl_init] *ERROR* Selecting channel failed [ 183.157469][ T991] usb 4-1: USB disconnect, device number 8 [ 183.300814][ T49] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 183.300843][ T49] [drm] Initialized udl on minor 2 [ 183.353715][ T49] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 183.358396][ T49] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 183.375927][ T5927] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 183.429420][ T49] usb 5-1: USB disconnect, device number 7 [ 183.445895][ T5847] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 183.448997][ T5847] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 183.466292][ T6078] udevd[6078]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.559962][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 183.562939][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.562969][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.562992][ T5927] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 183.563036][ T5927] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 183.563059][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.663314][ T5927] usb 1-1: config 0 descriptor?? [ 184.123161][ T5927] elecom 0003:056E:00FE.0011: unknown main item tag 0x4 [ 184.123198][ T5927] elecom 0003:056E:00FE.0011: unknown main item tag 0x6 [ 184.147600][ T5927] elecom 0003:056E:00FE.0011: unknown main item tag 0x0 [ 184.147638][ T5927] elecom 0003:056E:00FE.0011: unknown main item tag 0x0 [ 184.147663][ T5927] elecom 0003:056E:00FE.0011: unknown main item tag 0x0 [ 184.147687][ T5927] elecom 0003:056E:00FE.0011: unknown main item tag 0x0 [ 184.147711][ T5927] elecom 0003:056E:00FE.0011: unknown main item tag 0x0 [ 184.147734][ T5927] elecom 0003:056E:00FE.0011: unknown main item tag 0x0 [ 184.147757][ T5927] elecom 0003:056E:00FE.0011: unknown main item tag 0x0 [ 184.147779][ T5927] elecom 0003:056E:00FE.0011: unknown main item tag 0x0 [ 184.161085][ T5927] elecom 0003:056E:00FE.0011: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.0-1/input0 [ 184.289751][ T7535] "syz.1.728" (7535) uses obsolete ecb(arc4) skcipher [ 184.361450][ T49] usb 1-1: USB disconnect, device number 8 [ 184.455579][ T7548] fido_id[7548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 185.816799][ T7589] netlink: 20 bytes leftover after parsing attributes in process `syz.1.749'. [ 186.351367][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.3.756'. [ 186.433384][ T5847] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 186.590583][ T5847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 186.590641][ T5847] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 186.590664][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.640783][ T5847] usb 1-1: config 0 descriptor?? [ 186.642054][ T7599] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 187.111686][ T5847] elan 0003:04F3:0755.0012: item fetching failed at offset 3/5 [ 187.112683][ T5847] elan 0003:04F3:0755.0012: Hid Parse failed [ 187.112798][ T5847] elan 0003:04F3:0755.0012: probe with driver elan failed with error -22 [ 187.312015][ T5927] usb 1-1: USB disconnect, device number 9 [ 187.388187][ T37] audit: type=1326 audit(1757068396.534:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27043aebe9 code=0x7ffc0000 [ 187.388244][ T37] audit: type=1326 audit(1757068396.574:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27043ad550 code=0x7ffc0000 [ 187.388291][ T37] audit: type=1326 audit(1757068396.574:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27043aebe9 code=0x7ffc0000 [ 187.391211][ T37] audit: type=1326 audit(1757068396.574:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27043aebe9 code=0x7ffc0000 [ 187.391263][ T37] audit: type=1326 audit(1757068396.574:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f27043aebe9 code=0x7ffc0000 [ 187.391310][ T37] audit: type=1326 audit(1757068396.574:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27043aebe9 code=0x7ffc0000 [ 187.391352][ T37] audit: type=1326 audit(1757068396.574:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7624 comm="syz.4.766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27043aebe9 code=0x7ffc0000 [ 187.645575][ T7629] netlink: 96 bytes leftover after parsing attributes in process `syz.1.768'. [ 189.276047][ T59] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 189.276356][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.487698][ T7678] program syz.0.791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.292976][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 190.293035][ T7696] nbd: socks must be embedded in a SOCK_ITEM attr [ 190.445138][ T7701] netlink: 'syz.2.801': attribute type 2 has an invalid length. [ 190.705803][ T7707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.708662][ T7710] netlink: 'syz.1.803': attribute type 2 has an invalid length. [ 191.153372][ T6032] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 191.307913][ T6032] usb 4-1: Using ep0 maxpacket: 8 [ 191.318560][ T49] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 191.320740][ T6032] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 191.320764][ T6032] usb 4-1: config 2 has no interface number 0 [ 191.320818][ T6032] usb 4-1: config 2 interface 31 has no altsetting 0 [ 191.357108][ T6032] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 191.357140][ T6032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.357159][ T6032] usb 4-1: Product: syz [ 191.357173][ T6032] usb 4-1: Manufacturer: syz [ 191.357187][ T6032] usb 4-1: SerialNumber: syz [ 191.473395][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 191.479400][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11 [ 191.479512][ T49] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 191.479538][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.557006][ T49] usb 5-1: config 0 descriptor?? [ 191.948751][ T7739] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 191.948777][ T7739] NCSI netlink: No device for ifindex 0 [ 192.046242][ T6032] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 192.073916][ T49] hid-alps 0003:044E:120B.0013: hidraw0: USB HID v0.06 Device [HID 044e:120b] on usb-dummy_hcd.4-1/input0 [ 192.079448][ T6032] usb 4-1: USB disconnect, device number 9 [ 192.222774][ T49] usb 5-1: USB disconnect, device number 8 [ 192.599792][ T7743] fido_id[7743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 192.816310][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 194.265691][ T59] Bluetooth: hci1: Malformed Event: 0x13 [ 194.401467][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.401574][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.956684][ T49] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 195.108006][ T49] usb 2-1: config 0 interface 0 has no altsetting 0 [ 195.108178][ T49] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 195.108204][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.168753][ T49] usb 2-1: config 0 descriptor?? [ 195.293448][ T5847] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.478480][ T5847] usb 5-1: Using ep0 maxpacket: 16 [ 195.492034][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.492070][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 195.492118][ T5847] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 195.492141][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.520172][ T5847] usb 5-1: config 0 descriptor?? [ 195.804322][ T49] video4linux radio48: keene_cmd_set failed (-71) [ 195.804351][ T49] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 195.849101][ T49] usb 2-1: USB disconnect, device number 13 [ 195.972908][ T5847] hid_parser_main: 50 callbacks suppressed [ 195.972933][ T5847] logitech 0003:046D:C623.0014: unknown main item tag 0x6 [ 195.972967][ T5847] logitech 0003:046D:C623.0014: collection stack underflow [ 195.972990][ T5847] logitech 0003:046D:C623.0014: item 0 4 0 12 parsing failed [ 196.016823][ T5847] logitech 0003:046D:C623.0014: parse failed [ 196.016957][ T5847] logitech 0003:046D:C623.0014: probe with driver logitech failed with error -22 [ 196.201923][ T10] usb 5-1: USB disconnect, device number 9 [ 196.591728][ T5936] IPVS: starting estimator thread 0... [ 196.698661][ T7852] IPVS: using max 6 ests per chain, 14400 per kthread [ 197.098384][ T5927] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 197.263364][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.263391][ T5927] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 197.263444][ T5927] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 197.263467][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.325272][ T5927] usb 3-1: config 0 descriptor?? [ 197.354819][ T5927] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 197.354875][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 197.360802][ T5927] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 197.361855][ T5927] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 197.361913][ T5927] usb 3-1: media controller created [ 197.403821][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.435838][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 197.435936][ T5927] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 197.457874][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 197.475137][ T5927] dvb-usb: schedule remote query interval to 150 msecs. [ 197.475160][ T5927] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 197.559795][ T7856] dvb-usb: bulk message failed: -22 (2/0) [ 197.561601][ T5927] usb 3-1: USB disconnect, device number 6 [ 197.699921][ T5927] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 198.023437][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 198.101716][ T37] audit: type=1326 audit(1757068407.284:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7867 comm="syz.3.874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bceebe9 code=0x7fc00000 [ 198.193452][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 198.197409][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 198.197453][ T10] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 198.197476][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.237655][ T10] usb 1-1: config 0 descriptor?? [ 198.748447][ T10] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 198.748486][ T10] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 198.748511][ T10] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 198.748536][ T10] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 198.748561][ T10] aureal 0003:0755:2626.0015: unknown main item tag 0x0 [ 198.807706][ T10] aureal 0003:0755:2626.0015: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.0-1/input0 [ 198.964260][ T5914] usb 1-1: USB disconnect, device number 10 [ 199.168971][ T7911] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 199.255950][ T7902] fido_id[7902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 199.289986][ T7913] netlink: 56 bytes leftover after parsing attributes in process `syz.1.895'. [ 199.290157][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 200.006282][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 201.454556][ T7964] tipc: Started in network mode [ 201.454588][ T7964] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 201.457706][ T7964] tipc: Enabled bearer , priority 10 [ 202.063444][ T5847] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 202.248189][ T5847] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.248218][ T5847] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 202.248239][ T5847] usb 4-1: config 1 has no interface number 0 [ 202.248290][ T5847] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.259050][ T5847] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.259078][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.259095][ T5847] usb 4-1: Product: syz [ 202.259108][ T5847] usb 4-1: Manufacturer: syz [ 202.259120][ T5847] usb 4-1: SerialNumber: syz [ 202.344403][ T5847] usb 4-1: selecting invalid altsetting 1 [ 202.583427][ T5936] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 202.587121][ T5914] tipc: Node number set to 8432298 [ 202.748961][ T5936] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.748998][ T5936] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.749021][ T5936] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 202.749047][ T5936] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.749082][ T5936] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 202.749104][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.757618][ T5847] usb 4-1: selecting invalid altsetting 1 [ 202.757678][ T5847] cdc_ncm 4-1:1.1: bind() failure [ 202.771805][ T5936] usb 2-1: config 0 descriptor?? [ 202.965209][ T5847] usb 4-1: USB disconnect, device number 10 [ 203.282225][ T5936] uclogic 0003:28BD:0042.0016: interface is invalid, ignoring [ 203.480537][ T5936] usb 2-1: USB disconnect, device number 14 [ 204.258814][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.951'. [ 205.208662][ T8049] tipc: Enabled bearer , priority 2 [ 206.323417][ T10] tipc: Node number set to 24321 [ 206.364943][ T37] audit: type=1326 audit(1757068415.554:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bceebe9 code=0x7ffc0000 [ 206.365000][ T37] audit: type=1326 audit(1757068415.554:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bceebe9 code=0x7ffc0000 [ 206.414816][ T37] audit: type=1326 audit(1757068415.594:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f280bceebe9 code=0x7ffc0000 [ 206.415548][ T37] audit: type=1326 audit(1757068415.604:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bceebe9 code=0x7ffc0000 [ 206.416948][ T37] audit: type=1326 audit(1757068415.604:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bceebe9 code=0x7ffc0000 [ 206.416994][ T37] audit: type=1326 audit(1757068415.604:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f280bceebe9 code=0x7ffc0000 [ 206.417034][ T37] audit: type=1326 audit(1757068415.604:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.3.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bceebe9 code=0x7ffc0000 [ 206.631852][ T8089] program syz.2.978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.693984][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.980'. [ 207.653557][ T8120] syz.4.993 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 209.643360][ T5847] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 209.797906][ T5847] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.797939][ T5847] usb 4-1: config 0 interface 0 has no altsetting 0 [ 209.797974][ T5847] usb 4-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 209.797998][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.822802][ T5847] usb 4-1: config 0 descriptor?? [ 210.310641][ T5847] aquacomputer_d5next 0003:0C70:F003.0017: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.3-1/input0 [ 210.525709][ T10] usb 4-1: USB disconnect, device number 11 [ 210.793046][ T8175] fido_id[8175]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 210.897570][ T8185] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (22) [ 211.213666][ T49] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 211.363532][ T49] usb 1-1: Using ep0 maxpacket: 32 [ 211.366173][ T49] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 211.366201][ T49] usb 1-1: config 0 has no interface number 0 [ 211.413914][ T49] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 211.413946][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.413965][ T49] usb 1-1: Product: syz [ 211.413979][ T49] usb 1-1: Manufacturer: syz [ 211.413993][ T49] usb 1-1: SerialNumber: syz [ 211.479366][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1032'. [ 211.479403][ T8202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1032'. [ 211.503417][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 211.525456][ T49] usb 1-1: config 0 descriptor?? [ 211.542573][ T49] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 211.543167][ T49] dvb-usb: bulk message failed: -22 (2/0) [ 211.563372][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 211.564482][ T49] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 211.564545][ T49] usb 1-1: media controller created [ 211.621101][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.653453][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 211.656121][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 211.656171][ T10] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 211.656263][ T10] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 211.656291][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 211.656326][ T10] usb 4-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 211.656350][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.741227][ T49] cxusb: set interface failed [ 211.741249][ T49] dvb-usb: bulk message failed: -22 (1/0) [ 211.791590][ T8190] cxusb: i2c wr: len=85 is too big! [ 211.791590][ T8190] [ 211.876129][ T10] usb 4-1: config 0 descriptor?? [ 211.903423][ T5914] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 211.961405][ T49] DVB: Unable to find symbol lgdt330x_attach() [ 211.961423][ T49] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 212.079842][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 212.079948][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 212.079996][ T5914] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 212.080020][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.125113][ T49] rc_core: IR keymap rc-dvico-portable not found [ 212.125137][ T49] Registered IR keymap rc-empty [ 212.148082][ T49] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 212.151848][ T49] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input13 [ 212.187116][ T49] dvb-usb: schedule remote query interval to 100 msecs. [ 212.187140][ T49] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 212.213150][ T49] usb 1-1: USB disconnect, device number 11 [ 212.281281][ T5914] usb 3-1: config 0 descriptor?? [ 212.287493][ T8205] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 212.475499][ T10] topre 0003:0853:0148.0018: hidraw0: USB HID vc9.b6 Device [HID 0853:0148] on usb-dummy_hcd.3-1/input0 [ 212.582673][ T49] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 212.653376][ T5847] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 212.757785][ T5914] cypress 0003:04B4:DE61.0019: unknown main item tag 0x0 [ 212.757822][ T5914] cypress 0003:04B4:DE61.0019: unknown main item tag 0x0 [ 212.757847][ T5914] cypress 0003:04B4:DE61.0019: unknown main item tag 0x0 [ 212.757871][ T5914] cypress 0003:04B4:DE61.0019: unknown main item tag 0x0 [ 212.757895][ T5914] cypress 0003:04B4:DE61.0019: unknown main item tag 0x0 [ 212.757919][ T5914] cypress 0003:04B4:DE61.0019: unknown main item tag 0x0 [ 212.757943][ T5914] cypress 0003:04B4:DE61.0019: unknown main item tag 0x0 [ 212.797068][ T5914] cypress 0003:04B4:DE61.0019: hidraw1: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.2-1/input0 [ 212.846076][ T5847] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 212.846144][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.847775][ T5847] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 212.847804][ T5847] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 212.847824][ T5847] usb 5-1: Manufacturer: syz [ 212.936396][ T5847] usb 5-1: config 0 descriptor?? [ 212.969746][ T994] usb 3-1: USB disconnect, device number 7 [ 213.093383][ T5847] rc_core: IR keymap rc-hauppauge not found [ 213.093405][ T5847] Registered IR keymap rc-empty [ 213.121631][ T5847] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 213.153675][ T5847] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input14 [ 213.233522][ T10] usb 4-1: USB disconnect, device number 12 [ 213.280189][ T8220] fido_id[8220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 213.397314][ C1] igorplugusb 5-1:0.0: receive overflow, at least 9 lost [ 213.576451][ T8225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.602091][ T10] usb 5-1: USB disconnect, device number 10 [ 215.093564][ T8267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1055'. [ 215.514878][ T8281] can0: slcan on ttynull. [ 215.633448][ T37] audit: type=1800 audit(1757068424.804:49): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1066" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 215.955532][ T8279] can0 (unregistered): slcan off ttynull. [ 216.083430][ T49] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 216.233597][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 216.236352][ T49] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 216.236380][ T49] usb 5-1: config 1 has no interface number 0 [ 216.236434][ T49] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 216.236461][ T49] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 216.236484][ T49] usb 5-1: config 1 interface 105 has no altsetting 0 [ 216.239877][ T49] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 216.239906][ T49] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.239926][ T49] usb 5-1: Product: syz [ 216.239940][ T49] usb 5-1: Manufacturer: syz [ 216.239955][ T49] usb 5-1: SerialNumber: syz [ 216.353934][ T8294] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.354086][ T8294] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.534613][ T8312] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 216.534613][ T8312] program syz.1.1074 not setting count and/or reply_len properly [ 216.781962][ T8294] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.782118][ T8294] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 216.993969][ T49] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 216.994318][ T49] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 217.051714][ T49] usb 5-1: USB disconnect, device number 11 [ 217.394717][ T8329] netlink: 'syz.0.1081': attribute type 3 has an invalid length. [ 218.116924][ T49] kernel write not supported for file /dsp1 (pid: 49 comm: kworker/1:1) [ 218.573344][ T991] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 218.753443][ T991] usb 3-1: Using ep0 maxpacket: 32 [ 218.758501][ T991] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 218.772659][ T991] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 218.772689][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.772706][ T991] usb 3-1: Product: syz [ 218.772719][ T991] usb 3-1: Manufacturer: syz [ 218.772731][ T991] usb 3-1: SerialNumber: syz [ 218.795135][ T991] usb 3-1: config 0 descriptor?? [ 218.796192][ T8357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 218.819474][ T991] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.045521][ T8367] sp0: Synchronizing with TNC [ 219.134147][ T5847] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 219.143495][ T49] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 219.173802][ T991] usb 3-1: USB disconnect, device number 8 [ 219.296694][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 219.299703][ T5847] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 219.299740][ T5847] usb 2-1: config 0 has no interface number 0 [ 219.299774][ T5847] usb 2-1: config 0 interface 12 has no altsetting 0 [ 219.324061][ T49] usb 4-1: config 162 has an invalid interface number: 79 but max is 1 [ 219.324157][ T49] usb 4-1: config 162 has an invalid interface number: 183 but max is 1 [ 219.324179][ T49] usb 4-1: config 162 has no interface number 0 [ 219.324194][ T49] usb 4-1: config 162 has no interface number 1 [ 219.324336][ T49] usb 4-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 219.324400][ T49] usb 4-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 219.324490][ T49] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 219.324519][ T49] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 219.324544][ T49] usb 4-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 219.324568][ T49] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 219.324730][ T49] usb 4-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 219.325338][ T49] usb 4-1: config 162 interface 79 has no altsetting 0 [ 219.325359][ T49] usb 4-1: config 162 interface 183 has no altsetting 0 [ 219.386139][ T5847] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 219.386170][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.386190][ T5847] usb 2-1: Product: syz [ 219.386204][ T5847] usb 2-1: Manufacturer: syz [ 219.386218][ T5847] usb 2-1: SerialNumber: syz [ 219.525722][ T49] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 219.525754][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.525774][ T49] usb 4-1: Product: syz [ 219.525788][ T49] usb 4-1: Manufacturer: syz [ 219.525802][ T49] usb 4-1: SerialNumber: syz [ 219.671120][ T7845] udevd[7845]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.840740][ T5847] usb 2-1: config 0 descriptor?? [ 219.958618][ T5847] f81534 2-1:0.12: required endpoints missing [ 220.110324][ T49] pl2303 4-1:162.79: required endpoints missing [ 220.272810][ T49] pl2303 4-1:162.183: pl2303 converter detected [ 220.291196][ T49] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 220.292315][ T49] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 220.313392][ T49] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 220.313879][ T49] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 220.314720][ T49] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 220.316409][ T49] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 220.319839][ T49] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 220.320306][ T49] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 220.320786][ T49] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 220.321402][ T49] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 220.362314][ T49] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 220.415368][ T49] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 220.454071][ T49] usb 4-1: USB disconnect, device number 13 [ 220.477407][ T49] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 220.478627][ T49] pl2303 4-1:162.183: device disconnected [ 220.913937][ T5936] usb 2-1: USB disconnect, device number 15 [ 221.172205][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'. [ 221.293769][ T991] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 221.461957][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.461994][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.462036][ T991] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 221.462058][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.486721][ T991] usb 1-1: config 0 descriptor?? [ 221.976608][ T991] stadia 0003:18D1:9400.001A: unexpected long global item [ 221.978959][ T991] stadia 0003:18D1:9400.001A: parse failed [ 221.979035][ T991] stadia 0003:18D1:9400.001A: probe with driver stadia failed with error -22 [ 222.082147][ T5156] Bluetooth: hci1: command 0x0406 tx timeout [ 222.082189][ T5156] Bluetooth: hci3: command 0x0406 tx timeout [ 222.082211][ T5156] Bluetooth: hci0: command 0x0c1a tx timeout [ 222.082269][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 222.172236][ T5936] usb 1-1: USB disconnect, device number 12 [ 222.332888][ T5207] udevd[5207]: worker [8392] terminated by signal 33 (Unknown signal 33) [ 222.332939][ T5207] udevd[5207]: worker [8392] failed while handling '/devices/virtual/block/loop1' [ 222.341489][ T5207] udevd[5207]: worker [6148] terminated by signal 33 (Unknown signal 33) [ 222.341539][ T5207] udevd[5207]: worker [6148] failed while handling '/devices/platform/dummy_hcd.0/usb1/1-1' [ 224.064974][ T8482] IPVS: Error connecting to the multicast addr [ 224.503597][ T5914] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 224.654461][ T5914] usb 3-1: Using ep0 maxpacket: 16 [ 224.663166][ T5914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.663193][ T5914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.688707][ T5914] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.688738][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.688759][ T5914] usb 3-1: Product: syz [ 224.688773][ T5914] usb 3-1: Manufacturer: syz [ 224.688787][ T5914] usb 3-1: SerialNumber: syz [ 224.953931][ T5914] usb 3-1: 0:2 : does not exist [ 224.975369][ T5914] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 225.124507][ T5914] usb 3-1: USB disconnect, device number 9 [ 225.331946][ T6078] udevd[6078]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.942537][ T37] audit: type=1400 audit(1757068435.124:50): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8526 comm="syz.1.1160" src=1 dest=20000 netif=wpan0 [ 227.684634][ T8577] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 227.843459][ T5847] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 227.991040][ T8586] netlink: 'syz.2.1189': attribute type 2 has an invalid length. [ 228.001673][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 228.010917][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.010953][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.036233][ T5847] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 228.036265][ T5847] usb 2-1: New USB device strings: Mfr=9, Product=0, SerialNumber=0 [ 228.036285][ T5847] usb 2-1: Manufacturer: syz [ 228.068394][ T5847] usb 2-1: config 0 descriptor?? [ 228.080336][ T5847] hub 2-1:0.0: USB hub found [ 228.291621][ T5847] hub 2-1:0.0: 1 port detected [ 228.507506][ T5847] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 228.507533][ T5847] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 228.537429][ T5847] usbhid 2-1:0.0: can't add hid device: -71 [ 228.537564][ T5847] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 228.584757][ T5847] usb 2-1: USB disconnect, device number 16 [ 228.985331][ T37] audit: type=1326 audit(1757068438.174:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.2.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 228.985393][ T37] audit: type=1326 audit(1757068438.174:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.2.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 228.990119][ T37] audit: type=1326 audit(1757068438.174:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.2.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 228.990173][ T37] audit: type=1326 audit(1757068438.174:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.2.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 228.990218][ T37] audit: type=1326 audit(1757068438.174:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8602 comm="syz.2.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 229.513575][ T5914] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 229.613394][ T994] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 229.683373][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 229.687202][ T5914] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 229.687232][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.697080][ T5914] usb 1-1: config 0 descriptor?? [ 229.719057][ T5914] gspca_main: sq930x-2.14.0 probing 041e:403c [ 229.763300][ T994] usb 2-1: Using ep0 maxpacket: 16 [ 229.766048][ T994] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.766097][ T994] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 229.766118][ T994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.842046][ T994] usb 2-1: config 0 descriptor?? [ 229.985527][ T8629] tmpfs: Cannot retroactively limit inodes [ 230.309178][ T994] dragonrise 0003:0079:0006.001B: item fetching failed at offset 4/5 [ 230.310145][ T994] dragonrise 0003:0079:0006.001B: parse failed [ 230.310222][ T994] dragonrise 0003:0079:0006.001B: probe with driver dragonrise failed with error -22 [ 230.369138][ T8631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 230.424706][ T5914] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 230.424835][ T5914] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 230.457308][ T5914] usb 1-1: USB disconnect, device number 13 [ 230.523811][ T10] usb 2-1: USB disconnect, device number 17 [ 230.740371][ T8636] netlink: 'syz.4.1212': attribute type 1 has an invalid length. [ 230.740395][ T8636] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1212'. [ 231.970535][ T8673] sp0: Synchronizing with TNC [ 232.514112][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 232.676497][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 232.676527][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 232.676547][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 232.676601][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 232.676628][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 232.680873][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 232.680904][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 232.680924][ T10] usb 4-1: Product: syz [ 232.680938][ T10] usb 4-1: Manufacturer: syz [ 232.706402][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 232.706430][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 232.765151][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 232.765172][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 232.965956][ T994] usb 4-1: USB disconnect, device number 14 [ 233.833428][ T5847] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 233.986224][ T5847] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 233.986292][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.987912][ T5847] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 233.987938][ T5847] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 233.987958][ T5847] usb 5-1: Manufacturer: syz [ 234.050909][ T5847] usb 5-1: config 0 descriptor?? [ 234.173324][ T5847] rc_core: IR keymap rc-hauppauge not found [ 234.173348][ T5847] Registered IR keymap rc-empty [ 234.203370][ T5847] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 234.209312][ T37] audit: type=1326 audit(1757068443.394:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8734 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 234.209373][ T37] audit: type=1326 audit(1757068443.394:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8734 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 234.215492][ T37] audit: type=1326 audit(1757068443.404:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8734 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 234.215546][ T37] audit: type=1326 audit(1757068443.404:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8734 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 234.215587][ T37] audit: type=1326 audit(1757068443.404:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8734 comm="syz.0.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 234.254644][ T5847] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 234.525900][ T8742] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 234.525966][ T8742] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 234.526071][ T8742] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 234.526178][ T8742] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 234.526233][ T8742] comedi comedi3: 8255: I/O port conflict (0x5c952397,4) [ 234.526288][ T8742] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 234.526341][ T8742] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 234.526395][ T8742] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 234.776820][ T5914] usb 5-1: USB disconnect, device number 12 [ 235.763588][ T8770] netlink: 'syz.1.1274': attribute type 5 has an invalid length. [ 236.518812][ T8794] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 236.589660][ T5847] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 236.746116][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.746152][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.746193][ T5847] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 236.746216][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.807243][ T5847] usb 3-1: config 0 descriptor?? [ 237.143459][ T5914] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 237.256712][ T5847] bigben 0003:146B:0902.001C: unexpected rdesc, please submit for review [ 237.305970][ T5914] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 237.306000][ T5914] usb 4-1: config 0 has no interface number 0 [ 237.306035][ T5914] usb 4-1: config 0 interface 98 has no altsetting 0 [ 237.306970][ T5847] bigben 0003:146B:0902.001C: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0 [ 237.306998][ T5847] bigben 0003:146B:0902.001C: not enough fields in HID_OUTPUT_REPORT 0 [ 237.307014][ T5847] bigben 0003:146B:0902.001C: no output report found [ 237.315773][ T5914] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 237.315808][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.315826][ T5914] usb 4-1: Product: syz [ 237.315838][ T5914] usb 4-1: Manufacturer: syz [ 237.315850][ T5914] usb 4-1: SerialNumber: syz [ 237.365169][ T5914] usb 4-1: config 0 descriptor?? [ 237.568661][ T5847] usb 3-1: USB disconnect, device number 10 [ 237.643691][ T8815] fido_id[8815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 237.719834][ T5914] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 238.223787][ T5914] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 238.489939][ T8834] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 238.671350][ T5914] usb 4-1: failed to restore interface 98 altsetting 4 (error=-71) [ 238.696043][ T5914] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 238.696291][ T5914] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 238.723563][ T5927] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 238.723591][ T5927] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 238.750971][ T5914] usb 4-1: USB disconnect, device number 15 [ 238.822361][ T8840] netlink: 'syz.4.1308': attribute type 10 has an invalid length. [ 238.823426][ T5847] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 238.985094][ T5847] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 238.985128][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.002000][ T5847] usb 3-1: config 0 descriptor?? [ 239.201518][ T8840] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 239.258912][ T8839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.647546][ T5847] ath6kl: Failed to read usb control message: -71 [ 239.647601][ T5847] ath6kl: Unable to read the bmi data from the device: -71 [ 239.647616][ T5847] ath6kl: unable to read target info byte count: -71 [ 239.648577][ T5847] ath6kl: Failed to init ath6kl core: -71 [ 239.689736][ T5847] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 239.728948][ T5847] usb 3-1: USB disconnect, device number 11 [ 240.303360][ T6032] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 240.456777][ T6032] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 240.456816][ T6032] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 240.456861][ T6032] usb 5-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 240.456885][ T6032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.495982][ T6032] usb 5-1: config 0 descriptor?? [ 240.498397][ T8858] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 240.673911][ T991] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 240.777662][ T8877] netlink: 'syz.1.1325': attribute type 15 has an invalid length. [ 240.837074][ T991] usb 3-1: Using ep0 maxpacket: 16 [ 240.849966][ T991] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 240.849999][ T991] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 240.850019][ T991] usb 3-1: Product: syz [ 240.850033][ T991] usb 3-1: SerialNumber: syz [ 240.897366][ T991] usb 3-1: config 0 descriptor?? [ 240.914367][ T991] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 240.915927][ T991] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 240.916666][ T991] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 240.916768][ T991] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 241.026005][ T6032] waltop 0003:172F:0500.001D: unknown main item tag 0x0 [ 241.026046][ T6032] waltop 0003:172F:0500.001D: unknown main item tag 0x0 [ 241.026070][ T6032] waltop 0003:172F:0500.001D: unknown main item tag 0x0 [ 241.026096][ T6032] waltop 0003:172F:0500.001D: unknown main item tag 0x0 [ 241.026120][ T6032] waltop 0003:172F:0500.001D: unknown main item tag 0x0 [ 241.026144][ T6032] waltop 0003:172F:0500.001D: unknown main item tag 0x0 [ 241.026169][ T6032] waltop 0003:172F:0500.001D: unknown main item tag 0x0 [ 241.057024][ T6032] waltop 0003:172F:0500.001D: hidraw0: USB HID vff.fa Device [HID 172f:0500] on usb-dummy_hcd.4-1/input0 [ 241.147617][ T10] usb 3-1: USB disconnect, device number 12 [ 241.192457][ T991] usb 5-1: USB disconnect, device number 13 [ 241.305699][ T8882] fido_id[8882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 241.753577][ T991] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 241.913933][ T991] usb 1-1: Using ep0 maxpacket: 32 [ 241.917098][ T991] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 241.917133][ T991] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 241.917159][ T991] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.959995][ T991] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 241.960026][ T991] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 241.960046][ T991] usb 1-1: Product: syz [ 241.960060][ T991] usb 1-1: Manufacturer: syz [ 241.960073][ T991] usb 1-1: SerialNumber: syz [ 242.031362][ T991] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input16 [ 242.532818][ T5847] usb 1-1: USB disconnect, device number 14 [ 242.532919][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 242.726892][ T5847] appletouch 1-1:1.0: input: appletouch disconnected [ 242.778485][ T8918] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1340'. [ 243.675163][ T8938] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1351'. [ 244.193534][ T991] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 244.223369][ T994] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 244.345925][ T991] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 244.345956][ T991] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 244.345975][ T991] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 244.345995][ T991] usb 5-1: config 220 has no interface number 2 [ 244.346084][ T991] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 244.346112][ T991] usb 5-1: config 220 interface 0 has no altsetting 0 [ 244.346130][ T991] usb 5-1: config 220 interface 76 has no altsetting 0 [ 244.346149][ T991] usb 5-1: config 220 interface 1 has no altsetting 0 [ 244.349417][ T991] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 244.349444][ T991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.349465][ T991] usb 5-1: Product: syz [ 244.349478][ T991] usb 5-1: Manufacturer: syz [ 244.349492][ T991] usb 5-1: SerialNumber: syz [ 244.398701][ T994] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 244.398789][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.398808][ T994] usb 3-1: Product: syz [ 244.398821][ T994] usb 3-1: Manufacturer: syz [ 244.398833][ T994] usb 3-1: SerialNumber: syz [ 244.422133][ T994] usb 3-1: config 0 descriptor?? [ 244.734602][ T991] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 244.734639][ T991] usb 5-1: No valid video chain found. [ 244.734704][ T991] usb 5-1: selecting invalid altsetting 0 [ 244.797579][ T991] usb 5-1: selecting invalid altsetting 0 [ 244.797624][ T991] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 244.871171][ T991] usb 5-1: USB disconnect, device number 14 [ 244.948065][ T8959] xt_socket: unknown flags 0x6 [ 245.019852][ T994] usb_8dev 3-1:0.0 can0: sending command message failed [ 245.019882][ T994] usb_8dev 3-1:0.0 can0: can't get firmware version [ 245.288063][ T994] usb_8dev 3-1:0.0: probe with driver usb_8dev failed with error -22 [ 245.341029][ T994] usb 3-1: USB disconnect, device number 13 [ 246.203372][ T5847] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 246.364341][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 246.367499][ T5847] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 246.367529][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.444185][ T5847] pvrusb2: Hardware description: Terratec Grabster AV400 [ 246.444208][ T5847] pvrusb2: ********** [ 246.444215][ T5847] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 246.444228][ T5847] pvrusb2: Important functionality might not be entirely working. [ 246.444238][ T5847] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 246.444249][ T5847] pvrusb2: ********** [ 246.701752][ T2365] pvrusb2: Invalid write control endpoint [ 246.889090][ T2365] pvrusb2: Invalid write control endpoint [ 246.889109][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 246.889119][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 246.889128][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 246.889138][ T2365] pvrusb2: Device being rendered inoperable [ 246.954653][ T5847] usb 5-1: USB disconnect, device number 15 [ 246.958592][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 246.958662][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 246.985740][ T2365] pvrusb2: Attached sub-driver cx25840 [ 246.985758][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 246.985768][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 247.154442][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 249.032040][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 249.099990][ T5928] kernel write not supported for file /sg0 (pid: 5928 comm: kworker/0:6) [ 252.428341][ T9084] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1416'. [ 252.452782][ T9084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1416'. [ 252.805244][ T37] audit: type=1326 audit(1757068461.994:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bceebe9 code=0x7ffc0000 [ 252.809920][ T37] audit: type=1326 audit(1757068461.994:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280bceebe9 code=0x7ffc0000 [ 252.818574][ T37] audit: type=1326 audit(1757068462.004:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.3.1419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f280bceebe9 code=0x7ffc0000 [ 252.818635][ T37] audit: type=1326 audit(1757068462.004:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9090 comm="syz.3.1419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f280bceebe9 code=0x0 [ 254.143401][ T6032] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 254.297911][ T6032] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 254.297947][ T6032] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 254.300757][ T6032] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 254.300785][ T6032] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.300803][ T6032] usb 4-1: Product: syz [ 254.300819][ T6032] usb 4-1: Manufacturer: syz [ 254.300832][ T6032] usb 4-1: SerialNumber: syz [ 254.329906][ T6032] usb 4-1: config 0 descriptor?? [ 254.332142][ T9107] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 254.332398][ T9107] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 254.593080][ T9107] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 254.601134][ T9107] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 255.042844][ T6032] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 255.247830][ T6032] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 255.324485][ T6032] usb 4-1: USB disconnect, device number 16 [ 255.841658][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.841777][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.903096][ T994] kernel write not supported for file /input/mouse0 (pid: 994 comm: kworker/1:2) [ 256.007058][ T9045] syz.0.1400 (9045): drop_caches: 1 [ 256.308484][ T9145] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.332390][ T9145] bond0: (slave bond1): Enslaving as an active interface with an up link [ 256.613505][ T991] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 256.786206][ T991] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 256.786251][ T991] usb 4-1: can't read configurations, error -71 [ 257.015639][ T9163] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 257.015669][ T9163] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 257.018565][ T9163] vhci_hcd vhci_hcd.0: Device attached [ 257.284094][ T5928] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 257.289294][ T10] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 257.453456][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 257.462816][ T5928] usb 2-1: config 0 has no interfaces? [ 257.462858][ T5928] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 257.462881][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.505781][ T5928] usb 2-1: config 0 descriptor?? [ 257.714331][ T5928] usb 2-1: USB disconnect, device number 18 [ 257.738035][ T9164] vhci_hcd: connection closed [ 257.743331][ T4428] vhci_hcd: stop threads [ 257.743353][ T4428] vhci_hcd: release socket [ 257.772993][ T4428] vhci_hcd: disconnect device [ 257.779034][ T10] vhci_hcd: vhci_device speed not set [ 257.844506][ T37] audit: type=1400 audit(1757068467.024:65): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=9175 comm="syz.2.1453" name="301" dev="tmpfs" ino=1536 [ 259.185959][ T9217] netlink: 'syz.3.1471': attribute type 49 has an invalid length. [ 259.212039][ T9215] netlink: 'syz.2.1472': attribute type 9 has an invalid length. [ 259.212064][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1472'. [ 259.252592][ T9215] hsr0: entered promiscuous mode [ 259.253106][ T9215] macvlan2: entered promiscuous mode [ 259.264666][ T9215] macvlan2: entered allmulticast mode [ 259.264688][ T9215] hsr0: entered allmulticast mode [ 259.264701][ T9215] hsr_slave_0: entered allmulticast mode [ 259.264725][ T9215] hsr_slave_1: entered allmulticast mode [ 259.922238][ T9238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1483'. [ 260.857456][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1495'. [ 262.323003][ T9296] sp0: Synchronizing with TNC [ 264.282911][ T9318] erspan0: entered promiscuous mode [ 264.695462][ T9340] program syz.0.1529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.357751][ T57] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 267.223316][ T5936] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 267.377637][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 267.377677][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.377718][ T5936] usb 4-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 267.377742][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.396718][ T5936] usb 4-1: config 0 descriptor?? [ 267.907427][ T5936] aquacomputer_d5next 0003:0C70:F011.001E: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.3-1/input0 [ 268.224814][ T5936] usb 4-1: USB disconnect, device number 19 [ 268.780924][ T9420] fido_id[9420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 269.319547][ T9449] netlink: 'syz.2.1580': attribute type 29 has an invalid length. [ 269.333007][ T9449] netlink: 'syz.2.1580': attribute type 29 has an invalid length. [ 269.356272][ T9449] netlink: 'syz.2.1580': attribute type 29 has an invalid length. [ 271.050868][ T9477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.103371][ T994] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 272.205221][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'. [ 272.253358][ T994] usb 4-1: Using ep0 maxpacket: 16 [ 272.258506][ T994] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 272.258540][ T994] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 272.258560][ T994] usb 4-1: Product: syz [ 272.258574][ T994] usb 4-1: SerialNumber: syz [ 272.299709][ T994] usb 4-1: config 0 descriptor?? [ 272.319612][ T994] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 272.320889][ T994] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 272.321459][ T994] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 272.321559][ T994] dvb_usb_af9035 4-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 272.541578][ T994] usb 4-1: USB disconnect, device number 20 [ 272.802655][ T5847] hid-generic 0005:0B57:05DF.001F: collection stack underflow [ 272.802695][ T5847] hid-generic 0005:0B57:05DF.001F: item 0 0 0 12 parsing failed [ 272.823790][ T5847] hid-generic 0005:0B57:05DF.001F: probe with driver hid-generic failed with error -22 [ 273.673621][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 273.673643][ T9521] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1613'. [ 273.673664][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 274.054732][ T9531] loop9: detected capacity change from 0 to 8 [ 274.106347][ T9531] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 274.106394][ T9531] loop9: partition table partially beyond EOD, truncated [ 274.185337][ T9531] loop9: p1 size 81768186 extends beyond EOD, truncated [ 274.457861][ T6078] udevd[6078]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 274.718940][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 275.973330][ T10] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 276.108001][ T9569] sp0: Synchronizing with TNC [ 276.152576][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 276.152609][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.152629][ T10] usb 1-1: Product: syz [ 276.152643][ T10] usb 1-1: Manufacturer: syz [ 276.152658][ T10] usb 1-1: SerialNumber: syz [ 276.154071][ T9570] sp0: Found TNC [ 276.225652][ T10] usb 1-1: config 0 descriptor?? [ 276.269031][ T9572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.317917][ T991] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 276.445739][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 276.483482][ T991] usb 5-1: Using ep0 maxpacket: 32 [ 276.487685][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.487785][ T991] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.487829][ T991] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.487853][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.591693][ T991] usb 5-1: config 0 descriptor?? [ 276.687853][ T991] hub 5-1:0.0: USB hub found [ 276.843903][ T991] hub 5-1:0.0: 1 port detected [ 276.855515][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 276.911942][ T10] usb 1-1: USB disconnect, device number 15 [ 277.303297][ T991] usb 5-1: USB disconnect, device number 16 [ 277.572690][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 278.008135][ T9602] input: syz1 as /devices/virtual/input/input17 [ 278.136152][ T9608] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 278.136181][ T9608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 278.136295][ T9608] vhci_hcd vhci_hcd.0: Device attached [ 278.383355][ T10] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 278.463414][ T991] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 278.613464][ T991] usb 1-1: Using ep0 maxpacket: 16 [ 278.620836][ T991] usb 1-1: config 0 has no interfaces? [ 278.620878][ T991] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 278.620902][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.687411][ T991] usb 1-1: config 0 descriptor?? [ 278.948932][ T9609] usb 33-1: recv xbuf, 0 [ 278.969390][ T5914] usb 1-1: USB disconnect, device number 16 [ 278.989963][ T70] vhci_hcd: stop threads [ 278.989984][ T70] vhci_hcd: release socket [ 278.990066][ T70] vhci_hcd: disconnect device [ 279.033843][ T10] vhci_hcd: vhci_device speed not set [ 279.782007][ T994] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 280.046065][ T994] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 280.046097][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.163673][ T994] usb 3-1: config 0 descriptor?? [ 281.096648][ T994] usb 3-1: Cannot set autoneg [ 281.096965][ T994] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 281.192295][ T994] usb 3-1: USB disconnect, device number 14 [ 281.443586][ T5914] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 281.608043][ T5914] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.608072][ T5914] usb 5-1: config 0 has no interface number 0 [ 281.612961][ T5914] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 281.612992][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.613012][ T5914] usb 5-1: Product: syz [ 281.613025][ T5914] usb 5-1: Manufacturer: syz [ 281.613040][ T5914] usb 5-1: SerialNumber: syz [ 281.638439][ T5914] usb 5-1: config 0 descriptor?? [ 281.870992][ T5914] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 281.890258][ T5914] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.895359][ T5914] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 281.895420][ T5914] usb 5-1: media controller created [ 282.062718][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.165091][ T9670] openvswitch: netlink: IP tunnel dst address not specified [ 282.234002][ T5914] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 282.312776][ T37] audit: type=1326 audit(1757068491.494:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 282.335195][ T37] audit: type=1326 audit(1757068491.494:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 282.338918][ T37] audit: type=1326 audit(1757068491.524:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 282.339269][ T37] audit: type=1326 audit(1757068491.524:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 282.339896][ T37] audit: type=1326 audit(1757068491.524:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 282.340183][ T37] audit: type=1326 audit(1757068491.524:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 282.396077][ T37] audit: type=1326 audit(1757068491.544:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 282.396140][ T37] audit: type=1326 audit(1757068491.584:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x7ffc0000 [ 282.396698][ T37] audit: type=1326 audit(1757068491.584:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdad40adb9 code=0x7ffc0000 [ 282.397097][ T37] audit: type=1326 audit(1757068491.584:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9672 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcdad40adb9 code=0x7ffc0000 [ 282.689412][ T5914] usb 5-1: USB disconnect, device number 17 [ 283.437215][ T9694] netlink: 'syz.1.1692': attribute type 5 has an invalid length. [ 284.442588][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 284.641289][ T991] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 284.803525][ T991] usb 1-1: Using ep0 maxpacket: 8 [ 284.806461][ T991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.806524][ T991] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 284.806548][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.836201][ T991] usb 1-1: config 0 descriptor?? [ 284.885480][ T991] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 285.680258][ T991] gspca_vc032x: reg_w err -71 [ 285.680361][ T991] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 285.709629][ T991] usb 1-1: USB disconnect, device number 17 [ 286.918962][ T994] hid-generic 0003:0004:0000.0020: unknown main item tag 0x0 [ 286.919002][ T994] hid-generic 0003:0004:0000.0020: unknown main item tag 0x0 [ 286.919028][ T994] hid-generic 0003:0004:0000.0020: unknown main item tag 0x0 [ 286.970332][ T994] hid-generic 0003:0004:0000.0020: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 287.203405][ T5936] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 287.353785][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 287.358124][ T5936] usb 5-1: config 0 has no interfaces? [ 287.358166][ T5936] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 287.358190][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.363505][ T994] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 287.388717][ T5936] usb 5-1: config 0 descriptor?? [ 287.523508][ T994] usb 2-1: Using ep0 maxpacket: 8 [ 287.526423][ T994] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.526448][ T994] usb 2-1: config 0 has no interfaces? [ 287.530862][ T994] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 287.530890][ T994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.530909][ T994] usb 2-1: Product: syz [ 287.530924][ T994] usb 2-1: Manufacturer: syz [ 287.530938][ T994] usb 2-1: SerialNumber: syz [ 287.549746][ T994] usb 2-1: config 0 descriptor?? [ 287.629058][ T994] usb 5-1: USB disconnect, device number 18 [ 287.794533][ T991] usb 2-1: USB disconnect, device number 19 [ 288.118892][ T9782] netlink: 'syz.3.1730': attribute type 2 has an invalid length. [ 290.133389][ T5914] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 290.135262][ T9789] syz.4.1734: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 290.135625][ T9789] CPU: 0 UID: 0 PID: 9789 Comm: syz.4.1734 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 290.135651][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.135665][ T9789] Call Trace: [ 290.135674][ T9789] [ 290.135684][ T9789] dump_stack_lvl+0x189/0x250 [ 290.135723][ T9789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.135754][ T9789] ? __pfx__printk+0x10/0x10 [ 290.135778][ T9789] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 290.135802][ T9789] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 290.135827][ T9789] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 290.135854][ T9789] warn_alloc+0x22e/0x3b0 [ 290.135896][ T9789] ? __pfx_warn_alloc+0x10/0x10 [ 290.135938][ T9789] ? __get_vm_area_node+0x2bc/0x350 [ 290.135970][ T9789] ? xskq_create+0xbf/0x170 [ 290.135999][ T9789] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 290.136056][ T9789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 290.136098][ T9789] ? __kasan_kmalloc+0x93/0xb0 [ 290.136126][ T9789] vmalloc_user_noprof+0xad/0xf0 [ 290.136154][ T9789] ? xskq_create+0xbf/0x170 [ 290.136177][ T9789] xskq_create+0xbf/0x170 [ 290.136207][ T9789] xsk_init_queue+0xb0/0x110 [ 290.136235][ T9789] xsk_setsockopt+0x57b/0x8d0 [ 290.136263][ T9789] ? __pfx_xsk_setsockopt+0x10/0x10 [ 290.136293][ T9789] ? __fget_files+0x2a/0x420 [ 290.136323][ T9789] ? __fget_files+0x2a/0x420 [ 290.136347][ T9789] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 290.136367][ T9789] ? __pfx_xsk_setsockopt+0x10/0x10 [ 290.136394][ T9789] do_sock_setsockopt+0x17c/0x1b0 [ 290.136442][ T9789] __x64_sys_setsockopt+0x145/0x1b0 [ 290.136480][ T9789] do_syscall_64+0xfa/0x3b0 [ 290.136509][ T9789] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.136536][ T9789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.136556][ T9789] ? clear_bhb_loop+0x60/0xb0 [ 290.136581][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.136601][ T9789] RIP: 0033:0x7f27043aebe9 [ 290.136622][ T9789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.136640][ T9789] RSP: 002b:00007f2702616038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 290.136662][ T9789] RAX: ffffffffffffffda RBX: 00007f27045e5fa0 RCX: 00007f27043aebe9 [ 290.136677][ T9789] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 290.136689][ T9789] RBP: 00007f2704431e19 R08: 0000000000000004 R09: 0000000000000000 [ 290.136703][ T9789] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 290.136716][ T9789] R13: 00007f27045e6038 R14: 00007f27045e5fa0 R15: 00007ffd5428a688 [ 290.136750][ T9789] [ 290.136759][ T9789] Mem-Info: [ 290.136768][ T9789] active_anon:38 inactive_anon:7467 isolated_anon:0 [ 290.136768][ T9789] active_file:4219 inactive_file:1076 isolated_file:0 [ 290.136768][ T9789] unevictable:768 dirty:230 writeback:0 [ 290.136768][ T9789] slab_reclaimable:11394 slab_unreclaimable:102473 [ 290.136768][ T9789] mapped:30153 shmem:2401 pagetables:1264 [ 290.136768][ T9789] sec_pagetables:0 bounce:0 [ 290.136768][ T9789] kernel_misc_reclaimable:0 [ 290.136768][ T9789] free:1359018 free_pcp:4972 free_cma:0 [ 290.136824][ T9789] Node 0 active_anon:152kB inactive_anon:29868kB active_file:16876kB inactive_file:4176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120612kB dirty:916kB writeback:0kB shmem:8068kB kernel_stack:12924kB pagetables:4916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 290.136873][ T9789] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 290.136917][ T9789] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.136974][ T9789] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 290.137010][ T9789] Node 0 DMA32 free:1512368kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:148kB inactive_anon:29568kB active_file:16112kB inactive_file:4164kB unevictable:1536kB writepending:916kB present:3129332kB managed:2572312kB mlocked:0kB bounce:0kB free_pcp:19872kB local_pcp:10032kB free_cma:0kB [ 290.137072][ T9789] lowmem_reserve[]: 0 0 1 1 1 [ 290.137105][ T9789] Node 0 Normal free:4kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:300kB active_file:764kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 290.137160][ T9789] lowmem_reserve[]: 0 0 0 0 0 [ 290.137193][ T9789] Node 1 Normal free:3908340kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 290.137250][ T9789] lowmem_reserve[]: 0 0 0 0 0 [ 290.137284][ T9789] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 290.137396][ T9789] Node 0 DMA32: 332*4kB (ME) 350*8kB (UME) 106*16kB (UME) 73*32kB (UME) 143*64kB (UME) 93*128kB (UME) 59*256kB (UM) 51*512kB (UME) 30*1024kB (UM) 27*2048kB (UME) 331*4096kB (UM) = 1512224kB [ 290.137577][ T9789] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 290.137687][ T9789] Node 1 Normal: 183*4kB (UME) 53*8kB (UME) 35*16kB (UME) 190*32kB (UME) 62*64kB (UME) 26*128kB (UME) 12*256kB (UME) 6*512kB (UM) 6*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3908340kB [ 290.137860][ T9789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.137878][ T9789] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 290.137897][ T9789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 290.137915][ T9789] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 290.137933][ T9789] 7692 total pagecache pages [ 290.137942][ T9789] 0 pages in swap cache [ 290.137950][ T9789] Free swap = 124996kB [ 290.137958][ T9789] Total swap = 124996kB [ 290.137967][ T9789] 2097051 pages RAM [ 290.137975][ T9789] 0 pages HighMem/MovableOnly [ 290.137983][ T9789] 422075 pages reserved [ 290.137990][ T9789] 0 pages cma reserved [ 290.286357][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 290.288965][ T5914] usb 4-1: config 0 has an invalid interface number: 24 but max is 0 [ 290.288989][ T5914] usb 4-1: config 0 has no interface number 0 [ 290.289041][ T5914] usb 4-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.289065][ T5914] usb 4-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.289100][ T5914] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 290.289121][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.395040][ T5914] usb 4-1: config 0 descriptor?? [ 290.947501][ T5914] hid (null): unknown global tag 0x39 [ 290.947540][ T5914] hid (null): report_id 0 is invalid [ 291.094324][ T5914] usb 4-1: USB disconnect, device number 21 [ 291.893546][ T9845] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 292.893383][ T994] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 293.105338][ T994] usb 3-1: Using ep0 maxpacket: 8 [ 293.108319][ T994] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 293.108386][ T994] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 293.108415][ T994] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.108441][ T994] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 293.108467][ T994] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 293.110199][ T994] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 293.110257][ T994] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 293.110283][ T994] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.110309][ T994] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 293.110334][ T994] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 293.111880][ T994] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 293.111941][ T994] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 293.111970][ T994] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.112539][ T994] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 293.112569][ T994] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 293.298590][ T994] usb 3-1: string descriptor 0 read error: -22 [ 293.298760][ T994] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 293.298786][ T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.394742][ T994] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 293.654538][ T994] usb 3-1: USB disconnect, device number 15 [ 293.838463][ T9865] adutux: No device or device unplugged -19 [ 295.363510][ T9922] sp0: Synchronizing with TNC [ 295.389092][ T9921] [U] è`` [ 295.395646][ T5914] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 295.547334][ T5914] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 295.567542][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.567609][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.567637][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.579884][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.589026][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.589062][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.598905][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.598961][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.598985][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.600782][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.600833][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.600856][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.602833][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.602884][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.602907][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.613654][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.613713][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.613737][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.621745][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.621803][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.621826][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.630289][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 295.630347][ T5914] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 295.630378][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 295.636943][ T5914] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 295.636970][ T5914] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 295.636989][ T5914] usb 2-1: Product: syz [ 295.637002][ T5914] usb 2-1: Manufacturer: syz [ 295.637014][ T5914] usb 2-1: SerialNumber: syz [ 295.703458][ T5914] usb 2-1: config 0 descriptor?? [ 295.994494][ T5914] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 296.018802][ T5914] usb 2-1: USB disconnect, device number 20 [ 296.030302][ T5914] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 296.108352][ T37] kauditd_printk_skb: 70 callbacks suppressed [ 296.108371][ T37] audit: type=1326 audit(1757068505.294:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9931 comm="syz.2.1798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x0 [ 296.873610][ T6032] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 297.033399][ T6032] usb 1-1: Using ep0 maxpacket: 8 [ 297.039739][ T6032] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 297.039771][ T6032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.039791][ T6032] usb 1-1: Product: syz [ 297.039804][ T6032] usb 1-1: Manufacturer: syz [ 297.039818][ T6032] usb 1-1: SerialNumber: syz [ 297.079859][ T6032] usb 1-1: config 0 descriptor?? [ 297.092169][ T6032] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 297.912631][ T6032] gspca_sonixj: reg_r err -71 [ 297.912746][ T6032] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 297.947133][ T6032] usb 1-1: USB disconnect, device number 18 [ 298.097990][ T5914] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 298.322418][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 298.322475][ T5914] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 298.322499][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.332198][ T5914] usb 4-1: config 0 descriptor?? [ 298.351925][ T9963] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 298.845413][ T5914] elan 0003:04F3:0755.0022: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 299.001446][ T5847] usb 4-1: USB disconnect, device number 22 [ 299.037472][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 299.208646][ T9980] batadv0: entered promiscuous mode [ 299.208936][ T9980] macsec1: entered promiscuous mode [ 299.290026][ T9981] fido_id[9981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 299.302925][ T9980] batadv0: left promiscuous mode [ 299.616776][ T9986] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 299.616803][ T9986] netlink: 'syz.2.1821': attribute type 1 has an invalid length. [ 299.616817][ T9986] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1821'. [ 300.652174][T10010] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 300.652309][T10010] SQUASHFS error: Failed to read block 0x0: -5 [ 301.193493][ T5847] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 301.348667][ T5847] usb 3-1: Using ep0 maxpacket: 8 [ 301.351288][ T5847] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.351319][ T5847] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.351343][ T5847] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.351366][ T5847] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.351409][ T5847] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 301.351432][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.652007][ T5847] usb 3-1: GET_CAPABILITIES returned 0 [ 301.652065][ T5847] usbtmc 3-1:16.0: can't read capabilities [ 301.884310][T10020] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 301.891991][ T5847] usb 3-1: USB disconnect, device number 16 [ 301.925375][ T6040] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 301.981936][ T5927] usb 4-1: [UEAGLE-ATM] firmware is not available [ 302.083536][ T6040] usb 1-1: Using ep0 maxpacket: 16 [ 302.098738][ T6040] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 302.098771][ T6040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.098792][ T6040] usb 1-1: Product: syz [ 302.098807][ T6040] usb 1-1: Manufacturer: syz [ 302.098822][ T6040] usb 1-1: SerialNumber: syz [ 302.155022][ T6040] usb 1-1: config 0 descriptor?? [ 302.161651][ T6040] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 302.425016][ T6040] gp8psk: usb in 128 operation failed. [ 302.426798][ T6040] gp8psk: usb in 137 operation failed. [ 302.426817][ T6040] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 302.427930][ T6040] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 302.427992][ T6040] usb 1-1: media controller created [ 302.627764][ T6040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 302.749957][ T6040] gp8psk_fe: Frontend revision 1 attached [ 302.750599][ T6040] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 302.751747][ T6040] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 303.117316][ T6040] gp8psk: usb in 138 operation failed. [ 303.117339][ T6040] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 303.117353][ T6040] gp8psk: found Genpix USB device pID = 201 (hex) [ 303.136265][ T6040] usb 1-1: USB disconnect, device number 19 [ 303.656151][ T6040] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 306.145938][T10131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.306599][ T5927] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 306.353405][ T6040] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 306.491502][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 306.491535][ T5927] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 306.491561][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 306.491583][ T5927] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 306.491625][ T5927] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 306.491649][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.503812][ T6040] usb 3-1: Using ep0 maxpacket: 8 [ 306.508718][ T6040] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 306.508776][ T6040] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 306.508801][ T6040] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.508823][ T6040] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 306.508846][ T6040] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 306.510274][ T6040] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 306.510343][ T6040] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 306.510366][ T6040] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.510389][ T6040] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 306.510411][ T6040] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 306.516106][ T6040] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 306.518327][ T6040] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 306.518358][ T6040] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.518382][ T6040] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 306.518405][ T6040] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 306.531450][ T6040] usb 3-1: string descriptor 0 read error: -22 [ 306.531605][ T6040] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 306.531626][ T6040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.543604][ T5927] usb 4-1: config 0 descriptor?? [ 306.739111][ T6040] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 306.787605][ T5927] hdpvr 4-1:0.0: firmware version 0x0 dated [ 306.787627][ T5927] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 306.889730][ T6040] usb 3-1: USB disconnect, device number 17 [ 307.348507][ T5927] hdpvr 4-1:0.0: Could not setup controls [ 307.349372][ T5927] hdpvr 4-1:0.0: registering videodev failed [ 307.368337][ T6032] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 307.382277][ T5927] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 307.409752][ T5927] usb 4-1: USB disconnect, device number 23 [ 307.513422][ T6032] usb 5-1: Using ep0 maxpacket: 32 [ 307.516128][ T6032] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 307.516159][ T6032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.554018][ T6032] usb 5-1: config 0 descriptor?? [ 307.791844][ T6032] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 307.837512][ T6032] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 307.838782][ T6032] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 307.838842][ T6032] usb 5-1: media controller created [ 307.904052][ T6032] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 308.031788][ T6032] az6027: usb out operation failed. (-71) [ 308.043969][ T6032] az6027: usb out operation failed. (-71) [ 308.043988][ T6032] stb0899_attach: Driver disabled by Kconfig [ 308.043999][ T6032] az6027: no front-end attached [ 308.043999][ T6032] [ 308.044454][ T6032] az6027: usb out operation failed. (-71) [ 308.044469][ T6032] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 308.048348][ T6032] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 308.106103][ T6032] dvb-usb: schedule remote query interval to 400 msecs. [ 308.106128][ T6032] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 308.130879][ T6032] usb 5-1: USB disconnect, device number 19 [ 308.483141][ T6032] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 309.009955][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1911'. [ 309.197007][ T37] audit: type=1326 audit(1757068518.384:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10187 comm="syz.2.1912" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdad46ebe9 code=0x0 [ 309.491950][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1915'. [ 309.492062][T10195] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1915'. [ 311.243341][ T5927] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 311.427283][ T5927] usb 4-1: config 0 has an invalid interface number: 227 but max is 0 [ 311.427314][ T5927] usb 4-1: config 0 has no interface number 0 [ 311.427388][ T5927] usb 4-1: config 0 interface 227 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 311.427416][ T5927] usb 4-1: config 0 interface 227 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 311.427442][ T5927] usb 4-1: config 0 interface 227 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.427464][ T5927] usb 4-1: config 0 interface 227 has no altsetting 0 [ 311.430851][ T5927] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=58.dd [ 311.430881][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.430901][ T5927] usb 4-1: Product: syz [ 311.430922][ T5927] usb 4-1: Manufacturer: syz [ 311.430937][ T5927] usb 4-1: SerialNumber: syz [ 311.441682][ T5927] usb 4-1: config 0 descriptor?? [ 311.442528][T10229] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.470283][ T5927] usbtouchscreen 4-1:0.227: probe with driver usbtouchscreen failed with error -90 [ 312.285258][ T6040] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 312.433387][ T6040] usb 1-1: Using ep0 maxpacket: 32 [ 312.441161][ T6040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.441196][ T6040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.441239][ T6040] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 312.441271][ T6040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.477956][ T6040] usb 1-1: config 0 descriptor?? [ 312.526068][ T6040] hub 1-1:0.0: USB hub found [ 312.728765][ T6040] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 312.927910][ T6040] usbhid 1-1:0.0: can't add hid device: -71 [ 312.928045][ T6040] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 312.979591][ T6040] usb 1-1: USB disconnect, device number 20 [ 313.004453][ T5936] usb 4-1: USB disconnect, device number 24 [ 313.393456][ T5927] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 313.554831][ T5927] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 313.554865][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.567537][ T5927] usb 3-1: config 0 descriptor?? [ 313.633895][ T5927] cp210x 3-1:0.0: cp210x converter detected [ 314.014663][ T5927] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 314.047426][T10270] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1944'. [ 314.171217][ T5927] usb 3-1: cp210x converter now attached to ttyUSB0 [ 314.239120][ T5936] usb 3-1: USB disconnect, device number 18 [ 314.270725][ T5936] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 314.418448][ T5936] cp210x 3-1:0.0: device disconnected [ 315.053472][T10289] bpf: Bad value for 'gid' [ 315.845333][ T5847] kernel write not supported for file /vcsa1 (pid: 5847 comm: kworker/1:3) [ 315.944498][T10308] macvtap0: refused to change device tx_queue_len [ 316.868831][ T37] audit: type=1326 audit(1757068526.054:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 316.868893][ T37] audit: type=1326 audit(1757068526.054:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 316.948767][ T37] audit: type=1326 audit(1757068526.134:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 316.948833][ T37] audit: type=1326 audit(1757068526.134:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 316.948882][ T37] audit: type=1326 audit(1757068526.134:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 316.948930][ T37] audit: type=1326 audit(1757068526.134:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 317.002440][ T37] audit: type=1326 audit(1757068526.184:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 317.002493][ T37] audit: type=1326 audit(1757068526.184:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10336 comm="syz.0.1973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803345ebe9 code=0x7ffc0000 [ 317.279410][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.279501][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.441879][T10355] Invalid logical block size (7) [ 319.928032][T10401] netlink: 'syz.1.1995': attribute type 4 has an invalid length. [ 319.928057][T10401] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1995'. [ 320.674225][T10418] vxcan0: tx address claim with dest, not broadcast [ 321.145470][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 322.141463][T10470] netlink: 1036 bytes leftover after parsing attributes in process `syz.3.2028'. [ 322.141491][T10470] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 322.229039][ T6040] kernel read not supported for file /usbmon9 (pid: 6040 comm: kworker/0:7) [ 322.500563][T10487] misc userio: Can't change port type on an already running userio instance [ 322.908301][T10499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2041'. [ 323.323393][ T6032] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 323.476233][ T6032] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 323.476265][ T6032] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.512301][ T6032] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 323.512334][ T6032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.512354][ T6032] usb 1-1: Product: syz [ 323.512368][ T6032] usb 1-1: Manufacturer: syz [ 323.512383][ T6032] usb 1-1: SerialNumber: syz [ 323.560413][ T6032] usb 1-1: config 0 descriptor?? [ 323.572770][ T6032] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 323.712903][T10515] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.414149][ T6032] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 324.414264][ T6032] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 324.417973][ T6032] usb 1-1: USB disconnect, device number 21 [ 326.163378][ T5927] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 326.333431][ T5927] usb 4-1: Using ep0 maxpacket: 32 [ 326.336170][ T5927] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 326.336209][ T5927] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 326.336233][ T5927] usb 4-1: config 0 interface 0 has no altsetting 0 [ 326.341161][ T5927] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 326.341199][ T5927] usb 4-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 326.341220][ T5927] usb 4-1: Product: syz [ 326.341235][ T5927] usb 4-1: Manufacturer: syz [ 326.341250][ T5927] usb 4-1: SerialNumber: syz [ 326.351940][ T5927] usb 4-1: config 0 descriptor?? [ 326.814388][ T5927] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 327.205456][ T5927] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 327.206136][ T5927] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 327.219120][ T5927] usb 4-1: USB disconnect, device number 25 [ 328.493682][T10592] syz.2.2086 (10592) used greatest stack depth: 17176 bytes left [ 331.478346][T10617] loop8: detected capacity change from 0 to 1 [ 331.501085][T10617] Dev loop8: unable to read RDB block 1 [ 331.501146][T10617] loop8: unable to read partition table [ 331.501427][T10617] loop8: partition table beyond EOD, truncated [ 331.501448][T10617] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 331.743463][T10623] bond0: entered promiscuous mode [ 331.743489][T10623] bond_slave_0: entered promiscuous mode [ 331.750031][T10623] bond_slave_1: entered promiscuous mode [ 331.750330][T10623] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 333.728295][T10623] bond0: left promiscuous mode [ 333.728322][T10623] bond_slave_0: left promiscuous mode [ 333.728765][T10623] bond_slave_1: left promiscuous mode [ 333.729048][T10623] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 338.713835][ T6040] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 338.903471][ T6040] usb 1-1: Using ep0 maxpacket: 32 [ 338.937542][ T6040] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 338.937576][ T6040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.962473][ T6040] usb 1-1: config 0 descriptor?? [ 339.304417][ T6040] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 339.330223][ T6040] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.345170][ T6040] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 339.345238][ T6040] usb 1-1: media controller created [ 339.431406][ T6040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.533372][ T6040] az6027: usb out operation failed. (-71) [ 339.533822][ T6040] az6027: usb out operation failed. (-71) [ 339.533835][ T6040] stb0899_attach: Driver disabled by Kconfig [ 339.533845][ T6040] az6027: no front-end attached [ 339.533845][ T6040] [ 339.534381][ T6040] az6027: usb out operation failed. (-71) [ 339.534395][ T6040] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 339.538222][ T6040] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 339.604116][ T6040] dvb-usb: schedule remote query interval to 400 msecs. [ 339.604142][ T6040] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 339.644305][ T6040] usb 1-1: USB disconnect, device number 22 [ 346.433214][ C1] sched: DL replenish lagged too much [ 346.837670][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.841814][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.871268][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.900230][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.901186][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.461138][T10647] chnl_net:caif_netlink_parms(): no params data found [ 348.651144][ T5859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.683807][ T5859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.686205][ T5859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.688122][ T5859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.689568][ T5859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 349.045041][ T5859] Bluetooth: hci5: command tx timeout [ 350.793497][ T5859] Bluetooth: hci6: command tx timeout [ 351.113702][ T5859] Bluetooth: hci5: command tx timeout [ 352.875605][ T5859] Bluetooth: hci6: command tx timeout [ 353.205009][ T5859] Bluetooth: hci5: command tx timeout [ 353.794885][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 353.821990][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 353.853409][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 353.855011][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 353.860712][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 354.858144][ T5850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 354.885657][ T5850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 354.887274][ T5850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 354.888819][ T5850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 354.890275][ T5850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 354.953362][ T5850] Bluetooth: hci6: command tx timeout [ 355.273710][ T5850] Bluetooth: hci5: command tx timeout [ 355.913618][ T5850] Bluetooth: hci7: command tx timeout [ 356.311192][ T5859] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 356.336587][ T5859] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 356.338582][ T5859] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 356.340083][ T5859] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 356.341523][ T5859] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 356.953480][ T5850] Bluetooth: hci8: command tx timeout [ 357.033855][ T5850] Bluetooth: hci6: command tx timeout [ 357.993900][ T5850] Bluetooth: hci7: command tx timeout [ 358.335712][ T6040] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 358.473553][ T5850] Bluetooth: hci9: command tx timeout [ 359.034141][ T5850] Bluetooth: hci8: command tx timeout [ 360.073721][ T5850] Bluetooth: hci7: command tx timeout [ 360.553512][ T5850] Bluetooth: hci9: command tx timeout [ 361.113572][ T5850] Bluetooth: hci8: command tx timeout [ 362.153753][ T5850] Bluetooth: hci7: command tx timeout [ 362.633472][ T5850] Bluetooth: hci9: command tx timeout [ 363.193534][ T5850] Bluetooth: hci8: command tx timeout [ 364.714185][ T5850] Bluetooth: hci9: command tx timeout [ 378.741793][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.741893][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.740257][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 406.783744][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 406.788592][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 406.790082][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 406.791054][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.718225][ T5850] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 408.739256][ T5850] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 408.741203][ T5850] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 408.767807][ T5850] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 408.768842][ T5850] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 408.873607][ T5850] Bluetooth: hci2: command tx timeout [ 410.873555][ T5850] Bluetooth: hci10: command tx timeout [ 410.953507][ T5850] Bluetooth: hci2: command tx timeout [ 412.953613][ T5850] Bluetooth: hci10: command tx timeout [ 413.033661][ T5850] Bluetooth: hci2: command tx timeout [ 414.219619][ T5859] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 414.243047][ T5859] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 414.251810][ T5859] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 414.268127][ T5859] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 414.269288][ T5859] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 415.033538][ T5850] Bluetooth: hci10: command tx timeout [ 415.115182][ T5850] Bluetooth: hci2: command tx timeout [ 415.651681][ T5859] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 415.693672][ T5859] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 415.696153][ T5859] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 415.697697][ T5859] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 415.699277][ T5859] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 416.393470][ T5859] Bluetooth: hci11: command tx timeout [ 417.076290][ T5850] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 417.101967][ T5850] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 417.113744][ T5850] Bluetooth: hci10: command tx timeout [ 417.127946][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 417.129827][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 417.130887][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 417.755808][ T5859] Bluetooth: hci12: command tx timeout [ 418.473419][ T59] Bluetooth: hci11: command tx timeout [ 419.198526][ T59] Bluetooth: hci13: command tx timeout [ 419.833547][ T59] Bluetooth: hci12: command tx timeout [ 420.553430][ T59] Bluetooth: hci11: command tx timeout [ 421.273824][ T59] Bluetooth: hci13: command tx timeout [ 421.913550][ T59] Bluetooth: hci12: command tx timeout [ 422.633424][ T59] Bluetooth: hci11: command tx timeout [ 423.353801][ T59] Bluetooth: hci13: command tx timeout [ 423.993944][ T59] Bluetooth: hci12: command tx timeout [ 425.435848][ T59] Bluetooth: hci13: command tx timeout [ 437.113922][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 440.198056][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.198148][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 453.479383][T10647] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.506889][T10647] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.507201][T10647] bridge_slave_0: entered allmulticast mode [ 453.533429][T10647] bridge_slave_0: entered promiscuous mode [ 466.872957][ T59] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 466.894989][ T59] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 466.896930][ T59] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 466.898787][ T59] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 466.899730][ T59] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 468.955418][ T59] Bluetooth: hci14: command tx timeout [ 469.252709][ T5859] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 469.283792][ T5859] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 469.285600][ T5859] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 469.286967][ T5859] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 469.289146][ T5859] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 471.033979][ T5852] Bluetooth: hci14: command tx timeout [ 471.355407][ T5852] Bluetooth: hci15: command tx timeout [ 472.969463][ T5852] Bluetooth: hci5: command 0x0406 tx timeout [ 472.969502][ T5852] Bluetooth: hci6: command 0x0406 tx timeout [ 473.113479][ T5850] Bluetooth: hci14: command tx timeout [ 473.433496][ T5850] Bluetooth: hci15: command tx timeout [ 474.771540][ T5852] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 474.814550][ T5852] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 474.822508][ T5852] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 474.841458][ T5852] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 474.842467][ T5852] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 475.193406][ T5852] Bluetooth: hci14: command tx timeout [ 475.513401][ T5852] Bluetooth: hci15: command tx timeout [ 475.561465][ T5846] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 475.589629][ T5846] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 475.591290][ T5846] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 475.607670][ T5846] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 475.608693][ T5846] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 477.604476][ T5850] Bluetooth: hci15: command tx timeout [ 477.683515][ T5850] Bluetooth: hci17: command tx timeout [ 478.073571][ T5850] Bluetooth: hci8: command 0x0406 tx timeout [ 478.073920][ T5850] Bluetooth: hci7: command 0x0406 tx timeout [ 478.415780][ T5850] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 478.441687][ T5850] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 478.453536][ T5850] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 478.455037][ T5850] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 478.456052][ T5850] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 479.525400][ T5850] Bluetooth: hci16: command tx timeout [ 479.753465][ T5850] Bluetooth: hci17: command tx timeout [ 480.473587][ T38] INFO: task syz.3.2088:10597 blocked for more than 143 seconds. [ 480.473613][ T38] Not tainted syzkaller #0 [ 480.473624][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 480.473635][ T38] task:syz.3.2088 state:D stack:26120 pid:10597 tgid:10596 ppid:5842 task_flags:0x400140 flags:0x00004006 [ 480.473702][ T38] Call Trace: [ 480.473709][ T38] [ 480.473724][ T38] __schedule+0x16f3/0x4c20 [ 480.473785][ T38] ? __lock_acquire+0xab9/0xd20 [ 480.473815][ T38] ? __pfx___schedule+0x10/0x10 [ 480.473862][ T38] ? schedule+0x91/0x360 [ 480.473904][ T38] schedule+0x165/0x360 [ 480.473934][ T38] schedule_timeout+0x9a/0x270 [ 480.473960][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 480.474000][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.474027][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.474052][ T38] ? wait_for_completion+0x267/0x5d0 [ 480.474082][ T38] wait_for_completion+0x2bf/0x5d0 [ 480.474126][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 480.474153][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 480.474182][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 480.474214][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 480.474244][ T38] rcu_barrier+0x463/0x570 [ 480.474280][ T38] flush_rcu_work+0x84/0xb0 [ 480.474310][ T38] kvfree_rcu_barrier+0x12b/0x160 [ 480.474344][ T38] ? p9_client_destroy+0x4a7/0x4f0 [ 480.474366][ T38] kmem_cache_destroy+0x2e/0x160 [ 480.474399][ T38] p9_client_destroy+0x4a7/0x4f0 [ 480.474425][ T38] ? __pfx_p9_client_destroy+0x10/0x10 [ 480.474447][ T38] ? rcu_is_watching+0x15/0xb0 [ 480.474479][ T38] ? kfree+0x4d/0x550 [ 480.474511][ T38] v9fs_session_init+0x1433/0x19a0 [ 480.474569][ T38] ? __pfx_v9fs_session_init+0x10/0x10 [ 480.474613][ T38] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 480.474637][ T38] ? v9fs_mount+0xb2/0xa50 [ 480.474670][ T38] v9fs_mount+0xc8/0xa50 [ 480.474705][ T38] ? __pfx_v9fs_mount+0x10/0x10 [ 480.474736][ T38] ? rcu_is_watching+0x15/0xb0 [ 480.474767][ T38] ? cap_capable+0x11f/0x460 [ 480.474795][ T38] legacy_get_tree+0xfa/0x1a0 [ 480.474824][ T38] ? __pfx_v9fs_mount+0x10/0x10 [ 480.474855][ T38] vfs_get_tree+0x8f/0x2b0 [ 480.474894][ T38] do_new_mount+0x2a2/0x9e0 [ 480.474928][ T38] ? ns_capable+0x8a/0xf0 [ 480.474954][ T38] ? __pfx_do_new_mount+0x10/0x10 [ 480.474981][ T38] ? path_mount+0x61c/0xfe0 [ 480.475022][ T38] __se_sys_mount+0x317/0x410 [ 480.475060][ T38] ? __pfx___se_sys_mount+0x10/0x10 [ 480.475087][ T38] ? rcu_is_watching+0x15/0xb0 [ 480.475125][ T38] ? do_syscall_64+0xbe/0x3b0 [ 480.475150][ T38] ? __x64_sys_mount+0x20/0xc0 [ 480.475182][ T38] do_syscall_64+0xfa/0x3b0 [ 480.475209][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.475236][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.475257][ T38] ? clear_bhb_loop+0x60/0xb0 [ 480.475282][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.475303][ T38] RIP: 0033:0x7f280bceebe9 [ 480.475321][ T38] RSP: 002b:00007f2809f56038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 480.475343][ T38] RAX: ffffffffffffffda RBX: 00007f280bf25fa0 RCX: 00007f280bceebe9 [ 480.475359][ T38] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 480.475373][ T38] RBP: 00007f280bd71e19 R08: 00002000000000c0 R09: 0000000000000000 [ 480.475387][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.475400][ T38] R13: 00007f280bf26038 R14: 00007f280bf25fa0 R15: 00007ffdd916b4a8 [ 480.475436][ T38] [ 480.475463][ T38] [ 480.475463][ T38] Showing all locks held in the system: [ 480.475474][ T38] 6 locks held by ktimers/1/29: [ 480.475487][ T38] 2 locks held by ksoftirqd/1/30: [ 480.475498][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 480.475554][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 480.475606][ T38] 2 locks held by kworker/1:0/31: [ 480.475618][ T38] 1 lock held by khungtaskd/38: [ 480.475630][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 480.475680][ T38] 4 locks held by kworker/u9:0/59: [ 480.475691][ T38] #0: ffff88805fc55138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.475743][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.475796][ T38] #2: ffff88805d1f0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 480.475844][ T38] #3: ffff88805d1f00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 480.475910][ T38] 4 locks held by kworker/1:2/994: [ 480.475923][ T38] #0: ffff88805aeee138 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.475981][ T38] #1: ffffc900045ffbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.476035][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 480.476085][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 480.476148][ T38] 2 locks held by kworker/u8:13/4428: [ 480.476162][ T38] 2 locks held by getty/5597: [ 480.476173][ T38] #0: ffff88823bf628a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 480.476229][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 480.476281][ T38] 5 locks held by kworker/u9:2/5846: [ 480.476292][ T38] #0: ffff888033587138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.476345][ T38] #1: ffffc90004ee7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.476398][ T38] #2: ffff888061cece80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 480.476443][ T38] #3: ffff888061cec0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 480.476495][ T38] #4: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 480.476551][ T38] 4 locks held by kworker/u9:4/5852: [ 480.476562][ T38] #0: ffff88803b86c138 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.476618][ T38] #1: ffffc90004d47bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.476670][ T38] #2: ffff88807a7880a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 480.476718][ T38] #3: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 480.476768][ T38] 6 locks held by kworker/u9:5/5853: [ 480.476778][ T38] #0: ffff888061c12938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.476828][ T38] #1: ffffc90004f87bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.476876][ T38] #2: ffff88802a3e0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 480.476930][ T38] #3: ffff88802a3e00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 480.476982][ T38] #4: ffffffff8ee3a338 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 480.477034][ T38] #5: ffff888030519358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 480.477098][ T38] 3 locks held by kworker/0:5/5927: [ 480.477110][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.477160][ T38] #1: ffffc90005b87bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.477211][ T38] #2: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 480.477258][ T38] 4 locks held by kworker/1:4/5936: [ 480.477271][ T38] 1 lock held by syz.3.2088/10597: [ 480.477283][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 480.477330][ T38] 2 locks held by syz.4.2098/10623: [ 480.477341][ T38] #0: ffffffff8f1f47a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 480.477396][ T38] #1: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 480.477442][ T38] 1 lock held by syz.2.2099/10626: [ 480.477452][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 480.477495][ T38] 1 lock held by syz.1.2104/10641: [ 480.477506][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 480.477551][ T38] 2 locks held by kworker/1:11/10642: [ 480.477562][ T38] 1 lock held by syz.0.2105/10643: [ 480.477573][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 480.477619][ T38] 4 locks held by kworker/1:12/10645: [ 480.477629][ T38] #0: ffff88805b00b138 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.477683][ T38] #1: ffffc90004957bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.477747][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 480.477798][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 480.477850][ T38] 1 lock held by syz-executor/10653: [ 480.477862][ T38] #0: ffffffff8ecc5a60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.477922][ T38] 1 lock held by syz-executor/10657: [ 480.477933][ T38] #0: ffffffff8ecc5a60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.477983][ T38] 1 lock held by syz-executor/10660: [ 480.477995][ T38] #0: ffffffff8ecc5a60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.478044][ T38] 1 lock held by syz-executor/10663: [ 480.478055][ T38] #0: ffffffff8ecc5a60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.478104][ T38] 4 locks held by kworker/1:14/10665: [ 480.478115][ T38] #0: ffff888036b26138 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.478172][ T38] #1: ffffc90004b87bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.478241][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 480.478291][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 480.478343][ T38] 4 locks held by kworker/1:16/10667: [ 480.478354][ T38] #0: ffff88805aae3938 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 480.478411][ T38] #1: ffffc90004bb7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 480.478462][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 480.478513][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 480.478566][ T38] 1 lock held by syz-executor/10700: [ 480.478577][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 480.478629][ T38] 1 lock held by syz-executor/10703: [ 480.478640][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37d/0x1df0 [ 480.478695][ T38] 3 locks held by syz-executor/10706: [ 480.478708][ T38] 1 lock held by syz-executor/10709: [ 480.478719][ T38] #0: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37d/0x1df0 [ 480.478775][ T38] 2 locks held by syz-executor/10713: [ 480.478786][ T38] #0: ffffffff8ecc5a60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 480.478836][ T38] #1: ffffffff8ecd2978 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 480.478893][ T38] [ 480.478899][ T38] ============================================= [ 480.478899][ T38] [ 480.478909][ T38] NMI backtrace for cpu 0 [ 480.478923][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 480.478946][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.478957][ T38] Call Trace: [ 480.478965][ T38] [ 480.478974][ T38] dump_stack_lvl+0x189/0x250 [ 480.479008][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.479037][ T38] ? __pfx__printk+0x10/0x10 [ 480.479074][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 480.479101][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 480.479128][ T38] ? __pfx__printk+0x10/0x10 [ 480.479154][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 480.479182][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 480.479209][ T38] watchdog+0xf93/0xfe0 [ 480.479241][ T38] ? watchdog+0x1de/0xfe0 [ 480.479273][ T38] kthread+0x70e/0x8a0 [ 480.479307][ T38] ? __pfx_watchdog+0x10/0x10 [ 480.479332][ T38] ? __pfx_kthread+0x10/0x10 [ 480.479367][ T38] ? __pfx_kthread+0x10/0x10 [ 480.479398][ T38] ret_from_fork+0x3f9/0x770 [ 480.479428][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 480.479461][ T38] ? __switch_to_asm+0x39/0x70 [ 480.479479][ T38] ? __switch_to_asm+0x33/0x70 [ 480.479496][ T38] ? __pfx_kthread+0x10/0x10 [ 480.479527][ T38] ret_from_fork_asm+0x1a/0x30 [ 480.479564][ T38] [ 480.479572][ T38] Sending NMI from CPU 0 to CPUs 1: [ 480.479600][ C1] NMI backtrace for cpu 1 [ 480.479616][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 480.479634][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.479643][ C1] RIP: 0010:__lock_acquire+0x50c/0xd20 [ 480.479667][ C1] Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 e4 a7 61 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 f0 a2 9e 92 eb 40 83 3d 8b 37 [ 480.479681][ C1] RSP: 0018:ffffc90000a3e4e8 EFLAGS: 00000003 [ 480.479696][ C1] RAX: 000000000000000b RBX: 0000000000000004 RCX: 0000000000000007 [ 480.479707][ C1] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffff88801cac9dc0 [ 480.479717][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172b165 [ 480.479728][ C1] R10: ffffc90000a3e798 R11: fffff52000147cf5 R12: 0000000000000003 [ 480.479739][ C1] R13: 0000000000000001 R14: ffff88801caca9f8 R15: ffff88801caca9a0 [ 480.479751][ C1] FS: 0000000000000000(0000) GS:ffff8881269c1000(0000) knlGS:0000000000000000 [ 480.479764][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 480.479776][ C1] CR2: 000055557267d5c8 CR3: 0000000081260000 CR4: 00000000003526f0 [ 480.479792][ C1] Call Trace: [ 480.479798][ C1] [ 480.479808][ C1] ? unwind_next_frame+0xa5/0x2390 [ 480.479829][ C1] lock_acquire+0x120/0x360 [ 480.479848][ C1] ? unwind_next_frame+0xa5/0x2390 [ 480.479871][ C1] ? unwind_next_frame+0xa5/0x2390 [ 480.479890][ C1] ? arch_stack_walk+0xe4/0x150 [ 480.479912][ C1] ? unwind_next_frame+0xa5/0x2390 [ 480.479932][ C1] unwind_next_frame+0xc2/0x2390 [ 480.479951][ C1] ? unwind_next_frame+0xa5/0x2390 [ 480.479973][ C1] ? unwind_next_frame+0xa5/0x2390 [ 480.479994][ C1] ? __unwind_start+0xf8/0x760 [ 480.480037][ C1] __unwind_start+0x5b9/0x760 [ 480.480059][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 480.480077][ C1] arch_stack_walk+0xe4/0x150 [ 480.480099][ C1] ? arch_stack_walk+0xe4/0x150 [ 480.480122][ C1] stack_trace_save+0x9c/0xe0 [ 480.480147][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 480.480167][ C1] ref_tracker_alloc+0x195/0x450 [ 480.480189][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 480.480214][ C1] ? dst_alloc+0x105/0x170 [ 480.480228][ C1] ? dst_alloc+0x105/0x170 [ 480.480243][ C1] dst_init+0xd9/0x450 [ 480.480266][ C1] dst_alloc+0x12a/0x170 [ 480.480281][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 480.480302][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 480.480326][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 480.480349][ C1] ? __lock_acquire+0xab9/0xd20 [ 480.480368][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 480.480394][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 480.480413][ C1] ip_route_output_flow+0x2a/0x150 [ 480.480434][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 480.480450][ C1] ip_route_me_harder+0x6d2/0x1030 [ 480.480470][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 480.480497][ C1] synproxy_send_tcp+0x359/0x6c0 [ 480.480520][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 480.480545][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 480.480565][ C1] ? nft_socket_eval+0x5e8/0xa10 [ 480.480586][ C1] ? synproxy_pernet+0x45/0x270 [ 480.480603][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 480.480620][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 480.480636][ C1] ? nf_ip_checksum+0x13c/0x510 [ 480.480659][ C1] nft_synproxy_do_eval+0x345/0x570 [ 480.480676][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 480.480691][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 480.480715][ C1] nft_do_chain+0x40c/0x1920 [ 480.480742][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 480.480767][ C1] ? __lock_acquire+0xab9/0xd20 [ 480.480792][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 480.480813][ C1] nft_do_chain_inet+0x25d/0x340 [ 480.480836][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 480.480858][ C1] ? __lock_acquire+0xab9/0xd20 [ 480.480881][ C1] ? NF_HOOK+0x9a/0x3a0 [ 480.480898][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 480.480921][ C1] nf_hook_slow+0xc5/0x220 [ 480.480942][ C1] NF_HOOK+0x206/0x3a0 [ 480.480960][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 480.480978][ C1] ? NF_HOOK+0x9a/0x3a0 [ 480.480995][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 480.481011][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 480.481031][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 480.481051][ C1] ? skb_dst+0x4f/0xd0 [ 480.481068][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 480.481088][ C1] NF_HOOK+0x309/0x3a0 [ 480.481106][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 480.481124][ C1] ? NF_HOOK+0x9a/0x3a0 [ 480.481148][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 480.481166][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 480.481188][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 480.481204][ C1] __netif_receive_skb+0x143/0x380 [ 480.481221][ C1] ? rt_spin_unlock+0x65/0x80 [ 480.481238][ C1] ? process_backlog+0x27b/0x900 [ 480.481255][ C1] process_backlog+0x31e/0x900 [ 480.481277][ C1] __napi_poll+0xb6/0x540 [ 480.481295][ C1] net_rx_action+0x707/0xe00 [ 480.481312][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 480.481338][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 480.481369][ C1] handle_softirqs+0x22f/0x710 [ 480.481390][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 480.481412][ C1] run_ktimerd+0xcf/0x190 [ 480.481432][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 480.481456][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 480.481474][ C1] smpboot_thread_fn+0x53f/0xa60 [ 480.481493][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 480.481514][ C1] kthread+0x70e/0x8a0 [ 480.481545][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 480.481563][ C1] ? __pfx_kthread+0x10/0x10 [ 480.481586][ C1] ? __pfx_kthread+0x10/0x10 [ 480.481607][ C1] ret_from_fork+0x3f9/0x770 [ 480.481627][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 480.481648][ C1] ? __switch_to_asm+0x39/0x70 [ 480.481662][ C1] ? __switch_to_asm+0x33/0x70 [ 480.481676][ C1] ? __pfx_kthread+0x10/0x10 [ 480.481698][ C1] ret_from_fork_asm+0x1a/0x30 [ 480.481719][ C1] [ 480.482598][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 480.482614][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 480.482636][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 480.482648][ T38] Call Trace: [ 480.482656][ T38] [ 480.482664][ T38] dump_stack_lvl+0x99/0x250 [ 480.482694][ T38] ? __asan_memcpy+0x40/0x70 [ 480.482717][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.482747][ T38] ? __pfx__printk+0x10/0x10 [ 480.482782][ T38] vpanic+0x281/0x750 [ 480.482815][ T38] ? __pfx_vpanic+0x10/0x10 [ 480.482841][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 480.482862][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.482909][ T38] panic+0xb9/0xc0 [ 480.482938][ T38] ? __pfx_panic+0x10/0x10 [ 480.482970][ T38] ? irq_work_queue+0xc3/0x140 [ 480.483001][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 480.483026][ T38] watchdog+0xfd2/0xfe0 [ 480.483058][ T38] ? watchdog+0x1de/0xfe0 [ 480.483094][ T38] kthread+0x70e/0x8a0 [ 480.483122][ T38] ? __pfx_watchdog+0x10/0x10 [ 480.483143][ T38] ? __pfx_kthread+0x10/0x10 [ 480.483174][ T38] ? __pfx_kthread+0x10/0x10 [ 480.483205][ T38] ret_from_fork+0x3f9/0x770 [ 480.483235][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 480.483268][ T38] ? __switch_to_asm+0x39/0x70 [ 480.483286][ T38] ? __switch_to_asm+0x33/0x70 [ 480.483303][ T38] ? __pfx_kthread+0x10/0x10 [ 480.483335][ T38] ret_from_fork_asm+0x1a/0x30 [ 480.483372][ T38] [ 480.483636][ T38] Kernel Offset: disabled